last executing test programs: 33.665640344s ago: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="e78d85840616bddf14240d11ea99d47221baaa17fb8327c8f2de7ea3fcd892335ca635a026c7fefd051371108e214b242e80df66296e0592f063d50f31d0f5081ec256907e32c41715bc6d91f57b660f647e9fdf0f525381364ac20b061cd0d9ffd270f893141ce7980d648ccf0f76ae9959faef893472392e14091b71218b445053f976f821909821bf667b5aacbd46e24c4fee372984902f95deb8a1a1f1cdf7614672e02d8ea3f376357f507c32d0e166540679", @ANYRESOCT=0x0, @ANYRESDEC, @ANYBLOB="fd00b77b7d08f5cf7f8e28f5abc110", @ANYRES16], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x40}, 0x4040085) socket(0x29, 0xa, 0x3) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000140)}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x693, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0xfff7) r2 = socket$inet6(0xa, 0x5, 0x2d3) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x7b78}, 0x1c) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x6ce, 0x0, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0xfff7) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1170, 0x168, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [0xffffffff], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x32, 0x0, 0x0, 0x10}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 'wlan0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"9a00"}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) socket(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x213a, 0x4) sendmmsg$inet(r4, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000080)=0x81, 0x4) sendmmsg$inet(r4, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 33.244154026s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) write$tun(r2, &(0x7f0000000140)={@val={0x0, 0x800}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x10, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}}}, 0xfdef) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000005c80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION_ID={0x8}]}], {0x14}}, 0xa4}}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg(r4, &(0x7f0000000f00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000058c0)=[{0x18, 0x1, 0x1, "ba"}], 0x18}}], 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) 32.841069213s ago: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020005000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x78, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x78}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r7 = socket(0x1e, 0x1, 0x0) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={0x0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 32.742042237s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'hash\x00', 0x0, 0x0, 'blake2s-128\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000003100)=[{{0x0, 0x0, &(0x7f0000001b80)=[{&(0x7f00000005c0)="96a67b36bd06304a08a67f14f6c3881ca6167592ce060670a396f8ab05ace2caca6b2a9ecf3471d2", 0x28}, {&(0x7f0000000500)="fc484e55021886bb", 0x7fffefd8}], 0x2}}], 0x1, 0x0) sendto$inet(r1, &(0x7f0000000340)="6f644349070cd05d7b9fa5a9309af15bbffa430f114cba93867e71b6a14b227d9a", 0x18, 0x4e860, 0x0, 0x0) accept$inet(r1, 0x0, 0x0) recvfrom$ax25(r1, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xd52004d05a418c82, &(0x7f0000000200)=0xaf0, 0x4) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000040)={'wlan0\x00', 0x101}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x10002) ioctl$int_in(r4, 0x5452, &(0x7f0000000240)=0x6) sendmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="f8", 0x1}], 0x1}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000001c0)=r3, 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x20000155, &(0x7f0000000180)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x7f}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r7}, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r9, 0x0, 0xb) splice(r11, 0x0, r7, 0x0, 0xf3a, 0x0) write$binfmt_misc(r12, &(0x7f0000000240)=ANY=[], 0xfdef) splice(r8, 0x0, r12, 0x0, 0x9, 0x3) write(r10, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) 32.723949896s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, r4, 0x1}, 0x14}}, 0x0) sendmsg$kcm(r2, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000001a00)="e8a472", 0x3}, {&(0x7f00000000c0)="bcc9b1557de1fad1f955144629ed4dcf3c33679ea22502e3cff8923bf5d43921bc111a262f295a8eb540", 0x7fffeffd}, {&(0x7f0000001680)="094fb143daa9baa36aaa2cca06886c533118e056", 0x14}], 0x3}, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x6, &(0x7f00000043c0), 0x21) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000000), 0xffffffffffffffff) r6 = socket$l2tp(0x2, 0x2, 0x73) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x3c, r5, 0x200, 0x0, 0x0, {}, [@L2TP_ATTR_PROTO_VERSION={0x5}, @L2TP_ATTR_CONN_ID={0x8}, @L2TP_ATTR_IP_DADDR={0x8, 0x19, @broadcast}, @L2TP_ATTR_PEER_CONN_ID={0x8}, @L2TP_ATTR_OFFSET={0x6, 0x3, 0x9}]}, 0x3c}}, 0x0) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) close(r6) 32.534280446s ago: executing program 4: r0 = socket$inet6(0xa, 0x5, 0x8b) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074020000001d98f59445e7adff6285d3e4bca8eb2bfd849112b3b42b2642c724df944e9c34e5ea9aea50337d45b728a52de0c288c8413c2cf60942a5a62105687acb30c87973dbe42cd395220cf6fdf48e2bfd46399f834341a346e69850ec18b09020d8b04af43027f2f0e7d72bcf1a860e67bbbbcfd5e6eaa23ac141a6ba39062a63a511f316c294e00d8346d8d75f9"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000000101040050fb89379a492409000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c000f80080001400000"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001800)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) write(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000002440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000"/40, 0x28}], 0x1}, 0x0) 32.301345988s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00'}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000605222327b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="186800000006", @ANYBLOB="0000000000000000b702000014000000b70300000000000085be07352c537e7267"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000540)='fib6_table_lookup\x00', r2}, 0x10) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f0000000280)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, 0x1, @null}, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib6_table_lookup\x00', r1}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(r3) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 32.136588088s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000800)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000700), &(0x7f0000000740)=r4}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0xf, 0x7, 0x6, 0x5}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200), &(0x7f0000000240), 0x4af, r5}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000700)={0x0, &(0x7f0000000540)=""/245, &(0x7f00000000c0), &(0x7f0000000680), 0x2, r5}, 0x84) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000280)={'sit0\x00', &(0x7f00000001c0)={'gretap0\x00', 0x0, 0x40, 0x1, 0x7, 0x4, {{0xc, 0x4, 0x1, 0x2, 0x30, 0x66, 0x0, 0x40, 0x2f, 0x0, @rand_addr=0x64010102, @multicast2, {[@generic={0x82, 0xe, "3ea5cda454ed031d658d14e7"}, @generic={0x7, 0xd, "63a92e8fc31c90bed500ee"}, @noop]}}}}}) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=0xffffffffffffffff, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x7, &(0x7f0000000540)=[0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xbe, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0xa0, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$AUTOFS_IOC_READY(r9, 0x9360, 0x3) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000800)={0x1b, 0x0, 0x0, 0x9, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x3}, 0x48) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b70800000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a00)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f00000009c0)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x14, 0x1c, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0x1}, @generic={0xff, 0x7, 0xe, 0x1, 0x8}, @ldst={0x0, 0x1, 0x2, 0x0, 0x7, 0xfffffffffffffff8, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000180)='GPL\x00', 0x40, 0x0, 0x0, 0x41100, 0xc, '\x00', r6, 0x1a, r7, 0x8, &(0x7f0000000480)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000004c0)={0x0, 0x3, 0x80, 0x20}, 0x10, r8, r9, 0x1, &(0x7f0000000a40)=[r10, r11, r12, 0xffffffffffffffff, r13], &(0x7f0000000a80)=[{0x4, 0x2, 0xe, 0xb}], 0x10, 0x7}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$inet6(0xa, 0x80002, 0x0) r14 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r14, &(0x7f00000002c0)={0x0, 0x204, &(0x7f0000001200)={&(0x7f0000001080)=ANY=[@ANYBLOB="380000000314010000000000000000000900020053797a310000000008004100736977001400330073797a6b616c6c657230"], 0x38}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x43}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000b65c000000000000009500000000000000"], &(0x7f0000001600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 32.081778835s ago: executing program 3: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="e78d85840616bddf14240d11ea99d47221baaa17fb8327c8f2de7ea3fcd892335ca635a026c7fefd051371108e214b242e80df66296e0592f063d50f31d0f5081ec256907e32c41715bc6d91f57b660f647e9fdf0f525381364ac20b061cd0d9ffd270f893141ce7980d648ccf0f76ae9959faef893472392e14091b71218b445053f976f821909821bf667b5aacbd46e24c4fee372984902f95deb8a1a1f1cdf7614672e02d8ea3f376357f507c32d0e166540679", @ANYRESOCT=0x0, @ANYRESDEC, @ANYBLOB="fd00b77b7d08f5cf7f8e28f5abc110", @ANYRES16], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x40}, 0x4040085) socket(0x29, 0xa, 0x3) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000140)}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x693, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0xfff7) r2 = socket$inet6(0xa, 0x5, 0x2d3) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x7b78}, 0x1c) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x6ce, 0x0, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000001b40)=ANY=[@ANYBLOB="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"], 0xfff7) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1170, 0x168, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [0xffffffff], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x32, 0x0, 0x0, 0x10}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 'wlan0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"9a00"}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) socket(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x213a, 0x4) sendmmsg$inet(r4, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) setsockopt$sock_int(r4, 0x1, 0x1d, &(0x7f0000000080)=0x81, 0x4) sendmmsg$inet(r4, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 31.988468139s ago: executing program 1: syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB="1c00000007"], 0x138) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) 31.83810438s ago: executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020005000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x78, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x78}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r7 = socket(0x1e, 0x1, 0x0) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={0x0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 31.820296194s ago: executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="7b934a23d1dda2c1", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x4c54, 0x1) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/72, 0x48}, {&(0x7f0000005400)=""/201, 0xc9}], 0x5, &(0x7f0000000580)=""/215, 0xd7}, 0x2}], 0x1, 0x0, 0x0) 31.789040307s ago: executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000140)=0x0, &(0x7f0000000380)=0x4) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000840)=ANY=[@ANYBLOB="f000000010001307000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=r1, @ANYRES32=0x0, @ANYBLOB="fc0100000000000000000000000000010000000032000000ff0200000000000000000000000000010000000000000000000000000000000002000000000000000000000000000000ffffffffffffffff0000000000000000000000000000000000000000000000000000000000000000feffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000a000400d2000000000000005f3ec65fc25108da00987ab7d7977a539b190c6d6720f967fd8d93b0e2133f4fe8b1d8c3c5857db3a289a600000000"], 0xf0}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$inet_sctp(0x2, 0x0, 0x84) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, 0x0, 0x0) syz_init_net_socket$ax25(0x3, 0x0, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, &(0x7f0000000580)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0xf, &(0x7f00000002c0)=@ringbuf, &(0x7f00000003c0)='syzkaller\x00', 0x5, 0x2a, &(0x7f0000000400)=""/42, 0x0, 0x0, '\x00', 0x0, 0x25, r3, 0x8, 0x0, 0x19e477, 0x10, &(0x7f0000000500), 0x10}, 0x90) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000700), 0x12) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000700)=r4}, 0x20) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x6, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x23}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r7}, &(0x7f0000000180), &(0x7f0000000280), 0x8}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b40)={0x6, 0xa, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000ffffffff00000000ff01000085200000040000a48da871ea8a3864001839000005000000000000000000001518230000", @ANYRES32, @ANYBLOB="000000005906000085000000b60000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0x10, '\x00', 0x0, 0x25, r3, 0x8, &(0x7f00000004c0)={0x0, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000ac0)=[0xffffffffffffffff, r5, r6, r7], &(0x7f0000000b00)=[{0x4, 0x1, 0x8, 0x4}, {0x3, 0x4, 0x10}, {0x2, 0x1, 0x6, 0x9}, {0x5, 0x5, 0x2, 0x6}]}, 0x90) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x99, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaa22aaaaaaaaaa16884800000000000000000d08d0076971307eacdd7123a2afef2778cf79cfb41efb9f46ebce8dea921ba329cf74a4cb6dcd339dab28acea674a50bb3154b4a0300fa853ad01ffd198676069defaa526291e2c3972c71bbe68e5c6376c5de6faeaf3d81bac98459d7ac2828e24d0c78c8a88927522f9df044b7afbe62a2c329320442293ec3e8c77718295c0d2d7"], 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r8, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYBLOB="30000000030101021c0200d400000000cf72eab804dfeefa80080001008c020000100001800c00028005000100010000"], 0x30}}, 0x0) sendmmsg$inet6(r2, &(0x7f0000000800)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000000)=[{&(0x7f0000000100)="8000102e7577d401", 0x8}], 0x1, &(0x7f0000000380), 0xf}}], 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x200840, 0x0) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) 31.769864666s ago: executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020005000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x78, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x78}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r7 = socket(0x1e, 0x1, 0x0) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={0x0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 31.644467332s ago: executing program 3: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x400, 0x0, 0x4c, 0x1a, 0x0, 0x73, 0x330, 0x258, 0x258, 0x330, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private1, [], [], 'wg1\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x10}}, @common=@unspec=@time={{0x38}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0x1d0}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hald_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x0, 0x3}, [@ldst={0x3, 0x0, 0x3, 0x0, 0x0, 0xfffffffffffffff8}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000140), 0x9) socket(0x10, 0x2, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r1, &(0x7f0000000100)={&(0x7f00000018c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000940)={0x100, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x7}}, 0x100}}, 0x400c000) socket$nl_sock_diag(0x10, 0x3, 0x4) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000040)='bbr\x00', 0x4) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x2200c851, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x2404a001, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000880)=ANY=[@ANYBLOB="2400980072fdbe48ca545da5a9ee8d92b3bad6197a07db74a9a4ac91e10907ebab85ce4748af8804b3a8e187eb6d0303e3fe15aea979d2ee3498eaaf54e35ada325208f23b00ca8890b7d5f694cce5da533541bd1dc74fae93e347d0734e877811e83b193c8b9082c12a97a49a81", @ANYRES16=r4, @ANYBLOB="05002cbd7000000000000600000008000300", @ANYRES32=r5, @ANYBLOB="0800050002000000"], 0x24}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000040)="89000000120081ae08060cdc030ec0007f03e3f70000000000e2ffca1b020000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec08120c000200040001400400446b9bbc7a46e3988285dcdf12f21308f868fece01935fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x40000) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000280)=ANY=[@ANYBLOB="8000000008021100009657db000802110000000802110000000000000000000000000064000100000602020201f302010882848b960c12182404061f1f0400cb0306"], 0x42) bpf$BPF_PROG_QUERY(0x9, &(0x7f0000000580)={@cgroup, 0x0, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 31.528971698s ago: executing program 1: syz_emit_ethernet(0xec, &(0x7f0000001000)=ANY=[@ANYBLOB="bbfbbbbbbbbb2e18aaac03b98100000086dd6000004300b22f0000000000000000000000ffff7f000001ff0200000000000000000000000000013b0008"], 