last executing test programs: 1m17.000102574s ago: executing program 1: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf000000, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 5) 1m7.588126704s ago: executing program 1: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf000000, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 5) 56.406933265s ago: executing program 1: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf000000, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 5) 51.667553031s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x1, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100004, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x80000000, r2}, 0x38) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x16}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b1", 0x7c}, {&(0x7f0000000300)="87fb74cf4d67adbbd062637f514c1f5eb18d7b442e6457a356c6cb1f71a43dfae773c8489cce5145f92615d4bdb13ef54d6ae90ec7733180fcf5adf3e13fdb05b57b748bd14eda042a97fdd84498304a504a0a159b972e8200c2d0f536a3465ec498ed12b924bd134057df36129d3ebe3dd3ce9f0671e5278143e4afa3d43f444681de1b5f9725fca34fa357fe2154981666fb9dc202fc17a0199eb1c25bdd1005e590e84783ee9894c888998dc25a83c14aeee31d114acfa0bcd235d571cd765f4b9259ba43e6fc30291d8a642146c4771898030b736aeee6b247abb0784b154e104e7dcda401f9b1736fea30a41a4153fe6a9a525bd0a3487571f914f05b590e242341ade289d8f5b842c6be4a93c2755dfd47174def782a2f8f61c068b5a012f02c0801601e860def788121e8808c01fed4c920a3698d0d684920918c95b17f76bbcb4f265c931d8f79560ff8114b70f4dd6791e2ed70cfeb89905791b88be26efe1c5c66b7b50b3d2be0dbc066dfc31618f9507f6f340b85a2f76a6dcac9d6ccc289ace5e5fecd25afe22ffa451f5e365ab33cc985f2e9d7f7fb1be4794740a94215d7db14b0ffcec19e5e3c5ae0d8578ef3b65d2a7a77a11e390a6c3a6b391061c886b961e3c2f42d62047bfe1356a44b840d3d956105f4c0fa95db08c4933f00de77cdc057c28b41fecfc8398c442be1ad065954f6c9dfeb2fd7207e8548a00a1d50bdf522d2abfdafd71723616a34830fbfa8fc81e0c2639cc12f363a4919b7a00ac8189dad3e7e54122a2ef430f623658d5e281c9a19442995bb9b0e3f7d13e3016b6f9523be196bf23bbcc5ec802f43ef8b651d688d9d5a44f35c9847e4c32bce3e9ebed2326adadc76f06a195db32c80b3090d7cd65c9d8518ba4e528c5eb5c7a1c5695b21595fa8a8621734bfda8afddd65e1f37a1990220a00fa9bd2c22b0117ceb08ae6af3c944c2eca924abfddad065d1472d0c3f742a49b1e78c669471873706ad157d831d7482b773f07b0673a6ce1e227a7a4d13744bf459434c0ab1c323a38b1a84cbf1ce9741f2b8fdcc2e073e56171603d035aacd83e71d5132831f4f1e8bf517979f132a33fd03783272e9b8c96dfa4e1d320a58d82acfc8d3d53a5a52daafe4dc8be08f4ad53e11cc21374b6ff4ff5ea2ecc5d3f7c057f74f0098e57d990090475cdaffdef0da917653ed10fb70b94b72e5b4d95cbea0fc1dd2579635ad6ab545ba4d7b6d2f5442bdb78beb6c8ed62942a439117025b4566b48d9f3a17fdf4577e8606a4bc4c26557e58312fd2d1a541ebec3e5ae28eef8b2ab0597083716dd12889335570ee7839530eee879d9b137606cd4dd7103991671b4464bb68529eb19fb7a8845e3491bfbac688a87cf0744f429ea112014402915c4c1f6bae08d689d3cb7d641d7befe8fc74a2242310a9a367a39531b4c86da5b39df524e52f33ff9c40b48cb196ffc9ca855b6e698ade8a83e52b9ddc5031ff09e1907e4f8b0d07e64e1fb8e427f8819a7be907aa216bf8e2a4c7cc87ed53bf9490d4cc788b91f3b9f705e984a7e62c7a495e8421b97c39dc954b35468f17c6682334f4e16308448f457faeffff6d1f818522fa441d3a48168bdb12ffebace436a3915b63076cb6a655718647f87eaaf313b5bbd430421eed3a2215e439600a56eac8c65291eb103326a8034662bd337ab51577d9110ec7151be5cc9c54b2a30891acac5ad006ed537dbeb8f16eecbde7cf4e71373faf3c36b772f6d7ea9346875c8cf1049d49d4f8eb01b946c11e8c8e3ab2015f282167acddcc77fff03e1be9134252af0abfe538b4d25fc4ff874b52b9fb0996b5f32b4141dbd30578ff46e13ef6c63fc1620f62cb11a3dce401993976c272a5f62fde3f2a0e654d19e7a39dcdb622b9526d2a15cc18e6f817c916a00775353dd9c8954e66d0445b59bb0f5e6e3b46447232f52a0e398b057d123ef503afcbd48544db6434d2025bfc8dab72262a4fa5426a03061e7f8966e0086ff8ab5a91ab59f19b830394ee8bc76d6fb4816b8f4cde35b7eb9d3811228d51c54828f97fd1e648196c81bc73ed56249a59f318704e84656a6cedd2b8c1e1808d1cc648749abc643131e494c01336d4a14b8609656f2c972dc23c5c2e43fe40119fb88b5ec2aade35c03646e347354c493de8ab3672ccf94af0df333c6678299129d79be0eec281c5b3858ce3995566a390b674635b356692e3e9c53a089638ba0d69e772b7b410a5ae03de12e7de755ee559e1707b7b8003aabc8e2ce03c01e3183ff2d93262f6d5ceaafecdae66bc7cb3952c5a6571d864d502f281db5a228695badca5d022fdb6da56ab15dc377d1c1f8581ff56e28c2b2a84edb629547d28275c2ed571103b4ca7cdeb0776ba9f9dffcd78d21c3d4caa9289ed199672f4e7b912068c49c817114c37d37ea03954bae87d1ddae3da2ad85feb2fbb735b75a51f7bee5c8d88cc7bf64700d1a46ec6b631ae22ac7b06730a86a26bdcb992e1c7b50142de96b14a8468e4514068a30896fc677fddefaebb125c693a8d460469c7fe535f844781940f66d6abd091191c3122d584f5b0f5b0d443713d7d5186124d73de28aca30b719d4a55e09d259bddbf16995aeb1000880890afbd24d4066b0398985a40999de22ce176348e1c1f57eaf75b92a1e4f1482e89a00ac2cc36b20e36af9ec310599c19a5b1d6f8fadba104c58c801c6633315f82ebfa88faddd0b693e2f827f586c1cc5538e93bcf10f81af6dd7ee727df3b5018c0b4e31e40d040a47503b6ace4d29a1162ce487351825255f5584aff7cbd421f85c3d9fbb3784abd9848f16028b68f0d32ed8bb80106e8cc4acb939ff88bd39976d166b2addebf628b3fcd056da2f60e1b90f7a32702954921908ebccb683622a1f574ceba6951bef5e751c338c8279318dc28e36b9fc2bb17c3ad08aceb00fc388e6db112a738f86a4a1eb11526e1b9d73250b326285ed47c4398d93a3933d9a784249b65ad7d78a1f81d96ef36493ed693045a2150a8eb43cecc0c93e7d20b15b39a0646b081c2923b816365b7fbb41683a41732d942c5aa12faf876ec7f036becde8f3295af6dacff38d076d8e06260fee167703bb610745374a2758a6b88e465ca77d1f3105ae8b6b04a1eb509fb178d6249dbbc84d5d1d069278449a89d03e4a9a395d8170c329a296cfc329798cb9b9f1078d098cf3f989fd4ec53e013fbe917df35292d44fb1f3da4da4432a1847d4721514ade8cda5e5c0b51183580fc35266a970ebba74faeda56d4dcb56df51f96ad237452cedbd0cb2bee112713c3d450835811bf3da9745136d428e148fd0932dc77c8d8e61a16c625241fad8425b4ece394eedd5f165bd94923bfa1172be8edc8a4fcaae5f77ee8cc510192b27964da09c3e84efb4bc7154da1a24da8b7e544b42278d2574687ec76143afa6cf193d52a2a7f4c20ee57b6056a1337d5e408117a6cf1ab49c8980f39597f69902085d3e8d374d44e6ab4ed1185a26be2bc7281e9cfbbeb6bed899aa1924d3faa06d95999fbeaf2337494e0c2c39eef5a73fcde84459a9ea48d4e015d9e5bb5839354967ce02f637bc8678d2595b9a918fc36b927d7501f0ac2e3471ce02b5df355689c87f191ef5390900a41deec29984e45a878ece964b0009aad561316fc3b30ce1b49266d32eb17cd30f3e17e1f59014e8c518940dd0a093d1349c1a7c2581963bbe0ba372b6426e81c33c71b2ec8141c5713e52a37fff0a417a5b259e1420d9fb6a731f5baa0cc494221947895aa8fa14745a986a366bff9d0c239a19f85372497565b5b703da16439019df5f3d29f4247fb528854c9648630f03e9dedde5a08a47728ea6a4d42e62eff6fa3bd402325e0f4387b60171c37c180f958ad80955779c899517e7ea76eed00598e01552eaaf08b723daf9d466e8c57af43a15a46528b1119f5074aa3c51f77357ebe158275bc06b89640d7ce3c0a03af01418d7dc6ae8a1be8ab08c1722d66d1e9277480b8b178447667c024f9b78f8a878a2d7cf8e83e5104f6964b2907a989abafc7d7d0df941abf3d7283b6a11d46c2911a42182ec27ab785d92946e1ee8ef44846d561850d2a98c305c382f36d4cfc9b2bfd3b86ef21a0d187adcafbec8268c7d662a34dda1c83c4967097743133bc8c587edf249f5668c34ddb112fa4eb1bea9c8f6a000f1f34428b54688a5e214a7919868b25dbe930e86a243ecf54afe0b518c647d04873d2cf62cb2ab27f00015537a4fd2ea3dc8777abdf3284622347016566da0b9c406ca8c40694e4013a53fbf2e803d51b0bbe5e9df5fc74f66be618856357ccf803c53ed0e3b3fe79f69f0ede9b565d8f7a8ce5aa8cbb4e8fa61be3fd00ffb07e45065498925c14c0b311942d4ed951ad6237aadb5405bc7b2d79e1fd295b7c2ed8efa883e44c86a5053e2f421c6d4dc0c47d3a05d911db37d6efdb8e50fb3f06139ac147bc7162c21aece79eaf72e9779f19eb5395cec3d15a7594ea70a6b373d98651d2215b210f037ea3f8a57ded74474f6fdb64a08b56af52168da70b30aee03472cd8bee5af04cad7303004a4aba464b99", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r3, &(0x7f0000000040)={0x1, @read_tx_power={{0xc2d, 0x3}}}, 0x7) 50.745145631s ago: executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f00000008c0)=ANY=[], &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) r3 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$sock_int(r3, 0x1, 0x23, &(0x7f0000000040)=0x80047c7, 0x4) bind$l2tp6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) recvfrom(r3, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000140)={'erspan0\x00', 0x0}) socketpair(0x0, 0x0, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000480), r4) sendmsg$IEEE802154_LLSEC_GETPARAMS(r4, &(0x7f00000005c0)={0x0, 0x6000, &(0x7f0000000580)={&(0x7f0000000500)={0x20, r5, 0x1, 0x0, 0x0, {0x24, 0x9}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}}, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r6 = accept$alg(r2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) 50.669839839s ago: executing program 2: unshare(0x20800) shutdown(0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 43.791952743s ago: executing program 1: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf000000, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 5) 40.061325515s ago: executing program 2: unshare(0x20800) shutdown(0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 27.243215911s ago: executing program 1: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf000000, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 5) 25.530743101s ago: executing program 2: unshare(0x20800) shutdown(0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 8.36029242s ago: executing program 1: recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xf000000, &(0x7f00000000c0)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90224fc60", 0x14}], 0x1, 0x0, 0x0, 0x10}, 0x0) (fail_nth: 5) 6.847970629s ago: executing program 2: unshare(0x20800) shutdown(0xffffffffffffffff, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x1c, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x24}}, 0x0) 1.719398276s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0xffff, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="e51a56e6e938de76b14fa8ba2b9b6f5686f74a84a7d40756641b3d86e0942ba90ab227e27ab4cf57e55500df753f9d7e112d30adc08ddded881a8fea73a428af751d00026c2dd93828a8ee29b5157a6163254f440af066b702c192000b", 0x5d}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180)={r5}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6, 0x0, 0xfffffffe}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) r10 = socket$unix(0x1, 0x2, 0x0) sendmmsg(r10, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r9, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) readv(r8, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) openat$cgroup_int(r7, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x6000, &(0x7f00000003c0)={&(0x7f0000000400)={0x38, 0xa, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}]}, 0x38}}, 0x0) 1.522441909s ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r1, 0x31f}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000300000000000004000000080002000500000006000b00"], 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008085}, 0x4c080) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) accept4(r5, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="699e261c097dc3", 0x7}], 0x1, 0x0, 0xe0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c, 0x80000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) 1.462821265s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000600)={r0, 0x0, 0xf, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[]}, 0x78) r2 = socket$kcm(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) close(0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) readv(r4, &(0x7f0000000640)=[{&(0x7f0000000500)=""/147, 0x93}], 0x1) r6 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000780)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={r8, 0x10, &(0x7f00000007c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0002000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c2594012124fc60", 0x14}, {&(0x7f0000000280)="e26248d463acb929ae30f80ccd24d1fd1a0342bb06b720c55fdba499f12b688a204be525e9e0015c27d7b21be71f92cdaaaef525f735ddd4a50250bf746efd14d5b1bef33271f2ab3816fbd97122f626f8c4aa376401c6795b8598a74159e45dbdb81bf889690e673827e5f10f53f46a83bb4bd89f57644acc5b7b3324a4330e0b36cbba6a3204d46b645ec05010f2f8815edefb", 0x94}, {&(0x7f0000000340)="72fda63cc15939d149810e481468f080493cce552d6a973b017b9433eb28da7dc1a325bc70f20fc516bc79f21e2a8030b514cb9b7396beac0f16233c9ecea697cc1e6f438056b5bfb0a40dfa9a7445dd8b360caf03b144104f4c6e08664d6935dc35935cf9ed6c05d1acf186d0f52efed3f8bfe9ac21c383fde96fa8821a13d55732f4386a490156465b72a9325fc8e6159a5e9c0fb0bbbb03d48be20a88510ff7ced12698ff394ac3b3ad58307913f5a02be055f3596b3a", 0xb8}], 0x3}, 0x40050) 1.309338306s ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x1, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$rds(0x15, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x5, 0x100004, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_DELETE_BATCH(0x1a, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280), 0x0, 0x80000000, r2}, 0x38) sendmsg$inet(r0, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b5", 0xb}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r1, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000100) recvmsg$unix(r1, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x1f, 0x2}, 0x6) write$bt_hci(r3, &(0x7f0000000040)={0x1, @read_tx_power={{0xc2d, 0x3}}}, 0x7) 1.282571497s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket(0x1d, 0x2, 0x6) poll(&(0x7f0000000780)=[{r0}, {r1}], 0x2, 0x1) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet6_sctp(0xa, 0xb94edc3226de85d1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={0x0, 0xfffffffd}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r3, 0x84, 0x17, &(0x7f0000000080)={r4, 0x6, 0x93, "68b10cb18807917264e474ae6f9a3a4550acd90ee66d833a562c9c81dcdd8d1bf6b2a6cdf507958aa02b023358c0fd924b363af68f41b027d611827ce63a6326c9e4bbd443ec6ebc15152bc854ce8af8e58249fbbde0300ab383487c8a7a622d1766ebddfc5023d0a10255d1996c38849618c95221ec2401803f45754992cb8fcaab994523360355d459eded5995a854ecd737"}, 0x9b) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000005100)=@bridge_dellink={0x34, 0x13, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r6}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8, 0x1}]}}]}]}, 0x34}}, 0x0) 1.112484198s ago: executing program 4: r0 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x3c}, 0x3c}}, 0x0) (fail_nth: 3) 1.026300713s ago: executing program 4: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) socket$xdp(0x2c, 0x3, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc", 0x24}], 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000000c0)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb440009000e000a000d000000ba8000001201", 0x2e}], 0x1}, 0x0) 618.293414ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b0000000180100002075400000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) unshare(0x400) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r2, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000ac0)={0x18, 0x3, &(0x7f0000000740)=@framed, &(0x7f00000007c0)='syzkaller\x00'}, 0x90) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000140)={r4, r3}, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080)={r4, r1}, 0xc) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@remote, @dev, @val={@val, {0x8906}}, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2}}}}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, 0x0, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x10}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r7, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)={0x50, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}]}, @ETHTOOL_A_FEATURES_WANTED={0x24, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x20, 0x3, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, 'blake2s-128\x00'}]}]}]}]}, 0x50}}, 0x0) connect$inet(r5, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf00) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r11 = accept4$phonet_pipe(r10, &(0x7f0000000540), &(0x7f0000000580)=0x10, 0x0) getsockopt$PNPIPE_IFINDEX(r11, 0x113, 0x2, &(0x7f00000005c0), &(0x7f0000000600)=0x4) write(r10, &(0x7f0000003ac0)='j', 0x1) splice(r10, &(0x7f0000000040), r9, 0x0, 0x800000000ff, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r0, 0x0, 0x0, 0x0, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) readv(r9, &(0x7f0000000080)=[{&(0x7f0000000280)=""/251, 0xfb}, {&(0x7f0000000000)=""/60, 0x3c}, {&(0x7f0000000380)=""/194, 0xc2}, {&(0x7f0000000480)=""/185, 0xb9}], 0x4) 571.068626ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, 0x0, 0x0) 494.473653ms ago: executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socket$packet(0x11, 0x0, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000009940)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000d40)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x20}}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, r1, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x80000000}}}]}, 