last executing test programs: 36.947445012s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={0x0, @in={{0x2, 0x0, @empty}}}, 0x90) r1 = socket$inet(0x2, 0x6, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000900)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}], 0x20) (async, rerun: 64) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000580)={0x7}, 0xe) (async) recvmmsg(r2, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)=""/77, 0x4d}], 0x1}}], 0x1, 0x0, 0x0) (async) syz_emit_ethernet(0x7e, &(0x7f00000003c0)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x3, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x0, @broadcast, @rand_addr, {[@timestamp_addr={0x44, 0x1c, 0x0, 0x1, 0x0, [{@multicast2}, {@empty}, {@empty}]}, @cipso={0x86, 0x21, 0x0, [{0x0, 0xd, "34abeec8d03ff1a8b8835e"}, {0x0, 0xe, "4ef661e96b4014469f350a42"}]}]}}}}}}}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000180)={0x0, 0x7, 0x8000}, 0x8) (async, rerun: 32) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async, rerun: 32) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x4c, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}]}]}, 0x4c}}, 0x0) (async, rerun: 32) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000140)={0x0, r1, 0x5, 0x800, 0xfffffffffffffff8, 0x8001}) (async, rerun: 32) getsockopt$IPT_SO_GET_REVISION_TARGET(r1, 0x0, 0x43, &(0x7f00000000c0)={'ah\x00'}, &(0x7f0000000100)=0x1e) 36.846874241s ago: executing program 2: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xa, 0x20}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e21, 0x7fff, @remote, 0x13b}}, 0x6, 0x4}, &(0x7f00000001c0)=0x90) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000000)=@ethtool_ts_info}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34000841) sendmsg(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001940)=[{0x0, 0xeffdffff}], 0x1}, 0x0) close(0xffffffffffffffff) 36.754054964s ago: executing program 2: connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000280)=ANY=[@ANYBLOB="240000002100000100000000feffffff0a000000000000000000002008000a00f8050000"], 0x24}}, 0x5) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18ff00000d0e9a74ff6afed7f7910000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) socket(0x11, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmmsg$inet6(r2, &(0x7f0000001c40)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x6}, 0x1c, &(0x7f0000000080)=[{&(0x7f0000000480)="dc", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f0000000380)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000680)=ANY=[@ANYBLOB, @ANYRES16=0x0, @ANYBLOB="00082bbdf000fbdbdf25170000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000300000008000b008c000000060016007f00000005001200100000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100100008000b00c6ad000006001600d10000000500120001000000"], 0x94}, 0x1, 0x0, 0x0, 0x24004804}, 0x20800) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='fsi_master_gpio_crc_cmd_error\x00', r1}, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$kcm(0xa, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001240)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000001811"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000000)={'wpan1\x00', 0x0}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r8, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)={0x38, r9, 0x53555446950a601f, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x1c, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0xc, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x38}}, 0x0) r10 = socket(0x10, 0x3, 0x0) r11 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@delchain={0x44, 0x65, 0x20, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r12, {0xa, 0xf}, {0x0, 0xb}, {0x0, 0xfff1}}, [@TCA_RATE={0x6, 0x5, {0x20, 0x8}}, @TCA_RATE={0x6, 0x5, {0x3f, 0x20}}, @TCA_CHAIN={0x8, 0xb, 0x20}, @TCA_CHAIN={0x8, 0xb, 0x9}]}, 0x44}}, 0x0) sendmsg$kcm(r5, &(0x7f00000017c0)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @loopback={0x0, 0xac14140a}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000200)='%', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000084"], 0x18}, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000002c0)=0x908, 0x4) 36.518890022s ago: executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000980)=@newqdisc={0x38, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_fq={{0x7}, {0xa, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8}]}}]}, 0x38}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="c8", 0x1, 0x0, 0x0, 0x0) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x10, &(0x7f00000000c0)={r5}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r3, 0x84, 0x84, &(0x7f00000002c0)={r6, @in={{0x2, 0x0, @empty}}}, &(0x7f0000000380)=0x9c) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}, @IFLA_GROUP={0x8}]}, 0x3c}}, 0x0) 36.379365626s ago: executing program 1: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x38) sendmsg$nl_route(r5, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32=r6], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000002c0)=""/18, 0x1000000, 0x1800, 0x0, 0x3}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r5, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r8], 0x20}, 0x1, 0x6}, 0x0) 36.223025505s ago: executing program 3: pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32=0xffffffffffffffff, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) bpf$MAP_CREATE(0x0, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b708"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='scsi_dispatch_cmd_start\x00', r7}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r8, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r8, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x71, &(0x7f00000000c0), 0x8) write$cgroup_pid(r5, &(0x7f0000000980), 0x12) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYRESOCT=r2], 0x3c}}, 0x0) r9 = socket$inet_udp(0x2, 0x2, 0x0) close(r9) socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000030601080000001000000000050000090500010007000000"], 0x1c}, 0x1, 0x0, 0x0, 0x4010}, 0x4040) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="ff00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f00000000c0)={0x2, 0xb5, "c5e70f73822cba09483b9e4d195c74f04d4ee5ecc97b1d2ffb5b9f1769d83f180d931ffb779e4cf5211f5eb542ac0fd48140d9347ad92252ecf04c4d9dfa288473b0047f8a8c02cdbbecf06e0eccc83f79117a4470879e303af6e7d9ff7921f2cf35e86b718c4437c41aa0c0e790fd5b3a51dee04a2afffa975b5fd3637feefce27580643defe3f584da4716b23416e553b55cc9f514703a6422a43b8265a0795a1727167039c779571ca0a2ae1da05813cd2da533"}) splice(r0, 0x0, r9, 0x0, 0x4ffe2, 0x0) 36.108549546s ago: executing program 1: socket$key(0xf, 0x3, 0x2) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r0, 0x10e, 0xb, &(0x7f0000000340)={0x2}, 0x10) sendmsg$NFT_MSG_GETSETELEM(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="24000000080a0500"], 0x24}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x18, &(0x7f0000000580)=0x10000008, 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @remote}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x2, 0x9, &(0x7f00000005c0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000dd75ab17b10eb0b934a972fe2d12b40b24e3f334552209cca56997450983c5d9fc2a06e013bbcb6895eaa9dca1c96dc232699cf9ea62c0fb26a5f8622b315ddd44514ef6feb0d491c26909631ba86b9409e6b3c4317f04d3f9217680ca22080ea5c62a298acd6b1815ff5af6e42f07abfd0bc1f521583a95bd581c9b1dd0b986f07b27110c4f608d65afaff64bcf2ebd3f090058a6703b9e60df5d635f5d1a94f37b53dd1960daea56f7211c0853611520d20bb32e80d338c7d3fb80e8fa5d", @ANYRES32, @ANYBLOB="0000000000000000b70300000000000085000000ae000000b70000000000000085100000030000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x40, r4, 0x1, 0x0, 0x0, {0x2, 0x2, 0x2}, [@SMC_PNETID_IBNAME={0x9, 0x3, 'syz2\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'ip6_vti0\x00'}]}, 0x40}, 0x1, 0x40030000000000}, 0x0) 36.022477812s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001100)={0x60, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20000010}, 0x50) 35.982175502s ago: executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f00000006c0), 0xffffffffffffffff) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, 0x0, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0x14, 0x30, 0xb}, 0x14}}, 0x0) sendfile(r3, r4, 0x0, 0x7ffff000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r6, &(0x7f0000000580)="03", 0x34000, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0x22, 0x0, 0x0) 35.8338712s ago: executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) (async) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000040)=0x3) (async) ioctl$sock_SIOCGIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f00000000c0)) 35.651304242s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/12, 0xc) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000200)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x138, 0x0, 0x300, 0x70bd28, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x20, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5, 0xd, 0x1}, @IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@local}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x9}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x9}, @IPVS_CMD_ATTR_DAEMON={0x18, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'netpci0\x00'}]}, @IPVS_CMD_ATTR_DEST={0x4}, @IPVS_CMD_ATTR_DAEMON={0xc, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb76}]}, @IPVS_CMD_ATTR_SERVICE={0x60, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x4}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x0, 0x2}}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x7d}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x2}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x2c}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}]}, @IPVS_CMD_ATTR_SERVICE={0x6c, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8, 0x8, 0x8}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv6=@local}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@empty}, @IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_FWMARK={0x8, 0x5, 0x3}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@rand_addr=0x64010101}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@multicast2}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x8080}, 0x24004051) 35.585378373s ago: executing program 2: r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x800, 0x0, 0x4}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYRESOCT=r0, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x7, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000003808500000019000000bc0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000b7000000000000009500"/96], &(0x7f0000000200)='syzkaller\x00'}, 0x90) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0x0, 0x0}) setsockopt$sock_attach_bpf(r3, 0x10e, 0x2, 0x0, 0x0) (async) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, 0x0, 0x0) 35.480635646s ago: executing program 4: socket$l2tp6(0xa, 0x2, 0x73) socketpair$nbd(0x1, 0x1, 0x0, 0x0) connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r0) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x7000000, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x24}}, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 35.343666463s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0x5, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x8}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x1c, r2, 0x305, 0x0, 0x0, {0x7}, [@BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x1c}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000180)={'gretap0\x00', 0x0, 0x80, 0x40, 0x101, 0x401, {{0x1c, 0x4, 0x3, 0x9, 0x70, 0x65, 0x0, 0x2, 0x4, 0x0, @broadcast, @broadcast, {[@ssrr={0x89, 0x23, 0x37, [@multicast1, @private=0xa010101, @private=0xa010102, @loopback, @rand_addr=0x64010100, @remote, @remote, @local]}, @lsrr={0x83, 0x1f, 0xc7, [@dev={0xac, 0x14, 0x14, 0xe}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @multicast1, @broadcast, @multicast2, @private=0xa010101]}, @noop, @generic={0x89, 0xa, "d9526de7a360ffec"}, @lsrr={0x83, 0xb, 0xca, [@multicast1, @dev={0xac, 0x14, 0x14, 0x26}]}, @noop]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x58, r2, 0x10, 0x70bd25, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3f}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xfff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x63e2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0xff}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000010}, 0x4000) 35.279217413s ago: executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89fa, 0x0) socket$alg(0x26, 0x5, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_SIOCGIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8982, 0x0) socket(0x0, 0x0, 0x0) setsockopt$inet_dccp_int(0xffffffffffffffff, 0x10d, 0xe, 0x0, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000180)={'pim6reg0\x00', 0x7}) r0 = socket$kcm(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6394f90224fc60100005000a000200053582c137153e37000c0180fc0b1000", 0x2c}], 0x1}, 0x0) 35.172892711s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e1, &(0x7f0000015740)={0xffffffffffffffff}) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x110, 0xa, 0x148, 0x110, 0x10, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x3c0, 0xf0, 0x110, 0x70, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'vlan1\x00', {0x0, 0x0, 0x0, 0x11000000, 0x0, 0xffffffff, 0x7}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'batadv_slave_1\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x350) r4 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r4) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r2) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0xc0, r5, 0x21a, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7b}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc444}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x802) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'vmac64(aes-generic)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) (async) socket$kcm(0x29, 0x5, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e1, &(0x7f0000015740)) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0x110, 0xa, 0x148, 0x110, 0x10, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x3c0, 0xf0, 0x110, 0x70, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'vlan1\x00', {0x0, 0x0, 0x0, 0x11000000, 0x0, 0xffffffff, 0x7}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}, {{@ip={@empty, @loopback, 0x0, 0x0, 'batadv_slave_1\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@osf={{0x50}, {'syz1\x00'}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x350) (async) accept4(r0, 0x0, 0x0, 0x0) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r4) (async) syz_genetlink_get_family_id$mptcp(&(0x7f00000003c0), r2) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0xc0, r5, 0x21a, 0x70bd2b, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7b}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x40, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x3}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x4}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x20}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xc444}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @broadcast}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010101}]}]}, 0xc0}, 0x1, 0x0, 0x0, 0x800}, 0x802) (async) 35.00166748s ago: executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xa, 0x20}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e21, 0x7fff, @remote, 0x13b}}, 0x6, 0x4}, &(0x7f00000001c0)=0x90) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000000)=@ethtool_ts_info}) socket$inet6(0xa, 0x2, 0x3a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34000841) sendmsg(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001940)=[{0x0, 0xeffdffff}], 0x1}, 0x0) close(0xffffffffffffffff) 34.969596388s ago: executing program 3: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000003c0)=ANY=[@ANYBLOB="000000040bffffffffffbbbbbbbbbbbb08"], 0x3e) 34.920196849s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x48641, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket(0x1e, 0x4, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) sendmmsg$unix(r2, &(0x7f0000004400), 0x400000000000203, 0x0) getsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000), &(0x7f0000000140)=0x4) r3 = socket$inet(0x10, 0x80003, 0x0) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020c010a1f05fe060c10080008000f00fff3c00e140000001a00ffffba16a0aa1c09000014000000", 0x38}], 0x1}, 0x0) unshare(0x28000600) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0x5, &(0x7f00000027c0)=ANY=[@ANYBLOB="180000000000000000000000ff000000850000000f000000850000005000000095"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, &(0x7f0000005c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff7e}, 0x48) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000000100)={0x0, ""/256, 0x0, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, &(0x7f0000004c00)={{r6, 0x0, 0x1000, 0x0, 0x7f, 0x8, 0x1000000001f, 0x3, 0x6, 0x40000000, 0x100, 0x1, 0x3, 0xcd}}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000004b9c0)={0x0, 0x0, "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", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, &(0x7f000004ca80)={0x4, [{}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {}, {r6, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {r9, r10}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {}, {}, {r6}, {}, {}, {r6}, {}, {}, {r6}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {r11}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r8}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r9}, {}, {r9}, {0x0, r8}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {r7}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, r10}, {}, {}, {}, {r7}, {0x0, r8}], 0x0, "6de363564627fe"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kfree\x00'}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f0000000100)) ioctl$BTRFS_IOC_TREE_SEARCH(0xffffffffffffffff, 0xd0009411, 0x0) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f000004b9c0)={0x0, 0x0, "63936736e7bf47295ddb38a39660ec40c0680497beab3a950162982ff34b5ea70f521a0c41a9b8d7af9c764636a01ccb949359fb3505a17234e554753ff9a4996a12b9c9b1f400abdb6d5df3076a123d5016a58c3158673401ae99833e351a72cbe91a9967335bcaeba075944d90a6d413b86cdfc6d9dd89bb47da7c23b78d0b7db34d73d4f6ac254f4bf5015da8446835b905f62b2159eaf3177779868147e4ad9a88b4b67ef3e2e66d386dd8783ec7a870a0ab2394d33f3a9b310a2ffef143514f6608323b86fa119f5623b760d4e7dcdee4b7f4a1b87a68b63ff70cfa61a49112285391f3ed9625f7c7a2b568e2c36879e4d2413ee4c77cb9cc87e20b45cd", "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"}) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(0xffffffffffffffff, 0xd000943d, 0x0) socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) 34.840202747s ago: executing program 0: socket$phonet(0x23, 0x2, 0x1) socket$nl_route(0x10, 0x3, 0x0) socket$igmp(0x2, 0x3, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x14, r1, 0x0, 0x0, 0x0, {0x4, 0x2, 0x2}}, 0x14}, 0x1, 0x40030000000000}, 0x0) 34.830410574s ago: executing program 4: connect$l2tp6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000140)={0x0, 0x7, &(0x7f0000000000)={&(0x7f0000000180)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @multicast1}]}, 0x24}}, 0x0) 34.707817604s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 34.696162586s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000a40), 0xffffffffffffffff) sendmsg$TEAM_CMD_PORT_LIST_GET(r0, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000001100)={0x20, r1, 0x1, 0x0, 0x0, {}, [{{0x8}, {0x4}}]}, 0x20}}, 0x50) 34.684212605s ago: executing program 3: socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_PKTINFO(r0, 0x10e, 0x3, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000004c0)=ANY=[@ANYBLOB="2c06000000000000fe883a37c106191aba040000000000000000000000000000000000000101fe880000000000000000000000000001ff013da505c81e41f1d90f79f9d780becb9dfb9b67a083f622c06ce58c03633b2c33994a4eea1485e1f5f46ccafef503159074960aae7bdc107869474a99d8415e8ed856774e1bbae8742e506b502be131acd6722c98a2c59b8593a2bf8baee5449dd9cb84866df671eaa22805d6086b4993e6901f0dcdd4b33ffc8455e18e878aaa15e2eb9e096f945d003430a4e76febdd1458981fba790aa5987036b5f9f8a3f98d978dafbb83f73449fa53db1f2bdf59ac13c86cfc25349d2ccecd69d65ad2ac3eb37f76a41c57dbf297757137d106e4dad969deafdebcfd32"], 0x38) sendmsg$nl_route(r6, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r5], 0x50}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000780)=ANY=[@ANYBLOB="500000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100030000000c0002001c0000000f00000008000500", @ANYRES32], 0x50}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000100)) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f00000002c0)=""/18, 0x1000000, 0x1800, 0x0, 0x3}, 0x20) setsockopt$XDP_TX_RING(0xffffffffffffffff, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r6, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x1b) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000640)=ANY=[@ANYBLOB="2000000011000d04000000000800000000000000", @ANYRES32=r8], 0x20}, 0x1, 0x6}, 0x0) 34.571791655s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYRESHEX=r0], 0x0, 0x4a}, 0x20) bind$alg(0xffffffffffffffff, &(0x7f00000023c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000000c0)={@multicast1, @remote, 0x0}, &(0x7f0000000340)=0xc) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="dcd782262a53e4f73e9c76716082eab41500000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', r1, 0xe}, 0x90) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r2}, 0xc) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5}, 0x10) read$alg(r4, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r4, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 30.027160675s ago: executing program 0: r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet6_udplite(0xa, 0x2, 0x88) r3 = socket(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x30, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(0xffffffffffffffff, 0x0, 0x20000000) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f000000bb00)={{{@in=@private, @in6=@remote}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f000000bc00)=0xe8) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r6, &(0x7f0000000200)=ANY=[@ANYBLOB='\'\x00\x00\x00\a'], 0xd) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r7, 0x1, 0x49, 0x0, 0x20000000) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000000c0)=[{&(0x7f0000000040)="3900000013001118680907071200000f0000ff3f21000000170a001700000000040014000900030001352564aa25b9a64411f6bbf44dc48f57", 0x39}], 0x1) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x40012, r1, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) getsockopt$SO_J1939_SEND_PRIO(r0, 0x6b, 0x3, &(0x7f00000000c0), &(0x7f0000000240)=0x4) 4.857135427s ago: executing program 1: socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r0, 0x84, 0x1, &(0x7f0000000500)=""/4067, &(0x7f00000004c0)=0xfe3) 4.693693579s ago: executing program 4: ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00'}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000020240), 0x10010) r2 = socket(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x24, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @local}}}, &(0x7f0000003c00)=0x90) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r1, 0x0) r4 = socket$kcm(0x29, 0x2, 0x0) recvmsg$kcm(r4, &(0x7f0000000140)={&(0x7f0000000080)=@ieee802154={0x24, @short}, 0x80, &(0x7f0000000500)=[{&(0x7f0000000240)=""/81, 0x51}, {&(0x7f00000002c0)=""/98, 0x62}, {&(0x7f0000000340)=""/127, 0x7f}, {&(0x7f00000003c0)=""/84, 0x54}, {&(0x7f0000000440)=""/147, 0x93}], 0x5, &(0x7f0000000580)=""/195, 0xc3}, 0x40000003) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000dc0)={0x228, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x00\x00'}]}, @generic="14600881322e0bcfc4b63b484807da3f064fa2598e8efb51ad59cf2ca207bd4f3676df895affb36e772687d19a5075c3cbb001e0d7cbc1e7f41c8bc4ed9d49501188d5e46f81a9524d792352", @generic="a5b92fb41c0ca8b41d78818b830d9b90bdfb6aefcf6b98269806a5841afeba1546faac9b1adbb700bfd7c09ec21325e8ba86f65281a0e40a5928bd381ef0951b44736abe8d9cbcc7c463295de8d88039b86909070bea0459d330a379adda10fb1d8bb087155629516a964746d7848d7e68181f0c1cfdaaa402fc023c2d81151ecf2153b390540257617f37fbedb94a26242996339894aeb1cc92f76e554271aa10efc2dd12c199df5afff11a32e72239355484059f4ddb4299566cc15bdbe6a8b6", @nested={0xf1, 0x82, 0x0, 0x1, [@generic="f20aee35f73f3570ddbf4017c8ce29d6d38e5153ab2477f3609b8cab35c632462f01687d81a5c493468890435de72e6e7b9e5c00897dbe2758654421bc56722b309e957970aa8246d2d4cbd991cea29de3a720e440abd843d9c364c45af000f9db34803d832b5e21498f5b7acd011960ddd3f012500ca642b7960cc074484cd1f429605fc36ee38bc4df9a03264e954b8445f6fb93728115309fae83f087f624e493f2703beb56620602b36d5769635fe2b26507bc7d01626d729d0ed79bfd5425218569a6efca7a3d91c99b62f80fbee359f1cea15f48c106eed57a62198b43792d388243d002347b359efa00"]}]}, 0x228}}, 0x0) 4.658715142s ago: executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r4 = socket$inet_udp(0x2, 0x2, 0x0) close(r4) (async) unshare(0x20000400) r5 = socket(0x15, 0x5, 0x0) setsockopt$inet_sctp_SCTP_PR_SUPPORTED(r5, 0x114, 0x5, 0x0, 0x0) (async, rerun: 64) r6 = socket(0x2, 0x3, 0x21) (rerun: 64) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) (async) write$binfmt_misc(r3, &(0x7f0000000040)=ANY=[], 0xfffffecc) (async) splice(r2, 0x0, r4, 0x0, 0x8004, 0x0) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) (async, rerun: 64) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (rerun: 64) ioctl$PPPIOCATTACH(r7, 0x4004743d, &(0x7f0000000040)=0x3) (async, rerun: 64) r8 = epoll_create1(0x0) (async, rerun: 64) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x15, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@generic={0x4, 0x3, 0x7, 0x40, 0x9}, @generic={0x1, 0x3, 0x0, 0x81, 0x3}, @generic={0x2, 0x3, 0x9, 0x20, 0x6}, @map_fd={0x18, 0xb, 0x1, 0x0, r3}, @ldst={0x3, 0x1, 0x1, 0x5, 0x5, 0x8, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000240)='GPL\x00', 0x1, 0xbc, &(0x7f0000000280)=""/188, 0x41000, 0x4, '\x00', 0x0, 0x0, r3, 0x8, &(0x7f0000000340)={0x3, 0x3}, 0x8, 0x10, &(0x7f0000000380)={0x5, 0xb, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x685d}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000140)='rpc_call_rpcerror\x00', r9}, 0x10) (async) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r7, &(0x7f00000000c0)={0x90000000}) 0s ago: executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0xa, 0x20}, &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, &(0x7f0000000280)={r1, @in6={{0xa, 0x4e21, 0x7fff, @remote, 0x13b}}, 0x6, 0x4}, &(0x7f00000001c0)=0x90) r2 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'bond0\x00', &(0x7f0000000000)=@ethtool_ts_info}) socket$inet6(0xa, 0x2, 0x3a) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34000841) sendmsg(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001940)=[{0x0, 0xeffdffff}], 0x1}, 0x0) close(0xffffffffffffffff) kernel console output (not intermixed with test programs): : 'syz-executor.4': attribute type 4 has an invalid length. [ 290.606528][T14613] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 290.860133][T14628] bridge0: port 3(team0) entered blocking state [ 290.876106][T14628] bridge0: port 3(team0) entered disabled state [ 290.882702][T14628] team0: entered allmulticast mode [ 290.890516][T14628] team_slave_0: entered allmulticast mode [ 290.906865][T14628] team_slave_1: entered allmulticast mode [ 290.922436][T14631] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 290.929302][T14628] team0: entered promiscuous mode [ 290.945000][T14628] team_slave_0: entered promiscuous mode [ 290.974055][T14628] team_slave_1: entered promiscuous mode [ 290.989394][T14628] bridge0: port 3(team0) entered blocking state [ 290.995854][T14628] bridge0: port 3(team0) entered forwarding state [ 291.019651][T14633] team_slave_0: left promiscuous mode [ 291.038788][T14633] team_slave_0: left allmulticast mode [ 291.161253][T14633] team0: Failed to send options change via netlink (err -105) [ 291.179592][T14633] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 291.196799][T14633] team0: Port device team_slave_0 removed [ 291.260880][T14646] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 291.553315][T14664] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 291.607617][ T29] audit: type=1804 audit(1718160873.876:19): pid=14668 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir528901636/syzkaller.e3CiCl/215/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 291.614592][T14670] xt_hashlimit: max too large, truncated to 1048576 [ 291.738286][T14670] xt_socket: unknown flags 0x4 [ 291.759536][T14676] bridge0: port 3(team0) entered blocking state [ 291.766284][T14676] bridge0: port 3(team0) entered disabled state [ 291.779310][T14676] team_slave_0: left allmulticast mode [ 291.789369][T14676] team_slave_0: left promiscuous mode [ 291.814647][T14672] xt_l2tp: unknown flags: 10 [ 291.829502][T14676] team0: Failed to send options change via netlink (err -105) [ 291.846647][T14676] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 291.859648][T14676] team0: Port device team_slave_0 removed [ 292.285544][T14679] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 292.302280][T14681] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.320237][T14679] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 292.332819][T14679] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 292.385408][T14682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.393995][T14679] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 292.489040][T14682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 292.832945][ T29] audit: type=1804 audit(1718160875.096:20): pid=14702 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3656129864/syzkaller.qI3sDR/545/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 293.001714][T14707] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.270650][T14715] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.304394][T14715] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 293.371068][T14715] mac80211_hwsim hwsim32 wlan1: entered promiscuous mode [ 293.386384][T14715] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 293.399529][T14725] bridge0: port 3(team0) entered blocking state [ 293.428719][T14725] bridge0: port 3(team0) entered disabled state [ 293.466217][T14725] team0: entered allmulticast mode [ 293.471388][T14725] team_slave_0: entered allmulticast mode [ 293.488607][T14725] team_slave_1: entered allmulticast mode [ 293.494657][T14725] hsr_slave_0: entered allmulticast mode [ 293.502426][T14725] team0: entered promiscuous mode [ 293.508010][T14725] team_slave_0: entered promiscuous mode [ 293.514028][T14725] team_slave_1: entered promiscuous mode [ 293.519899][T14725] hsr_slave_0: entered promiscuous mode [ 293.536882][T14725] bridge0: port 3(team0) entered blocking state [ 293.543251][T14725] bridge0: port 3(team0) entered forwarding state [ 293.567896][T14729] team_slave_0: left promiscuous mode [ 293.583718][T14729] team_slave_0: left allmulticast mode [ 293.636946][T14729] team0: Failed to send options change via netlink (err -105) [ 293.646086][T14729] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 293.657550][T14729] team0: Port device team_slave_0 removed [ 293.825594][T14745] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.836200][T14745] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 293.851120][T14742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 293.906952][T14742] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.826887][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 294.836688][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 294.844978][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 294.860807][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 294.869743][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 294.878614][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 294.951724][T10579] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.973726][T14795] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.051880][T14787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.086206][T10579] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.121822][T14787] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.178406][T10579] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.293017][T10579] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.342345][T14789] chnl_net:caif_netlink_parms(): no params data found [ 295.452595][T14789] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.464473][T14789] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.472098][T14789] bridge_slave_0: entered allmulticast mode [ 295.484181][T14789] bridge_slave_0: entered promiscuous mode [ 295.497650][T10579] team0: left allmulticast mode [ 295.502906][T10579] team_slave_1: left allmulticast mode [ 295.510156][T10579] hsr_slave_0: left allmulticast mode [ 295.516003][T10579] team0: left promiscuous mode [ 295.520975][T10579] team_slave_1: left promiscuous mode [ 295.526763][T10579] hsr_slave_0: left promiscuous mode [ 295.532405][T10579] bridge0: port 3(team0) entered disabled state [ 295.541129][T10579] bridge_slave_1: left allmulticast mode [ 295.547135][T10579] bridge_slave_1: left promiscuous mode [ 295.552932][T10579] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.563418][T10579] bridge_slave_0: left allmulticast mode [ 295.569473][T10579] bridge_slave_0: left promiscuous mode [ 295.576725][T10579] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.816058][T14821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.900679][T14821] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 295.980861][T14824] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.077885][T10579] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.090347][T10579] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 296.106476][T10579] bond0 (unregistering): Released all slaves [ 296.120104][T14789] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.135177][T14789] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.142374][T14789] bridge_slave_1: entered allmulticast mode [ 296.186015][T14789] bridge_slave_1: entered promiscuous mode [ 296.298109][T14826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.301811][T14789] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.361895][T14789] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.390320][T14826] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.482186][T14789] team0: Port device team_slave_0 added [ 296.494655][T14828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 296.511073][T14835] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 296.565927][T14789] team0: Port device team_slave_1 added [ 296.659340][T10579] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 296.678295][T10579] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 296.689642][T10579] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 296.697174][T10579] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 296.721434][T10579] veth1_macvtap: left promiscuous mode [ 296.735403][T10579] veth0_macvtap: left promiscuous mode [ 296.740982][T10579] veth1_vlan: left promiscuous mode [ 296.747758][T10579] veth0_vlan: left promiscuous mode [ 296.977638][ T5119] Bluetooth: hci2: command tx timeout [ 297.010349][ T29] audit: type=1804 audit(1718160879.276:21): pid=14850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir386796932/syzkaller.R94X0t/324/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 297.092181][ T29] audit: type=1804 audit(1718160879.356:22): pid=14851 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir386796932/syzkaller.R94X0t/324/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 297.252150][T14855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.322396][T14855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.336853][T10579] team0 (unregistering): Port device hsr_slave_0 removed [ 297.397718][T14856] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 297.458436][T10579] team0 (unregistering): Port device team_slave_1 removed [ 297.892961][T14789] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.900149][T14789] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.929463][T14789] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.953416][T14789] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.968107][T14789] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.996465][T14789] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 298.024847][T14849] __nla_validate_parse: 1 callbacks suppressed [ 298.024864][T14849] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.197338][T14789] hsr_slave_0: entered promiscuous mode [ 298.205778][T14789] hsr_slave_1: entered promiscuous mode [ 298.404275][T14870] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 298.459340][T14870] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 298.505816][T14870] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.568788][ T29] audit: type=1800 audit(1718160880.836:23): pid=14876 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 298.601630][T14877] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.656741][T14881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.779728][T14878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 298.877331][T14881] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.066505][ T5121] Bluetooth: hci2: command tx timeout [ 299.146403][T14789] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 299.166310][T14789] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 299.194471][T14789] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 299.218277][T14789] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 299.551507][T14897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.597385][T14789] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.651799][T14894] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 299.717409][T14789] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.740874][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.748102][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.817123][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.824304][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.897036][ T29] audit: type=1804 audit(1718160882.156:24): pid=14903 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir528901636/syzkaller.e3CiCl/229/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 299.939377][T14789] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 299.985129][T14789] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 300.386597][T14789] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.658562][T10581] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.677192][T10581] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.728164][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 300.738243][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 300.747860][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 300.759436][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 300.766736][T14789] veth0_vlan: entered promiscuous mode [ 300.772649][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 300.781211][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 300.818856][T10581] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.829950][T10581] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.886539][T14789] veth1_vlan: entered promiscuous mode [ 300.948445][T10581] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 300.976926][T10581] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.072368][T10581] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 301.091829][T10581] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.135860][ T5114] Bluetooth: hci2: command 0x040f tx timeout [ 301.161246][T14789] veth0_macvtap: entered promiscuous mode [ 301.214522][T14789] veth1_macvtap: entered promiscuous mode [ 301.358936][T14789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.395252][T14789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.405447][T14789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.416270][T14789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.427223][T14789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.437918][T14789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.457518][T14789] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.529693][T14922] chnl_net:caif_netlink_parms(): no params data found [ 301.544902][T14789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.565186][T14789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.589713][T14789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.610248][T14789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.635260][T14789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.655257][T14789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.672127][T14789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.684687][T14933] x_tables: duplicate underflow at hook 3 [ 301.692945][T14789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.716305][T14789] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.745451][T14789] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.762821][T14789] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.835204][T14935] : renamed from bridge_slave_0 (while UP) [ 301.857472][T10581] bridge_slave_1: left allmulticast mode [ 301.873016][T10581] bridge_slave_1: left promiscuous mode [ 301.894024][T10581] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.921986][T10581] bridge_slave_0: left allmulticast mode [ 301.936283][T10581] bridge_slave_0: left promiscuous mode [ 301.944657][T10581] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.816048][ T5119] Bluetooth: hci3: command tx timeout [ 302.960963][T10581] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.980396][T10581] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 303.000681][T10581] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 303.019718][T10581] team0: left allmulticast mode [ 303.024607][T10581] team_slave_1: left allmulticast mode [ 303.034672][T10581] vlan3: left allmulticast mode [ 303.042078][T10581] hsr_slave_0: left allmulticast mode [ 303.055665][T10581] team_slave_1: left promiscuous mode [ 303.061612][T10581] hsr_slave_0: left promiscuous mode [ 303.076189][T10581] bond0 (unregistering): Released all slaves [ 303.220220][ T5119] Bluetooth: hci2: command 0x040f tx timeout [ 303.244140][T10581] bond1 (unregistering): Released all slaves [ 303.269701][T10581] bond2 (unregistering): Released all slaves [ 303.333081][T14789] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.375586][T14789] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.384630][T14789] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.416818][T14789] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.466854][T14941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.520809][T10581] : left promiscuous mode [ 303.708179][T14954] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 303.755109][T14922] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.762351][T14922] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.799996][T14922] bridge_slave_0: entered allmulticast mode [ 303.826474][T14922] bridge_slave_0: entered promiscuous mode [ 303.835386][T14922] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.842559][T14922] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.851378][T14922] bridge_slave_1: entered allmulticast mode [ 303.866175][T14922] bridge_slave_1: entered promiscuous mode [ 304.039647][T10581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.067430][T10581] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.074868][T10581] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.106878][T10581] veth1_macvtap: left promiscuous mode [ 304.112528][T10581] veth0_macvtap: left promiscuous mode [ 304.384349][T10581] pim6reg (unregistering): left allmulticast mode [ 304.456964][T10581] team0 (unregistering): Port device vlan3 removed [ 304.688179][T10581] team0 (unregistering): Port device hsr_slave_0 removed [ 304.787348][T10581] team0 (unregistering): Port device team_slave_1 removed [ 304.896307][ T5119] Bluetooth: hci3: command tx timeout [ 305.208822][T14922] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.256654][ T2872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.264589][ T2872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.298429][ T5119] Bluetooth: hci2: command 0x040f tx timeout [ 305.307008][T14922] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.410347][T14922] team0: Port device team_slave_0 added [ 305.432907][T14922] team0: Port device team_slave_1 added [ 305.543091][T14975] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.553326][T10573] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.573172][T10573] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.588005][T14922] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.601920][T14922] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.652866][T14922] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.681607][T14922] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.698111][T14922] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.726375][T14922] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.754953][T14980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.801868][T14980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.828016][T14922] hsr_slave_0: entered promiscuous mode [ 305.834408][T14922] hsr_slave_1: entered promiscuous mode [ 305.842382][T14922] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 305.850518][T14922] Cannot create hsr debugfs directory [ 306.211007][T14996] sctp: [Deprecated]: syz-executor.0 (pid 14996) Use of int in maxseg socket option. [ 306.211007][T14996] Use struct sctp_assoc_value instead [ 306.450241][T14922] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 306.479440][T14922] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 306.503634][T14922] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 306.525731][T14922] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.573574][T15011] netlink: 'syz-executor.2': attribute type 309 has an invalid length. [ 306.773508][T14922] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.782840][T15018] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.798510][T14922] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.815788][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.823025][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.840515][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.847730][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.908324][T14922] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 306.927977][T14922] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 306.989235][ T5119] Bluetooth: hci3: command tx timeout [ 307.226302][T15035] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 307.316714][T14922] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 307.402657][T14922] veth0_vlan: entered promiscuous mode [ 307.419912][T14922] veth1_vlan: entered promiscuous mode [ 307.464931][T14922] veth0_macvtap: entered promiscuous mode [ 307.478666][T14922] veth1_macvtap: entered promiscuous mode [ 307.500141][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.510903][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.520872][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.531402][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.541672][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.552178][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.569831][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 307.580322][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.592130][T14922] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.600650][T15047] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 307.610241][T15047] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 307.618966][T15047] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 307.631821][T15047] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.640770][T15047] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.649551][T15047] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.658284][T15047] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 307.668192][T15047] vxlan1: entered promiscuous mode [ 307.677085][T15042] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 307.699570][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.710333][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.722445][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.733736][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.743719][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.763810][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.777060][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.792006][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.803344][T14922] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.814148][T14922] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.829642][T14922] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.861593][T14922] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.873300][T14922] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.888024][T14922] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.899798][T14922] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.036430][T10579] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.044476][T10579] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.084867][T10579] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 