0x0) recvfrom$inet6(0xffffffffffffffff, &(0x7f0000000080)=""/119, 0x77, 0x13062, &(0x7f0000000000)={0xa, 0x4e22, 0xda3, @local, 0x401}, 0x1c) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000940), r2) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)={0x28, r3, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_LLSEC_SECLEVEL={0x5, 0x2a, 0xff}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x3, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x61, 0x10, 0x65}}, &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc6, &(0x7f00000003c0)=""/198, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x3}, 0x8, 0x10, &(0x7f0000000080)={0xffffffff}, 0x10}, 0x90) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r4, &(0x7f0000000100)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x902}, 0xe) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffdef) shutdown(r4, 0x1) pipe(&(0x7f0000000000)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r5) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$pppl2tp(0x18, 0x1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x2, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000011424203"], 0x0) 31.122836677s ago: executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020005000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x78, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x78}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r7 = socket(0x1e, 0x1, 0x0) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={0x0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 30.945253836s ago: executing program 2: r0 = socket$inet6(0xa, 0x5, 0x8b) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x10010000004e20}, 0x1c) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074020000001d98f59445e7adff6285d3e4bca8eb2bfd849112b3b42b2642c724df944e9c34e5ea9aea50337d45b728a52de0c288c8413c2cf60942a5a62105687acb30c87973dbe42cd395220cf6fdf48e2bfd46399f834341a346e69850ec18b09020d8b04af43027f2f0e7d72bcf1a860e67bbbbcfd5e6eaa23ac141a6ba39062a63a511f316c294e00d8346d8d75f9"], 0x64}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="44000000000101040050fb89379a492409000000240001801400018008000100e000000108000200e00000010c00028005000100000000000c000f80080001400000"], 0x44}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001800)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000440)='\x00', 0x1) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x10, 0x803, 0x0) write(r2, 0x0, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, 0x0, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x8, &(0x7f0000002440)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socket$kcm(0x21, 0x2, 0x2) r3 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r3, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r3, &(0x7f0000000100)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @empty}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="f4001100052b3325fe80070000000000000000000009ffffffe000"/40, 0x28}], 0x1}, 0x0) 30.931065656s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x5, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x89) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xfc, 0x30, 0x1, 0x0, 0x0, {}, [{0xe8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x78, 0x2, 0x0, 0x0, {{0xb}, {0x4c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xfc}}, 0x0) 30.83409718s ago: executing program 4: socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r0, &(0x7f0000002880), 0x0, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_freezer_state(r2, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r3, &(0x7f0000000040)='FROZEN\x00', 0x7) syz_init_net_socket$llc(0x1a, 0x2, 0x0) ioctl$INCFS_IOC_PERMIT_FILL(0xffffffffffffffff, 0x40046721, &(0x7f0000000340)={r1}) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x20000400) getpeername(0xffffffffffffffff, 0x0, 0x0) read(r3, &(0x7f0000000240)=""/44, 0x2c) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f00000001c0), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='afs_make_fs_calli\x00'}, 0x10) 30.645185979s ago: executing program 2: syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) r0 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000480), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ldst={0x0, 0x2, 0xde22c09ba20b4cc6, 0x0, 0xb, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x6, &(0x7f00000004c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@ldst={0x0, 0x2, 0xde22c09ba20b4cc6, 0x0, 0xb, 0xfffffffffffffffe, 0xffffffffffffffff}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x10}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x0, 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r2, 0x8922, 0x0) socket$kcm(0x2b, 0x1, 0x0) socket$kcm(0x2b, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{}, 0x0, &(0x7f00000005c0)}, 0x20) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000300)={'batadv0\x00', 0x81}) (async) ioctl$SIOCSIFMTU(r2, 0x8922, &(0x7f0000000300)={'batadv0\x00', 0x81}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB], &(0x7f0000000040)='GPL\x00', 0x400000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl(r3, 0x8, &(0x7f0000000600)="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") (async) ioctl(r3, 0x8, &(0x7f0000000600)="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") sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, &(0x7f0000004340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmsg(r1, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500feffffff000000004400000008000300", @ANYRES32=r6, @ANYBLOB="0a001800030303030303000008000d00080000004c0023800600040020000000060018000600000005001d000000000005001e000000000005000f0040"], 0x7c}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="0500feffffff000000004400000008000300", @ANYRES32=r6, @ANYBLOB="0a001800030303030303000008000d00080000004c0023800600040020000000060018000600000005001d000000000005001e000000000005000f0040"], 0x7c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 30.534787514s ago: executing program 3: socket$nl_crypto(0x10, 0x3, 0x15) socket$key(0xf, 0x3, 0x2) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$kcm(0x11, 0x200000000000002, 0x300) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000040)) socket$nl_route(0x10, 0x3, 0x0) socket$unix(0x1, 0x2, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x0, 0x0, 0x4, @prog_fd}, 0x20) 30.334553292s ago: executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) socket$nl_audit(0x10, 0x3, 0x9) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508e3efffff150000000a000000", @ANYRES32=r4, @ANYBLOB="000000000000000008000a000f00"], 0x28}}, 0x0) 30.314751034s ago: executing program 1: socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r2, 0x0, 0x8000f28, 0x0) vmsplice(r2, &(0x7f00000004c0)=[{&(0x7f0000000140)="dc", 0x1}], 0x1, 0x0) ioctl$sock_inet_sctp_SIOCINQ(r2, 0x541b, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) write(r0, 0x0, 0x0) 30.044634732s ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) getsockopt$nfc_llcp(0xffffffffffffffff, 0x10f, 0x0, 0x0, 0x3b514ca05b9f5cc7) accept4$inet(r0, 0x0, &(0x7f0000002940), 0x800) recvmsg$unix(r2, &(0x7f0000002900)={&(0x7f0000000440), 0x6e, &(0x7f0000002780)=[{&(0x7f0000000600)=""/65, 0x41}, {&(0x7f0000000680)=""/10, 0xa}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f00000016c0)=""/4096, 0x1000}, {&(0x7f00000026c0)=""/186, 0xba}], 0x5, &(0x7f0000002800)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0xe8}, 0x41) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x104, 0x4, 0x3e8, 0x0, 0x0, 0x100, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x2}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x2}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r4 = socket(0x10, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b24, &(0x7f0000000000)={'wlan0\x00'}) 904.231802ms ago: executing program 0: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001500)=ANY=[@ANYRES64=0x0, @ANYRES32=0x0, @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="e78d85840616bddf14240d11ea99d47221baaa17fb8327c8f2de7ea3fcd892335ca635a026c7fefd051371108e214b242e80df66296e0592f063d50f31d0f5081ec256907e32c41715bc6d91f57b660f647e9fdf0f525381364ac20b061cd0d9ffd270f893141ce7980d648ccf0f76ae9959faef893472392e14091b71218b445053f976f821909821bf667b5aacbd46e24c4fee372984902f95deb8a1a1f1cdf7614672e02d8ea3f376357f507c32d0e166540679", @ANYRESOCT=0x0, @ANYRESDEC, @ANYBLOB="fd00b77b7d08f5cf7f8e28f5abc110", @ANYRES16], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x40}, 0x4040085) socket(0x29, 0xa, 0x3) r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, &(0x7f0000000140)}, 0x10) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x693, @empty}, 0x1c) write$binfmt_misc(r1, &(0x7f00000000c0)=ANY=[@ANYRES32=r1], 0xfff7) r2 = socket$inet6(0xa, 0x5, 0x2d3) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000ec0)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x2b0, 0x150, 0x150, 0x0, 0xf8010000, 0x380, 0x238, 0x238, 0x380, 0x238, 0x3, 0x0, {[{{@ipv6={@mcast1, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'team_slave_0\x00', 'hsr0\x00', {}, {}, 0x84}, 0x0, 0x248, 0x2b0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'batadv0\x00', {0x0, 0x0, 0x4, 0x0, 0x0, 0x1, 0x4}}}, @common=@inet=@sctp={{0x148}, {[], [], [], 0x5, [], 0x0, 0x6}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@ipv6={@empty, @mcast1, [], [], 'batadv_slave_0\x00', 'gre0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @local, 0x7b78}, 0x1c) getsockopt$inet_tcp_buf(0xffffffffffffffff, 0x6, 0x6ce, 0x0, &(0x7f00000000c0)) write$binfmt_misc(r1, &(0x7f0000001b40)=ANY=[@ANYBLOB="f68e9c2f084beea69b934cbcac63badee68c4af9a9ea5d002b51b23b29e1b763b8352380ed022a6d020000000000000084a333087fab5fdf54ed9177109fc7c0a13419591449262f0237def0c5ded27df1792f7e8ad3ef05e75e725f2b08c188a7567bce62b63f814f4f016de74e6a21207d7ba2abc2072a3cb7c7adb877b91b0692ad26432189d10c5d5520f49458c7d231e547ef03b1234914681d81c443a9ca779da9c89b6472d3766619eb0aa93a436cbd347e5de8dae1d18563c8713086c119d22c1100f9b3fe2081eb60e700000000000000002c61427430316dd61936076758daa9b44882852520ef8d317bc42e7f433c30a7a4e75bdd086c002dc263fb1531918bb2d82d9dff101b0dca94260cdbfc77ac6fc1c4a0ef6e1190b2c5ea9d7f21391fb50b727713645965838ce5691a2b0447d5e0c3156c0397747f2272bd3f0ba673be7198896e34c98b7206fd9ce8500b39d06e59b55ba1d429e98588f6b60d719f3386aff7e6681efc1b75e2cf4edd70290345b39aaa2a07c7ce5e23891e45d975de4fb654ebdebb98a84247ae9aaf30a54f60aa9a01797c19d0a58ec0acf5f6e432fdce86185bb136f4b63d8d02b5810c8d39632863f5914af0581b2a21ba3b7033bfc0c25444987813934fb6f12d0c0d8dbaf8b2a11ea128a53d46cd90b064028949dd3f547a1060afe11fe1af13eea17e36320d33c4a48e"], 0xfff7) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000a00)=@raw={'raw\x00', 0x3c1, 0x3, 0x330, 0x0, 0x1170, 0x1170, 0x168, 0x1170, 0x260, 0x1398, 0x1398, 0x260, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [0xffffffff], 'veth0_vlan\x00', 'veth0_to_hsr\x00', {}, {}, 0x32, 0x0, 0x0, 0x10}, 0x0, 0x120, 0x168, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4e22, 0x0, 0x0, 0x4e20], [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40]}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 'wlan0\x00'}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"9a00"}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x9, 0x2}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x390) socket(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r4, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r4, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000040)=0x213a, 0x4) sendmmsg$inet(r4, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 796.890232ms ago: executing program 4: socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, 0x0, 0x1, 0x0, 0x0, 0x40481}, 0x200448c0) socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x10140, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000009c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000006c0600ec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='kfree\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000002000000000000000000000d000000000000000000000005000000000000e90b617c04794c0f926f411aab143f20014f29bf738bbbfcbe184cd1898d627b9c2e240e"], 0x0, 0x32}, 0x20) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r2}, 0x4) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pimreg\x00', 0x20}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000d80)=@filter={'filter\x00', 0xe, 0x4, 0x378, 0xffffffff, 0x1e0, 0x1e0, 0xf0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, &(0x7f00000005c0), {[{{@ip={@broadcast, @multicast2, 0xffffffff, 0xff000000, 'bridge_slave_1\x00', 'netdevsim0\x00', {}, {0xff}, 0x29, 0x462fe142879883c9, 0x22}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@addrtype={{0x30}, {0x200, 0x860, 0x1, 0x1}}, @common=@icmp={{0x28}, {0xb, "cc8f", 0x1}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x0, 0xff, 'veth0_to_bridge\x00', 'macvlan0\x00', {0xff}, {}, 0x88, 0x3, 0x21}, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@icmp={{0x28}, {0xd, "e8b4"}}, @common=@addrtype={{0x30}, {0x4}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ip={@dev={0xac, 0x14, 0x14, 0x31}, @broadcast, 0xff000000, 0x0, 'tunl0\x00', 'pimreg1\x00', {0xff}, {0xff}, 0x2f, 0x1, 0x1}, 0x0, 0xa0, 0x100, 0x0, {}, [@common=@addrtype={{0x30}, {0x0, 0x9, 0x1}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x1, [0x3, 0x6, 0x0, 0x5, 0x2, 0x1], 0x0, 0x4}, {0x1, [0x1, 0x2, 0x0, 0x1, 0x6, 0x2], 0x1, 0x2}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d8) ioctl$TUNSETLINK(r0, 0x400454cd, 0x23c) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20f42, 0x0) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d40)={r6, 0xe0, &(0x7f0000000c40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0xa, &(0x7f0000000780)=[0x0, 0x0], &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x4b, &(0x7f0000000b40)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000000b80), &(0x7f0000000bc0), 0x8, 0xdf, 0x8, 0x8, &(0x7f0000000c00)}}, 0x10) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000140)={'\x00', 0x6132}) write$cgroup_subtree(r5, &(0x7f0000000000), 0xfe3a) ioctl$TUNDETACHFILTER(r5, 0x401054d6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, 0x0, 0x0}}, 0x10) ioctl$TUNSETIFINDEX(r0, 0x400454da, &(0x7f00000001c0)=r7) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'pimreg\x00', 0x8ad5f7d5c4922ed6}) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20}, 0xc, 0x0}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CALIPSO_C_ADD(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="000000000000000018200000", @ANYRES32, @ANYBLOB="000000feffffffffffffff00fcffff51"], 0x0}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r8, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) 620.584808ms ago: executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020005000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) 306.302464ms ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x80002, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="d8000000180081084e81f783db4cb9040a07080006007c09e8fc55a10a0015000600142603600e120800020005000401a8000100fec0ffff000000fd035c0461c1d67f6f94007134cf6efb8000a007a290457f0189b316277ce06bbaceac3c2fb14c2ee5a7cef4090000001fb71b14d6d930dfe1d9d322fe7c9f8775820d16a4683f5aeb4edbb57a5025ccca9e00360db798262f3d40fad9e3bb9ad809d5e1cace0d81ed0bffece0b42a9ecbee5de6ccd4e1ffffffffc1c9b6278754ca397c388b0dd6e4edef3d9300"/216, 0xd8}], 0x1}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={0x78, 0x2, 0x6, 0x201, 0x0, 0x0, {0x5}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_PORT={0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FAMILY={0x5}]}, 0x78}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001340)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880), 0x10}, 0x49) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='ext4_ext_remove_space_done\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWRULE={0x3c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x10, 0x4, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @cmp={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x64}}, 0x0) listen(0xffffffffffffffff, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in=@loopback, @in6=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x1}, {}, 0x0, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev, 0x0, 0x0, 0x0, 0x1}}, 0xe8) r7 = socket(0x1e, 0x1, 0x0) sendmsg$IPSET_CMD_SWAP(r7, &(0x7f0000000b80)={&(0x7f0000000ac0), 0xc, &(0x7f0000000b40)={0x0}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000440)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) 0s ago: executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="7b934a23d1dda2c1", 0x8, 0x0, &(0x7f0000000340)={0x2, 0x0, @empty}, 0x10) setsockopt$inet_int(r0, 0x0, 0x14, &(0x7f0000000040)=0x4c54, 0x1) recvmmsg(r0, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)=""/115, 0x73}, {&(0x7f0000000180)=""/141, 0x8d}, {&(0x7f0000000240)=""/205, 0xcd}, {&(0x7f0000000380)=""/72, 0x48}, {&(0x7f0000005400)=""/201, 0xc9}], 0x5, &(0x7f0000000580)=""/215, 0xd7}, 0x2}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): d mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.710964][ T8215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.711733][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.729708][ T8215] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.743884][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.757227][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.767662][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.779517][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.789776][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 180.800464][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.816812][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 180.840614][ T8217] vlan2: entered promiscuous mode [ 180.911165][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.928220][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.939402][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.950420][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.960684][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.971631][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 180.984064][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 180.994954][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.005067][ T7961] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.016179][ T7961] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.028604][ T7961] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.043208][ T8071] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 181.058080][ T8071] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 181.072718][ T8221] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 181.107541][ T8221] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 181.166515][ T8071] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 181.191633][ T8230] Bluetooth: MGMT ver 1.22 [ 181.203306][ T8071] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 181.243071][ T7961] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.273665][ T7961] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.296038][ T7961] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.319982][ T7961] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.366575][ T8236] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.546500][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.584175][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.707799][ T5170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 181.723568][ T5170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 181.983678][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.000830][ T8071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.097578][ T8071] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.126131][ T932] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.133376][ T932] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.168622][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.175870][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.313963][ T8264] vlan2: entered promiscuous mode [ 182.322304][ T5120] Bluetooth: hci4: command tx timeout [ 182.460849][ T8267] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 182.544621][ T8267] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 182.770439][ T8071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 182.909466][ T8071] veth0_vlan: entered promiscuous mode [ 182.971041][ T8071] veth1_vlan: entered promiscuous mode [ 183.057082][ T8071] veth0_macvtap: entered promiscuous mode [ 183.079898][ T8071] veth1_macvtap: entered promiscuous mode [ 183.116476][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.141678][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.159189][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.172599][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.191541][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.211389][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.222127][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.232984][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.242888][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.254124][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.264417][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 183.280586][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.295641][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.408767][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.436346][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.450250][ T8298] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 183.460315][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.475809][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.493983][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.508836][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.550073][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.583265][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.603693][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.628633][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.650493][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.666030][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.697115][ T8071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.764554][ T8071] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.786921][ T8071] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.801801][ T8071] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.810787][ T8071] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.914702][ T8313] __nla_validate_parse: 3 callbacks suppressed [ 183.914724][ T8313] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 184.056764][ T8318] vlan2: entered promiscuous mode [ 184.214227][ T2449] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.233357][ T2449] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.287172][ T8318] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 184.296967][ T5221] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 184.312990][ T5221] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 184.412906][ T8329] bond0: entered promiscuous mode [ 184.443382][ T8329] bond_slave_0: entered promiscuous mode [ 184.452998][ T8329] bond_slave_1: entered promiscuous mode [ 184.466507][ T8329] team2: entered promiscuous mode [ 184.473924][ T8329] team3: entered promiscuous mode [ 184.502253][ T8329] batadv0: entered promiscuous mode [ 184.509019][ T8333] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 184.902793][ T8346] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.011903][ T8355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.172305][ T8363] vlan2: entered promiscuous mode [ 185.275243][ T8366] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 185.414605][ T8373] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 185.444351][ T8373] bond0: (slave netdevsim0): Releasing backup interface [ 185.468030][ T8373] team0: Port device netdevsim0 added [ 185.528851][ T8374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.605856][ T8378] bond0: entered promiscuous mode [ 185.626704][ T8378] bond_slave_0: entered promiscuous mode [ 185.651885][ T8378] bond_slave_1: entered promiscuous mode [ 185.672046][ T8378] batadv0: entered promiscuous mode [ 185.692695][ T8378] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 185.717329][ T8378] Cannot create hsr debugfs directory [ 185.830933][ T8396] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.886593][ T8396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.174568][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 186.203859][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.479336][ T8425] vlan2: entered promiscuous mode [ 186.598214][ T8430] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 186.640986][ T8430] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 186.672121][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 186.692804][ T8438] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.708955][ T8430] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 186.997189][ T8444] bond0: entered promiscuous mode [ 187.009781][ T8444] bond_slave_0: entered promiscuous mode [ 187.019050][ T8444] bond_slave_1: entered promiscuous mode [ 187.028478][ T8444] batadv0: entered promiscuous mode [ 187.040058][ T8444] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 187.049343][ T8444] Cannot create hsr debugfs directory [ 188.361091][ T8512] IPVS: Error joining to the multicast group [ 189.095876][ T8545] __nla_validate_parse: 9 callbacks suppressed [ 189.095900][ T8545] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.145118][ T8545] IPVS: Error joining to the multicast group [ 189.277864][ T8551] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.640481][ T8565] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.683164][ T8566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.044413][ T8581] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 190.123599][ T8585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.498097][ T8601] xt_limit: Overflow, try lower: 262144/524288 [ 190.604814][ T8606] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.812874][ T8614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.894252][ T8621] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.918193][ T8621] IPVS: Error joining to the multicast group [ 191.140313][ T8628] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.482023][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.521990][ T5128] Bluetooth: hci3: command 0x0406 tx timeout [ 191.587589][ T8647] 8021q: adding VLAN 0 to HW filter on device team2 [ 191.604892][ T8647] bond0: (slave team2): Enslaving as an active interface with an up link [ 192.339634][ T8689] 8021q: adding VLAN 0 to HW filter on device team2 [ 192.348876][ T8689] bond0: (slave team2): Enslaving as an active interface with an up link [ 192.639699][ T8707] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 193.197099][ T8729] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.207874][ T8729] bond1: entered promiscuous mode [ 193.214671][ T8729] bond0: (slave bond1): Enslaving as an active interface with an up link [ 193.933883][ T8763] 8021q: adding VLAN 0 to HW filter on device team4 [ 193.972218][ T8763] bond0: (slave team4): Enslaving as an active interface with an up link [ 194.139045][ T8774] sit0: entered promiscuous mode [ 194.187551][ T8774] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 194.200761][ T8774] __nla_validate_parse: 13 callbacks suppressed [ 194.200783][ T8774] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.205467][ T8780] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.391083][ T8785] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.578408][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.585094][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.603692][ T8798] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 194.618949][ T8798] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.665942][ T8798] caif0: entered promiscuous mode [ 194.698499][ T8798] caif0: entered allmulticast mode [ 194.722154][ T8798] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 194.779673][ T8806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.863473][ T8803] 8021q: adding VLAN 0 to HW filter on device team5 [ 194.880126][ T8803] bond0: (slave team5): Enslaving as an active interface with an up link [ 194.903345][ T8808] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.995983][ T8809] 8021q: adding VLAN 0 to HW filter on device team1 [ 195.006615][ T8809] team1: entered promiscuous mode [ 195.012898][ T8809] bond0: (slave team1): Enslaving as an active interface with an up link [ 195.149238][ T8816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 195.326808][ T8828] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 195.335288][ T8828] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 195.343641][ T8828] netlink: 9328 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.355931][ T8828] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 195.382210][ T8830] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 195.480618][ T8835] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 195.607351][ T8839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.646099][ T8839] 8021q: adding VLAN 0 to HW filter on device team2 [ 195.655118][ T8839] team2: entered promiscuous mode [ 195.662645][ T8839] bond0: (slave team2): Enslaving as an active interface with an up link [ 195.722753][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 195.933742][ T8844] bond2: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 195.950513][ T8844] bond2: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 195.967776][ T8844] bond2: (slave ipvlan2): Error -95 calling set_mac_address [ 196.143895][ T8849] 8021q: adding VLAN 0 to HW filter on device team5 [ 196.166827][ T8849] team5: entered promiscuous mode [ 196.181338][ T8849] bond0: (slave team5): Enslaving as an active interface with an up link [ 196.478377][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 196.589818][ T8870] 8021q: adding VLAN 0 to HW filter on device team2 [ 196.628517][ T8870] team2: entered promiscuous mode [ 196.644941][ T8870] bond0: (slave team2): Enslaving as an active interface with an up link [ 197.384267][ T8911] 8021q: adding VLAN 0 to HW filter on device team6 [ 197.400879][ T8911] bond0: (slave team6): Enslaving as an active interface with an up link [ 197.575782][ T8920] 8021q: adding VLAN 0 to HW filter on device team3 [ 197.587479][ T8920] team3: entered promiscuous mode [ 197.595346][ T8920] bond0: (slave team3): Enslaving as an active interface with an up link [ 197.615404][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 198.101328][ T8950] 0·: renamed from hsr0 (while UP) [ 198.112436][ T8950] 0·: entered allmulticast mode [ 198.138281][ T8950] hsr_slave_0: entered allmulticast mode [ 198.146871][ T8950] hsr_slave_1: entered allmulticast mode [ 198.162888][ T8950] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 198.186723][ T8946] bond3: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 198.214218][ T8946] bond3: (slave ipvlan2): The slave device specified does not support setting the MAC address [ 198.247344][ T8946] bond3: (slave ipvlan2): Error -95 calling set_mac_address [ 199.114562][ T8994] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 199.136691][ T8998] delete_channel: no stack [ 199.183989][ T8998] nbd: must specify a device to reconfigure [ 199.230596][ T9001] __nla_validate_parse: 19 callbacks suppressed [ 199.230617][ T9001] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.410693][ T9010] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.706769][ T9017] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.718316][ T9017] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 200.175482][ T9022] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.803656][ T5120] Bluetooth: hci4: command tx timeout [ 201.131012][ T9066] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 201.402973][ T9084] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 201.455003][ T9087] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.499080][ T9089] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.992562][ T9107] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.084741][ T9114] tun0: tun_chr_ioctl cmd 1074025677 [ 202.090847][ T9114] tun0: linktype set to 773 [ 202.284940][ T9125] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.327882][ T9129] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 202.460731][ T9132] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 202.474185][ T9138] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 202.490710][ T9132] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 202.503382][ T2457] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 202.522479][ T9129] 8021q: adding VLAN 0 to HW filter on device bond1 [ 202.547776][ T9138] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 202.662085][ T147] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 202.819973][ T9147] team_slave_0: entered promiscuous mode [ 202.826215][ T9147] team_slave_1: entered promiscuous mode [ 202.835973][ T9147] macsec1: entered allmulticast mode [ 202.842237][ T9147] team0: entered allmulticast mode [ 202.848310][ T9147] team_slave_0: entered allmulticast mode [ 202.854538][ T9147] team_slave_1: entered allmulticast mode [ 202.869840][ T9147] team0: left allmulticast mode [ 202.883669][ T9147] team_slave_0: left allmulticast mode [ 202.894530][ T9147] team_slave_1: left allmulticast mode [ 202.915891][ T9147] team_slave_0: left promiscuous mode [ 202.921491][ T9147] team_slave_1: left promiscuous mode [ 203.358115][ T9172] Bluetooth: hci3: service_discovery: too big uuid_count value 19456 [ 203.567890][ T29] audit: type=1804 audit(1717428956.274:9): pid=9179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1955303954/syzkaller.jQeM8r/168/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 203.915739][ T9199] IPVS: Error joining to the multicast group [ 204.075111][ T9209] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 204.212974][ T9214] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 204.552259][ T9227] __nla_validate_parse: 6 callbacks suppressed [ 204.552280][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.668334][ T29] audit: type=1804 audit(1717428957.374:10): pid=9224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1604985508/syzkaller.FCZLxE/66/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 204.773626][ T5128] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 204.795133][ T5128] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 204.807058][ T5128] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 204.834973][ T5128] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 204.844861][ T5128] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 204.853583][ T5128] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 204.885009][ T2457] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.935443][ T9233] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.063449][ T2457] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.116622][ T9234] lo speed is unknown, defaulting to 1000 [ 205.192299][ T2457] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.346753][ T2457] bond0: (slave netdevsim0): Releasing backup interface [ 205.365624][ T2457] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 205.388287][ T2457] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.484009][ T9241] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 205.529415][ T9241] syzkaller0: entered promiscuous mode [ 205.546475][ T9241] syzkaller0: entered allmulticast mode [ 205.713652][ T9253] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 205.785247][ T9255] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 206.883795][ T5120] Bluetooth: hci2: command 0x0406 tx timeout [ 206.894851][ T5120] Bluetooth: hci5: command tx timeout [ 207.461871][ T9255] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 207.589555][ T9259] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.632144][ T9264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.655330][ T2457] bridge_slave_1: left allmulticast mode [ 207.661028][ T2457] bridge_slave_1: left promiscuous mode [ 207.667136][ T2457] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.680537][ T2457] bridge_slave_0: left allmulticast mode [ 207.688381][ T2457] bridge_slave_0: left promiscuous mode [ 207.695602][ T2457] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.928665][ T29] audit: type=1804 audit(1717428960.634:11): pid=9270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir410107249/syzkaller.zpEuMx/276/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 208.599050][ T2457] bond0 (unregistering): left promiscuous mode [ 208.605414][ T2457] bond_slave_0: left promiscuous mode [ 208.611043][ T2457] bond_slave_1: left promiscuous mode [ 208.616631][ T2457] team1: left promiscuous mode [ 208.621772][ T2457] team2: left promiscuous mode [ 208.626774][ T2457] team3: left promiscuous mode [ 208.634014][ T2457] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.648720][ T2457] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.668697][ T2457] bond0 (unregistering): (slave team1): Releasing backup interface [ 208.686673][ T2457] bond0 (unregistering): (slave team2): Releasing backup interface [ 208.702730][ T2457] bond0 (unregistering): (slave team3): Releasing backup interface [ 208.716476][ T2457] bond0 (unregistering): Released all slaves [ 208.729677][ T9266] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.782821][ T9261] 8021q: adding VLAN 0 to HW filter on device team3 [ 208.809803][ T9261] team3: entered promiscuous mode [ 208.842525][ T9261] bond0: (slave team3): Enslaving as an active interface with an up link [ 208.872047][ T9280] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.912103][ T9296] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.931272][ T9293] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 208.961877][ T5120] Bluetooth: hci5: command tx timeout [ 209.119197][ T9234] chnl_net:caif_netlink_parms(): no params data found [ 209.413695][ T29] audit: type=1804 audit(1717428962.114:12): pid=9316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1955303954/syzkaller.jQeM8r/177/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 209.493443][ T9326] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.665401][ T2457] batadv0: left promiscuous mode [ 209.688180][ T9335] tipc: Can't bind to reserved service type 0 [ 209.719920][ T2457] hsr_slave_0: left promiscuous mode [ 209.733992][ T2457] hsr_slave_1: left promiscuous mode [ 209.749861][ T2457] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.758965][ T2457] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.778066][ T2457] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.803675][ T2457] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.916711][ T2457] veth1_macvtap: left promiscuous mode [ 209.965581][ T2457] veth0_macvtap: left promiscuous mode [ 209.977701][ T2457] veth1_vlan: left promiscuous mode [ 209.983758][ T2457] veth0_vlan: left promiscuous mode [ 210.075091][ T9356] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.089920][ T9356] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 211.038980][ T2457] team0 (unregistering): Port device team_slave_1 removed [ 211.046479][ T5120] Bluetooth: hci5: command 0x040f tx timeout [ 211.095900][ T2457] team0 (unregistering): Port device team_slave_0 removed [ 211.587225][ T9335] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 211.597557][ T9335] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 211.606820][ T9342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 211.658159][ T9348] 8021q: adding VLAN 0 to HW filter on device team6 [ 211.678587][ T9348] team6: entered promiscuous mode [ 211.684846][ T9348] bond0: (slave team6): Enslaving as an active interface with an up link [ 211.694968][ T9234] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.714745][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.729462][ T9234] bridge_slave_0: entered allmulticast mode [ 211.740399][ T9234] bridge_slave_0: entered promiscuous mode [ 211.762337][ T9354] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.763614][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.792458][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.810471][ T9234] bridge_slave_1: entered allmulticast mode [ 211.821134][ T9234] bridge_slave_1: entered promiscuous mode [ 211.965074][ T9234] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.014516][ T9234] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.045096][ T9366] batadv_slave_1: entered promiscuous mode [ 212.093887][ T9374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.189081][ T5170] IPVS: starting estimator thread 0... [ 212.228846][ T9234] team0: Port device team_slave_0 added [ 212.249694][ T9364] batadv_slave_1: left promiscuous mode [ 212.300090][ T9383] IPVS: using max 17 ests per chain, 40800 per kthread [ 212.313850][ T9234] team0: Port device team_slave_1 added [ 212.483373][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.490385][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.549802][ T9234] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.576056][ T9234] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.583711][ T9234] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.615101][ T9399] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.627122][ T9399] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.640092][ T9234] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.684824][ T9395] netlink: 1072 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.717972][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.761061][ T9405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.816566][ T9402] 8021q: adding VLAN 0 to HW filter on device team7 [ 212.834098][ T9402] team7: entered promiscuous mode [ 212.848220][ T9402] bond0: (slave team7): Enslaving as an active interface with an up link [ 212.958439][ T9416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.108050][ T9234] hsr_slave_0: entered promiscuous mode [ 213.123947][ T5133] Bluetooth: hci5: command 0x040f tx timeout [ 213.136435][ T9234] hsr_slave_1: entered promiscuous mode [ 213.184066][ T9234] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.203831][ T9234] Cannot create hsr debugfs directory [ 213.589918][ T9436] batadv_slave_1: entered promiscuous mode [ 213.648554][ T9432] batadv_slave_1: left promiscuous mode [ 213.802352][ T9448] 8021q: adding VLAN 0 to HW filter on device team7 [ 213.811062][ T9448] bond0: (slave team7): Enslaving as an active interface with an up link [ 214.339926][ T9234] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 214.401041][ T9234] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 214.436885][ T9234] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.471331][ T9234] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.551899][ T9480] batadv_slave_1: entered promiscuous mode [ 214.560251][ T9] IPVS: starting estimator thread 0... [ 214.567325][ T9479] batadv_slave_1: left promiscuous mode [ 214.629882][ T9485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.662474][ T9481] IPVS: using max 17 ests per chain, 40800 per kthread [ 214.795938][ T9494] 8021q: adding VLAN 0 to HW filter on device team3 [ 214.807751][ T9494] bond0: (slave team3): Enslaving as an active interface with an up link [ 214.903663][ T9234] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.947770][ T9234] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.986839][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.994132][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.035206][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.042491][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 215.176535][ T9508] __nla_validate_parse: 8 callbacks suppressed [ 215.176559][ T9508] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.202458][ T5133] Bluetooth: hci5: command 0x040f tx timeout [ 215.582733][ T9234] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.694508][ T9234] veth0_vlan: entered promiscuous mode [ 215.720171][ T9234] veth1_vlan: entered promiscuous mode [ 215.774964][ T9234] veth0_macvtap: entered promiscuous mode [ 215.813574][ T9234] veth1_macvtap: entered promiscuous mode [ 215.876277][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.897625][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.910238][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.942823][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 215.966619][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 215.983966][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.005400][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.021570][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.032834][ T9535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.040603][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.064139][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.074615][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.095475][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.118529][ T9234] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.145260][ T9540] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.226304][ T9542] 8021q: adding VLAN 0 to HW filter on device team8 [ 216.275080][ T9542] bond0: (slave team8): Enslaving as an active interface with an up link [ 216.317208][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.336467][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.348598][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.372789][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.399809][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.412773][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.422734][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.435336][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.450471][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.461089][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.471087][ T9234] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.511064][ T9234] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.534059][ T9234] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.542357][ T9547] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.557327][ T9234] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.580220][ T9234] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.604256][ T9234] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.627174][ T9234] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.699055][ T9555] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.782370][ T9564] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.822437][ T9564] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.850756][ T9565] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.922282][ T9565] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.983183][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.018480][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.104436][ T9574] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.115833][ T9565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.158031][ T5167] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.184380][ T5167] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.614493][ T9607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.676785][ T9607] 8021q: adding VLAN 0 to HW filter on device team9 [ 217.699948][ T9607] bond0: (slave team9): Enslaving as an active interface with an up link [ 217.929750][ T5133] Bluetooth: hci5: command 0x040f tx timeout [ 218.421923][ T9647] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 218.598749][ T9659] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.028273][ T9677] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.283605][ T9689] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 220.167099][ T9733] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 220.190160][ T9733] __nla_validate_parse: 11 callbacks suppressed [ 220.190184][ T9733] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.244802][ T9736] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.359969][ T9742] 8021q: adding VLAN 0 to HW filter on device team10 [ 220.388333][ T9742] bond0: (slave team10): Enslaving as an active interface with an up link [ 220.490588][ T9748] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.516609][ T9750] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.557886][ T9752] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.667974][ T9761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.768946][ T9750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.776078][ T9768] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.144872][ T9784] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.294041][ T9789] lo speed is unknown, defaulting to 1000 [ 221.359729][ T9794] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 221.370505][ T9794] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.520996][ T9797] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 221.592818][ T9801] 8021q: adding VLAN 0 to HW filter on device team8 [ 221.663803][ T9801] team8: entered promiscuous mode [ 221.695483][ T9801] bond0: (slave team8): Enslaving as an active interface with an up link [ 221.797723][ T9810] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.850584][ T9810] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 222.394280][ T9805] syz-executor.1 (9805) used greatest stack depth: 17552 bytes left [ 222.582513][ T9847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.706467][ T9854] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 222.973165][ T9863] 8021q: adding VLAN 0 to HW filter on device team11 [ 223.009889][ T9863] bond0: (slave team11): Enslaving as an active interface with an up link [ 223.119961][ T9870] bridge: RTM_NEWNEIGH bridge2 with NTF_USE is not supported [ 223.959984][ T9921] 8021q: adding VLAN 0 to HW filter on device team12 [ 223.977594][ T9921] bond0: (slave team12): Enslaving as an active interface with an up link [ 224.201956][ T9941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.057183][ T9992] 8021q: adding VLAN 0 to HW filter on device team9 [ 225.066510][ T9992] team9: entered promiscuous mode [ 225.085337][ T9992] bond0: (slave team9): Enslaving as an active interface with an up link [ 225.901365][T10031] xt_SECMARK: invalid mode: 0 [ 225.919500][T10032] __nla_validate_parse: 14 callbacks suppressed [ 225.919521][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.982060][T10020] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.011109][T10032] 8021q: adding VLAN 0 to HW filter on device team10 [ 226.027302][T10032] team10: entered promiscuous mode [ 226.055671][T10032] bond0: (slave team10): Enslaving as an active interface with an up link [ 226.216877][T10044] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 226.537207][T10062] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 226.552758][T10062] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.622383][T10065] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 226.638407][T10065] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.861077][T10080] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 226.955514][T10082] 8021q: adding VLAN 0 to HW filter on device team1 [ 226.970832][T10072] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.990517][T10082] bond0: (slave team1): Enslaving as an active interface with an up link [ 227.242974][T10099] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 227.361924][ T5120] Bluetooth: hci1: command 0x0406 tx timeout [ 227.409161][T10109] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 227.427315][T10109] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.527654][T10112] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 227.547050][T10112] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.973585][T10136] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.121240][T10143] ip6tnl0: entered promiscuous mode [ 228.132498][T10141] ip6tnl0: left promiscuous mode [ 228.529182][T10166] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 228.544400][T10160] lo speed is unknown, defaulting to 1000 [ 