0x64}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) socket$inet(0x10, 0x3, 0x0) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_XFRM_IF_ID={0x8, 0x2, 0x2}]}}}, @IFLA_IFNAME={0x14, 0x3, 'xfrm0\x00'}]}, 0x50}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3d, &(0x7f0000000200)={0x0, 0xfffffffffffffdcd}, 0x1, 0x0, 0x0, 0x20004014}, 0x20bea14a1bd9b76) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0x1c0, 0x111, 0x4b4, 0x10, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0xf0, 0x158, 0x0, {}, [@common=@unspec=@nfacct={{0x48}, {'syz1\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) 420.73487ms ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800"/15, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7040000000000008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000095980000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f0ffffffb702000005000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='rss_stat\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) write$cgroup_int(r4, &(0x7f00000001c0), 0xfffffdef) write$cgroup_devices(r4, &(0x7f0000000180)={'b', ' *:* ', 'w\x00'}, 0x20000188) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x67e0ecd58c8e9fb1}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r5, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(r5, &(0x7f0000000540)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x60, 0x3, 0x8, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@CTA_TIMEOUT_DATA={0x4c, 0x4, 0x0, 0x1, @gre=[@CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xae}, @CTA_TIMEOUT_GRE_REPLIED={0x8, 0x2, 0x1, 0x0, 0xfffffffa}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x101}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0xfffff97e}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_GRE_UNREPLIED={0x8, 0x1, 0x1, 0x0, 0x80000001}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000}, 0x40080c4) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) 399.914378ms ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0xffff, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="e51a56e6e938de76b14fa8ba2b9b6f5686f74a84a7d40756641b3d86e0942ba90ab227e27ab4cf57e55500df753f9d7e112d30adc08ddded881a8fea73a428af751d00026c2dd93828a8ee29b5157a6163254f440af066b702c192000b", 0x5d}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180)={r5}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6, 0x0, 0xfffffffe}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) r8 = socket$unix(0x1, 0x2, 0x0) bind$unix(r8, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r9 = socket$unix(0x1, 0x2, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg(r9, &(0x7f0000002dc0), 0x307017fdb7a66cb, 0x3ec0) readv(r8, &(0x7f0000000000)=[{&(0x7f0000000200)=""/150, 0x96}], 0x1) openat$cgroup_int(r7, &(0x7f0000000080)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x6000, &(0x7f00000003c0)={&(0x7f0000000400)={0x38, 0xa, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}]}, 0x38}}, 0x0) 338.558295ms ago: executing program 0: r0 = socket$igmp(0x2, 0x3, 0x2) socket$alg(0x26, 0x5, 0x0) setsockopt$MRT_FLUSH(r0, 0x0, 0xd1, &(0x7f00000001c0)=0xc, 0x4) setsockopt$MRT_ADD_VIF(r0, 0x2f, 0xca, &(0x7f0000000040)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 312.181919ms ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r0, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x10) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r1, 0x31f}, 0x14}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000540), r0) sendmsg$NL802154_CMD_GET_SEC_KEY(r0, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x20, r2, 0x2, 0x70bd2d, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000300000000000004000000080002000500000006000b00"], 0x24}}, 0x0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000340)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r4, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008085}, 0x4c080) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r5, 0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f0000000280), &(0x7f00000002c0)=0x8) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000001c0)="699e261c097dc3", 0x7}], 0x1, 0x0, 0xe0}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @local}, &(0x7f0000000100)=0x1c, 0x80000) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) 135.69788ms ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000600)={r0, 0x0, 0xf, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[]}, 0x78) r2 = socket$kcm(0x10, 0x3, 0x10) socket$isdn_base(0x22, 0x3, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) close(0xffffffffffffffff) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r5, 0x0) readv(r4, &(0x7f0000000640)=[{&(0x7f0000000500)=""/147, 0x93}], 0x1) r6 = socket(0x2, 0x80805, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000fc0)=""/99, &(0x7f0000000000)=0x63) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000006c0)={0x0, @in={{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}}}, &(0x7f0000000780)=0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={r8, 0x10, &(0x7f00000007c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0xfd, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0002000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r11, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x44}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)="1400000016000b63d25a80648c2594012124fc60", 0x14}, {&(0x7f0000000280)="e26248d463acb929ae30f80ccd24d1fd1a0342bb06b720c55fdba499f12b688a204be525e9e0015c27d7b21be71f92cdaaaef525f735ddd4a50250bf746efd14d5b1bef33271f2ab3816fbd97122f626f8c4aa376401c6795b8598a74159e45dbdb81bf889690e673827e5f10f53f46a83bb4bd89f57644acc5b7b3324a4330e0b36cbba6a3204d46b645ec05010f2f8815edefb", 0x94}, {&(0x7f0000000340)="72fda63cc15939d149810e481468f080493cce552d6a973b017b9433eb28da7dc1a325bc70f20fc516bc79f21e2a8030b514cb9b7396beac0f16233c9ecea697cc1e6f438056b5bfb0a40dfa9a7445dd8b360caf03b144104f4c6e08664d6935dc35935cf9ed6c05d1acf186d0f52efed3f8bfe9ac21c383fde96fa8821a13d55732f4386a490156465b72a9325fc8e6159a5e9c0fb0bbbb03d48be20a88510ff7ced12698ff394ac3b3ad58307913f5a02be055f3596b3a", 0xb8}], 0x3}, 0x40050) 110.223712ms ago: executing program 3: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x4c, 0x18, {0x0, @media='udp\x00'}}}}, 0x68}}, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000080)=0xffff, 0x4) socket$inet_icmp_raw(0x2, 0x3, 0x1) writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="e51a56e6e938de76b14fa8ba2b9b6f5686f74a84a7d40756641b3d86e0942ba90ab227e27ab4cf57e55500df753f9d7e112d30adc08ddded881a8fea73a428af751d00026c2dd93828a8ee29b5157a6163254f440af066b702c192000b", 0x5d}], 0x1) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000140)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f00000001c0)=0x10) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r4, 0x84, 0x71, &(0x7f0000000180)={r5}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000000)={r6, 0x0, 0xfffffffe}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000100)='blkio.throttle.io_service_bytes\x00', 0x0, 0x0) socket$unix(0x1, 0x2, 0x0) socket$unix(0x1, 0x2, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) connect$unix(r9, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendfile(0xffffffffffffffff, r8, 0x0, 0x100000001) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x6000, &(0x7f00000003c0)={&(0x7f0000000400)={0x38, 0xa, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8}}]}]}, 0x38}}, 0x0) 11.752619ms ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x50, 0x1, 0x1, 0x401, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @private}}}}, @CTA_TUPLE_PROTO={0x4, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)) socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r1, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$tipc(0xffffffffffffffff, &(0x7f00000052c0)=@id, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f00000000000000f000f195"], &(0x7f0000000100)='GPL\x00'}, 0x78) bpf$BPF_PROG_TEST_RUN(0xf, &(0x7f0000000300)={r2, 0x300, 0x0, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000409000000000004ac92acf061db16f5479d4e7524f7519b000000009100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x1e}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x90) setsockopt$MRT6_ASSERT(0xffffffffffffffff, 0x29, 0xcf, &(0x7f00000001c0), 0x4) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e370c0c18800dac0f000300", 0x33fe0}], 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0x7, 0x0, 0x0) sendto$l2tp6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000300)="b2", 0x1, 0x8005, 0x0, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x23, &(0x7f0000000180)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, &(0x7f0000000200)=""/113, 0x71, 0x0, 0x0}, &(0x7f0000000280)=0x40) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000380)={'macsec0\x00'}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1802000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000030000b7020000000000008500000086001d009500000000000000"], &(0x7f0000000680)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x401}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x0) 0s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) unshare(0x22020400) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000140)) ioctl$EXT4_IOC_MIGRATE(r3, 0x6612) bind$can_raw(r2, &(0x7f0000000040), 0x10) setsockopt$CAN_RAW_FILTER(r2, 0x65, 0x1, 0x0, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000d00)=ANY=[@ANYBLOB="c8000000", @ANYRES16=r5, @ANYBLOB="010000000000000000000600000008000300", @ANYRES32=r6, @ANYBLOB="08000500060000000c00178004000400040001002c0017800400050004000100040006000400060004000100060002"], 0xc8}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) (rerun: 32) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)=ANY=[@ANYBLOB='t\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010024bd7000fbdbdf2520fffffa08000300", @ANYRES32, @ANYBLOB="0c000600010000000100000044002d8005000400000000000500010081000000080002"], 0x74}}, 0x0) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) (async, rerun: 64) socket$nl_xfrm(0x10, 0x3, 0x6) (async, rerun: 32) syz_emit_ethernet(0x2a, &(0x7f0000000480)={@local, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2b, 0x0, @rand_addr=0x64010102, @dev}, @echo}}}}, 0x0) (rerun: 32) kernel console output (not intermixed with test programs): ast mode [ 193.263304][ T9719] A link change request failed with some changes committed already. Interface 50ªX¹¦D may have been left with an inconsistent configuration, please check. [ 193.308173][ T9598] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.355175][ T8314] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.362317][ T8314] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.372410][ T9721] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.376980][ T8314] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.388896][ T8314] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.517127][ T9728] IPVS: Error connecting to the multicast addr [ 193.528745][ T9728] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 193.670735][ T9735] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 193.757697][ T9598] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 193.805212][ T9742] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 193.832133][ T9742] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.859776][ T9742] bond0: (slave team0): Enslaving as an active interface with an up link [ 193.869039][ T5133] Bluetooth: hci7: command tx timeout [ 193.884503][ T9744] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 193.894969][ T9744] bond0: (slave team0): Releasing backup interface [ 193.970258][ T9749] FAULT_INJECTION: forcing a failure. [ 193.970258][ T9749] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 194.015798][ T9598] veth0_vlan: entered promiscuous mode [ 194.027059][ T9749] CPU: 1 PID: 9749 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 194.037509][ T9749] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 194.041404][ T9598] veth1_vlan: entered promiscuous mode [ 194.047556][ T9749] Call Trace: [ 194.047598][ T9749] [ 194.047607][ T9749] dump_stack_lvl+0x241/0x360 [ 194.047636][ T9749] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.069161][ T9749] ? __pfx__printk+0x10/0x10 [ 194.073778][ T9749] ? snprintf+0xda/0x120 [ 194.078052][ T9749] should_fail_ex+0x3b0/0x4e0 [ 194.082755][ T9749] _copy_to_user+0x2f/0xb0 [ 194.087200][ T9749] simple_read_from_buffer+0xca/0x150 [ 194.092602][ T9749] proc_fail_nth_read+0x1e9/0x250 [ 194.097655][ T9749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.103221][ T9749] ? rw_verify_area+0x514/0x6b0 [ 194.108086][ T9749] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 194.113649][ T9749] vfs_read+0x204/0xbd0 [ 194.117821][ T9749] ? __pfx_lock_release+0x10/0x10 [ 194.122856][ T9749] ? __pfx_vfs_read+0x10/0x10 [ 194.127529][ T9749] ? __fget_files+0x29/0x470 [ 194.132121][ T9749] ? __fget_files+0x3f6/0x470 [ 194.136991][ T9749] ksys_read+0x1a0/0x2c0 [ 194.141245][ T9749] ? __pfx_ksys_read+0x10/0x10 [ 194.146003][ T9749] ? do_syscall_64+0x100/0x230 [ 194.150763][ T9749] ? do_syscall_64+0xb6/0x230 [ 194.155438][ T9749] do_syscall_64+0xf3/0x230 [ 194.159937][ T9749] ? clear_bhb_loop+0x35/0x90 [ 194.164615][ T9749] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 194.170505][ T9749] RIP: 0033:0x7f6081e7bc0c [ 194.174913][ T9749] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 59 81 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 af 81 02 00 48 [ 194.194513][ T9749] RSP: 002b:00007f6082bd00c0 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 194.202923][ T9749] RAX: ffffffffffffffda RBX: 00007f6081fb4050 RCX: 00007f6081e7bc0c [ 194.210883][ T9749] RDX: 000000000000000f RSI: 00007f6082bd0130 RDI: 0000000000000005 [ 194.218842][ T9749] RBP: 00007f6082bd0120 R08: 0000000000000000 R09: 0000000000000000 [ 194.226803][ T9749] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 194.234764][ T9749] R13: 000000000000006e R14: 00007f6081fb4050 R15: 00007fffb8d27128 [ 194.242745][ T9749] [ 194.269123][ T5133] Bluetooth: hci8: command tx timeout [ 194.364826][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.415930][ T9598] veth0_macvtap: entered promiscuous mode [ 194.451740][ T9598] veth1_macvtap: entered promiscuous mode [ 194.477239][ T9765] IPVS: Error connecting to the multicast addr [ 194.513709][ T1239] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.526024][ T9765] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 194.584140][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.602755][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.637735][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.667946][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.702318][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.723160][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.743107][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.790106][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.825440][ T9598] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 194.865442][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.900982][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.936802][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 194.962840][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.986285][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.015869][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.036405][ T9598] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.059177][ T9598] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.096369][ T9598] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.129260][ T9777] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.145087][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 195.237570][ T9598] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.272844][ T9598] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.282125][ T9598] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.312849][ T9598] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.362996][ T9789] macvlan2: entered allmulticast mode [ 195.486307][ T9798] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 195.615382][ T2471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.648643][ T2471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.716103][ T2471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.727318][ T2471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.752885][ T9808] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 