308.105185][T10579] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 308.142471][T15057] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 308.191301][T15058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 308.191332][T15057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 308.404939][T15072] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 309.056290][ T5114] Bluetooth: hci3: command tx timeout [ 309.078534][T15102] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 309.088560][T15102] 0: renamed from hsr_slave_1 (while UP) [ 309.097091][T15102] 0: entered allmulticast mode [ 309.103321][T15102] A link change request failed with some changes committed already. Interface c0 may have been left with an inconsistent configuration, please check. [ 309.297592][ T5114] Bluetooth: hci1: command 0x0406 tx timeout [ 309.581806][T15116] dummy0: entered promiscuous mode [ 309.599926][T15116] macsec2: entered allmulticast mode [ 309.611939][T15116] dummy0: entered allmulticast mode [ 309.697694][T15125] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 309.715215][T15125] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 309.939653][T15116] dummy0: left allmulticast mode [ 309.944692][T15116] dummy0: left promiscuous mode [ 310.723785][T15138] syzkaller0: entered promiscuous mode [ 310.740953][T15138] syzkaller0: entered allmulticast mode [ 310.763528][T15149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.819261][T15149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.881832][T15154] Cannot find del_set index 4 as target [ 311.976929][T15167] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 311.991579][T15167] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 312.626446][T10573] bridge_slave_1: left allmulticast mode [ 312.643857][T10573] bridge_slave_1: left promiscuous mode [ 312.668215][T10573] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.743668][T10573] bridge_slave_0: left allmulticast mode [ 312.757421][T10573] bridge_slave_0: left promiscuous mode [ 312.764655][T10573] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.878225][T15183] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.387311][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.405419][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.420560][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.429430][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.438754][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 313.452077][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 313.839205][T10573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 313.850002][T10573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 313.863076][T10573] bond0 (unregistering): Released all slaves [ 314.378198][T15223] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.454111][T15229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.489750][ T6771] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 314.520315][ T6771] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 314.557150][T15229] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.575249][ T65] wlan1: authenticated [ 314.585227][T10579] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 314.621623][T15223] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.651220][T10579] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 314.653899][T15235] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.665484][T10579] wlan1: associated [ 314.819882][T15223] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.851254][T10573] hsr_slave_0: left promiscuous mode [ 314.863749][T10573] hsr_slave_1: left promiscuous mode [ 314.872151][T10573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 314.882701][T10573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 314.892077][T10573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 314.903624][T10573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 314.936587][T10573] veth0_macvtap: left promiscuous mode [ 314.942264][T10573] veth1_vlan: left promiscuous mode [ 314.954875][T10573] veth0_vlan: left promiscuous mode [ 315.258262][T15253] dccp_invalid_packet: P.Data Offset(172) too large [ 315.537168][ T5114] Bluetooth: hci2: command tx timeout [ 315.554634][T10573] team0 (unregistering): Port device team_slave_1 removed [ 315.598257][T10573] team0 (unregistering): Port device team_slave_0 removed [ 316.013768][T15223] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.206787][T15198] chnl_net:caif_netlink_parms(): no params data found [ 316.253390][T15223] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.292425][T15268] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 316.312318][T15267] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 316.319361][T15268] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.427830][T15223] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.511612][T15223] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.620205][T15223] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.852931][T15198] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.864736][T15198] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.873564][T15198] bridge_slave_0: entered allmulticast mode [ 316.882103][T15198] bridge_slave_0: entered promiscuous mode [ 316.887536][T15299] dccp_invalid_packet: P.Data Offset(172) too large [ 316.897671][T15198] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.912992][T15198] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.913811][T15293] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.920575][T15198] bridge_slave_1: entered allmulticast mode [ 316.939238][T15198] bridge_slave_1: entered promiscuous mode [ 316.996231][T10573] IPVS: stop unused estimator thread 0... [ 317.007741][T15301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.030395][T15198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.048141][T15297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.077527][T15198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.124226][T15297] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.184412][T15198] team0: Port device team_slave_0 added [ 317.196962][T15198] team0: Port device team_slave_1 added [ 317.271680][T15198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.290342][T15198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.324617][T15198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.352075][T15198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.362796][T15198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.398637][T15198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 317.454717][T10573] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.477457][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.486793][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.567753][T15198] hsr_slave_0: entered promiscuous mode [ 317.615966][ T5114] Bluetooth: hci2: command tx timeout [ 317.621908][T15198] hsr_slave_1: entered promiscuous mode [ 317.660418][T15198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.671379][T15198] Cannot create hsr debugfs directory [ 317.773831][T10573] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.051654][T10573] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.488637][T10573] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.648550][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.667318][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.676995][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.688392][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.706292][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 318.713633][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.773165][T15352] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 318.884778][T15355] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 319.008431][T15361] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 319.056631][T10573] bridge_slave_1: left allmulticast mode [ 319.063380][T10573] bridge_slave_1: left promiscuous mode [ 319.070392][T10573] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.082274][T10573] bridge_slave_0: left allmulticast mode [ 319.096118][T10573] bridge_slave_0: left promiscuous mode [ 319.108595][T10573] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.509709][T10573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.521265][T10573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.531753][T10573] bond0 (unregistering): Released all slaves [ 319.695968][ T5114] Bluetooth: hci2: command tx timeout [ 319.881783][T15387] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 320.083686][T10573] hsr_slave_0: left promiscuous mode [ 320.105145][T10573] hsr_slave_1: left promiscuous mode [ 320.117628][T10573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.125658][T10573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.137389][T10573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.144817][T10573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.193784][T15401] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 320.217085][T10573] veth1_macvtap: left promiscuous mode [ 320.243818][T10573] veth0_macvtap: left promiscuous mode [ 320.250473][T10573] veth1_vlan: left promiscuous mode [ 320.265623][T10573] veth0_vlan: left promiscuous mode [ 320.735500][ T5114] Bluetooth: hci4: command tx timeout [ 320.982907][T10573] team0 (unregistering): Port device team_slave_1 removed [ 321.030335][T10573] team0 (unregistering): Port device team_slave_0 removed [ 321.430635][T15414] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 321.520891][T15346] chnl_net:caif_netlink_parms(): no params data found [ 321.524556][T15426] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 321.666433][T15428] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 321.914678][ T5114] Bluetooth: hci2: command tx timeout [ 321.968606][T15198] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 322.079446][T15444] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.089293][T15444] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 322.157391][T15198] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 322.198057][T15198] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 322.230493][T15346] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.249510][T15346] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.268581][T15346] bridge_slave_0: entered allmulticast mode [ 322.286282][T15346] bridge_slave_0: entered promiscuous mode [ 322.300490][T15346] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.309718][T15346] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.321731][T15346] bridge_slave_1: entered allmulticast mode [ 322.329512][T15346] bridge_slave_1: entered promiscuous mode [ 322.347758][T15198] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 322.348491][T15458] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.434364][T15346] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.443131][T15455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.449405][T15346] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 322.528477][T15455] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.576480][T15464] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.601045][T15346] team0: Port device team_slave_0 added [ 322.637834][T15346] team0: Port device team_slave_1 added [ 322.751038][T10573] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 322.765436][T10573] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.810694][T15346] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.815284][ T5114] Bluetooth: hci4: command tx timeout [ 322.823269][T15346] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.849875][T15346] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.888411][T15346] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.903937][T15346] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.934433][T15346] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.003242][T10573] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.017229][T10573] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.082503][T15485] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 323.123403][T10573] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.138861][T10573] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.154376][T15488] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.257761][T15346] hsr_slave_0: entered promiscuous mode [ 323.266410][T15346] hsr_slave_1: entered promiscuous mode [ 323.304875][T10573] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 323.322550][T10573] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.393922][T15198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 323.503979][T15198] 8021q: adding VLAN 0 to HW filter on device team0 [ 323.654917][ T6770] bridge0: port 1(bridge_slave_0) entered blocking state [ 323.662160][ T6770] bridge0: port 1(bridge_slave_0) entered forwarding state [ 323.722986][T15506] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 323.740177][ T6771] bridge0: port 2(bridge_slave_1) entered blocking state [ 323.747402][ T6771] bridge0: port 2(bridge_slave_1) entered forwarding state [ 323.760672][ T29] audit: type=1804 audit(1718160906.026:25): pid=15502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir386796932/syzkaller.R94X0t/373/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 323.838777][ T29] audit: type=1804 audit(1718160906.096:26): pid=15507 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir386796932/syzkaller.R94X0t/373/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 323.854245][T15509] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 323.864770][ T29] audit: type=1800 audit(1718160906.096:27): pid=15502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1950 res=0 errno=0 [ 323.909013][T10573] team0: left allmulticast mode [ 323.913911][T10573] team_slave_1: left allmulticast mode [ 323.931453][T10573] team0: left promiscuous mode [ 323.941196][T10573] team_slave_1: left promiscuous mode [ 323.947875][T10573] bridge0: port 3(team0) entered disabled state [ 323.956645][T10573] bridge_slave_1: left allmulticast mode [ 323.962313][T10573] bridge_slave_1: left promiscuous mode [ 323.975800][T10573] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.986117][T10573] : left allmulticast mode [ 323.990752][T10573] : left promiscuous mode [ 323.997955][T10573] bridge0: port 1() entered disabled state [ 324.000862][T15513] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 324.629121][T10573] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 324.646333][T10573] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 324.661019][T10573] bond0 (unregistering): Released all slaves [ 324.677392][T10573] bond1 (unregistering): Released all slaves [ 324.798410][T10573] tipc: Disabling bearer [ 324.832793][T10573] tipc: Left network mode [ 324.900716][ T5114] Bluetooth: hci4: command tx timeout [ 325.203798][T15551] : renamed from vlan1 (while UP) [ 325.299721][T10573] hsr_slave_0: left promiscuous mode [ 325.320097][T10573] hsr_slave_1: left promiscuous mode [ 325.333539][T10573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.342454][T10573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.352958][T10573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.360706][T10573] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.383284][T10573] veth1_macvtap: left promiscuous mode [ 325.389268][T10573] veth0_macvtap: left promiscuous mode [ 325.395337][T10573] veth1_vlan: left promiscuous mode [ 325.401005][T10573] veth0_vlan: left promiscuous mode [ 325.985801][T10573] team0 (unregistering): Port device team_slave_1 removed [ 326.459651][T10573] lo (unregistering): left allmulticast mode [ 326.630860][T15198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.704921][T15346] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.752253][T15346] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.784493][T15346] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 