228.736504][T10174] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 228.780194][T10165] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.862554][T10179] No such timeout policy "syz0" [ 228.901611][T10181] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 228.957827][T10181] batman_adv: batadv0: Adding interface: wlan0 [ 228.992412][T10181] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.024948][T10181] batman_adv: batadv0: Interface activated: wlan0 [ 229.737889][T10210] batman_adv: batadv0: Interface deactivated: wlan0 [ 229.875025][T10210] batman_adv: batadv0: Removing interface: wlan0 [ 230.163590][T10230] vlan2: entered promiscuous mode [ 230.484409][T10245] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.492304][T10245] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.635188][T10253] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 230.866257][T10268] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.017570][T10273] __nla_validate_parse: 11 callbacks suppressed [ 231.017600][T10273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.073324][T10273] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.090390][T10273] batadv_slave_1: entered allmulticast mode [ 231.378557][T10288] lo speed is unknown, defaulting to 1000 [ 231.384830][T10282] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.642381][T10297] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 231.881266][T10308] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.033146][T10322] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.283094][T10334] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.319555][T10334] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.506349][T10337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.290806][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 233.669274][T10391] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 233.778290][T10391] 8021q: adding VLAN 0 to HW filter on device team11 [ 233.794857][T10391] team11: entered promiscuous mode [ 233.801075][T10391] bond0: (slave team11): Enslaving as an active interface with an up link [ 233.990533][T10401] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.164958][T10411] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.645455][T10429] 8021q: adding VLAN 0 to HW filter on device team12 [ 234.666543][T10429] team12: entered promiscuous mode [ 234.678495][T10429] bond0: (slave team12): Enslaving as an active interface with an up link [ 234.935304][T10442] caif0: Master is either lo or non-ether device [ 235.113041][T10450] nbd: couldn't find device at index 20 [ 236.029802][T10489] __nla_validate_parse: 8 callbacks suppressed [ 236.029825][T10489] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.483827][T10512] TCP segment has incorrect auth options set for [fe80::bb].0->[ff02::1].20002 [FS] [ 236.710401][T10523] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 236.843929][T10529] x_tables: duplicate underflow at hook 3 [ 237.169612][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 237.258271][T10549] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.812376][T10582] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.244114][ T5133] Bluetooth: hci0: command tx timeout [ 238.434346][T10609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 238.459421][T10596] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.680072][T10616] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 238.872145][T10630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.003748][T10640] 8021q: adding VLAN 0 to HW filter on device team13 [ 239.037252][T10640] bond0: (slave team13): Enslaving as an active interface with an up link [ 239.390884][T10669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.447442][T10673] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.457470][T10673] nbd: couldn't find device at index 20 [ 239.539029][T10658] tipc: Started in network mode [ 239.554273][T10658] tipc: Node identity f0, cluster identity 4711 [ 239.565479][T10658] tipc: Node number set to 240 [ 239.746242][T10683] 8021q: adding VLAN 0 to HW filter on device team4 [ 239.764534][T10683] team4: entered promiscuous mode [ 239.778500][T10683] bond0: (slave team4): Enslaving as an active interface with an up link [ 240.103458][T10701] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 240.186288][T10682] netlink: 'syz-executor.2': attribute type 40 has an invalid length. [ 240.322906][ T5133] Bluetooth: hci0: command tx timeout [ 240.661945][T10732] 8021q: adding VLAN 0 to HW filter on device team2 [ 240.673241][T10732] bond0: (slave team2): Enslaving as an active interface with an up link [ 240.945809][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 241.133375][T10751] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 241.155066][T10751] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 241.174209][T10751] __nla_validate_parse: 2 callbacks suppressed [ 241.174229][T10751] netlink: 150704 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.328110][T10762] Illegal XDP return value 4294967274 on prog (id 538) dev N/A, expect packet loss! [ 241.373742][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.504850][T10772] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.1'. [ 241.522667][T10773] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.541236][T10772] openvswitch: netlink: EtherType 0 is less than min 600 [ 241.654192][T10767] 8021q: adding VLAN 0 to HW filter on device team14 [ 241.667390][T10767] bond0: (slave team14): Enslaving as an active interface with an up link [ 241.690532][T10768] tipc: Started in network mode [ 241.697110][T10768] tipc: Node identity f0, cluster identity 4711 [ 241.731113][T10768] tipc: Node number set to 240 [ 241.747296][T10777] can: request_module (can-proto-0) failed. [ 242.015379][ T29] audit: type=1800 audit(1717428994.714:13): pid=10794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 242.127996][ T29] audit: type=1804 audit(1717428994.764:14): pid=10794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1103404226/syzkaller.XY73Ei/80/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 242.164334][T10791] lo speed is unknown, defaulting to 1000 [ 242.214711][ T29] audit: type=1804 audit(1717428994.764:15): pid=10794 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1103404226/syzkaller.XY73Ei/80/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 242.218892][T10803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.370619][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.392492][T10803] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.429457][T10810] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.640836][T10814] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.652381][T10817] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.681616][T10814] openvswitch: netlink: EtherType 0 is less than min 600 [ 242.699421][T10817] openvswitch: netlink: EtherType 0 is less than min 600 [ 243.137693][ T29] audit: type=1800 audit(1717428995.844:16): pid=10841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 243.213333][ T29] audit: type=1804 audit(1717428995.874:17): pid=10841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2597994037/syzkaller.ZzyabC/183/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 243.287179][ T29] audit: type=1804 audit(1717428995.894:18): pid=10841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2597994037/syzkaller.ZzyabC/183/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 243.313334][T10795] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 243.728119][T10867] openvswitch: netlink: EtherType 0 is less than min 600 [ 243.858394][T10869] openvswitch: netlink: EtherType 0 is less than min 600 [ 244.116565][T10879] tipc: Enabling of bearer rejected, failed to enable media [ 244.226826][ T29] audit: type=1800 audit(1717428996.934:19): pid=10887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1949 res=0 errno=0 [ 244.318575][ T29] audit: type=1804 audit(1717428996.974:20): pid=10887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1103404226/syzkaller.XY73Ei/88/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 244.346362][ T29] audit: type=1804 audit(1717428996.984:21): pid=10887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1103404226/syzkaller.XY73Ei/88/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 244.470786][T10897] openvswitch: netlink: EtherType 0 is less than min 600 [ 244.539903][T10900] openvswitch: netlink: EtherType 0 is less than min 600 [ 244.557290][T10901] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 244.768148][T10914] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 244.810859][T10914] : entered promiscuous mode [ 244.954924][T10920] vlan2: entered promiscuous mode [ 244.960576][T10920] dummy0: entered promiscuous mode [ 245.000748][T10920] team0: Port device vlan2 added [ 245.013833][T10924] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 245.143165][ T29] audit: type=1800 audit(1717428997.854:22): pid=10931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 246.104849][T10960] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 246.376254][T10963] __nla_validate_parse: 17 callbacks suppressed [ 246.376277][T10963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.463128][ T5120] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 246.483778][ T5120] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 246.498056][ T5120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 246.507395][ T5120] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 246.520682][ T5120] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 246.528374][ T5120] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 246.599239][ T2449] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.829820][ T2449] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.905523][T10964] lo speed is unknown, defaulting to 1000 [ 246.989925][ T2449] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.131148][ T2449] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.204011][T10993] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 247.277653][T10993] geneve0: entered promiscuous mode [ 247.361062][T10993] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 247.574813][T11002] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 247.809403][ T2449] bridge_slave_1: left allmulticast mode [ 247.815373][ T2449] bridge_slave_1: left promiscuous mode [ 247.821288][ T2449] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.853517][ T2449] bridge_slave_0: left allmulticast mode [ 247.861318][ T2449] bridge_slave_0: left promiscuous mode [ 247.869906][ T2449] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.564830][ T5120] Bluetooth: hci5: command tx timeout [ 248.641759][ T2449] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.678776][ T2449] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.709653][ T2449] bond0 (unregistering): (slave team1): Releasing backup interface [ 248.749592][ T2449] bond0 (unregistering): (slave team2): Releasing backup interface [ 248.770721][ T2449] bond0 (unregistering): Released all slaves [ 248.825103][T11008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 248.885828][T11017] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 249.009487][ T2449] : left promiscuous mode [ 249.191108][T10964] chnl_net:caif_netlink_parms(): no params data found [ 249.235716][T11030] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 249.273349][T11030] geneve0: entered promiscuous mode [ 249.350916][T11030] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 249.428295][T11034] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 249.561340][T11037] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.103767][T10964] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.121699][T10964] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.130154][T10964] bridge_slave_0: entered allmulticast mode [ 250.139211][T10964] bridge_slave_0: entered promiscuous mode [ 250.233312][T10964] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.244537][T10964] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.274299][T10964] bridge_slave_1: entered allmulticast mode [ 250.300041][T10964] bridge_slave_1: entered promiscuous mode [ 250.416062][ T2449] hsr_slave_0: left promiscuous mode [ 250.438347][ T2449] hsr_slave_1: left promiscuous mode [ 250.454612][ T2449] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 250.471736][ T2449] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 250.508623][ T2449] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 250.519948][ T2449] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.622212][ T2449] dummy0: left promiscuous mode [ 250.636404][ T2449] veth1_macvtap: left promiscuous mode [ 250.641881][ T5120] Bluetooth: hci5: command tx timeout [ 250.655184][ T2449] veth0_macvtap: left promiscuous mode [ 250.664057][ T2449] veth1_vlan: left promiscuous mode [ 250.669455][ T2449] veth0_vlan: left promiscuous mode [ 250.915187][T11075] No such timeout policy "syz0" [ 251.695438][ T2449] team0 (unregistering): Port device vlan2 removed [ 252.540395][ T2449] team0 (unregistering): Port device team_slave_1 removed [ 252.584920][ T2449] team0 (unregistering): Port device team_slave_0 removed [ 252.721826][ T5120] Bluetooth: hci5: command tx timeout [ 253.098884][T10964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.141529][T11083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.234497][T10964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.296343][T11090] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 253.434919][T10964] team0: Port device team_slave_0 added [ 253.494775][T10964] team0: Port device team_slave_1 added [ 253.537212][T11095] syzkaller0: entered allmulticast mode [ 253.644030][T10964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.664951][T10964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.704843][T10964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.742406][T10964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.763527][T10964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.809056][T10964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.879049][T11112] smc: net device lo applied user defined pnetid SYZ2 [ 253.967481][T10964] hsr_slave_0: entered promiscuous mode [ 253.977771][T10964] hsr_slave_1: entered promiscuous mode [ 253.984862][T10964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.995081][T10964] Cannot create hsr debugfs directory [ 254.025683][T11117] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.147489][T11117] 8021q: adding VLAN 0 to HW filter on device team6 [ 254.172051][T11117] bond0: (slave team6): Enslaving as an active interface with an up link [ 254.417841][T11126] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.596678][T11136] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.801537][ T5120] Bluetooth: hci5: command tx timeout [ 254.911328][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 254.911348][ T29] audit: type=1800 audit(1717429007.614:25): pid=11145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 254.992556][ T29] audit: type=1804 audit(1717429007.624:26): pid=11145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1604985508/syzkaller.FCZLxE/170/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 255.018552][ T29] audit: type=1804 audit(1717429007.624:27): pid=11145 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1604985508/syzkaller.FCZLxE/170/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 255.076880][T10964] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 255.108044][T10964] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 255.120093][T10964] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 255.159535][T11152] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 255.272599][T10964] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 255.311149][T11153] 8021q: adding VLAN 0 to HW filter on device team7 [ 255.327492][T11153] bond0: (slave team7): Enslaving as an active interface with an up link [ 255.483851][T11163] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 255.497355][T11164] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.627888][T10964] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.714533][T10964] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.749172][ T5221] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.756421][ T5221] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.788963][ T5221] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.796224][ T5221] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.012382][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.018967][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.178329][ T29] audit: type=1800 audit(1717429008.884:28): pid=11187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1949 res=0 errno=0 [ 256.250989][ T29] audit: type=1804 audit(1717429008.924:29): pid=11187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1955303954/syzkaller.jQeM8r/304/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 256.300004][ T29] audit: type=1804 audit(1717429008.924:30): pid=11187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1955303954/syzkaller.jQeM8r/304/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 256.357526][T10964] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.377733][T11193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.673368][T10964] veth0_vlan: entered promiscuous mode [ 256.701710][T11205] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 