195.753860][ T9804] IPVS: stopping master sync thread 9808 ... [ 195.827092][ T9804] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 196.243577][ T9822] netlink: 'syz-executor.0': attribute type 68 has an invalid length. [ 196.479725][ T9829] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.749897][ T9834] macvlan2: entered allmulticast mode [ 196.803883][ T9836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.994252][ T9838] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 197.039343][ T9840] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 197.306296][ T9851] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 197.340329][ T29] audit: type=1800 audit(1717931603.143:9): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 197.386198][ T29] audit: type=1804 audit(1717931603.193:10): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir760104667/syzkaller.y0DFfn/100/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 197.412863][ T29] audit: type=1804 audit(1717931603.193:11): pid=9853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir760104667/syzkaller.y0DFfn/100/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 197.677518][ T9866] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 197.826428][ T9872] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (281374) [ 197.980791][ T9874] macvlan3: entered allmulticast mode [ 198.030574][ T9878] ieee802154 phy0 wpan0: encryption failed: -22 [ 198.322998][ T29] audit: type=1800 audit(1717931604.123:12): pid=9892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 198.369138][ T29] audit: type=1804 audit(1717931604.123:13): pid=9892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir911653783/syzkaller.WjgPAv/20/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 198.453063][ T29] audit: type=1804 audit(1717931604.133:14): pid=9892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir911653783/syzkaller.WjgPAv/20/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 198.589852][ T3280] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.835022][ T9909] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.850730][ T9909] tipc: Enabling of bearer rejected, failed to enable media [ 198.880834][ T9911] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 199.006069][ T9916] macvlan3: entered allmulticast mode [ 199.100357][ T3280] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.163356][ T9922] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.188749][ T9922] vlan2: entered promiscuous mode [ 199.194837][ T9922] bond0: entered promiscuous mode [ 199.200464][ T9922] bond_slave_0: entered promiscuous mode [ 199.206755][ T9922] bond_slave_1: entered promiscuous mode [ 199.212926][ T9922] macvlan2: entered promiscuous mode [ 199.218519][ T9922] vlan1: entered promiscuous mode [ 199.240919][ T9922] bond0: left promiscuous mode [ 199.257313][ T9922] bond_slave_0: left promiscuous mode [ 199.270104][ T9922] bond_slave_1: left promiscuous mode [ 199.287137][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 199.297983][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 199.313093][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 199.321494][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 199.329715][ T52] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 199.337292][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 199.344772][ T9922] macvlan2: left promiscuous mode [ 199.353117][ T9922] vlan1: left promiscuous mode [ 199.392741][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 199.511882][ T3280] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.637703][ T9935] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 199.667046][ T9935] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.712370][ T3280] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.872120][ T9940] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 199.893680][ T9940] bridge0: port 3(team0) entered blocking state [ 199.906658][ T9940] bridge0: port 3(team0) entered disabled state [ 199.936409][ T9940] team0: entered allmulticast mode [ 199.947117][ T9940] team_slave_0: entered allmulticast mode [ 199.959996][ T9940] team_slave_1: entered allmulticast mode [ 199.970957][ T9940] team0: entered promiscuous mode [ 199.980560][ T9940] team_slave_0: entered promiscuous mode [ 199.986873][ T9940] team_slave_1: entered promiscuous mode [ 199.995358][ T9940] bridge0: port 3(team0) entered blocking state [ 200.001681][ T9940] bridge0: port 3(team0) entered forwarding state [ 200.013353][ T9946] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 200.021541][ T9946] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 200.044337][ T9946] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 200.052506][ T9946] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 200.060895][ T9946] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 200.381670][ T9923] chnl_net:caif_netlink_parms(): no params data found [ 200.415304][ T3280] bridge_slave_1: left allmulticast mode [ 200.421214][ T3280] bridge_slave_1: left promiscuous mode [ 200.427622][ T3280] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.447450][ T3280] bridge_slave_0: left allmulticast mode [ 200.462719][ T3280] bridge_slave_0: left promiscuous mode [ 200.465546][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 200.468457][ T3280] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.890154][ T3280] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.910508][ T3280] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.926570][ T3280] bond0 (unregistering): Released all slaves [ 200.943965][ T9965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 200.968508][ T9966] tipc: Enabling of bearer rejected, failed to enable media [ 200.983876][ T9968] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 201.305414][ T9923] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.332476][ T9923] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.352553][ T9923] bridge_slave_0: entered allmulticast mode [ 201.381549][ T9923] bridge_slave_0: entered promiscuous mode [ 201.393302][ T5133] Bluetooth: hci8: command tx timeout [ 201.413690][ T9923] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.420773][ T9923] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.429901][ T9923] bridge_slave_1: entered allmulticast mode [ 201.437572][ T9923] bridge_slave_1: entered promiscuous mode [ 201.469516][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 201.520314][ T3280] hsr_slave_0: left promiscuous mode [ 201.532393][ T3280] hsr_slave_1: left promiscuous mode [ 201.550542][ T3280] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.579918][ T3280] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.604943][ T3280] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.622514][ T3280] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 201.681951][ T3280] veth1_macvtap: left promiscuous mode [ 201.699282][ T3280] veth0_macvtap: left promiscuous mode [ 201.707707][ T3280] veth1_vlan: left promiscuous mode [ 201.722914][ T3280] veth0_vlan: left promiscuous mode [ 202.258279][ T3280] team0 (unregistering): Port device team_slave_1 removed [ 202.296929][ T3280] team0 (unregistering): Port device team_slave_0 removed [ 202.742146][ T9923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.775811][ T9923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 202.903684][ T9923] team0: Port device team_slave_0 added [ 202.910131][T10000] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 202.916635][T10001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.932424][ T9923] team0: Port device team_slave_1 added [ 202.940094][T10000] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.968678][T10000] tipc: Started in network mode [ 203.001352][T10000] tipc: Node identity 6, cluster identity 4711 [ 203.029462][T10000] tipc: Node number set to 6 [ 203.158309][ T9923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.175677][ T9923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.223355][ T9923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.237526][T10014] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 203.244346][ T9923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.253734][ T9923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.285445][T10014] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.297414][T10014] FAULT_INJECTION: forcing a failure. [ 203.297414][T10014] name failslab, interval 1, probability 0, space 0, times 0 [ 203.311788][ T9923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.322576][T10014] CPU: 1 PID: 10014 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 203.333099][T10014] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 203.343170][T10014] Call Trace: [ 203.346463][T10014] [ 203.349411][T10014] dump_stack_lvl+0x241/0x360 [ 203.354121][T10014] ? __pfx_dump_stack_lvl+0x10/0x10 [ 203.359336][T10014] ? __pfx__printk+0x10/0x10 [ 203.363955][T10014] ? __pfx___might_resched+0x10/0x10 [ 203.369254][T10014] ? _printk+0xd5/0x120 [ 203.373435][T10014] should_fail_ex+0x3b0/0x4e0 [ 203.378139][T10014] should_failslab+0x9/0x20 [ 203.382660][T10014] kmalloc_node_track_caller_noprof+0xda/0x440 [ 203.388818][T10014] ? hwsim_new_radio_nl+0xc9f/0x21d0 [ 203.394095][T10014] kstrndup+0x41/0xb0 [ 203.398070][T10014] hwsim_new_radio_nl+0xc9f/0x21d0 [ 203.403176][T10014] ? __pfx___nla_validate_parse+0x10/0x10 [ 203.408885][T10014] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 203.414433][T10014] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 203.420754][T10014] genl_rcv_msg+0xb14/0xec0 [ 203.425262][T10014] ? mark_lock+0x9a/0x350 [ 203.429595][T10014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 203.434635][T10014] ? __pfx_lock_acquire+0x10/0x10 [ 203.439648][T10014] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 203.445276][T10014] ? __pfx___might_resched+0x10/0x10 [ 203.450561][T10014] netlink_rcv_skb+0x1e3/0x430 [ 203.455317][T10014] ? __pfx_genl_rcv_msg+0x10/0x10 [ 203.460337][T10014] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 203.465639][T10014] genl_rcv+0x28/0x40 [ 203.469615][T10014] netlink_unicast+0x7ea/0x980 [ 203.474384][T10014] ? __pfx_netlink_unicast+0x10/0x10 [ 203.479672][T10014] ? security_netlink_send+0x64/0xa0 [ 203.484972][T10014] ? bpf_lsm_netlink_send+0x9/0x10 [ 203.490107][T10014] netlink_sendmsg+0x8db/0xcb0 [ 203.494889][T10014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.500193][T10014] ? __import_iovec+0x536/0x820 [ 203.505044][T10014] ? aa_sock_msg_perm+0x91/0x160 [ 203.509980][T10014] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 203.515259][T10014] ? security_socket_sendmsg+0x87/0xb0 [ 203.520768][T10014] ? __pfx_netlink_sendmsg+0x10/0x10 [ 203.526063][T10014] __sock_sendmsg+0x221/0x270 [ 203.530751][T10014] ____sys_sendmsg+0x525/0x7d0 [ 203.535523][T10014] ? __pfx_____sys_sendmsg+0x10/0x10 [ 203.540817][T10014] __sys_sendmsg+0x2b0/0x3a0 [ 203.545404][T10014] ? __pfx___sys_sendmsg+0x10/0x10 [ 203.550511][T10014] ? vfs_write+0x7c4/0xc90 [ 203.554958][T10014] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 203.561284][T10014] ? do_syscall_64+0x100/0x230 [ 203.566045][T10014] ? do_syscall_64+0xb6/0x230 [ 203.570719][T10014] do_syscall_64+0xf3/0x230 [ 203.575221][T10014] ? clear_bhb_loop+0x35/0x90 [ 203.579900][T10014] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 203.585795][T10014] RIP: 0033:0x7f598ea7cf69 [ 203.590204][T10014] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 203.609800][T10014] RSP: 002b:00007f598f76a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 203.618208][T10014] RAX: ffffffffffffffda RBX: 00007f598ebb3f80 RCX: 00007f598ea7cf69 [ 203.626171][T10014] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 203.634130][T10014] RBP: 00007f598f76a120 R08: 0000000000000000 R09: 0000000000000000 [ 203.642088][T10014] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 203.650054][T10014] R13: 000000000000000b R14: 00007f598ebb3f80 R15: 00007ffd5fbfc4d8 [ 203.658031][T10014] [ 203.665347][ T5133] Bluetooth: hci8: command tx timeout [ 203.671819][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 203.734006][ T8296] IPVS: starting estimator thread 0... [ 203.763475][ T9923] hsr_slave_0: entered promiscuous mode [ 203.793791][ T9923] hsr_slave_1: entered promiscuous mode [ 203.813137][ T9923] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.821915][ T9923] Cannot create hsr debugfs directory [ 203.833117][T10023] IPVS: using max 21 ests per chain, 50400 per kthread [ 203.922250][T10033] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.064985][T10035] bridge0: port 3(team0) entered disabled state [ 204.071537][T10035] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.079127][T10035] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.143841][T10041] netem: incorrect ge model size [ 204.149162][T10041] netem: change failed [ 204.492890][T10052] veth6: entered allmulticast mode [ 204.835131][ T9923] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 204.896078][ T9923] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 204.917843][ T2471] team0: left allmulticast mode [ 204.932122][ T2471] team_slave_0: left allmulticast mode [ 204.940535][ T2471] team_slave_1: left allmulticast mode [ 204.953784][ T5133] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 204.956223][ T2471] team0: left promiscuous mode [ 204.963317][ T5133] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 204.972039][ T2471] team_slave_0: left promiscuous mode [ 204.974068][ T5133] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 204.981949][ T2471] team_slave_1: left promiscuous mode [ 204.994192][ T5133] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 205.002515][ T5133] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 205.007228][ T2471] bridge0: port 3(team0) entered disabled state [ 205.018623][ T5133] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 205.070216][ T2471] bridge_slave_1: left allmulticast mode [ 205.086347][ T2471] bridge_slave_1: left promiscuous mode [ 205.092108][ T2471] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.093149][T10062] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.110742][ T2471] bridge_slave_0: left allmulticast mode [ 205.129883][ T2471] bridge_slave_0: left promiscuous mode [ 205.138316][ T2471] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.370087][ T2471] bridge0 (unregistering): left promiscuous mode [ 205.423242][ T2471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 205.434675][ T2471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 205.445844][ T2471] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 205.456268][ T2471] bond0 (unregistering): Released all slaves [ 205.472580][ T2471] bond1 (unregistering): Released all slaves [ 205.488692][ T9923] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 205.507111][ T9923] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 205.554327][T10065] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.703942][ T52] Bluetooth: hci8: command tx timeout [ 205.709501][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 205.836320][T10077] x_tables: duplicate underflow at hook 3 [ 205.874404][ T9923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 205.974709][ T2471] hsr_slave_0: left promiscuous mode [ 205.985006][ T2471] hsr_slave_1: left promiscuous mode [ 205.996376][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 206.452289][ T2471] team0 (unregistering): Port device team_slave_1 removed [ 206.493314][ T2471] team0 (unregistering): Port device team_slave_0 removed [ 206.880500][ T9923] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.900352][T10082] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 206.920781][T10082] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.931276][T10082] bond0: (slave team0): Enslaving as an active interface with an up link [ 206.940087][T10083] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 206.952626][T10083] bond0: (slave team0): Releasing backup interface [ 206.991634][ T8296] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.998852][ T8296] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.047970][ T8296] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.055199][ T8296] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.066289][ T5133] Bluetooth: hci5: command tx timeout [ 207.091091][T10059] chnl_net:caif_netlink_parms(): no params data found [ 207.141371][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.331530][ T9923] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.464415][T10104] sctp: [Deprecated]: syz-executor.3 (pid 10104) Use of struct sctp_assoc_value in delayed_ack socket option. [ 207.464415][T10104] Use struct sctp_sack_info instead [ 207.503336][T10059] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.511672][T10059] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.533070][T10059] bridge_slave_0: entered allmulticast mode [ 207.551033][T10059] bridge_slave_0: entered promiscuous mode [ 207.580506][T10059] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.597030][T10059] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.605961][T10059] bridge_slave_1: entered allmulticast mode [ 207.613714][T10059] bridge_slave_1: entered promiscuous mode [ 207.691782][T10059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 207.735216][T10059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 207.783457][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 207.789581][ T52] Bluetooth: hci8: command tx timeout [ 207.847165][T10123] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 207.859076][T10123] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.880483][T10123] bond0: (slave team0): Enslaving as an active interface with an up link [ 207.899849][T10059] team0: Port device team_slave_0 added [ 207.909427][T10123] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 207.919057][T10123] bond0: (slave team0): Releasing backup interface [ 207.937074][T10059] team0: Port device team_slave_1 added [ 207.979304][ T9923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.039376][T10059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.049828][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.077950][T10059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.097249][T10059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.104960][T10059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.131802][T10059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.239834][T10059] hsr_slave_0: entered promiscuous mode [ 208.248680][T10059] hsr_slave_1: entered promiscuous mode [ 208.255188][T10059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.263512][T10059] Cannot create hsr debugfs directory [ 208.309892][ T9923] veth0_vlan: entered promiscuous mode [ 208.323040][ T9923] veth1_vlan: entered promiscuous mode [ 208.344855][T10137] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.363266][T10137] vlan1: entered promiscuous mode [ 208.482916][ T9923] veth0_macvtap: entered promiscuous mode [ 208.538916][ T9923] veth1_macvtap: entered promiscuous mode [ 208.608962][ T9923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.631079][ T9923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.641131][ T9923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.651787][ T9923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.662598][ T9923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.673263][ T9923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.683685][ T9923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.701429][ T9923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.712639][ T9923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.746134][ T9923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.757414][ T9923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.783118][ T9923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.793987][ T9923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.802431][T10148] tipc: Failed to remove unknown binding: 66,1,1/6:4065197266/4065197268 [ 208.804508][ T9923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.823455][ T9923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.833490][ T9923] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.846597][ T9923] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.858722][ T9923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.870662][ T9923] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.883781][ T9923] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.898293][ T9923] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.913799][ T9923] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.952097][T10148] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.959833][T10148] bond0: entered promiscuous mode [ 208.971331][T10148] bond_slave_0: entered promiscuous mode [ 208.977792][T10148] bond_slave_1: entered promiscuous mode [ 208.991509][T10148] macvlan2: entered promiscuous mode [ 208.996904][T10148] vlan1: entered promiscuous mode [ 209.010513][T10148] bond0: entered allmulticast mode [ 209.015838][T10148] bond_slave_0: entered allmulticast mode [ 209.021577][T10148] bond_slave_1: entered allmulticast mode [ 209.032771][T10148] macvlan2: entered allmulticast mode [ 209.038230][T10148] vlan1: entered allmulticast mode [ 209.043880][T10148] veth0_vlan: entered allmulticast mode [ 209.050723][T10148] team0: Port device bond0 added [ 209.071358][T10147] tipc: Failed to remove unknown binding: 66,1,1/6:4065197266/4065197268 [ 209.080736][T10147] tipc: Failed to remove unknown binding: 66,1,1/6:4065197266/4065197268 [ 209.143162][ T52] Bluetooth: hci5: command tx timeout [ 209.155644][T10151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.258955][T10153] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 209.296969][T10153] team0: left allmulticast mode [ 209.301865][T10153] team_slave_0: left allmulticast mode [ 209.308111][T10153] team_slave_1: left allmulticast mode [ 209.315116][T10153] bond0: left allmulticast mode [ 209.319992][T10153] bond_slave_0: left allmulticast mode [ 209.325622][T10153] bond_slave_1: left allmulticast mode [ 209.331100][T10153] macvlan2: left allmulticast mode [ 209.336400][T10153] vlan1: left allmulticast mode [ 209.341269][T10153] veth0_vlan: left allmulticast mode [ 209.347230][T10153] team0: left promiscuous mode [ 209.352008][T10153] team_slave_0: left promiscuous mode [ 209.358255][T10153] team_slave_1: left promiscuous mode [ 209.364024][T10153] bond0: left promiscuous mode [ 209.368822][T10153] bond_slave_0: left promiscuous mode [ 209.374660][T10153] bond_slave_1: left promiscuous mode [ 209.380141][T10153] macvlan2: left promiscuous mode [ 209.385409][T10153] vlan1: left promiscuous mode [ 209.390892][T10153] bridge0: port 3(team0) entered disabled state [ 209.400817][T10153] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.419478][ T2471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.427509][ T2471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.431369][T10154] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 209.448537][T10154] bridge0: port 3(team0) entered blocking state [ 209.455050][T10154] bridge0: port 3(team0) entered disabled state [ 209.461532][T10154] team0: entered allmulticast mode [ 209.477222][T10154] team_slave_0: entered allmulticast mode [ 209.493490][T10154] team_slave_1: entered allmulticast mode [ 209.501704][T10154] bond0: entered allmulticast mode [ 209.512890][T10154] bond_slave_0: entered allmulticast mode [ 209.523814][T10154] bond_slave_1: entered allmulticast mode [ 209.529565][T10154] macvlan2: entered allmulticast mode [ 209.536240][T10154] vlan1: entered allmulticast mode [ 209.541372][T10154] veth0_vlan: entered allmulticast mode [ 209.548787][T10154] team0: entered promiscuous mode [ 209.555240][T10154] team_slave_0: entered promiscuous mode [ 209.561014][T10154] team_slave_1: entered promiscuous mode [ 209.567131][T10154] bond0: entered promiscuous mode [ 209.572168][T10154] bond_slave_0: entered promiscuous mode [ 209.580116][T10154] bond_slave_1: entered promiscuous mode [ 209.586047][T10154] macvlan2: entered promiscuous mode [ 209.591338][T10154] vlan1: entered promiscuous mode [ 209.681999][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.702053][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.865600][T10059] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 209.866998][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 209.891168][T10059] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 209.907622][T10059] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 209.959419][T10059] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 210.145574][T10059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.174119][T10059] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.210026][ T8311] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.217249][ T8311] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.255795][ T8311] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.262980][ T8311] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.309358][T10059] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.511494][T10059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.600391][T10059] veth0_vlan: entered promiscuous mode [ 210.626345][T10059] veth1_vlan: entered promiscuous mode [ 210.663632][T10191] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 210.676338][T10191] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.685966][T10191] bond0: (slave team0): Enslaving as an active interface with an up link [ 210.702353][T10191] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 210.712399][T10191] bond0: (slave team0): Releasing backup interface [ 210.744282][T10059] veth0_macvtap: entered promiscuous mode [ 210.770454][T10059] veth1_macvtap: entered promiscuous mode [ 210.817397][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.839288][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.854663][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.865358][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.875382][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.885969][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.895913][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.906480][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.916606][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.927151][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.939166][T10059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.973926][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.999381][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.009870][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.020877][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.031045][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.045159][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.068593][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.086747][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.105127][T10059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 211.136191][T10059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 211.185906][T10059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 211.223333][ T52] Bluetooth: hci5: command tx timeout [ 211.300361][ T61] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.371268][T10059] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.387428][T10059] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.422904][T10059] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.438849][T10059] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.712628][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.746058][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.836408][ T2471] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.853744][ T2471] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.861963][T10224] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.900687][T10224] openvswitch: netlink: Multiple metadata blocks provided [ 211.943139][ T52] Bluetooth: hci4: command 0x0405 tx timeout [ 212.045659][ T52] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.061140][ T52] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.067913][ T61] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.088374][ T52] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.114372][ T52] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.122077][ T52] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.131602][ T52] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.216442][ T61] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.243903][T10234] macvlan2: entered allmulticast mode [ 212.263402][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 212.315624][ T61] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.442070][T10239] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 212.453016][T10239] 8021q: adding VLAN 0 to HW filter on device team0 [ 212.460852][T10239] bond0: (slave team0): Enslaving as an active interface with an up link [ 212.505755][T10239] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 212.529594][T10239] bond0: (slave team0): Releasing backup interface [ 212.560539][T10230] chnl_net:caif_netlink_parms(): no params data found [ 212.582281][ T61] bridge_slave_1: left allmulticast mode [ 212.594641][ T61] bridge_slave_1: left promiscuous mode [ 212.604996][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.624430][ T61] bridge_slave_0: left allmulticast mode [ 212.630151][ T61] bridge_slave_0: left promiscuous mode [ 212.643322][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.270244][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.282294][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.297754][ T61] bond0 (unregistering): Released all slaves [ 213.468039][T10261] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.539475][T10267] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.621261][T10230] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.636582][T10230] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.648657][T10230] bridge_slave_0: entered allmulticast mode [ 213.659434][T10230] bridge_slave_0: entered promiscuous mode [ 213.667565][T10272] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 213.681604][T10272] team0: left allmulticast mode [ 213.687876][T10272] team_slave_0: left allmulticast mode [ 213.698401][T10272] team_slave_1: left allmulticast mode [ 213.705543][T10272] bond0: left allmulticast mode [ 213.710827][T10272] bond_slave_0: left allmulticast mode [ 213.719673][T10272] bond_slave_1: left allmulticast mode [ 213.725350][T10272] macvlan2: left allmulticast mode [ 213.730523][T10272] vlan1: left allmulticast mode [ 213.735869][T10272] veth0_vlan: left allmulticast mode [ 213.741321][T10272] team0: left promiscuous mode [ 213.746519][T10272] team_slave_0: left promiscuous mode [ 213.752100][T10272] team_slave_1: left promiscuous mode [ 213.757685][T10272] bond0: left promiscuous mode [ 213.762491][T10272] bond_slave_0: left promiscuous mode [ 213.770667][T10272] bond_slave_1: left promiscuous mode [ 213.777480][T10272] macvlan2: left promiscuous mode [ 213.782776][T10272] vlan1: left promiscuous mode [ 213.788706][T10272] bridge0: port 3(team0) entered disabled state [ 213.799181][T10272] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.826208][T10230] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.840650][T10230] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.848433][T10230] bridge_slave_1: entered allmulticast mode [ 213.856496][T10230] bridge_slave_1: entered promiscuous mode [ 213.867002][T10275] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 213.879640][T10275] bridge0: port 3(team0) entered blocking state [ 213.886583][T10275] bridge0: port 3(team0) entered disabled state [ 213.893518][T10275] team0: entered allmulticast mode [ 213.898812][T10275] team_slave_0: entered allmulticast mode [ 213.904802][T10275] team_slave_1: entered allmulticast mode [ 213.910615][T10275] bond0: entered allmulticast mode [ 213.915955][T10275] bond_slave_0: entered allmulticast mode [ 213.929054][T10275] bond_slave_1: entered allmulticast mode [ 213.935454][T10275] macvlan2: entered allmulticast mode [ 213.940925][T10275] vlan1: entered allmulticast mode [ 213.946883][T10275] veth0_vlan: entered allmulticast mode [ 213.954465][T10275] team0: entered promiscuous mode [ 213.959675][T10275] team_slave_0: entered promiscuous mode [ 213.965760][T10275] team_slave_1: entered promiscuous mode [ 213.971590][T10275] bond0: entered promiscuous mode [ 213.976814][T10275] bond_slave_0: entered promiscuous mode [ 213.982873][T10275] bond_slave_1: entered promiscuous mode [ 213.988867][T10275] macvlan2: entered promiscuous mode [ 213.994294][T10275] vlan1: entered promiscuous mode [ 214.152542][T10230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 214.182584][ T61] hsr_slave_0: left promiscuous mode [ 214.188102][ T5133] Bluetooth: hci5: command tx timeout [ 214.213059][ T61] hsr_slave_1: left promiscuous mode [ 