326.817775][T15346] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 326.854784][T15592] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 326.892485][T15198] veth0_vlan: entered promiscuous mode [ 326.922940][T15198] veth1_vlan: entered promiscuous mode [ 326.964715][T15595] __nla_validate_parse: 4 callbacks suppressed [ 326.964734][T15595] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.981685][ T5114] Bluetooth: hci4: command tx timeout [ 327.037458][T15198] veth0_macvtap: entered promiscuous mode [ 327.071363][T15198] veth1_macvtap: entered promiscuous mode [ 327.103515][T15346] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.141604][T15198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.153093][T15198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.163453][T15198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 327.174373][T15198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.186877][T15198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.196396][T15346] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.213935][T15198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.230891][T15198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.241668][T15198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.261534][T15198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.271564][T15198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 327.287999][T15198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 327.300250][T15198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.312327][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.319539][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.344247][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.351475][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.368430][T15198] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.379917][T15198] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.404249][T15198] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.424187][T15198] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.594181][T10573] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.604245][T10573] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.666228][ T948] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.674197][ T948] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.986152][T15346] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.078798][T15346] veth0_vlan: entered promiscuous mode [ 328.102285][T15346] veth1_vlan: entered promiscuous mode [ 328.174049][T15346] veth0_macvtap: entered promiscuous mode [ 328.242582][T15346] veth1_macvtap: entered promiscuous mode [ 328.282245][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.308157][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.324785][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.352523][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.362978][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 328.398219][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.426806][T15346] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.466271][T15647] sit0: entered promiscuous mode [ 328.487576][T15647] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 328.514250][T15647] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 328.556116][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.594114][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.607256][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.617839][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.628048][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.639903][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.654289][T15346] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 328.678609][T15346] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 328.691034][T15346] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.693120][T15670] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.4'. [ 328.707122][T15346] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.716990][T15346] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.726416][T15346] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.735398][T15346] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.866071][T10571] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.884435][T10571] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.916260][T15674] No such timeout policy "syz0" [ 328.932602][T15674] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 328.942693][T15674] 0: renamed from bond_slave_0 (while UP) [ 328.951226][T15674] 0: entered allmulticast mode [ 328.959248][ T65] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.969648][ T65] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.137775][T15682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.210019][T15688] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.277710][T15682] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.283472][T15689] tap0: tun_chr_ioctl cmd 1074025673 [ 329.480610][T15700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 329.516178][T15702] No such timeout policy "syz0" [ 329.642408][T15704] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 329.685479][T15704] 0: renamed from bond_slave_0 (while UP) [ 329.692966][T15704] 0: entered allmulticast mode [ 329.901870][T15716] hsr0: entered promiscuous mode [ 329.909544][T15716] macvlan2: entered allmulticast mode [ 329.914950][T15716] hsr0: entered allmulticast mode [ 329.923569][T15716] hsr_slave_0: entered allmulticast mode [ 329.930545][T15716] hsr_slave_1: entered allmulticast mode [ 330.285442][T15739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 330.383687][T15743] sctp: [Deprecated]: syz-executor.1 (pid 15743) Use of int in maxseg socket option. [ 330.383687][T15743] Use struct sctp_assoc_value instead [ 330.464449][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 330.479764][T15748] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 330.501753][T15748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 330.610048][T15755] : entered promiscuous mode [ 331.258963][T15795] sctp: [Deprecated]: syz-executor.2 (pid 15795) Use of struct sctp_assoc_value in delayed_ack socket option. [ 331.258963][T15795] Use struct sctp_sack_info instead [ 331.607586][T15814] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [FSRP]L3 index 0 [ 332.031760][T15836] A link change request failed with some changes committed already. Interface veth0_to_team may have been left with an inconsistent configuration, please check. [ 332.606488][T15873] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 332.747506][T15881] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 332.760221][T15881] __nla_validate_parse: 4 callbacks suppressed [ 332.779991][T15881] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 333.223484][T15911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.288517][T15911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.363419][T15911] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.654126][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 333.689191][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 333.701071][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 333.716841][T15930] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 333.778632][T15934] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 333.934819][T15937] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 334.144854][T15948] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 334.482788][T15961] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.929071][T15967] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 334.980538][T15967] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 335.129120][T15980] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 335.332729][T15992] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 335.348771][T15994] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 335.642363][T16002] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 336.644477][T16040] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 336.707939][T16040] : entered promiscuous mode [ 337.146851][T16063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.226206][T16063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 337.389714][T16070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 338.842003][ T29] audit: type=1804 audit(1718160921.106:28): pid=16100 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3242656863/syzkaller.UhqfvA/91/cgroup.controllers" dev="sda1" ino=1930 res=1 errno=0 [ 338.949093][T16134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.032996][T16134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.110683][T16134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 339.923937][T16151] dvmrp1: entered allmulticast mode [ 340.295343][T16167] __nla_validate_parse: 2 callbacks suppressed [ 340.295362][T16167] netlink: 4384 bytes leftover after parsing attributes in process `syz-executor.3'. [ 341.030882][T16218] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 341.044605][ T5161] IPVS: starting estimator thread 0... [ 341.051771][T16217] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 341.061366][T16214] tun0: tun_chr_ioctl cmd 2147767519 [ 341.113019][T16214] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 341.146980][T16220] IPVS: using max 18 ests per chain, 43200 per kthread [ 342.011340][ T29] audit: type=1804 audit(1718160924.276:29): pid=16254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir369242610/syzkaller.ROgLPo/49/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 342.257463][T16274] netlink: 9356 bytes leftover after parsing attributes in process `syz-executor.4'. [ 342.328641][T16271] dvmrp1: left allmulticast mode [ 342.509343][T16277] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 342.736787][T16297] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 342.755944][T16297] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.1'. [ 342.789451][T16301] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 343.020643][T16319] x_tables: ip6_tables: CLASSIFY target: used from hooks PREROUTING, but only usable from FORWARD/OUTPUT/POSTROUTING [ 343.116433][T16319] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 343.125326][T16326] Bluetooth: MGMT ver 1.22 [ 343.136029][T16319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.233913][T16330] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 343.262110][T16330] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.512675][T16345] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.545312][T16345] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 343.835336][T16377] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 344.454822][T16425] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 344.496413][T16422] : renamed from ipvlan1 [ 345.579581][T16493] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 345.611411][T16495] __nla_validate_parse: 12 callbacks suppressed [ 345.611425][T16495] netlink: 16150 bytes leftover after parsing attributes in process `syz-executor.3'. [ 345.649161][T16498] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 345.667665][T16498] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 345.700068][T16495] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 345.713383][T16504] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 345.744342][T16501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.798177][T16508] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'. [ 345.828375][T16508] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 345.840064][T16510] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.892681][T16514] No such timeout policy "syz0" [ 345.912221][T16501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 345.955468][T16514] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 345.983037][T16514] 1: renamed from 50 (while UP) [ 346.005656][T16519] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 346.037451][T16519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 346.077121][T16523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.141089][T16523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.229050][T16539] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.380505][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 346.535427][T16548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 346.571563][T16558] No such timeout policy "syz0" [ 346.583831][T16558] 0: renamed from bond_slave_0 (while UP) [ 346.592461][T16558] 0: entered allmulticast mode [ 346.838130][T16571] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 347.061286][T16588] No such timeout policy "syz0" [ 347.072373][T16588] 0: renamed from bond_slave_0 (while UP) [ 347.081052][T16588] 0: entered allmulticast mode [ 347.128517][T16590] team0: Device is already in use. [ 347.893597][T16636] team0: Failed to send options change via netlink (err -105) [ 347.903789][T16636] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 347.914946][T16636] team0: Port device team_slave_0 removed [ 348.090675][T16653] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.476670][T16666] 0X: renamed from caif0 [ 348.493437][T16666] 0X: entered allmulticast mode [ 348.500869][T16666] A link change request failed with some changes committed already. Interface 60X may have been left with an inconsistent configuration, please check. [ 349.143056][T16710] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.219229][T16713] team0: Failed to send options change via netlink (err -105) [ 349.230589][T16713] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 349.240612][T16713] team0: Port device team_slave_0 removed [ 349.251563][T16714] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 349.338863][T16721] No such timeout policy "syz0" [ 349.348939][T16721] 1: renamed from 50 (while UP) [ 350.087224][T16754] xt_cgroup: path and classid specified [ 350.100747][T16754] netlink: zone id is out of range [ 350.108156][T16754] netlink: zone id is out of range [ 350.114900][T16754] netlink: zone id is out of range [ 350.122338][T16754] netlink: zone id is out of range [ 350.127807][T16754] netlink: zone id is out of range [ 350.134813][T16754] netlink: zone id is out of range [ 350.140620][T16754] netlink: zone id is out of range [ 350.150696][T16754] netlink: zone id is out of range [ 350.173084][T16754] netlink: zone id is out of range [ 350.234320][T16761] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.258193][ T5114] Bluetooth: hci0: command 0x0406 tx timeout [ 350.650592][T16790] __nla_validate_parse: 27 callbacks suppressed [ 350.650608][T16790] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 350.811441][T16808] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 350.819828][T16808] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.3'. [ 351.054470][T16825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.299541][T16830] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 351.363811][T16843] bridge0: port 4(macvlan0) entered blocking state [ 351.381250][T16843] bridge0: port 4(macvlan0) entered disabled state [ 351.384394][T16837] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 351.395308][T16843] macvlan0: entered allmulticast mode [ 351.406562][T16843] macvlan0: entered promiscuous mode [ 351.420229][T16837] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.489243][T16849] No such timeout policy "syz0" [ 351.513422][T16849] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 351.563167][T16849] 0: renamed from 51 (while UP) [ 351.783763][T16870] xt_l2tp: v2 doesn't support IP mode [ 352.131116][T16895] No such timeout policy "syz0" [ 352.165879][T16895] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 352.190112][T16895] 0: renamed from bond_slave_0 (while UP) [ 352.208777][T16901] No such timeout policy "syz0" [ 352.218309][T16895] 0: entered allmulticast mode [ 352.227142][T16901] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 352.246738][T16901] 1: renamed from 50 (while UP) [ 352.671223][T16931] No such timeout policy "syz0" [ 352.681881][T16931] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 352.701246][T16931] 0: renamed from 51 (while UP) [ 352.888520][T16937] xt_cgroup: path and classid specified [ 353.088534][T16943] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.454060][T16973] xt_cgroup: path and classid specified [ 354.220986][ T29] audit: type=1804 