256.712639][T11205] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.803547][T10964] veth1_vlan: entered promiscuous mode [ 256.954309][T10964] veth0_macvtap: entered promiscuous mode [ 256.987013][T10964] veth1_macvtap: entered promiscuous mode [ 257.073013][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.111294][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.141499][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.176564][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.199279][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.210848][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.221017][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.231919][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.244233][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.255846][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.266021][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.278461][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.292150][T10964] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.386058][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.414405][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.424817][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.442954][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.465514][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.485778][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.500597][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.513421][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.524198][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.535267][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.546393][T10964] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 257.557218][T10964] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.577043][T10964] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 257.608829][T10964] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.661614][T10964] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.673950][T10964] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.696275][T10964] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 257.927972][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 257.954032][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.051134][ T5170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.070385][ T5170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.261117][T11268] __nla_validate_parse: 1 callbacks suppressed [ 258.261138][T11268] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.380757][T11269] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 258.400392][T11274] xt_bpf: check failed: parse error [ 258.939690][ T29] audit: type=1800 audit(1717429011.644:31): pid=11308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1970 res=0 errno=0 [ 258.992934][ T29] audit: type=1804 audit(1717429011.664:32): pid=11308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1604985508/syzkaller.FCZLxE/180/memory.events" dev="sda1" ino=1970 res=1 errno=0 [ 259.081010][ T29] audit: type=1804 audit(1717429011.664:33): pid=11308 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1604985508/syzkaller.FCZLxE/180/memory.events" dev="sda1" ino=1970 res=1 errno=0 [ 259.872836][T11334] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 260.352579][T11349] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.363960][T11349] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 261.259387][T11317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 261.321371][T11334] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 261.807472][T11381] atomic_op ffff88807c177998 conn xmit_atomic 0000000000000000 [ 261.836568][T11380] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.197656][T11392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 263.114079][T11437] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.327086][T11447] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.345267][T11446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.439854][T11442] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 263.936415][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.010993][T11470] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.044991][T11470] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.273128][T11486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.732689][T11521] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 264.762990][T11521] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 264.814545][T11516] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 265.018199][T11533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.536873][T11558] Κό: entered promiscuous mode [ 265.584501][T11567] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.745945][T11569] ip6gretap0: entered promiscuous mode [ 265.760399][T11569] ip6gretap0: left promiscuous mode [ 265.858390][T11569] ip6gretap0: entered promiscuous mode [ 265.892682][T11569] ip6gretap0: left promiscuous mode [ 265.919429][T11588] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.977753][T11569] ip6gretap0: entered promiscuous mode [ 266.009361][T11569] ip6gretap0: left promiscuous mode [ 266.093798][T11569] ip6gretap0: entered promiscuous mode [ 266.120239][T11569] ip6gretap0: left promiscuous mode [ 266.171201][T11601] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.192920][T11569] ip6gretap0: entered promiscuous mode [ 266.207922][T11569] ip6gretap0: left promiscuous mode [ 266.218339][T11603] xt_SECMARK: invalid mode: 0 [ 266.297844][T11569] ip6gretap0: entered promiscuous mode [ 266.369953][T11569] ip6gretap0: left promiscuous mode [ 266.470368][T11569] ip6gretap0: entered promiscuous mode [ 266.498973][T11569] ip6gretap0: left promiscuous mode [ 266.549755][T11621] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 267.777193][T11673] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 268.612109][T11714] __nla_validate_parse: 10 callbacks suppressed [ 268.612130][T11714] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.754643][T11719] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 270.333217][T11705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.425110][T11709] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 270.476958][T11719] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 270.849264][T11746] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.206088][T11768] sch_fq: defrate 0 ignored. [ 271.544474][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.577396][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.591624][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.603510][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.615467][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.626135][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.637814][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.654868][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.665126][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.675778][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.686148][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.711603][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.740023][T11775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.755571][T11775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.903024][T11794] pimreg: entered allmulticast mode [ 271.930096][T11794] pimreg: left allmulticast mode [ 272.651792][T11829] x_tables: eb_tables: nflog.0 target: invalid size 80 (kernel) != (user) 0 [ 273.155241][T11860] pimreg: entered allmulticast mode [ 273.190906][T11860] pimreg: left allmulticast mode [ 273.509026][T11881] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 273.532399][T11881] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.0'. [ 274.230906][T11918] pimreg: entered allmulticast mode [ 274.269270][T11918] pimreg: left allmulticast mode [ 274.375835][T11928] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.408988][T11928] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 274.588220][T11943] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 274.906285][T11956] syzkaller0: entered promiscuous mode [ 274.918515][T11956] syzkaller0: entered allmulticast mode [ 275.171697][T11968] delete_channel: no stack [ 275.221723][T11973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.356447][T11977] pimreg: entered allmulticast mode [ 275.408721][T11977] pimreg: left allmulticast mode [ 275.443957][T11980] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.469585][T11980] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.3'. [ 275.626507][T11989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.763963][T11997] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.789035][T11997] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.824899][T12003] dccp_invalid_packet: P.Data Offset(68) too large [ 275.923355][T12008] pimreg: entered allmulticast mode [ 275.940184][T12008] pimreg: left allmulticast mode [ 276.046249][T12012] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.119452][T12012] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.155207][T12012] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.177978][T12012] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.201722][T12012] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 276.216921][T12012] geneve2: entered allmulticast mode [ 276.225610][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 276.268571][T12023] A link change request failed with some changes committed already. Interface veth1 may have been left with an inconsistent configuration, please check. [ 276.682360][T12045] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 276.917841][T12062] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.262982][T12075] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20004 [ 277.841886][ T5133] Bluetooth: hci5: command tx timeout [ 277.973084][T12104] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20004 [ 278.282277][T12121] Bluetooth: hci0: load_link_keys: expected 3 bytes, got 7 bytes [ 278.335898][T12127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.416963][ C1] hrtimer: interrupt took 1483586 ns [ 278.566368][ T5133] Bluetooth: hci0: command tx timeout [ 278.827955][T12132] veth6: entered promiscuous mode [ 278.846541][T12132] veth6: entered allmulticast mode [ 279.062110][T12140] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20004 [ 279.607929][T12160] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 279.644376][T12160] __nla_validate_parse: 18 callbacks suppressed [ 279.644400][T12160] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.795182][T12167] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.4'. [ 280.020106][T12170] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 280.213122][T12172] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 280.255110][T12174] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.323829][T12178] geneve3: entered promiscuous mode [ 280.354458][T12178] geneve3: entered allmulticast mode [ 280.505769][T12182] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 280.521173][T12182] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.4'. [ 280.645147][T12182] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 281.158640][T12212] IPVS: length: 244 != 24 [ 281.328887][T12216] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.544986][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.582747][T12224] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.736782][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.805907][T12221] lo speed is unknown, defaulting to 1000 [ 282.464154][T12254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.259396][T12299] lo speed is unknown, defaulting to 1000 [ 284.311831][T12306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.227432][T12329] __nla_validate_parse: 8 callbacks suppressed [ 285.227455][T12329] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 285.359272][T12329] 8021q: adding VLAN 0 to HW filter on device team27 [ 285.391985][T12329] bond0: (slave team27): Enslaving as an active interface with an up link [ 285.789488][T12345] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.2'. [ 285.966310][T12351] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.617016][T12373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 286.796998][T12373] 8021q: adding VLAN 0 to HW filter on device team9 [ 286.843381][T12373] team9: entered promiscuous mode [ 286.872702][T12373] bond0: (slave team9): Enslaving as an active interface with an up link [ 287.306826][T12394] lo speed is unknown, defaulting to 1000 [ 287.368846][T12398] tipc: Enabling of bearer rejected, failed to enable media [ 287.767068][T12421] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.782423][T12421] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.804355][T12420] veth1_macvtap: left promiscuous mode [ 287.813701][T12420] macsec0: entered allmulticast mode [ 287.846158][T12420] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 287.902775][T12423] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.0'. [ 287.938119][T12425] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.074934][T12429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.804586][ T5120] Bluetooth: hci6: command 0x0406 tx timeout [ 288.859761][T12442] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.899341][T12441] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 288.909215][T12441] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.1'. [ 289.010377][T12441] bond0: entered promiscuous mode [ 289.020739][T12441] bond_slave_0: entered promiscuous mode [ 289.028365][T12441] bond_slave_1: entered promiscuous mode [ 289.054694][T12441] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 289.077363][T12441] team2: entered promiscuous mode [ 289.101876][T12441] team3: entered promiscuous mode [ 289.119594][T12441] team6: entered promiscuous mode [ 289.136020][T12441] team7: entered promiscuous mode [ 289.166321][T12444] 8021q: adding VLAN 0 to HW filter on device team28 [ 289.194052][T12444] bond0: (slave team28): Enslaving as an active interface with an up link [ 289.415875][T12455] tipc: Started in network mode [ 289.424667][T12455] tipc: Node identity id-name-, cluster identity 4711 [ 289.451722][T12455] tipc: Enabling of bearer rejected, failed to enable media [ 289.927505][T12481] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.090217][T12484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.167793][T12485] lo speed is unknown, defaulting to 1000 [ 290.528308][T12499] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 290.749105][T12505] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 290.764986][T12505] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 290.899732][T12508] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 290.925122][T12508] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.941843][T12508] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 290.963816][T12508] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 290.981160][T12508] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 291.016059][T12513] tipc: Enabling of bearer rejected, failed to enable media [ 291.688487][T12534] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 292.134244][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 292.294521][T12542] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 292.452940][T12547] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.3'. [ 292.600499][T12554] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.779439][T12560] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 292.993602][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 294.462855][T12598] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 294.509939][ T29] audit: type=1800 audit(1717429047.214:34): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=6AA3 dev="sda1" ino=1960 res=0 errno=0 [ 294.591639][ T29] audit: type=1804 audit(1717429047.224:35): pid=12598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972313630343938353530382F73797A6B616C6C65722E46435A4C78452F3236372F6AA3 dev="sda1" ino=1960 res=1 errno=0 [ 294.743945][T12605] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 295.634149][T12641] __nla_validate_parse: 9 callbacks suppressed [ 295.634171][T12641] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.640505][T12640] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 295.668801][T12641] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.738896][T12644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 296.030631][T12656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 296.290650][T12662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.610005][T12675] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.706254][T12682] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 296.814714][T12687] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 296.925227][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 297.188191][ T29] audit: type=1804 audit(1717429049.894:36): pid=12703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1955303954/syzkaller.jQeM8r/417/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0 [ 297.587387][T12711] syz_tun: entered promiscuous mode [ 297.596524][T12711] macvtap0: entered promiscuous mode [ 297.618123][T12711] macvtap0: entered allmulticast mode [ 297.623926][T12711] syz_tun: entered allmulticast mode [ 297.625026][ T5120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 