214.219409][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.233163][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.243706][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.251126][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.308394][ T61] veth1_macvtap: left promiscuous mode [ 214.322910][ T61] veth0_macvtap: left promiscuous mode [ 214.328577][ T61] veth1_vlan: left promiscuous mode [ 214.342935][ T61] veth0_vlan: left promiscuous mode [ 215.320332][ T61] team0 (unregistering): Port device team_slave_1 removed [ 215.410681][ T61] team0 (unregistering): Port device team_slave_0 removed [ 215.419117][ T52] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 215.431320][ T52] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 215.439274][ T52] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 215.451113][ T52] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 215.468454][ T52] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 215.477793][ T52] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 216.012321][T10230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.063136][T10284] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.264294][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 216.264327][ T52] Bluetooth: hci5: command tx timeout [ 216.278872][ T5118] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 216.291896][ T5118] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 216.294256][T10230] team0: Port device team_slave_0 added [ 216.333015][ T5118] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 216.336629][T10230] team0: Port device team_slave_1 added [ 216.353799][ T5118] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 216.363079][ T5118] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 216.370617][ T5118] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 216.612208][T10230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.619904][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.646782][T10230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.661726][T10230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.669896][T10230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.698379][T10230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.780259][T10313] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 216.792035][T10313] team0: left allmulticast mode [ 216.797056][T10313] team_slave_0: left allmulticast mode [ 216.804709][T10313] team_slave_1: left allmulticast mode [ 216.810199][T10313] bond0: left allmulticast mode [ 216.820273][T10313] bond_slave_0: left allmulticast mode [ 216.826446][T10313] bond_slave_1: left allmulticast mode [ 216.832105][T10313] macvlan2: left allmulticast mode [ 216.837752][T10313] vlan1: left allmulticast mode [ 216.846607][T10313] veth0_vlan: left allmulticast mode [ 216.854921][T10313] team0: left promiscuous mode [ 216.859766][T10313] team_slave_0: left promiscuous mode [ 216.870484][T10313] team_slave_1: left promiscuous mode [ 216.876321][T10313] bond0: left promiscuous mode [ 216.881092][T10313] bond_slave_0: left promiscuous mode [ 216.886966][T10313] bond_slave_1: left promiscuous mode [ 216.895365][T10313] macvlan2: left promiscuous mode [ 216.900407][T10313] vlan1: left promiscuous mode [ 216.906823][T10313] bridge0: port 3(team0) entered disabled state [ 216.919571][T10313] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.975809][T10314] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 216.985341][T10314] bridge0: port 3(team0) entered blocking state [ 216.994471][T10314] bridge0: port 3(team0) entered disabled state [ 217.000914][T10314] team0: entered allmulticast mode [ 217.006315][T10314] team_slave_0: entered allmulticast mode [ 217.012047][T10314] team_slave_1: entered allmulticast mode [ 217.017931][T10314] bond0: entered allmulticast mode [ 217.024494][T10314] bond_slave_0: entered allmulticast mode [ 217.030232][T10314] bond_slave_1: entered allmulticast mode [ 217.036108][T10314] macvlan2: entered allmulticast mode [ 217.041509][T10314] vlan1: entered allmulticast mode [ 217.047186][T10314] veth0_vlan: entered allmulticast mode [ 217.054462][T10314] team0: entered promiscuous mode [ 217.059505][T10314] team_slave_0: entered promiscuous mode [ 217.066117][T10314] team_slave_1: entered promiscuous mode [ 217.071899][T10314] bond0: entered promiscuous mode [ 217.077080][T10314] bond_slave_0: entered promiscuous mode [ 217.083155][T10314] bond_slave_1: entered promiscuous mode [ 217.088898][T10314] macvlan2: entered promiscuous mode [ 217.097409][T10314] vlan1: entered promiscuous mode [ 217.152341][T10230] hsr_slave_0: entered promiscuous mode [ 217.159268][T10230] hsr_slave_1: entered promiscuous mode [ 217.165710][T10230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.174383][T10230] Cannot create hsr debugfs directory [ 217.286134][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.336212][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.438587][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.525690][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.553079][ T5118] Bluetooth: hci8: command tx timeout [ 217.554286][T10297] chnl_net:caif_netlink_parms(): no params data found [ 217.647792][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.830827][T10338] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.974700][T10297] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.982073][T10297] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.990450][T10297] bridge_slave_0: entered allmulticast mode [ 217.998451][T10297] bridge_slave_0: entered promiscuous mode [ 218.034727][T10303] chnl_net:caif_netlink_parms(): no params data found [ 218.075437][T10297] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.093722][T10297] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.103702][T10297] bridge_slave_1: entered allmulticast mode [ 218.120128][T10297] bridge_slave_1: entered promiscuous mode [ 218.331138][ T61] bridge_slave_1: left allmulticast mode [ 218.343442][ T5118] Bluetooth: hci5: command tx timeout [ 218.355380][ T61] bridge_slave_1: left promiscuous mode [ 218.361138][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.395673][ T61] bridge_slave_0: left allmulticast mode [ 218.401334][ T61] bridge_slave_0: left promiscuous mode [ 218.413259][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.423025][ T5118] Bluetooth: hci9: command tx timeout [ 218.929124][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.944452][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.956617][ T61] bond0 (unregistering): Released all slaves [ 218.981316][T10297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 219.001810][T10357] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 219.017990][T10357] 8021q: adding VLAN 0 to HW filter on device team0 [ 219.026547][T10357] bond0: (slave team0): Enslaving as an active interface with an up link [ 219.040880][T10358] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 219.064873][T10358] bond0: (slave team0): Releasing backup interface [ 219.091355][T10297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 219.159089][T10297] team0: Port device team_slave_0 added [ 219.275430][T10297] team0: Port device team_slave_1 added [ 219.374447][T10303] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.393408][T10303] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.405511][T10303] bridge_slave_0: entered allmulticast mode [ 219.415829][T10303] bridge_slave_0: entered promiscuous mode [ 219.426043][T10303] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.436372][T10303] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.453137][T10303] bridge_slave_1: entered allmulticast mode [ 219.466507][T10303] bridge_slave_1: entered promiscuous mode [ 219.474160][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 219.523846][T10297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 219.530796][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 219.578640][T10297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 219.623362][ T5118] Bluetooth: hci8: command tx timeout [ 219.719262][ T61] hsr_slave_0: left promiscuous mode [ 219.752385][ T61] hsr_slave_1: left promiscuous mode [ 219.764001][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.771435][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.794272][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.801954][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.867496][ T61] veth1_macvtap: left promiscuous mode [ 219.873626][ T61] veth0_macvtap: left promiscuous mode [ 219.879267][ T61] veth1_vlan: left promiscuous mode [ 219.884814][ T61] veth0_vlan: left promiscuous mode [ 220.361824][ T61] team0 (unregistering): Port device team_slave_1 removed [ 220.408095][ T61] team0 (unregistering): Port device team_slave_0 removed [ 220.427659][ T5118] Bluetooth: hci5: command tx timeout [ 220.505396][ T5118] Bluetooth: hci9: command tx timeout [ 220.842437][T10297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 220.849750][T10297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 220.876536][T10297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 220.894195][T10303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 220.907569][T10303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 220.918290][T10396] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 220.932937][T10396] team0: left allmulticast mode [ 220.937846][T10396] team_slave_0: left allmulticast mode [ 220.950151][T10396] team_slave_1: left allmulticast mode [ 220.955774][T10396] bond0: left allmulticast mode [ 220.960618][T10396] bond_slave_0: left allmulticast mode [ 220.972976][T10396] bond_slave_1: left allmulticast mode [ 220.978448][T10396] macvlan2: left allmulticast mode [ 220.984558][T10396] vlan1: left allmulticast mode [ 220.999362][T10396] veth0_vlan: left allmulticast mode [ 221.006908][T10396] team0: left promiscuous mode [ 221.011691][T10396] team_slave_0: left promiscuous mode [ 221.022070][T10396] team_slave_1: left promiscuous mode [ 221.027838][T10396] bond0: left promiscuous mode [ 221.032613][T10396] bond_slave_0: left promiscuous mode [ 221.038734][T10396] bond_slave_1: left promiscuous mode [ 221.044698][T10396] macvlan2: left promiscuous mode [ 221.049745][T10396] vlan1: left promiscuous mode [ 221.055568][T10396] bridge0: port 3(team0) entered disabled state [ 221.066645][T10396] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.093818][T10394] batman_adv: batadv0: Adding interface: macsec1 [ 221.100177][T10394] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.127026][T10394] batman_adv: batadv0: Not using interface macsec1 (retrying later): interface not active [ 221.137806][T10397] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 221.152564][T10397] bridge0: port 3(team0) entered blocking state [ 221.159819][T10397] bridge0: port 3(team0) entered disabled state [ 221.166937][T10397] team0: entered allmulticast mode [ 221.172142][T10397] team_slave_0: entered allmulticast mode [ 221.177976][T10397] team_slave_1: entered allmulticast mode [ 221.184417][T10397] bond0: entered allmulticast mode [ 221.189534][T10397] bond_slave_0: entered allmulticast mode [ 221.197638][T10397] bond_slave_1: entered allmulticast mode [ 221.203710][T10397] macvlan2: entered allmulticast mode [ 221.209113][T10397] vlan1: entered allmulticast mode [ 221.214586][T10397] veth0_vlan: entered allmulticast mode [ 221.221087][T10397] team0: entered promiscuous mode [ 221.226599][T10397] team_slave_0: entered promiscuous mode [ 221.232491][T10397] team_slave_1: entered promiscuous mode [ 221.238419][T10397] bond0: entered promiscuous mode [ 221.244099][T10397] bond_slave_0: entered promiscuous mode [ 221.249911][T10397] bond_slave_1: entered promiscuous mode [ 221.255758][T10397] macvlan2: entered promiscuous mode [ 221.261050][T10397] vlan1: entered promiscuous mode [ 221.267776][T10390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.292982][T10390] batman_adv: batadv0: Removing interface: macsec1 [ 221.529805][T10410] TCP: MD5 Hash not found for 172.20.20.187.0->255.255.255.255.20002 [FR.] L3 index 0 [ 221.555185][T10297] hsr_slave_0: entered promiscuous mode [ 221.571347][T10297] hsr_slave_1: entered promiscuous mode [ 221.606268][T10297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.620259][T10297] Cannot create hsr debugfs directory [ 221.635464][T10303] team0: Port device team_slave_0 added [ 221.701408][T10303] team0: Port device team_slave_1 added [ 221.713446][ T5118] Bluetooth: hci8: command tx timeout [ 221.915397][T10303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.931870][T10303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.983734][T10303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.133357][T10418] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.186104][T10303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.193256][T10303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.221284][T10303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.244132][T10230] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 222.273929][T10230] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 222.319780][T10230] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 222.370045][T10303] hsr_slave_0: entered promiscuous mode [ 222.380104][T10303] hsr_slave_1: entered promiscuous mode [ 222.392124][T10303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.402334][T10303] Cannot create hsr debugfs directory [ 222.413467][T10230] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 222.583572][ T5118] Bluetooth: hci9: command tx timeout [ 223.012648][T10440] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 223.027994][T10440] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.039921][T10440] bond0: (slave team0): Enslaving as an active interface with an up link [ 223.069482][T10440] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 223.085169][T10440] bond0: (slave team0): Releasing backup interface [ 223.204638][T10230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.314544][T10230] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.356812][ T8511] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.364010][ T8511] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.410966][ T8512] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.418159][ T8512] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.592790][T10462] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.680630][T10464] team0: entered promiscuous mode [ 223.690846][T10464] bridge0: entered promiscuous mode [ 223.704419][T10297] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 223.726161][T10297] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 223.774766][T10297] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 223.797340][T10297] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 223.797419][ T5118] Bluetooth: hci8: command tx timeout [ 223.828894][T10464] syz_tun: entered promiscuous mode [ 223.835198][T10463] syz_tun: left promiscuous mode [ 223.841302][T10463] team0: left promiscuous mode [ 223.846378][T10463] bridge0: left promiscuous mode [ 223.935933][T10303] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.006464][T10303] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.038698][T10303] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.066739][T10303] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.212287][T10484] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 224.226240][T10484] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.235477][T10484] bond0: (slave team0): Enslaving as an active interface with an up link [ 224.254735][T10483] syzkaller0: entered promiscuous mode [ 224.260536][T10484] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 224.272631][T10484] bond0: (slave team0): Releasing backup interface [ 224.299929][T10230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.312080][T10482] syzkaller0: left promiscuous mode [ 224.390675][T10297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.494787][T10297] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.520071][T10230] veth0_vlan: entered promiscuous mode [ 224.595136][T10303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.603794][ T8320] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.610891][ T8320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.625254][ T8320] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.632473][ T8320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.663916][ T5118] Bluetooth: hci9: command tx timeout [ 224.705052][T10230] veth1_vlan: entered promiscuous mode [ 224.744803][T10303] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.821260][T10502] IPVS: set_ctl: invalid protocol: 41 172.20.20.170:20002 [ 224.839419][ T8304] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.846643][ T8304] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.861146][ T8304] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.868251][ T8304] bridge0: port 2(bridge_slave_1) entered forwarding state [ 224.981272][T10297] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.096972][T10230] veth0_macvtap: entered promiscuous mode [ 225.133692][T10230] veth1_macvtap: entered promiscuous mode [ 225.165667][T10513] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.271039][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.292751][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.302594][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.316388][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.343137][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.364409][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.397933][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 225.422132][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.438251][T10230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.501175][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.527863][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.552750][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.586190][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.604126][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.615318][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.635016][T10230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 225.645669][T10230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 225.657760][T10230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.717038][T10230] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.742001][T10230] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.753092][T10230] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.761833][T10230] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.835933][T10297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.891322][T10303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.980099][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.007033][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.099142][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.107525][T10297] veth0_vlan: entered promiscuous mode [ 226.162520][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.172137][T10297] veth1_vlan: entered promiscuous mode [ 226.386012][T10297] veth0_macvtap: entered promiscuous mode [ 226.429836][T10297] veth1_macvtap: entered promiscuous mode [ 226.497830][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.529291][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.552619][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.569711][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.579773][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.591231][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.601174][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.611683][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.625903][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.636614][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.649673][T10297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.693243][T10563] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.765698][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.785035][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.796364][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.825420][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.837768][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.849413][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.860240][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.871550][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.895814][T10297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.907729][T10297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.919639][T10297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.938433][T10303] veth0_vlan: entered promiscuous mode [ 226.996907][T10580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.013697][T10297] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.024191][T10297] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.052814][T10297] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.073168][T10297] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 227.125134][ T29] audit: type=1804 audit(1717931632.933:15): pid=10580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir96386717/syzkaller.7eFmtS/523/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 227.178345][T10303] veth1_vlan: entered promiscuous mode [ 227.324677][T10303] veth0_macvtap: entered promiscuous mode [ 227.373260][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.393684][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.451444][T10303] veth1_macvtap: entered promiscuous mode [ 227.489805][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.503437][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.725732][ T50] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.779902][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.811739][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.843358][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.857293][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.869059][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.879746][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.890117][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.900711][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.927713][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.933576][T10580] warn_alloc: 3 callbacks suppressed [ 227.933591][T10580] syz-executor.0: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 227.940775][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.947236][T10580] ,cpuset= [ 227.962059][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.985603][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.995746][T10580] syz0,mems_allowed=0-1 [ 227.997624][T10303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.000064][T10580] CPU: 0 PID: 10580 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 228.011379][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.017608][T10580] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 228.017624][T10580] Call Trace: [ 228.017632][T10580] [ 228.017641][T10580] dump_stack_lvl+0x241/0x360 [ 228.017670][T10580] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.017692][T10580] ? __pfx__printk+0x10/0x10 [ 228.017720][T10580] ? __rcu_read_unlock+0xa1/0x110 [ 228.017749][T10580] warn_alloc+0x278/0x410 [ 228.017783][T10580] ? __pfx_warn_alloc+0x10/0x10 [ 228.017816][T10580] ? translate_table+0x174/0x2330 [ 228.017846][T10580] ? __get_vm_area_node+0x23d/0x270 [ 228.017872][T10580] __vmalloc_node_range_noprof+0x69f/0x1460 [ 228.036619][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.038321][T10580] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 228.041663][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.044511][T10580] ? rcu_is_watching+0x15/0xb0 [ 228.044535][T10580] ? trace_kmalloc+0x1f/0xd0 [ 228.044559][T10580] ? __kmalloc_node_noprof+0x247/0x440 [ 228.044584][T10580] ? kvmalloc_node_noprof+0x72/0x190 [ 228.044606][T10580] kvmalloc_node_noprof+0x142/0x190 [ 228.044626][T10580] ? translate_table+0x174/0x2330 [ 228.044650][T10580] translate_table+0x174/0x2330 [ 228.049399][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.054503][T10580] ? __pfx_translate_table+0x10/0x10 [ 228.054529][T10580] ? __might_fault+0xaa/0x120 [ 228.054556][T10580] ? __pfx_lock_release+0x10/0x10 [ 228.054584][T10580] ? __might_fault+0xaa/0x120 [ 228.054609][T10580] ? __might_fault+0xc6/0x120 [ 228.054636][T10580] ? _copy_from_user+0xa6/0xe0 [ 228.054661][T10580] ? copy_from_sockptr_offset+0x6b/0xb0 [ 228.054686][T10580] do_ip6t_set_ctl+0xe4c/0x1270 [ 228.054713][T10580] ? __pfx___might_resched+0x10/0x10 [ 228.054735][T10580] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 228.054757][T10580] ? __pfx_lock_release+0x10/0x10 [ 228.054795][T10580] ? __mutex_unlock_slowpath+0x21d/0x750 [ 228.054829][T10580] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 228.054863][T10580] ? __pfx_aa_sk_perm+0x10/0x10 [ 228.054890][T10580] nf_setsockopt+0x295/0x2c0 [ 228.054924][T10580] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 228.054948][T10580] do_sock_setsockopt+0x3af/0x720 [ 228.054974][T10580] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 228.055001][T10580] ? __fget_files+0x29/0x470 [ 228.055027][T10580] ? __fget_files+0x3f6/0x470 [ 228.055063][T10580] __sys_setsockopt+0x1ae/0x250 [ 228.055087][T10580] __x64_sys_setsockopt+0xb5/0xd0 [ 228.055110][T10580] do_syscall_64+0xf3/0x230 [ 228.055133][T10580] ? clear_bhb_loop+0x35/0x90 [ 228.055160][T10580] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 228.055181][T10580] RIP: 0033:0x7f598ea7cf69 [ 228.055200][T10580] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 228.055217][T10580] RSP: 002b:00007f598f76a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 228.055241][T10580] RAX: ffffffffffffffda RBX: 00007f598ebb3f80 RCX: 00007f598ea7cf69 [ 228.055256][T10580] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 228.055268][T10580] RBP: 00007f598eada6fe R08: 00000000000004b0 R09: 0000000000000000 [ 228.055282][T10580] R10: 0000000020000a00 R11: 0000000000000246 R12: 0000000000000000 [ 228.055295][T10580] R13: 000000000000000b R14: 00007f598ebb3f80 R15: 00007ffd5fbfc4d8 [ 228.055326][T10580] [ 228.261897][T10580] Mem-Info: [ 228.270577][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.342832][T10580] active_anon:16555 inactive_anon:0 isolated_anon:0 [ 228.342832][T10580] active_file:0 inactive_file:46980 isolated_file:0 [ 228.342832][T10580] unevictable:768 dirty:41 writeback:0 [ 228.342832][T10580] slab_reclaimable:11630 slab_unreclaimable:109217 [ 228.342832][T10580] mapped:28337 shmem:1632 pagetables:685 [ 228.342832][T10580] sec_pagetables:0 bounce:0 [ 228.342832][T10580] kernel_misc_reclaimable:0 [ 228.342832][T10580] free:1322021 free_pcp:2586 free_cma:0 [ 228.345248][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.352027][T10580] Node 0 active_anon:66220kB inactive_anon:0kB active_file:0kB inactive_file:187848kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113348kB dirty:160kB writeback:0kB shmem:4992kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12272kB pagetables:2740kB sec_pagetables:0kB all_unreclaimable? no [ 228.361652][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.361673][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.361690][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.361705][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.361721][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.361735][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.363394][T10303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.434814][T10580] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 228.555827][T10589] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 228.598746][T10580] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 228.600820][ T5133] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 228.626402][T10589] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.642887][T10580] lowmem_reserve[]: 0 2571 2571 0 0 [ 228.649834][ T5133] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 228.657859][T10580] Node 0 DMA32 free:1299840kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:66172kB inactive_anon:0kB active_file:0kB inactive_file:187536kB unevictable:1536kB writepending:156kB present:3129332kB managed:2659884kB mlocked:0kB bounce:0kB free_pcp:8488kB local_pcp:748kB free_cma:0kB [ 228.692537][ T5133] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 228.704001][ T5133] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 228.711863][ T5133] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 228.719355][ T5133] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 228.719869][T10580] lowmem_reserve[]: 0 0 0 0 0 [ 228.766415][ T50] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.773242][T10580] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 228.806657][T10580] lowmem_reserve[]: 0 0 0 0 0 [ 228.814600][T10580] Node 1 Normal free:3941844kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:9300kB local_pcp:2508kB free_cma:0kB [ 228.861650][T10580] lowmem_reserve[]: 0 0 0 0 0 [ 228.866625][T10580] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 228.892233][T10580] Node 0 DMA32: 60*4kB (ME) 7*8kB (ME) 170*16kB (UME) 100*32kB (UME) 70*64kB (UME) 27*128kB (UME) 11*256kB (M) 8*512kB (UME) 36*1024kB (UME) 8*2048kB (UM) 299*4096kB (M) = 1299016kB [ 228.898210][T10303] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.924520][T10303] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.933447][T10580] Node 0 [ 228.933450][T10303] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.933483][T10303] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.936458][T10580] Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 228.983803][T10580] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 3*16kB (UM) 4*32kB (UM) 0*64kB 2*128kB (U) 4*256kB (UM) 2*512kB (UM) 1*1024kB (U) 1*2048kB (M) 961*4096kB (UM) = 3941844kB [ 229.006359][T10580] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.011787][ T50] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.021041][T10580] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.037408][T10580] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 229.047556][T10580] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 229.064867][T10580] 48591 total pagecache pages [ 229.097340][T10580] 0 pages in swap cache [ 229.110386][T10580] Free swap = 124996kB [ 229.134444][T10580] Total swap = 124996kB [ 229.138655][T10580] 2097051 pages RAM [ 229.142453][T10580] 0 pages HighMem/MovableOnly [ 229.161695][T10580] 400870 pages reserved [ 229.180959][ T50] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.223940][T10580] 0 pages cma reserved [ 229.497076][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.516902][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.654535][ T139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.675404][T10591] chnl_net:caif_netlink_parms(): no params data found [ 229.683387][ T139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.777200][ T50] bridge_slave_1: left allmulticast mode [ 229.790092][ T50] bridge_slave_1: left promiscuous mode [ 229.821945][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.847004][ T50] bridge_slave_0: left allmulticast mode [ 229.872877][ T50] bridge_slave_0: left promiscuous mode [ 229.897605][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.364126][ T5133] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 230.375529][ T5133] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 230.384568][ T5133] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 230.395765][ T5133] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 230.404988][ T5133] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 230.414317][ T5133] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 230.734149][T10637] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 230.743670][ T5133] Bluetooth: hci5: command tx timeout [ 230.772926][T10637] nbd: must specify at least one socket [ 230.965460][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.989178][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.023320][ T50] bond0 (unregistering): Released all slaves [ 231.238468][T10645] xt_ecn: cannot match TCP bits for non-tcp packets [ 231.489840][T10591] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.523414][T10591] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.530689][T10591] bridge_slave_0: entered allmulticast mode [ 231.568740][T10591] bridge_slave_0: entered promiscuous mode [ 231.598953][T10591] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.624590][T10591] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.631885][T10591] bridge_slave_1: entered allmulticast mode [ 231.670022][T10591] bridge_slave_1: entered promiscuous mode [ 232.056721][T10591] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.088411][T10681] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 232.106108][T10591] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.172201][ T50] hsr_slave_0: left promiscuous mode [ 232.182426][ T50] hsr_slave_1: left promiscuous mode [ 232.190060][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 232.197974][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 232.207487][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.215211][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.286385][ T50] veth1_macvtap: left promiscuous mode [ 232.291960][ T50] veth0_macvtap: left promiscuous mode [ 232.302973][ T50] veth1_vlan: left promiscuous mode [ 232.311674][ T50] veth0_vlan: left promiscuous mode [ 232.362224][T10689] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.386475][ T29] audit: type=1804 audit(1717931638.193:16): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir96386717/syzkaller.7eFmtS/528/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 232.502992][ T5133] Bluetooth: hci8: command tx timeout [ 232.827959][ T5133] Bluetooth: hci5: command tx timeout [ 233.329646][ T50] team0 (unregistering): Port device team_slave_1 removed [ 233.431635][ T50] team0 (unregistering): Port device team_slave_0 removed [ 234.370308][T10683] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.545060][T10591] team0: Port device team_slave_0 added [ 234.583113][ T5133] Bluetooth: hci8: command tx timeout [ 234.615701][T10591] team0: Port device team_slave_1 added [ 234.801948][T10707] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.843578][T10591] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.850557][T10591] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.902909][ T5133] Bluetooth: hci5: command tx timeout [ 234.975074][T10591] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 235.013337][T10711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 235.027108][T10591] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 235.043360][T10591] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 235.070977][T10711] RDS: rds_bind could not find a transport for ::ffff:172.30.0.5, load rds_tcp or rds_rdma? [ 235.080324][T10591] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 235.109491][T10713] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 235.235867][T10711] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 235.379275][T10630] chnl_net:caif_netlink_parms(): no params data found [ 235.471476][T10591] hsr_slave_0: entered promiscuous mode [ 235.493070][T10591] hsr_slave_1: entered promiscuous mode [ 235.505325][T10591] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 235.527229][T10591] Cannot create hsr debugfs directory [ 235.616781][T10732] x_tables: unsorted underflow at hook 4 [ 235.854461][ T50] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.865829][ T8512] IPVS: starting estimator thread 0... [ 235.963137][T10743] IPVS: using max 18 ests per chain, 43200 per kthread [ 236.086480][ T50] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.123217][T10630] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.136190][T10630] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.158037][T10630] bridge_slave_0: entered allmulticast mode [ 236.165890][T10630] bridge_slave_0: entered promiscuous mode [ 236.416577][ T50] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.439943][T10630] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.452541][T10630] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.460719][T10630] bridge_slave_1: entered allmulticast mode [ 236.468584][T10630] bridge_slave_1: entered promiscuous mode [ 236.505604][T10759] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 236.575568][ T50] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.636863][T10761] macvlan2: entered allmulticast mode [ 236.663100][ T5133] Bluetooth: hci8: command tx timeout [ 236.699942][T10630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.743495][T10630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 236.904332][T10630] team0: Port device team_slave_0 added [ 236.948807][ T50] bridge_slave_1: left allmulticast mode [ 236.955044][ T50] bridge_slave_1: left promiscuous mode [ 236.962459][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.977343][ T50] bridge_slave_0: left allmulticast mode [ 236.985321][ T5133] Bluetooth: hci5: command tx timeout [ 237.001207][ T50] bridge_slave_0: left promiscuous mode [ 237.008255][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.531739][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.559008][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.573666][ T50] bond0 (unregistering): Released all slaves [ 237.598704][T10630] team0: Port device team_slave_1 added [ 237.628185][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 237.663731][T10774] ÿÿÿ: renamed from vlan1 (while UP) [ 237.745430][T10782] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 237.753834][T10782] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.798015][T10630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 237.811029][T10630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 237.844021][T10630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 237.976318][T10630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 237.994689][T10630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.053723][T10630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.298012][T10630] hsr_slave_0: entered promiscuous mode [ 238.311167][T10630] hsr_slave_1: entered promiscuous mode [ 238.319704][T10630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.327683][T10630] Cannot create hsr debugfs directory [ 238.337839][T10799] bridge1: entered promiscuous mode [ 238.349467][T10799] bridge1: entered allmulticast mode [ 238.447265][ T50] hsr_slave_0: left promiscuous mode [ 238.453626][ T50] hsr_slave_1: left promiscuous mode [ 238.459801][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.475356][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.486156][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.493961][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.524973][ T50] veth1_macvtap: left promiscuous mode [ 238.530545][ T50] veth0_macvtap: left promiscuous mode [ 238.536858][ T50] veth1_vlan: left promiscuous mode [ 238.542187][ T50] veth0_vlan: left promiscuous mode [ 238.753660][ T5133] Bluetooth: hci8: command tx timeout [ 239.111591][ T29] audit: type=1804 audit(1717931644.913:17): pid=10810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir509592545/syzkaller.fQ6cH2/20/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 239.449140][ T50] team0 (unregistering): Port device team_slave_1 removed [ 239.515332][ T50] team0 (unregistering): Port device team_slave_0 removed [ 239.811600][T10810] warn_alloc: 3 callbacks suppressed [ 239.811622][T10810] syz-executor.4: vmalloc error: size 536870912, failed to allocated page array size 1048576, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 239.836357][T10810] CPU: 1 PID: 10810 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 239.846891][T10810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 239.856965][T10810] Call Trace: [ 239.860268][T10810] [ 239.863189][T10810] dump_stack_lvl+0x241/0x360 [ 239.867885][T10810] ? __pfx_dump_stack_lvl+0x10/0x10 [ 239.873087][T10810] ? __pfx__printk+0x10/0x10 [ 239.877665][T10810] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 239.884094][T10810] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 239.890604][T10810] warn_alloc+0x278/0x410 [ 239.894944][T10810] ? __pfx_warn_alloc+0x10/0x10 [ 239.899814][T10810] ? translate_table+0x174/0x2330 [ 239.904837][T10810] ? __get_vm_area_node+0x23d/0x270 [ 239.910031][T10810] __vmalloc_node_range_noprof+0x69f/0x1460 [ 239.915939][T10810] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 239.922255][T10810] ? rcu_is_watching+0x15/0xb0 [ 239.927010][T10810] ? trace_kmalloc+0x1f/0xd0 [ 239.931594][T10810] ? __kmalloc_node_noprof+0x247/0x440 [ 239.937053][T10810] ? kvmalloc_node_noprof+0x72/0x190 [ 239.942331][T10810] kvmalloc_node_noprof+0x142/0x190 [ 239.947527][T10810] ? translate_table+0x174/0x2330 [ 239.952550][T10810] translate_table+0x174/0x2330 [ 239.957414][T10810] ? __pfx_translate_table+0x10/0x10 [ 239.962694][T10810] ? __might_fault+0xaa/0x120 [ 239.967365][T10810] ? __pfx_lock_release+0x10/0x10 [ 239.972387][T10810] ? __might_fault+0xaa/0x120 [ 239.977057][T10810] ? __might_fault+0xc6/0x120 [ 239.981729][T10810] ? _copy_from_user+0xa6/0xe0 [ 239.986489][T10810] ? copy_from_sockptr_offset+0x6b/0xb0 [ 239.992026][T10810] do_ip6t_set_ctl+0xe4c/0x1270 [ 239.996876][T10810] ? __pfx___might_resched+0x10/0x10 [ 240.002154][T10810] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 240.007457][T10810] ? __pfx_lock_release+0x10/0x10 [ 240.012485][T10810] ? __mutex_unlock_slowpath+0x21d/0x750 [ 240.018117][T10810] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 240.024098][T10810] ? __pfx_aa_sk_perm+0x10/0x10 [ 240.028938][T10810] ? __might_fault+0xaa/0x120 [ 240.033617][T10810] nf_setsockopt+0x295/0x2c0 [ 240.038214][T10810] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 240.044103][T10810] do_sock_setsockopt+0x3af/0x720 [ 240.049124][T10810] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 240.054677][T10810] __sys_setsockopt+0x1ae/0x250 [ 240.059520][T10810] __x64_sys_setsockopt+0xb5/0xd0 [ 240.064535][T10810] do_syscall_64+0xf3/0x230 [ 240.069030][T10810] ? clear_bhb_loop+0x35/0x90 [ 240.073700][T10810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 240.079584][T10810] RIP: 0033:0x7fbdb667cf69 [ 240.083988][T10810] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 240.103586][T10810] RSP: 002b:00007fbdb733d0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 240.111989][T10810] RAX: ffffffffffffffda RBX: 00007fbdb67b4050 RCX: 00007fbdb667cf69 [ 240.119956][T10810] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000004 [ 240.127927][T10810] RBP: 00007fbdb66da6fe R08: 00000000000004b0 R09: 0000000000000000 [ 240.135890][T10810] R10: 0000000020000a00 R11: 0000000000000246 R12: 0000000000000000 [ 240.143859][T10810] R13: 000000000000006e R14: 00007fbdb67b4050 R15: 00007ffd44bb7eb8 [ 240.151846][T10810] [ 240.169831][T10810] Mem-Info: [ 240.173598][T10810] active_anon:16614 inactive_anon:0 isolated_anon:0 [ 240.173598][T10810] active_file:0 inactive_file:46754 isolated_file:0 [ 240.173598][T10810] unevictable:768 dirty:17 writeback:10 [ 240.173598][T10810] slab_reclaimable:11311 slab_unreclaimable:109863 [ 240.173598][T10810] mapped:28764 shmem:1637 pagetables:757 [ 240.173598][T10810] sec_pagetables:0 bounce:0 [ 240.173598][T10810] kernel_misc_reclaimable:0 [ 240.173598][T10810] free:1316055 free_pcp:2522 free_cma:0 [ 240.235190][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 240.265526][T10810] Node 0 active_anon:66424kB inactive_anon:0kB active_file:0kB inactive_file:186952kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115124kB dirty:4kB writeback:0kB shmem:5012kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12560kB pagetables:3048kB sec_pagetables:0kB all_unreclaimable? no [ 240.297877][T10810] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 240.332309][T10810] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.362012][T10810] lowmem_reserve[]: 0 2571 2571 0 0 [ 240.367536][T10810] Node 0 DMA32 free:1305824kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:66376kB inactive_anon:0kB active_file:0kB inactive_file:186640kB unevictable:1536kB writepending:4kB present:3129332kB managed:2659884kB mlocked:0kB bounce:0kB free_pcp:2704kB local_pcp:2512kB free_cma:0kB [ 240.397493][T10810] lowmem_reserve[]: 0 0 0 0 0 [ 240.402245][T10810] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 240.429164][T10810] lowmem_reserve[]: 0 0 0 0 0 [ 240.435803][T10810] Node 1 Normal free:3943860kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:7284kB local_pcp:5784kB free_cma:0kB [ 240.466185][T10810] lowmem_reserve[]: 0 0 0 0 0 [ 240.470957][T10810] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 240.483759][T10810] Node 0 DMA32: 104*4kB (UME) 150*8kB (UM) 155*16kB (ME) 128*32kB (UME) 71*64kB (UME) 30*128kB (UME) 14*256kB (UM) 43*512kB (UME) 30*1024kB (UME) 8*2048kB (UM) 297*4096kB (UM) = 1305792kB [ 240.502483][T10810] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 240.514246][T10810] Node 1 Normal: 3*4kB (UM) 3*8kB (UM) 3*16kB (UM) 3*32kB (UM) 0*64kB 4*128kB (U) 7*256kB (UM) 2*512kB (UM) 0*1024kB 2*2048kB (UM) 961*4096kB (UM) = 3943860kB [ 240.530485][T10810] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.540114][T10810] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.552280][T10810] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 240.561950][T10810] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 240.577592][T10810] 48372 total pagecache pages [ 240.582318][T10810] 0 pages in swap cache [ 240.592831][T10810] Free swap = 124996kB [ 240.597213][T10810] Total swap = 124996kB [ 240.601407][T10810] 2097051 pages RAM [ 240.611081][T10810] 0 pages HighMem/MovableOnly [ 240.615975][T10810] 400870 pages reserved [ 240.625359][T10810] 0 pages cma reserved [ 240.767798][T10807] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.791501][T10815] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 241.096678][T10591] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 241.152734][T10591] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 241.228721][T10591] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 241.296363][T10591] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 241.390514][T10828] macvlan3: entered allmulticast mode [ 241.803546][T10837] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 241.847078][T10591] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.934760][T10591] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.986373][ T8320] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.993621][ T8320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.025396][ T8320] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.032595][ T8320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.278752][T10630] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 242.309627][T10630] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 242.334061][T10630] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 242.355555][T10630] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.545459][T10591] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 242.857196][T10630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.885492][T10591] veth0_vlan: entered promiscuous mode [ 242.927983][T10863] macvlan2: entered allmulticast mode [ 242.968168][T10865] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 243.009819][T10591] veth1_vlan: entered promiscuous mode [ 243.080537][T10630] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.118860][ T8320] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.126064][ T8320] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.170577][T10591] veth0_macvtap: entered promiscuous mode [ 243.222091][T10591] veth1_macvtap: entered promiscuous mode [ 243.249168][ T8320] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.256379][ T8320] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.291189][T10876] macvlan3: entered allmulticast mode [ 243.400089][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.421478][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.435630][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.456434][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.493716][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.517272][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.532536][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.544371][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.554417][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 243.565023][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.577232][T10591] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 243.585360][T10881] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 243.608243][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.623151][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.638713][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.650124][ T29] audit: type=1804 audit(1717931649.443:18): pid=10881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir509592545/syzkaller.fQ6cH2/24/cgroup.controllers" dev="sda1" ino=1970 res=1 errno=0 [ 243.686312][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.710196][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.732754][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.754421][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.765254][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.785921][T10591] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 