audit(1718160936.486:30): pid=17010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2143986469/syzkaller.y2EmGe/94/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 354.489466][T17022] net_ratelimit: 53 callbacks suppressed [ 354.489487][T17022] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 354.519716][T17025] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 354.534764][T17027] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 354.602554][T17028] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 354.632028][T17028] bridge0: port 3(dummy0) entered blocking state [ 354.646743][T17028] bridge0: port 3(dummy0) entered disabled state [ 354.663987][T17028] dummy0: entered allmulticast mode [ 354.681315][T17028] dummy0: left allmulticast mode [ 354.695482][T17028] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 355.042011][T17061] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 355.730394][T17077] __nla_validate_parse: 10 callbacks suppressed [ 355.730413][T17077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 355.929677][T17089] netlink: 9356 bytes leftover after parsing attributes in process `syz-executor.0'. [ 355.983302][T17091] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 356.004537][T17090] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 356.736430][T17112] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.115500][T17118] netlink: 9356 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.338764][T17130] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 357.347212][T17130] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 357.364019][T17130] bridge0: port 3(dummy0) entered blocking state [ 357.379269][T17130] bridge0: port 3(dummy0) entered disabled state [ 357.387454][T17130] dummy0: entered allmulticast mode [ 357.394649][T17130] dummy0: entered promiscuous mode [ 357.404916][T17130] bridge0: port 3(dummy0) entered blocking state [ 357.411499][T17130] bridge0: port 3(dummy0) entered forwarding state [ 357.607255][T17143] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 357.775905][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 357.871131][T17161] xt_cgroup: path and classid specified [ 357.950188][T17163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.022053][T17163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.087955][T17163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 358.561056][T17171] ip6t_srh: unknown srh match flags 4001 [ 358.568884][T17171] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 358.817250][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 358.937859][T17188] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 358.951861][ T29] audit: type=1804 audit(1718160941.216:31): pid=17194 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3242656863/syzkaller.UhqfvA/168/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 358.979699][T17184] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 359.006496][T17193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 359.027297][T17192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.462194][T17208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.526790][T17208] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.591525][T17211] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 359.871606][T17219] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 360.203987][T17238] xt_cgroup: path and classid specified [ 360.264984][T17244] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 360.363761][T17244] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 360.381093][T17244] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 360.733582][T17274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.804589][T17274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.890375][T17274] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.958166][T17287] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 360.971727][T17287] __nla_validate_parse: 1 callbacks suppressed [ 360.971746][T17287] netlink: 9380 bytes leftover after parsing attributes in process `syz-executor.3'. [ 360.997112][T17287] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 361.371340][T17312] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.3'. [ 361.415420][T17314] netlink: zone id is out of range [ 361.420592][T17314] netlink: set zone limit has 4 unknown bytes [ 362.196576][ T29] audit: type=1804 audit(1718160944.466:32): pid=17359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2143986469/syzkaller.y2EmGe/131/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 362.871997][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 362.919843][T17394] vxcan3: entered promiscuous mode [ 363.055586][T17394] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.098986][T17410] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.2'. [ 363.316533][T17412] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.690252][T17433] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 25 (only 8 groups) [ 363.774139][T17436] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 363.785106][T17436] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 363.970469][T17447] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.047496][T17451] netlink: 'syz-executor.0': attribute type 63 has an invalid length. [ 364.206819][T17462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.230889][T17460] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 364.313904][T17462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.427247][T17462] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.643499][T17497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.703541][T17507] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 364.769793][T17512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.863207][T17497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.882529][T17519] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 365.121314][T17523] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 365.791697][T17577] vxcan3: entered promiscuous mode [ 365.847626][T17583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.918020][ T786] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 365.949643][ T786] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 365.963195][T17583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.966552][T10581] wlan1: authenticated [ 366.005277][T10581] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 366.012616][T17592] __nla_validate_parse: 7 callbacks suppressed [ 366.012634][T17592] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 366.034030][T10581] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 366.041224][T10581] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 366.048476][T10581] wlan1: association with 08:02:11:00:00:00 timed out [ 366.065609][T17596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 366.222452][T17602] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 366.255142][T17602] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 366.737438][T17632] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 366.784413][T17632] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 366.809454][T17632] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 367.164819][ T29] audit: type=1800 audit(1718160949.426:33): pid=17675 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=6AA3 dev="sda1" ino=1964 res=0 errno=0 [ 367.381097][T17689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.457738][T17689] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.554224][T17701] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 367.638032][T17705] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 367.666110][T17705] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.792981][T17708] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 367.837593][T17708] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 368.058304][T17721] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 368.094255][T17720] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 368.337522][T17738] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 368.382857][T17737] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 368.408241][T17738] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.0'. [ 368.438926][T17737] netlink: 220 bytes leftover after parsing attributes in process `syz-executor.0'. [ 368.782658][T17766] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 368.811762][T17766] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 368.828948][T17766] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.158773][T17779] validate_nla: 2 callbacks suppressed [ 369.158793][T17779] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 369.202259][T17779] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 369.223942][T17779] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 369.274367][T17779] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 369.409593][T17791] Cannot find add_set index 0 as target [ 370.719388][T17784] tipc: Started in network mode [ 370.724272][T17784] tipc: Node identity , cluster identity 4711 [ 370.730628][T17784] tipc: Failed to set node id, please configure manually [ 370.737744][T17784] tipc: Enabling of bearer rejected, failed to enable media [ 371.043976][T17808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.092642][T17810] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 371.117693][T17814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.127476][T17810] __nla_validate_parse: 5 callbacks suppressed [ 371.127494][T17810] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 371.128583][T17810] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 371.193151][T17818] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 371.205739][T17813] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 371.222584][T17808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 371.234566][T17810] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 371.560753][T17838] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 371.581078][T17838] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 371.590346][T17838] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 371.599763][T17838] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 371.612199][T17838] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 371.746868][T17849] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 371.774568][T17849] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 372.064693][T17863] No such timeout policy "syz0" [ 373.221652][T17875] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 373.607756][T17859] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 373.632060][T17860] bond0: entered promiscuous mode [ 373.639724][T17860] 0: entered promiscuous mode [ 373.655497][T17860] bond_slave_1: entered promiscuous mode [ 373.685152][T17866] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 373.706849][T17866] 1: renamed from 50 (while UP) [ 373.744619][T17874] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.839715][T17883] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 373.870639][T17887] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 373.883033][T17887] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 373.980041][T17893] smc: net device wlan0 erased user defined pnetid SYZ2 [ 374.133109][T17901] x_tables: ip_tables: ah match: only valid for protocol 51 [ 374.398113][T17918] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 374.823223][T17940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 375.164394][T17976] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 375.194616][T17980] No such timeout policy "syz0" [ 375.254762][T17980] 0: renamed from 51 (while UP) [ 375.607672][T18001] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 375.790932][T18020] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 375.986368][T18029] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.048822][T18036] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 376.261228][T18051] __nla_validate_parse: 11 callbacks suppressed [ 376.261248][T18051] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 376.295255][T18051] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 376.473607][T18058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.546121][T18058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.643044][T18058] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.657294][T18075] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 376.673633][T18075] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 376.696339][T18077] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 376.721589][T18077] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 376.925321][T18086] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 376.959069][T18088] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 376.980304][T18088] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 377.129430][T18099] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 377.243544][T18093] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 377.314149][T18109] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 377.408523][ T29] audit: type=1804 audit(1718160959.676:34): pid=18117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2339431794/syzkaller.Q2Sbji/438/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 377.482562][T18116] batadv1: entered allmulticast mode [ 377.542696][T18124] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 377.548261][ T29] audit: type=1804 audit(1718160959.806:35): pid=18117 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2339431794/syzkaller.Q2Sbji/438/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 377.556892][T18124] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 377.666296][T18131] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 377.698151][T18131] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 377.760723][T18135] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 377.778211][T18135] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 378.066471][T18154] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 378.305134][T18157] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 378.369140][T18173] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 378.525704][T18177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.548614][T18187] tipc: Started in network mode [ 378.553586][T18187] tipc: Node identity , cluster identity 4711 [ 378.567741][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 378.577785][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 378.589658][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 378.606137][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 378.628273][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 378.635376][T18193] tipc: Enabling of bearer rejected, media not registered [ 378.643571][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.054544][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.071553][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.408608][T18185] chnl_net:caif_netlink_parms(): no params data found [ 379.666006][T18233] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.676439][T18185] bridge0: port 1(bridge_slave_0) entered blocking state [ 379.683556][T18185] bridge0: port 1(bridge_slave_0) entered disabled state [ 379.719599][T18185] bridge_slave_0: entered allmulticast mode [ 379.739583][T18185] bridge_slave_0: entered promiscuous mode [ 379.770210][T18185] bridge0: port 2(bridge_slave_1) entered blocking state [ 379.787833][T18185] bridge0: port 2(bridge_slave_1) entered disabled state [ 379.805487][T18185] bridge_slave_1: entered allmulticast mode [ 379.823350][T18185] bridge_slave_1: entered promiscuous mode [ 380.134068][T18185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 380.239772][T18185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 380.393959][T18185] team0: Port device team_slave_0 added [ 380.429122][T18185] team0: Port device team_slave_1 added [ 380.548242][T18185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 380.572382][T18185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.635106][T18185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 380.660816][T18185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 380.690927][T18185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 380.746379][ T5119] Bluetooth: hci0: command tx timeout [ 380.764778][T18185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 