297.641782][ T5120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 297.650787][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 297.662121][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 297.675671][ T5120] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 297.683505][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.729810][T12713] syz_tun: left allmulticast mode [ 297.737211][T12713] syz_tun: left promiscuous mode [ 297.742626][T12713] macvtap0: left promiscuous mode [ 297.747816][T12713] macvtap0: left allmulticast mode [ 297.814142][T12712] lo speed is unknown, defaulting to 1000 [ 297.988733][T12718] ieee802154 phy0 wpan0: encryption failed: -22 [ 298.081362][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.105078][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 298.271133][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.301570][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 298.493302][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.517987][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 298.649562][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.663623][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 298.766622][T12712] chnl_net:caif_netlink_parms(): no params data found [ 299.107504][ T11] bridge_slave_1: left allmulticast mode [ 299.120985][T12764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.121569][ T11] bridge_slave_1: left promiscuous mode [ 299.148467][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.171000][ T11] bridge_slave_0: left allmulticast mode [ 299.183816][ T11] bridge_slave_0: left promiscuous mode [ 299.195494][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.745039][T12771] ieee802154 phy0 wpan0: encryption failed: -22 [ 299.763430][ T5120] Bluetooth: hci4: command tx timeout [ 299.902233][ T11] bond0 (unregistering): left promiscuous mode [ 299.908716][ T11] bond_slave_0: left promiscuous mode [ 299.914677][ T11] bond_slave_1: left promiscuous mode [ 299.920404][ T11] bond1 (unregistering): left promiscuous mode [ 299.927306][ T11] team2: left promiscuous mode [ 299.934981][ T11] team3: left promiscuous mode [ 299.940298][ T11] team4: left promiscuous mode [ 299.946104][ T11] team9: left promiscuous mode [ 299.955466][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 299.969191][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 299.980890][ T11] bond0 (unregistering): (slave bond1): Releasing backup interface [ 299.992811][ T11] bond0 (unregistering): (slave team2): Releasing backup interface [ 300.010304][ T11] bond0 (unregistering): (slave team3): Releasing backup interface [ 300.026642][ T11] bond0 (unregistering): (slave team4): Releasing backup interface [ 300.043636][ T11] bond0 (unregistering): (slave team9): Releasing backup interface [ 300.060714][ T11] bond0 (unregistering): Released all slaves [ 300.180851][ T11] bond1 (unregistering): Released all slaves [ 300.199597][ T11] bond2 (unregistering): Released all slaves [ 300.216660][ T11] bond3 (unregistering): Released all slaves [ 300.230895][T12712] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.256277][T12712] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.263847][T12712] bridge_slave_0: entered allmulticast mode [ 300.271237][T12712] bridge_slave_0: entered promiscuous mode [ 300.382985][T12712] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.390210][T12712] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.452097][T12712] bridge_slave_1: entered allmulticast mode [ 300.459885][T12712] bridge_slave_1: entered promiscuous mode [ 300.479870][ T11] tipc: Left network mode [ 300.690294][T12712] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.724391][T12712] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.964380][T12712] team0: Port device team_slave_0 added [ 300.988783][T12712] team0: Port device team_slave_1 added [ 301.013895][T12799] __nla_validate_parse: 9 callbacks suppressed [ 301.013916][T12799] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.031663][ T11] batadv0: left promiscuous mode [ 301.060761][T12799] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.089251][ T11] hsr_slave_0: left promiscuous mode [ 301.120973][ T11] hsr_slave_1: left promiscuous mode [ 301.151332][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.163807][T12802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.167871][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.205057][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.229405][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 301.327837][ T11] veth1_macvtap: left promiscuous mode [ 301.350531][ T11] veth0_macvtap: left promiscuous mode [ 301.356806][ T11] veth1_vlan: left promiscuous mode [ 301.362585][ T11] veth0_vlan: left promiscuous mode [ 301.596464][T12812] ieee802154 phy0 wpan0: encryption failed: -22 [ 301.652842][T12815] IPv4: Oversized IP packet from 127.202.26.0 [ 301.841877][ T5120] Bluetooth: hci4: command tx timeout [ 302.944121][ T11] team0 (unregistering): Port device team_slave_1 removed [ 302.995767][ T11] team0 (unregistering): Port device team_slave_0 removed [ 303.504189][T12816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 303.644608][T12712] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.671626][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.745414][T12712] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 303.776649][T12712] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 303.802866][T12712] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.843000][T12833] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 303.883186][T12712] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 303.922414][ T5120] Bluetooth: hci4: command tx timeout [ 304.093036][T12712] hsr_slave_0: entered promiscuous mode [ 304.115099][T12712] hsr_slave_1: entered promiscuous mode [ 304.130730][T12712] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.149981][T12712] Cannot create hsr debugfs directory [ 304.297659][ T11] IPVS: stop unused estimator thread 0... [ 304.401226][T12845] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 304.423606][T12845] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 304.478993][T12846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 304.505814][T12848] ieee802154 phy0 wpan0: encryption failed: -22 [ 304.960600][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 305.000550][T12867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.052990][T12867] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 305.157769][T12712] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 305.189031][T12712] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 305.215328][T12712] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 305.241142][T12712] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 305.415806][T12877] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.565333][T12712] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.614719][T12712] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.656203][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.663431][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.724990][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.732214][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.830502][T12712] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 305.844308][T12712] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.001626][ T5120] Bluetooth: hci4: command tx timeout [ 306.018203][T12894] bond_slave_0: entered promiscuous mode [ 306.024429][T12894] bond_slave_1: entered promiscuous mode [ 306.049191][T12894] macvtap1: entered promiscuous mode [ 306.055153][T12894] bond0: entered promiscuous mode [ 306.060810][T12894] team1: entered promiscuous mode [ 306.067739][T12894] team2: entered promiscuous mode [ 306.074181][T12894] team4: entered promiscuous mode [ 306.079572][T12894] team5: entered promiscuous mode [ 306.086165][T12894] team6: entered promiscuous mode [ 306.091969][T12894] team7: entered promiscuous mode [ 306.095922][T12897] __nla_validate_parse: 1 callbacks suppressed [ 306.095946][T12897] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.097229][T12894] team8: entered promiscuous mode [ 306.120250][T12894] team9: entered promiscuous mode [ 306.126181][T12894] team10: entered promiscuous mode [ 306.132086][T12894] team11: entered promiscuous mode [ 306.138104][T12894] team12: entered promiscuous mode [ 306.144097][T12894] team13: entered promiscuous mode [ 306.150507][T12894] team14: entered promiscuous mode [ 306.161874][T12894] team27: entered promiscuous mode [ 306.167346][T12894] team28: entered promiscuous mode [ 306.174222][T12894] macvtap1: entered allmulticast mode [ 306.180516][T12894] bond0: entered allmulticast mode [ 306.187814][T12894] bond_slave_0: entered allmulticast mode [ 306.195157][T12894] bond_slave_1: entered allmulticast mode [ 306.220130][T12894] team1: entered allmulticast mode [ 306.235457][T12894] team2: entered allmulticast mode [ 306.240665][T12894] team4: entered allmulticast mode [ 306.250146][T12894] team5: entered allmulticast mode [ 306.256538][T12894] team6: entered allmulticast mode [ 306.265067][T12894] team7: entered allmulticast mode [ 306.274675][T12894] team8: entered allmulticast mode [ 306.295820][T12894] team9: entered allmulticast mode [ 306.315974][T12894] team10: entered allmulticast mode [ 306.322366][T12894] team11: entered allmulticast mode [ 306.327793][T12894] team12: entered allmulticast mode [ 306.357305][T12894] team13: entered allmulticast mode [ 306.363412][T12894] team14: entered allmulticast mode [ 306.368662][T12894] geneve0: entered allmulticast mode [ 306.378818][T12894] team27: entered allmulticast mode [ 306.384265][T12894] team28: entered allmulticast mode [ 306.392592][T12894] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 306.400991][T12898] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 306.413413][T12898] bond0: left allmulticast mode [ 306.418469][T12898] bond_slave_0: left allmulticast mode [ 306.424330][T12898] bond_slave_1: left allmulticast mode [ 306.430050][T12898] team1: left allmulticast mode [ 306.435489][T12898] team2: left allmulticast mode [ 306.440551][T12898] team4: left allmulticast mode [ 306.447648][T12898] team5: left allmulticast mode [ 306.453459][T12898] team6: left allmulticast mode [ 306.458639][T12898] team7: left allmulticast mode [ 306.464069][T12898] team8: left allmulticast mode [ 306.469132][T12898] team9: left allmulticast mode [ 306.474351][T12898] team10: left allmulticast mode [ 306.479557][T12898] team11: left allmulticast mode [ 306.488274][T12898] team12: left allmulticast mode [ 306.495545][T12898] team13: left allmulticast mode [ 306.500762][T12898] team14: left allmulticast mode [ 306.506216][T12898] geneve0: left allmulticast mode [ 306.511672][T12898] team27: left allmulticast mode [ 306.516843][T12898] team28: left allmulticast mode [ 306.522317][T12898] bond0: left promiscuous mode [ 306.527756][T12898] team1: left promiscuous mode [ 306.533210][T12898] team2: left promiscuous mode [ 306.538307][T12898] team4: left promiscuous mode [ 306.543717][T12898] team5: left promiscuous mode [ 306.548791][T12898] team6: left promiscuous mode [ 306.553993][T12898] team7: left promiscuous mode [ 306.559605][T12898] team8: left promiscuous mode [ 306.565629][T12898] team9: left promiscuous mode [ 306.570800][T12898] team10: left promiscuous mode [ 306.579334][T12898] team11: left promiscuous mode [ 306.584586][T12898] team12: left promiscuous mode [ 306.589771][T12898] team13: left promiscuous mode [ 306.614017][T12898] team14: left promiscuous mode [ 306.627144][T12898] team27: left promiscuous mode [ 306.633294][T12898] team28: left promiscuous mode [ 306.638737][T12898] bond_slave_0: left promiscuous mode [ 306.644252][T12898] bond_slave_1: left promiscuous mode [ 306.662613][T12898] macvtap1: left promiscuous mode [ 306.667854][T12898] macvtap1: left allmulticast mode [ 306.876377][T12912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.922173][T12913] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.4'. [ 307.024758][T12712] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.190808][T12712] veth0_vlan: entered promiscuous mode [ 307.263929][T12712] veth1_vlan: entered promiscuous mode [ 307.424716][T12712] veth0_macvtap: entered promiscuous mode [ 307.443445][T12936] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.4'. [ 307.477626][T12712] veth1_macvtap: entered promiscuous mode [ 307.487423][T12936] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.4'. [ 307.549480][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.579333][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.600161][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.628248][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.647239][T12936] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 307.647532][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.672122][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.683289][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.696721][T12945] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.698238][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.727070][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.747034][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.766853][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.786702][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.811278][T12712] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.866863][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.878176][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.889747][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.900527][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.913085][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.924442][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.935433][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.946529][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.957723][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.974107][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.985781][T12712] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.006617][T12712] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.019855][T12712] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.030920][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.056836][T12712] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.067275][T12712] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.078154][T12712] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.087849][T12712] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.102535][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.293341][ T5167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.317287][ T5167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.340153][T12951] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.455066][T11921] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.470567][T11921] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.693512][T12965] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.703038][T12965] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 308.712333][T12965] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 309.116948][T12985] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.496069][T13000] syzkaller0: entered promiscuous mode [ 309.514910][T13000] syzkaller0: entered allmulticast mode [ 309.878810][T13018] IPv4: Oversized IP packet from 127.202.26.0 [ 310.286245][T13038] sock: sock_timestamping_bind_phc: sock not bind to device [ 310.540083][T13045] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 310.673940][T13052] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.238162][T13080] __nla_validate_parse: 26 callbacks suppressed [ 311.238187][T13080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 311.496908][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 311.523772][T13096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 311.569492][T13095] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 311.762127][T13102] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.3'. [ 311.873198][T13104] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.089769][T13118] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 312.143589][T13118] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.1'. [ 312.294031][T13127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 312.351776][T13131] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 312.357138][T13130] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 314.210740][T13196] Bluetooth: hci3: invalid length 0, exp 2 for type 13 [ 314.243669][T13198] x_tables: ip6_tables: TRACE target: only valid in raw table, not wg0 [ 315.851803][T13252] syzkaller0: entered promiscuous mode [ 315.857623][T13252] syzkaller0: entered allmulticast mode [ 316.008548][T13258] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 316.217162][T13268] Κό: entered promiscuous mode [ 316.468506][T13284] __nla_validate_parse: 23 callbacks suppressed [ 316.468528][T13284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.619545][T13290] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 316.826431][T13300] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 316.893588][T13300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 316.966815][T13305] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.0'. [ 