243.796791][T10591] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 243.818687][T10591] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 243.819658][T10891] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 243.876430][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 243.885806][T10591] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.896108][T10591] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.905697][T10591] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.914474][T10591] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 243.936677][T10892] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.162204][ T3280] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.180570][ T3280] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.288226][T10902] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 244.317121][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 244.335521][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.507266][T10630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.624770][T10910] macvlan3: entered allmulticast mode [ 244.795637][T10630] veth0_vlan: entered promiscuous mode [ 244.821479][T10630] veth1_vlan: entered promiscuous mode [ 244.890985][T10630] veth0_macvtap: entered promiscuous mode [ 244.922220][T10630] veth1_macvtap: entered promiscuous mode [ 245.003287][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.027440][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.051783][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.074073][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.102824][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.113394][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.132830][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.172901][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.183373][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.194547][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.205140][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 245.218529][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.241967][T10630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 245.282150][T10924] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 245.313111][T10924] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.327379][T10924] bridge0: entered promiscuous mode [ 245.366738][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.404794][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.427979][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.450170][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.493965][T10926] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.496971][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.563159][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.595381][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.640270][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.682861][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.715002][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.760251][T10630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.803136][T10630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.829629][T10630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.867088][T10630] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.897243][T10630] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.913943][T10630] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.922975][T10630] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.943367][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 245.961395][T10927] netlink: 247 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.228046][T10934] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 246.254778][ T2471] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.262631][ T2471] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.332495][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.355752][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.670202][ T2471] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.135753][T10950] macvlan2: entered allmulticast mode [ 247.236641][T10956] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.254167][ T2471] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.279872][T10956] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 247.477810][ T2471] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.579577][ T2471] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.652530][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 247.674513][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 247.684903][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 247.723763][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 247.732053][ T5118] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 247.739564][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 248.024016][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 248.084324][T10978] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 248.099644][T10978] bridge0: port 3(team0) entered blocking state [ 248.118175][T10978] bridge0: port 3(team0) entered disabled state [ 248.140935][T10978] team0: entered allmulticast mode [ 248.159972][T10978] team_slave_0: entered allmulticast mode [ 248.174261][T10978] team_slave_1: entered allmulticast mode [ 248.202391][T10978] team0: entered promiscuous mode [ 248.215400][T10978] team_slave_0: entered promiscuous mode [ 248.233236][T10978] team_slave_1: entered promiscuous mode [ 248.249817][T10978] bridge0: port 3(team0) entered blocking state [ 248.256239][T10978] bridge0: port 3(team0) entered forwarding state [ 248.284735][ T2471] bridge_slave_1: left allmulticast mode [ 248.290417][ T2471] bridge_slave_1: left promiscuous mode [ 248.333339][ T2471] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.363867][ T2471] bridge_slave_0: left allmulticast mode [ 248.369557][ T2471] bridge_slave_0: left promiscuous mode [ 248.389824][ T2471] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.529448][T10986] netlink: 4544 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.550327][T10986] netlink: 4544 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.642582][ T5118] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 248.660659][ T5118] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 248.679313][ T5118] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 248.687871][ T5118] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 248.712789][ T5118] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 248.723967][ T5118] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 249.108285][ T2471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.120973][ T2471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.134797][ T2471] bond0 (unregistering): Released all slaves [ 249.299723][T10964] chnl_net:caif_netlink_parms(): no params data found [ 249.662431][T11000] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 249.688486][T11006] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 249.716371][T11017] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 249.759206][ T2471] hsr_slave_0: left promiscuous mode [ 249.784870][ T5133] Bluetooth: hci5: command tx timeout [ 249.791676][ T2471] hsr_slave_1: left promiscuous mode [ 249.800846][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.811514][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.820997][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.829108][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.876308][ T2471] veth1_macvtap: left promiscuous mode [ 249.881877][ T2471] veth0_macvtap: left promiscuous mode [ 249.887609][ T2471] veth1_vlan: left promiscuous mode [ 249.893346][ T2471] veth0_vlan: left promiscuous mode [ 250.113156][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 250.471821][ T2471] team0 (unregistering): Port device team_slave_1 removed [ 250.549733][ T2471] team0 (unregistering): Port device team_slave_0 removed [ 250.838775][ T5133] Bluetooth: hci8: command tx timeout [ 251.112203][T10964] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.120134][T10964] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.127911][T10964] bridge_slave_0: entered allmulticast mode [ 251.136226][T10964] bridge_slave_0: entered promiscuous mode [ 251.145682][T10964] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.153629][T10964] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.161018][T10964] bridge_slave_1: entered allmulticast mode [ 251.172974][T10964] bridge_slave_1: entered promiscuous mode [ 251.415678][T10964] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.429638][T10964] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.437046][T11046] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.621559][T10964] team0: Port device team_slave_0 added [ 251.647752][T10964] team0: Port device team_slave_1 added [ 251.661166][T10987] chnl_net:caif_netlink_parms(): no params data found [ 251.792010][T11057] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 251.823570][T10964] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 251.830544][T10964] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 251.874455][ T5133] Bluetooth: hci5: command tx timeout [ 251.942767][T10964] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 251.997469][T10964] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.023844][T10964] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.070686][T10964] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.183555][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 252.193825][T10987] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.200981][T10987] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.209014][T10987] bridge_slave_0: entered allmulticast mode [ 252.219250][T10987] bridge_slave_0: entered promiscuous mode [ 252.318267][ T2471] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.338628][T10987] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.346954][T10987] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.354365][T10987] bridge_slave_1: entered allmulticast mode [ 252.365671][T10987] bridge_slave_1: entered promiscuous mode [ 252.395973][T10964] hsr_slave_0: entered promiscuous mode [ 252.403526][T10964] hsr_slave_1: entered promiscuous mode [ 252.409724][T10964] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.417637][T10964] Cannot create hsr debugfs directory [ 252.471375][ T2471] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.543883][T10987] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.561235][T10987] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.603671][ T2471] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.718663][ T2471] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.829975][T10987] team0: Port device team_slave_0 added [ 252.865787][T10987] team0: Port device team_slave_1 added [ 252.886413][T11093] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.902969][ T5133] Bluetooth: hci8: command tx timeout [ 252.932594][T11095] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 253.019832][T10987] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.029069][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.071107][T10987] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.118125][T10987] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.133716][T10987] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.168751][T10987] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.479557][T10987] hsr_slave_0: entered promiscuous mode [ 253.488264][T10987] hsr_slave_1: entered promiscuous mode [ 253.504601][T10987] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.512192][T10987] Cannot create hsr debugfs directory [ 253.531261][ T2471] bridge_slave_1: left allmulticast mode [ 253.538096][ T2471] bridge_slave_1: left promiscuous mode [ 253.552039][ T2471] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.581048][ T2471] bridge_slave_0: left allmulticast mode [ 253.597682][ T2471] bridge_slave_0: left promiscuous mode [ 253.609054][ T2471] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.942801][ T5133] Bluetooth: hci5: command tx timeout [ 254.082044][ T2471] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 254.100806][ T2471] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 254.112404][ T2471] bond0 (unregistering): Released all slaves [ 254.135132][T11127] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 254.263237][ T5133] Bluetooth: hci2: command 0x0406 tx timeout [ 254.434804][T11134] xt_nfacct: accounting object `syz1' does not exists [ 254.794123][T11150] macvlan3: entered allmulticast mode [ 254.865816][ T2471] hsr_slave_0: left promiscuous mode [ 254.871888][ T2471] hsr_slave_1: left promiscuous mode [ 254.883575][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.891029][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.902575][ T2471] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.915267][ T2471] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.947708][ T2471] veth1_macvtap: left promiscuous mode [ 254.954506][ T2471] veth0_macvtap: left promiscuous mode [ 254.960113][ T2471] veth1_vlan: left promiscuous mode [ 254.966328][ T2471] veth0_vlan: left promiscuous mode [ 254.980779][T11159] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.4'. [ 254.992529][ T5133] Bluetooth: hci8: command tx timeout [ 255.303267][ T30] INFO: task syz-executor.3:6769 blocked for more than 143 seconds. [ 255.311321][ T30] Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 255.319513][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 255.328457][ T30] task:syz-executor.3 state:D stack:26272 pid:6769 tgid:6768 ppid:5119 flags:0x00004006 [ 255.338846][ T30] Call Trace: [ 255.342179][ T30] [ 255.346230][ T30] __schedule+0x17e8/0x4a20 2024/06/09 11:14:21 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 255.350846][ T30] ? __pfx___schedule+0x10/0x10 [ 255.356037][ T30] ? __pfx_lock_release+0x10/0x10 [ 255.380906][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 255.386742][ T30] ? schedule+0x90/0x320 [ 255.391095][ T30] schedule+0x14b/0x320 [ 255.409638][ T30] schedule_preempt_disabled+0x13/0x30 [ 255.421852][ T30] __mutex_lock+0x6a4/0xd70 [ 255.432788][ T30] ? __mutex_lock+0x527/0xd70 [ 255.437518][ T30] ? nfsd_nl_listener_get_doit+0x115/0x5d0 [ 255.453607][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 255.458673][ T30] ? __asan_memset+0x23/0x50 [ 255.472771][ T30] nfsd_nl_listener_get_doit+0x115/0x5d0 [ 255.478462][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 255.493185][ T30] ? genl_family_rcv_msg_attrs_parse+0x140/0x290 [ 255.501337][ T30] genl_rcv_msg+0xb14/0xec0 [ 255.518432][ T30] ? mark_lock+0x9a/0x350 [ 255.527531][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.532628][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 255.538134][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 255.560779][ T30] ? __pfx___might_resched+0x10/0x10 [ 255.566959][ T30] netlink_rcv_skb+0x1e3/0x430 [ 255.571747][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 255.576981][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 255.582302][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 255.587979][ T30] genl_rcv+0x28/0x40 [ 255.591980][ T30] netlink_unicast+0x7ea/0x980 [ 255.598861][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 255.604399][ T30] ? __virt_addr_valid+0x183/0x520 [ 255.609540][ T30] ? __check_object_size+0x49c/0x900 [ 255.622699][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 255.627858][ T30] netlink_sendmsg+0x8db/0xcb0 [ 255.632636][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.648003][ T30] ? __import_iovec+0x536/0x820 [ 255.662693][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 255.667674][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 255.682695][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 255.688234][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 255.702686][ T30] __sock_sendmsg+0x221/0x270 [ 255.707421][ T30] ____sys_sendmsg+0x525/0x7d0 [ 255.712197][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 255.733343][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 255.737986][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 255.752728][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 255.759084][ T30] ? do_syscall_64+0x100/0x230 [ 255.776599][ T30] ? do_syscall_64+0xb6/0x230 [ 255.781462][ T30] do_