380.809215][T18285] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 380.914905][T18185] hsr_slave_0: entered promiscuous mode [ 380.946981][T18185] hsr_slave_1: entered promiscuous mode [ 380.966601][T18185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 380.984498][T18185] Cannot create hsr debugfs directory [ 381.377933][T18185] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.479624][T18185] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.551670][T18332] __nla_validate_parse: 7 callbacks suppressed [ 381.551699][T18332] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 381.594447][T18185] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.694677][T18185] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.740084][T18345] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 381.769994][T18346] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 381.869392][T18351] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 381.889574][T18345] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 381.904697][T18349] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 381.943220][T18185] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 381.963681][T18185] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 381.991756][T18185] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 382.013655][T18185] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 382.199373][T18185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.241490][T18185] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.278297][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.285493][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.301029][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.308239][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.724873][T18404] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 382.815433][ T5119] Bluetooth: hci0: command tx timeout [ 382.824464][T18185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.892923][T18418] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 382.939070][T18414] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 383.343371][T18185] veth0_vlan: entered promiscuous mode [ 383.373431][T18185] veth1_vlan: entered promiscuous mode [ 383.438668][T18185] veth0_macvtap: entered promiscuous mode [ 383.452360][T18185] veth1_macvtap: entered promiscuous mode [ 383.479486][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.492370][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.515073][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.527798][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.538168][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.549037][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.574690][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 383.594296][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.628659][T18185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.678846][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.690038][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.717230][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.739995][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.756797][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.777849][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.804428][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.820232][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.838682][T18185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 383.852097][T18185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 383.864287][T18185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.913443][T18185] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.942061][T18185] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.959522][T18185] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.968512][T18185] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.153972][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.165453][T18482] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.167495][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.244611][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.257260][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.699856][T18514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.747127][ T6771] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 384.763905][ T6771] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 384.783001][ T11] wlan1: authenticated [ 384.787934][T18519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.797907][ T12] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 384.830995][T18521] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 384.860163][T18521] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 384.874870][T18514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.877993][ T12] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 384.888360][T18521] gretap1: entered promiscuous mode [ 384.895470][ T5119] Bluetooth: hci0: command tx timeout [ 384.914701][ T12] wlan1: associated [ 384.917936][T18525] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 384.925234][T18521] gretap1: entered allmulticast mode [ 384.960738][T18525] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 384.976810][T18525] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 384.996585][T18521] syzkaller0: tun_chr_ioctl cmd 1074025677 [ 385.003120][T18521] syzkaller0: linktype set to 0 [ 385.051135][T18525] ipt_REJECT: TCP_RESET invalid for non-tcp [ 385.186695][T18538] Bluetooth: MGMT ver 1.22 [ 385.193028][T18538] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 385.306730][T18543] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.408830][T18626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.654761][ T29] audit: type=1107 audit(1718160968.916:36): pid=18645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gFPF^BPܡ W͊up 8CF,$3#B˥5'.Mᷱ:' [ 386.731477][T18654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.799117][ T29] audit: type=1107 audit(1718160969.066:37): pid=18656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='gFPF^BPܡ W͊up 8CF,$3#B˥5'.Mᷱ:' [ 386.818054][T18654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.901310][T18654] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.946871][T18660] can: request_module (can-proto-0) failed. [ 386.975526][ T5119] Bluetooth: hci0: command tx timeout [ 387.255468][T18679] team0: Port device team_slave_0 removed [ 387.280239][T18685] __nla_validate_parse: 5 callbacks suppressed [ 387.280258][T18685] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.3'. [ 387.506212][T18704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 387.536156][T18704] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 387.579258][T18704] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.588292][T18704] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.597131][T18704] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.606178][T18704] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 387.633334][T18704] vxlan0: entered promiscuous mode [ 388.224256][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 389.726648][T18801] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 390.115575][T18820] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 390.137044][T18820] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 390.147805][T18820] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 390.179881][T18820] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 390.198343][T18820] ipt_REJECT: TCP_RESET invalid for non-tcp [ 390.779282][T18854] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 390.817454][T18854] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 390.863488][T18854] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 390.900044][T18861] ipt_REJECT: TCP_RESET invalid for non-tcp [ 391.539841][T18890] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 391.791078][T18906] wireguard0: entered promiscuous mode [ 391.808406][T18906] wireguard0: entered allmulticast mode [ 391.923539][T18902] ipt_REJECT: TCP_RESET invalid for non-tcp [ 392.325726][T18918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 392.646593][T18966] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 392.707430][T18966] team0: Device veth1_macvtap failed to register rx_handler [ 392.854456][T18972] team_slave_1: entered promiscuous mode [ 392.861071][T18972] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 392.881278][T18972] macvlan3: entered promiscuous mode [ 392.891740][T18972] team0: entered promiscuous mode [ 392.929476][T18972] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 392.950802][T18978] __nla_validate_parse: 6 callbacks suppressed [ 392.950819][T18978] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 392.968398][T18978] 1: renamed from 50 (while UP) [ 393.763201][T19026] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 393.790410][T19025] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 394.683639][T19067] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 394.740435][T19069] xt_cgroup: path and classid specified [ 394.748563][T19069] netlink: zone id is out of range [ 394.756420][T19069] netlink: zone id is out of range [ 394.761773][T19069] netlink: zone id is out of range [ 394.767609][T19069] netlink: zone id is out of range [ 394.772985][T19069] netlink: zone id is out of range [ 394.778823][T19069] netlink: zone id is out of range [ 394.784193][T19069] netlink: zone id is out of range [ 394.789678][T19069] netlink: zone id is out of range [ 394.795126][T19069] netlink: zone id is out of range [ 394.800558][T19069] netlink: zone id is out of range [ 396.231896][T19067] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 396.535591][T19102] xt_cgroup: path and classid specified [ 396.803049][T19123] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 397.103735][T19142] xt_cgroup: path and classid specified [ 397.397954][T19163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.476178][T19163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.522974][T19167] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 397.547547][T19163] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.756958][T19178] xt_cgroup: path and classid specified [ 397.900263][T19183] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.2'. [ 398.447035][T19211] xt_cgroup: path and classid specified [ 398.462523][T19213] xt_cgroup: path and classid specified [ 398.925954][T19247] xt_cgroup: path and classid specified [ 399.065338][T19254] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 399.492964][T19283] xt_cgroup: path and classid specified [ 399.556096][T19279] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 399.592417][T19279] 1: renamed from 50 (while UP) [ 400.256220][T19343] bond0: option fail_over_mac: unable to set because the bond device has slaves [ 400.332939][T19349] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 400.357936][T19349] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 400.401884][T19349] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 400.489864][ T29] audit: type=1800 audit(1718160982.746:38): pid=19362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1947 res=0 errno=0 [ 400.542508][ T29] audit: type=1804 audit(1718160982.776:39): pid=19362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1904517029/syzkaller.TJERCE/63/memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 400.616022][ T29] audit: type=1804 audit(1718160982.796:40): pid=19367 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1904517029/syzkaller.TJERCE/63/memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 400.672040][ T29] audit: type=1804 audit(1718160982.796:41): pid=19369 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1904517029/syzkaller.TJERCE/63/memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 400.714179][ T29] audit: type=1804 audit(1718160982.796:42): pid=19362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1904517029/syzkaller.TJERCE/63/memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 400.857330][T19389] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 400.860683][T19390] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 401.266354][T19403] Bluetooth: MGMT ver 1.22 [ 401.290560][T19403] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.0'. [ 401.334156][T19403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 401.348478][T19408] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 403.190585][T19442] net_ratelimit: 127 callbacks suppressed [ 403.190603][T19442] TCP: MD5 Hash not found for 172.20.20.187.0->172.20.20.170.20002 [S] L3 index 0 [ 403.230978][T19437] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 403.684171][T19473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 403.722178][T19477] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.2'. [ 403.745323][T19477] 0: renamed from 51 (while UP) [ 404.052033][T19497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 404.111607][T19500] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 404.494041][T19526] 1: renamed from 50 (while UP) [ 404.581045][T19530] __nla_validate_parse: 2 callbacks suppressed [ 404.581153][T19530] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 404.651063][T19530] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 404.743777][T19535] smc: net device ip6_vti0 erased user defined pnetid SYZ0 [ 404.859636][T19543] netlink: zone id is out of range [ 404.895167][T19543] netlink: zone id is out of range [ 404.909762][T19543] netlink: zone id is out of range [ 404.927588][T19543] netlink: zone id is out of range [ 404.933321][T19543] netlink: zone id is out of range [ 404.965362][T19543] netlink: zone id is out of range [ 404.971093][T19543] netlink: zone id is out of range [ 404.995999][T19543] netlink: zone id is out of range [ 405.016413][T19543] netlink: zone id is out of range [ 405.089862][T19559] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 405.175219][T19564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 405.206985][T19564] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 405.887238][T19612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 406.071519][T19625] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 406.297524][T19625] IPv6: NLM_F_REPLACE set, but no existing node found! [ 406.524725][T19652] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.643400][T19711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.686789][T19712] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 407.740408][T19711] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 407.763696][T19724] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.797620][T19711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.868640][T19711] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 407.872127][T19732] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.094312][T19743] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 408.395918][T19758] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 408.427614][T19758] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 409.090714][T19801] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 409.321616][T19819] x_tables: duplicate entry at hook 1 [ 409.614706][T19835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 409.644945][T19839] __nla_validate_parse: 3 callbacks suppressed [ 409.644964][T19839] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 409.712973][T19835] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 410.106279][T19865] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 410.127077][T19865] net_ratelimit: 40 callbacks suppressed [ 410.127097][T19865] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 411.118404][T19916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.163461][T19905] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. [ 411.288840][T19916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 411.432871][T19925] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 411.466607][T19925] 1: renamed from 50 (while UP) [ 411.493909][T19934] unknown channel width for channel at 909000KHz? [ 412.683166][T19973] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 412.777303][T19973] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 412.858736][T19982] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'. [ 413.023599][T19991] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 413.483194][T20017] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.4'. [ 