317.088832][T13312] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.115005][T13311] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 317.138617][T13311] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 317.295261][T13319] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 317.309806][T13321] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 317.318991][T13320] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 317.423568][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.445793][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.453624][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.576174][T13330] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 318.136763][T13358] sctp: [Deprecated]: syz-executor.0 (pid 13358) Use of int in max_burst socket option. [ 318.136763][T13358] Use struct sctp_assoc_value instead [ 319.795315][T13397] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.478025][T13387] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 320.501680][T13396] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 320.521702][T13396] IPv6: NLM_F_CREATE should be specified when creating new route [ 320.565081][T13396] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 320.572446][T13396] IPv6: NLM_F_CREATE should be set when creating new route [ 320.579747][T13396] IPv6: NLM_F_CREATE should be set when creating new route [ 320.587091][T13396] IPv6: NLM_F_CREATE should be set when creating new route [ 321.273862][T13427] xt_CT: No such helper "pptp" [ 321.429192][T13440] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 321.458849][T13440] IPv6: NLM_F_CREATE should be specified when creating new route [ 321.475887][T13440] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.483243][T13440] IPv6: NLM_F_CREATE should be set when creating new route [ 321.490550][T13440] IPv6: NLM_F_CREATE should be set when creating new route [ 321.497862][T13440] IPv6: NLM_F_CREATE should be set when creating new route [ 321.516833][T13441] tipc: Enabled bearer , priority 10 [ 321.526628][T13444] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 321.536488][T13444] IPv6: NLM_F_CREATE should be specified when creating new route [ 321.546209][T13445] __nla_validate_parse: 11 callbacks suppressed [ 321.546237][T13445] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 321.577286][T13444] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 321.584668][T13444] IPv6: NLM_F_CREATE should be set when creating new route [ 321.592037][T13444] IPv6: NLM_F_CREATE should be set when creating new route [ 321.599286][T13444] IPv6: NLM_F_CREATE should be set when creating new route [ 321.649335][T13450] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.0'. [ 321.679916][T13450] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 321.899186][T13454] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 321.950301][T13454] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 322.025417][T13460] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.1'. [ 322.285358][T13473] hsr0: entered promiscuous mode [ 322.342602][T13473] macsec1: entered promiscuous mode [ 322.447502][T13480] xt_CT: No such helper "pptp" [ 322.634481][ T57] tipc: Node number set to 134826051 [ 322.672808][T13494] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 322.686946][T13494] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 322.718734][T13496] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 322.760969][T13495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.851101][T13499] tipc: Started in network mode [ 322.866044][T13499] tipc: Node identity b654deffbb61, cluster identity 4711 [ 322.885868][T13499] tipc: Enabled bearer , priority 10 [ 323.001779][T13503] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 323.205382][T13512] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 323.241887][T13516] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 323.585059][T13531] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.648066][T13532] hsr0: entered promiscuous mode [ 323.665191][T13532] macsec1: entered promiscuous mode [ 323.870273][T13537] xt_CT: No such helper "pptp" [ 324.021706][ T5167] tipc: Node number set to 221634303 [ 324.082932][T13550] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 324.113219][T13552] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 324.121646][T13550] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 324.147009][T13552] IPv6: NLM_F_CREATE should be specified when creating new route [ 324.181690][T13552] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 324.189030][T13552] IPv6: NLM_F_CREATE should be set when creating new route [ 324.196425][T13552] IPv6: NLM_F_CREATE should be set when creating new route [ 324.203772][T13552] IPv6: NLM_F_CREATE should be set when creating new route [ 325.038012][T13596] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 325.091721][T13596] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 325.550784][T13602] xt_CT: No such helper "pptp" [ 325.633318][T13606] xt_CT: No such helper "pptp" [ 326.058578][T13633] can: request_module (can-proto-0) failed. [ 326.232221][T13650] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 326.248106][T13650] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.444260][T13661] syz-executor.3 uses old SIOCAX25GETINFO [ 326.461177][T13655] xt_CT: No such helper "pptp" [ 326.599440][T13667] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 326.639175][T13667] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 326.652436][T13671] __nla_validate_parse: 10 callbacks suppressed [ 326.652461][T13671] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 327.132246][T13679] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 327.167505][T13679] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.254310][T13687] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 327.452884][T13696] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 327.483727][T13696] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 327.891116][T13712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 328.077380][T13713] xt_CT: No such helper "pptp" [ 328.117391][T13719] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 328.138015][T13719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.248237][T13727] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 328.295694][T13730] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.298484][T13727] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 328.345996][T13732] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 328.649428][T13736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 328.812729][T13743] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 328.830683][T13743] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 359.803461][ T5133] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 359.833670][ T5133] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 359.853095][ T5133] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 359.862126][ T5133] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 359.869960][ T5133] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 359.877591][ T5133] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.063341][ T5123] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 360.073599][ T5128] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 360.084959][ T5128] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 360.093476][ T5123] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 360.093705][ T5128] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 360.109427][ T5128] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 360.111538][ T5123] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 360.125146][ T5128] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 360.126334][ T5123] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 360.139920][ T5123] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 360.171937][ T5120] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 360.179398][ T5120] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 360.266751][ T5133] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 360.291846][ T5133] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 360.313197][ T5133] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 360.325091][ T5133] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 360.333996][ T5133] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 360.346241][ T5133] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 360.513651][ T5133] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 360.523559][ T5133] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 360.532499][ T5133] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 360.550685][ T5133] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 360.560815][ T5133] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 360.576462][ T5133] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 361.921858][ T5120] Bluetooth: hci7: command tx timeout [ 362.242031][ T5120] Bluetooth: hci8: command tx timeout [ 362.248378][ T5120] Bluetooth: hci9: command tx timeout [ 362.401912][ T5120] Bluetooth: hci10: command tx timeout [ 362.648735][ T5120] Bluetooth: hci11: command tx timeout [ 364.001832][ T5120] Bluetooth: hci7: command tx timeout [ 364.321623][ T5120] Bluetooth: hci9: command tx timeout [ 364.321636][ T5133] Bluetooth: hci8: command tx timeout [ 364.482377][ T5133] Bluetooth: hci10: command tx timeout [ 364.722382][ T5133] Bluetooth: hci11: command tx timeout [ 366.082791][ T5133] Bluetooth: hci7: command tx timeout [ 366.401588][ T5120] Bluetooth: hci9: command tx timeout [ 366.402631][ T5133] Bluetooth: hci8: command tx timeout [ 366.561784][ T5133] Bluetooth: hci10: command tx timeout [ 366.801556][ T5133] Bluetooth: hci11: command tx timeout [ 368.174881][ T5133] Bluetooth: hci7: command tx timeout [ 368.481490][ T5133] Bluetooth: hci9: command tx timeout [ 368.491614][ T5133] Bluetooth: hci8: command tx timeout [ 368.661499][ T5133] Bluetooth: hci10: command tx timeout [ 368.891619][ T5133] Bluetooth: hci11: command tx timeout [ 378.887007][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.901794][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 401.446735][ T5120] Bluetooth: hci5: command 0x0406 tx timeout [ 425.088304][ T5120] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 425.098041][ T5120] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 425.107003][ T5120] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 425.116019][ T5120] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 425.126346][ T5120] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 425.146138][ T5120] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 425.312896][ T5120] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 425.322708][ T5128] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 425.330530][ T5120] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 425.332769][ T5128] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 425.346462][ T5128] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 425.360018][ T5128] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 425.368921][ T5128] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 425.371893][ T5120] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 425.384687][ T5120] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 425.393793][ T5120] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 425.411752][ T5120] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 425.419272][ T5120] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 425.476176][ T5133] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 425.490793][ T5133] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 425.499316][ T5133] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 425.507844][ T5133] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 425.517586][ T5133] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 425.532282][ T5133] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 425.651922][ T5133] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 425.660873][ T5133] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 425.670206][ T5133] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 425.686793][ T5133] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 425.695933][ T5133] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 425.703730][ T5133] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 427.201612][ T5120] Bluetooth: hci12: command tx timeout [ 427.441604][ T5120] Bluetooth: hci13: command tx timeout [ 427.441968][ T5133] Bluetooth: hci14: command tx timeout [ 427.602055][ T5133] Bluetooth: hci15: command tx timeout [ 427.766208][ T5133] Bluetooth: hci16: command tx timeout [ 429.281721][ T5133] Bluetooth: hci12: command tx timeout [ 429.521666][ T5133] Bluetooth: hci14: command tx timeout [ 429.521676][ T5120] Bluetooth: hci13: command tx timeout [ 429.682659][ T5120] Bluetooth: hci15: command tx timeout [ 429.841677][ T5120] Bluetooth: hci16: command tx timeout [ 431.367479][ T5120] Bluetooth: hci12: command tx timeout [ 431.601725][ T5120] Bluetooth: hci14: command tx timeout [ 431.601734][ T5133] Bluetooth: hci13: command tx timeout [ 431.771705][ T5120] Bluetooth: hci15: command tx timeout [ 431.921698][ T5120] Bluetooth: hci16: command tx timeout [ 433.453762][ T5120] Bluetooth: hci12: command tx timeout [ 433.681606][ T5120] Bluetooth: hci13: command tx timeout [ 433.681644][ T5133] Bluetooth: hci14: command tx timeout [ 433.841681][ T5133] Bluetooth: hci15: command tx timeout [ 434.002551][ T5133] Bluetooth: hci16: command tx timeout [ 440.334802][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.341244][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.641428][ T5120] Bluetooth: hci4: command 0x0406 tx timeout [ 476.161978][ T30] INFO: task kworker/0:1:9 blocked for more than 143 seconds. [ 476.169521][ T30] Not tainted 6.10.0-rc1-syzkaller-00239-g93e30878f7ec #0 [ 476.196422][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/03 15:40:28 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 476.211466][ T30] task:kworker/0:1 state:D stack:23888 pid:9 tgid:9 ppid:2 flags:0x00004000 [ 476.232136][ T30] Workqueue: events_power_efficient check_lifetime [ 476.238743][ T30] Call Trace: [ 476.286968][ T30] [ 476.290038][ T30] __schedule+0x17e8/0x4a20 [ 476.321472][ T30] ? __pfx___schedule+0x10/0x10 [ 476.326455][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 476.341342][ T30] ? __pfx_lock_release+0x10/0x10 [ 476.346458][ T30] ? kick_pool+0x45c/0x620 [ 476.350951][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 476.366597][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 476.376757][ T30] ? schedule+0x90/0x320 [ 476.381050][ T30] schedule+0x14b/0x320 [ 476.385490][ T30] schedule_preempt_disabled+0x13/0x30 [ 476.390997][ T30] __mutex_lock+0x6a4/0xd70 [ 476.418814][ T30] ? __mutex_lock+0x527/0xd70 [ 476.432677][ T30] ? check_lifetime+0x433/0x960 [ 476.441480][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 476.446580][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 476.463029][ T30] check_lifetime+0x433/0x960 [ 476.467770][ T30] ? check_lifetime+0x73/0x960 [ 476.472969][ T30] ? process_scheduled_works+0x945/0x1830 [ 476.478807][ T30] process_scheduled_works+0xa2c/0x1830 [ 476.498351][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 476.504730][ T30] ? assign_work+0x364/0x3d0 [ 476.509538][ T30] worker_thread+0x86d/0xd70 [ 476.528374][ T30] ? __kthread_parkme+0x169/0x1d0 [ 476.533724][ T30] ? __pfx_worker_thread+0x10/0x10 [ 476.553015][ T30] kthread+0x2f0/0x390 [ 476.557160][ T30] ? __pfx_worker_thread+0x10/0x10 [ 476.571417][ T30] ? __pfx_kthread+0x10/0x10 [ 476.576083][ T30] ret_from_fork+0x4b/0x80 [ 476.580530][ T30] ? __pfx_kthread+0x10/0x10 [ 476.594813][ T30] ret_from_fork_asm+0x1a/0x30 [ 476.599664][ T30] [ 476.609935][ T30] INFO: task syz-executor.2:13757 blocked for more than 143 seconds. [ 476.618363][ T30] Not tainted 6.10.0-rc1-syzkaller-00239-g93e30878f7ec #0 [ 476.639864][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 476.661121][ T30] task:syz-executor.2 state:D stack:26112 pid:13757 tgid:13756 ppid:10964 flags:0x00000006 [ 476.681408][ T30] Call Trace: [ 476.684736][ T30] [ 476.687697][ T30] __schedule+0x17e8/0x4a20 [ 476.701435][ T30] ? __pfx___schedule+0x10/0x10 [ 476.706344][ T30] ? __pfx_lock_release+0x10/0x10 [ 476.723449][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 476.728994][ T30] ? schedule+0x90/0x320 [ 476.750260][ T30] schedule+0x14b/0x320 [ 476.754713][ T30] schedule_preempt_disabled+0x13/0x30 [ 476.760215][ T30] __mutex_lock+0x6a4/0xd70 [ 476.775967][ T30] ? __mutex_lock+0x527/0xd70 [ 476.780716][ T30] ? dev_ioctl+0x706/0x1340 [ 476.797159][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 476.808656][ T30] ? dev_load+0x21/0x1f0 [ 476.813226][ T30] dev_ioctl+0x706/0x1340 [ 476.817597][ T30] sock_do_ioctl+0x240/0x460 [ 476.822497][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 476.827668][ T30] sock_ioctl+0x629/0x8e0 [ 476.832142][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 476.837194][ T30] ? __fget_files+0x29/0x470 [ 476.844935][ T30] ? __fget_files+0x3f6/0x470 [ 476.850725][ T30] ? __fget_files+0x29/0x470 [ 476.855446][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 476.860416][ T30] ? security_file_ioctl+0x87/0xb0 [ 476.871733][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 476.876638][ T30] __se_sys_ioctl+0xfc/0x170 [ 476.881263][ T30] do_syscall_64+0xf3/0x230 [ 476.897130][ T30] ? clear_bhb_loop+0x35/