413.757977][T20024] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 413.845500][T20024] ipt_REJECT: TCP_RESET invalid for non-tcp [ 414.040128][T20039] netlink: zone id is out of range [ 414.051861][T20039] netlink: zone id is out of range [ 414.061992][T20039] netlink: zone id is out of range [ 414.073179][T20039] netlink: zone id is out of range [ 414.082585][T20039] netlink: zone id is out of range [ 414.105570][T20039] netlink: zone id is out of range [ 414.118974][T20039] netlink: zone id is out of range [ 414.134611][T20039] netlink: zone id is out of range [ 414.147957][T20039] netlink: zone id is out of range [ 414.877324][T20068] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.887054][T20068] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.896304][T20068] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 414.905286][T20068] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 415.010616][T20068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.132102][T20068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.218376][T20068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.265163][T20068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 415.493238][T20095] __nla_validate_parse: 2 callbacks suppressed [ 415.493257][T20095] netlink: 516 bytes leftover after parsing attributes in process `syz-executor.1'. [ 415.526930][T20095] net_ratelimit: 1 callbacks suppressed [ 415.526952][T20095] openvswitch: netlink: EtherType 0 is less than min 600 [ 415.956019][T20105] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 415.986491][T20101] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 416.258538][T20121] xt_hashlimit: size too large, truncated to 1048576 [ 416.284447][T20121] xt_hashlimit: overflow, try lower: 0/0 [ 416.314227][T20125] netlink: zone id is out of range [ 416.320162][T20125] netlink: zone id is out of range [ 416.327011][T20125] netlink: zone id is out of range [ 416.335335][T20125] netlink: zone id is out of range [ 416.343204][T20125] netlink: zone id is out of range [ 416.352733][T20125] netlink: zone id is out of range [ 416.385481][T20125] netlink: zone id is out of range [ 416.390805][T20125] netlink: zone id is out of range [ 416.405379][T20125] netlink: zone id is out of range [ 416.436708][T20127] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 416.478606][T20127] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 416.515323][T20127] netlink: 4320 bytes leftover after parsing attributes in process `syz-executor.1'. [ 416.989617][T20159] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 417.036927][T20166] xt_hashlimit: size too large, truncated to 1048576 [ 417.064117][T20166] xt_hashlimit: overflow, try lower: 0/0 [ 417.395273][ T29] audit: type=1107 audit(1718160999.656:43): pid=20183 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 417.979576][ T29] audit: type=1107 audit(1718161000.246:44): pid=20220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 418.371597][ T29] audit: type=1107 audit(1718161000.636:45): pid=20250 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 418.885337][T20284] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 418.940033][T20283] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 418.966917][T20283] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 418.988261][T20283] team0: entered promiscuous mode [ 418.994066][T20283] team_slave_1: entered promiscuous mode [ 419.010506][T20283] team0: entered allmulticast mode [ 419.034433][T20283] team_slave_1: entered allmulticast mode [ 419.056276][T20283] bridge0: port 3(team0) entered blocking state [ 419.069727][T20283] bridge0: port 3(team0) entered disabled state [ 419.088802][T20292] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 419.114006][T20292] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 419.146452][T20292] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 419.183009][T20292] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 419.204452][T20292] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 419.254301][T20292] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.3'. [ 419.353518][T20307] syz-executor.3[20307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.353761][T20307] syz-executor.3[20307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.369763][T20307] syz-executor.3[20307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.382106][T20307] syz-executor.3[20307] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 419.487195][T20314] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 419.843786][T20332] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 419.854588][T20332] team0: entered promiscuous mode [ 419.861792][T20332] team_slave_0: entered promiscuous mode [ 419.876544][T20332] team_slave_1: entered promiscuous mode [ 419.883283][T20332] team0: entered allmulticast mode [ 419.900282][T20332] team_slave_0: entered allmulticast mode [ 419.912479][T20332] team_slave_1: entered allmulticast mode [ 419.922200][T20332] bridge0: port 3(team0) entered blocking state [ 419.943367][T20332] bridge0: port 3(team0) entered disabled state [ 419.964685][T20332] bridge0: port 3(team0) entered blocking state [ 419.971204][T20332] bridge0: port 3(team0) entered forwarding state [ 420.397011][T20350] 0: renamed from 51 (while UP) [ 420.486239][T20354] xt_hashlimit: size too large, truncated to 1048576 [ 420.534877][T20354] xt_hashlimit: overflow, try lower: 0/0 [ 420.597098][T20356] xt_hashlimit: size too large, truncated to 1048576 [ 420.653337][T20356] xt_hashlimit: overflow, try lower: 0/0 [ 420.939614][ T5114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 420.950376][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 420.960992][ T5114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 420.974713][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 420.985246][ T5114] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 420.992670][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 423.055357][ T5114] Bluetooth: hci4: command tx timeout [ 425.143824][ T5114] Bluetooth: hci4: command tx timeout [ 427.066433][ T5119] Bluetooth: hci3: command 0x0406 tx timeout [ 427.215357][ T5114] Bluetooth: hci4: command tx timeout [ 429.295292][ T5114] Bluetooth: hci4: command tx timeout [ 437.295527][ T5119] Bluetooth: hci2: command 0x0406 tx timeout [ 440.339777][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.346524][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 451.427602][T20395] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 451.438338][T20395] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 451.445167][T20397] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 451.454794][T20395] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 451.455298][T20397] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 451.469213][T20395] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 451.470313][T20397] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 451.487656][T20397] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 451.495163][T20397] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 451.502475][T20397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 451.512396][T20397] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 451.521995][T20395] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 451.544203][ T5119] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 451.556331][ T5119] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 451.564473][ T5119] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 451.573146][ T5119] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 451.587120][ T5119] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 451.594678][ T5119] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 453.615176][ T5114] Bluetooth: hci6: command tx timeout [ 453.615285][ T5119] Bluetooth: hci5: command tx timeout [ 453.695369][ T5119] Bluetooth: hci7: command tx timeout [ 455.700134][ T5119] Bluetooth: hci5: command tx timeout [ 455.705737][ T5119] Bluetooth: hci6: command tx timeout [ 455.785095][ T5114] Bluetooth: hci7: command tx timeout [ 455.915320][ T5119] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 455.925445][ T5119] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 455.941514][ T5119] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 455.951622][ T5119] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 455.959387][ T5119] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 455.968032][ T5119] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 457.775331][ T5119] Bluetooth: hci6: command tx timeout [ 457.780776][ T5119] Bluetooth: hci5: command tx timeout [ 457.865155][ T5119] Bluetooth: hci7: command tx timeout [ 458.015313][ T5119] Bluetooth: hci8: command tx timeout [ 459.855116][ T5119] Bluetooth: hci5: command tx timeout [ 459.855148][ T5114] Bluetooth: hci6: command tx timeout [ 459.935345][ T5114] Bluetooth: hci7: command tx timeout [ 460.095199][ T5114] Bluetooth: hci8: command tx timeout [ 462.175287][ T5114] Bluetooth: hci8: command tx timeout [ 464.255168][ T5114] Bluetooth: hci8: command tx timeout [ 485.663576][ T5119] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 485.679440][ T5119] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 485.689127][ T5119] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 485.714451][ T5119] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 485.723243][ T5119] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 485.730848][ T5119] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 487.785211][ T5114] Bluetooth: hci9: command tx timeout [ 489.865107][ T5114] Bluetooth: hci9: command tx timeout [ 491.950597][ T5114] Bluetooth: hci9: command tx timeout [ 494.015347][ T5114] Bluetooth: hci9: command tx timeout [ 501.785274][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.791610][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 503.865175][ T5119] Bluetooth: hci0: command 0x0406 tx timeout [ 516.581664][T20395] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 516.591051][T20395] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 516.599975][T20395] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 516.608505][T20395] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 516.616711][ T5121] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 516.626342][ T5121] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 516.633750][T20414] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 516.642911][ T5121] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 516.642917][T20414] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 516.658857][ T5121] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 516.659081][T20414] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 516.673855][ T5121] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 516.682579][ T5121] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 516.708155][ T5121] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 516.725366][ T5121] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 516.734215][ T5121] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 516.743104][ T5121] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 516.751512][ T5121] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 518.735748][ T5121] Bluetooth: hci11: command tx timeout [ 518.735778][T20395] Bluetooth: hci10: command tx timeout [ 518.815243][ T5121] Bluetooth: hci12: command tx timeout [ 520.815523][ T5121] Bluetooth: hci10: command tx timeout [ 520.821408][ T5121] Bluetooth: hci11: command tx timeout [ 520.895101][ T5121] Bluetooth: hci12: command tx timeout [ 520.983737][T20395] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 520.994335][T20395] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 521.005297][T20395] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 521.016119][T20395] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 521.024588][T20395] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 521.032184][T20395] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 522.895955][T20395] Bluetooth: hci10: command tx timeout [ 522.901492][T20395] Bluetooth: hci11: command tx timeout [ 522.975021][T20395] Bluetooth: hci12: command tx timeout [ 523.055130][T20395] Bluetooth: hci13: command tx timeout [ 524.982279][ T5121] Bluetooth: hci10: command tx timeout [ 524.988078][T20395] Bluetooth: hci11: command tx timeout [ 525.055257][T20395] Bluetooth: hci12: command tx timeout [ 525.137510][T20395] Bluetooth: hci13: command tx timeout [ 527.215124][T20395] Bluetooth: hci13: command tx timeout [ 529.297049][T20395] Bluetooth: hci13: command tx timeout [ 544.826851][T20395] Bluetooth: hci4: command 0x0406 tx timeout [ 550.936296][T20395] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 550.954562][T20395] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 550.963002][T20395] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 550.977762][T20395] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 550.985742][T20395] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 550.993377][T20395] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 553.055368][T20395] Bluetooth: hci14: command tx timeout [ 555.135418][T20395] Bluetooth: hci14: command tx timeout [ 557.218216][T20395] Bluetooth: hci14: command tx timeout [ 559.295184][T20395] Bluetooth: hci14: command tx timeout [ 563.228094][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.234476][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.495269][ T30] INFO: task syz-executor.1:20364 blocked for more than 143 seconds. [ 564.503468][ T30] Not tainted 6.10.0-rc2-syzkaller-00722-gbb678f01804c #0 [ 564.521641][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.531707][ T30] task:syz-executor.1 state:D stack:25200 pid:20364 tgid:20363 ppid:10529 flags:0x00004006 2024/06/12 02:59:06 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 564.548846][ T30] Call Trace: [ 564.552149][ T30] [ 564.583515][ T30] __schedule+0x17e8/0x4a20 [ 564.589155][ T30] ? __pfx___schedule+0x10/0x10 [ 564.594041][ T30] ? __pfx_lock_release+0x10/0x10 [ 564.599396][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 564.605130][ T30] ? schedule+0x90/0x320 [ 564.609495][ T30] schedule+0x14b/0x320 [ 564.613663][ T30] schedule_preempt_disabled+0x13/0x30 [ 564.628603][ T30] __mutex_lock+0x6a4/0xd70 [ 564.633142][ T30] ? __mutex_lock+0x527/0xd70 [ 564.642496][ T30] ? devinet_ioctl+0x2ce/0x1bc0 [ 564.647559][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 564.652604][ T30] ? bpf_lsm_capable+0x9/0x10 [ 564.664936][ T30] ? security_capable+0x90/0xb0 [ 564.669823][ T30] devinet_ioctl+0x2ce/0x1bc0 [ 564.674517][ T30] ? get_user_ifreq+0x1bb/0x200 [ 564.686609][ T30] inet_ioctl+0x3d7/0x4f0 [ 564.691070][ T30] ? __pfx_inet_ioctl+0x10/0x10 [ 564.701624][ T30] ? packet_ioctl+0x26b/0x350 [ 564.708743][ T30] sock_do_ioctl+0x158/0x460 [ 564.713507][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 564.736138][ T30] sock_ioctl+0x629/0x8e0 [ 564.740519][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 564.763244][ T30] ? __fget_files+0x29/0x470 [ 564.767989][ T30] ? __fget_files+0x3f6/0x470 [ 564.772683][ T30] ? __fget_files+0x29/0x470 [ 564.785309][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 564.790276][ T30] ? security_file_ioctl+0x87/0xb0 [ 564.802243][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 564.807261][ T30] __se_sys_ioctl+0xfc/0x170 [ 564.811988][ T30] do_syscall_64+0xf3/0x230 [ 564.824443][ T30] ? clear_bhb_loop+0x35/0x90 [ 564.829268][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 564.843208][ T30] RIP: 0033:0x7feb1b27cea9 [ 564.848664][ T30] RSP: 002b:00007feb1bfb70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 564.857373][ T30] RAX: ffffffffffffffda RBX: 00007feb1b3b3f80 RCX: 00007feb1b27cea9 [ 564.873414][ T30] RDX: 0000000020000180 RSI: 0000000000008914 RDI: 0000000000000004 [ 564.881525][ T30] RBP: 00007feb1b2ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 564.905062][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 564.913078][ T30] R13: 000000000000000b R14: 00007feb1b3b3f80 R15: 00007ffc42976d48 [ 564.942950][ T30] [ 564.954972][ T30] INFO: task syz-executor.1:20372 blocked for more than 143 seconds. [ 564.963186][ T30] Not tainted 6.10.0-rc2-syzkaller-00722-gbb678f01804c #0 [ 564.985056][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 564.993755][ T30] task:syz-executor.1 state:D stack:26800 pid:20372 tgid:20363 ppid:10529 flags:0x00000006 [