last executing test programs: 1m28.309118448s ago: executing program 0: r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800c3603d0c482ea3c3000000000000611118009d32dfd4"], 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xf, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800c3603d0c482ea3c3000000000000611118009d32dfd4"], 0x0}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (async) 1m11.669605112s ago: executing program 0: r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800c3603d0c482ea3c3000000000000611118009d32dfd4"], 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xf, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800c3603d0c482ea3c3000000000000611118009d32dfd4"], 0x0}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (async) 48.701509447s ago: executing program 0: r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800c3603d0c482ea3c3000000000000611118009d32dfd4"], 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xf, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800c3603d0c482ea3c3000000000000611118009d32dfd4"], 0x0}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (async) 30.540812444s ago: executing program 0: r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800c3603d0c482ea3c3000000000000611118009d32dfd4"], 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xf, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800c3603d0c482ea3c3000000000000611118009d32dfd4"], 0x0}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (async) 16.948374728s ago: executing program 0: r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800c3603d0c482ea3c3000000000000611118009d32dfd4"], 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xf, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800c3603d0c482ea3c3000000000000611118009d32dfd4"], 0x0}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (async) 2.856963695s ago: executing program 1: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @private1}) r3 = socket$kcm(0x2, 0x3, 0x84) r4 = socket$inet(0x2, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000266000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) mmap(&(0x7f0000b15000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x28011, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, r6, 0x0) mmap(&(0x7f00004e7000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000024000100000000000000000000000000060003000020"], 0x1c}}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000030005000000000002004e21ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e358e95cfa567fab0c28cc905cd00c0947085ae6fdf8a3e4dcccaf1cf532bd0b982365fd"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r9, 0x2000000, 0xe40, 0x60ff, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8860040dffd00139fb7a884bdfc14f48786dd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x68}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r1}) 2.596832684s ago: executing program 1: socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000300)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x58, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]}, 0x58}}, 0x0) 2.380814982s ago: executing program 1: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 2.300940457s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup=r1, 0xffffffffffffffff, 0x20, 0x0, 0x0, @prog_id}, 0x20) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/56], 0xb8}}, 0x0) 2.110651189s ago: executing program 4: socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b730000850000006dd2f296b45800000007000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000880)=0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000340)={0x0, 0x8002}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f00000004c0)={r6, 0xae, "23740f8f2c6628401c537636621a923eca45e9cfb6fe3409185fde3d42c3ec12725e7cf98c851b313615cc53fcb4909d93fd2b4f339b407cd7540bd78f07fc125f866d995ebf0dc4f0ea5eac6d21960536fe461ff4acb6c04df73a131718dc9ccef976ab6a70fd2c55ceb41434b9790aea3425ab1b5fd26b84ff5e2d596a1ea7de9548a91ff9b2dea95be8e78dddc59106c4b74d3372cdc95e680b48952c8fa4f59bc22095759d91d6605913ed8e"}, &(0x7f0000000400)=0xb6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, 0x0, &(0x7f0000003000)=0x1e) recvmsg(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) unshare(0x8040480) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000700)=0x6, 0x12) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11, 0x12, 0xffffffffffffffff, 0x87708000) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040), 0x4) 2.095801337s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001d00010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="00000200000000000000000052fa2f0a33515bca5635857516b9f3212c5e3ca040494feae509a549ed1e87a7d4abb05311da6e3d230b13768ef1a653f9"], 0x24}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000000)={'gre0\x00', &(0x7f00000002c0)={'gretap0\x00', r2, 0x7800, 0x7800, 0x6, 0x6, {{0x2b, 0x4, 0x3, 0x9, 0xac, 0x65, 0x0, 0x6, 0x2f, 0x0, @rand_addr=0x64010102, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0x3, [@broadcast, @multicast2, @broadcast]}, @timestamp={0x44, 0x20, 0x1b, 0x0, 0x1, [0x5, 0x0, 0xffff, 0xddd, 0x0, 0x200, 0x2]}, @ra={0x94, 0x4}, @lsrr={0x83, 0xf, 0x54, [@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1]}, @timestamp={0x44, 0x28, 0xa8, 0x0, 0x7, [0x0, 0x9, 0x4287f0ce, 0x10001, 0x99f, 0x77e, 0xc43, 0xffff, 0xfffffe00]}, @timestamp={0x44, 0x2c, 0xc, 0x0, 0x8, [0x10001, 0x10000, 0x1c4, 0x5, 0x7f, 0x5, 0x7, 0x7, 0x7ff, 0x2]}]}}}}}) sendto$packet(r1, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1511fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 2.064325759s ago: executing program 0: r0 = socket$kcm(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800c3603d0c482ea3c3000000000000611118009d32dfd4"], 0x0}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) socket$kcm(0xf, 0x3, 0x2) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800c3603d0c482ea3c3000000000000611118009d32dfd4"], 0x0}, 0x90) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c0002f60800000001180000080001"], 0x44}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507000000000000000000000002", @ANYRES32=r2], 0x48}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x4) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) (async) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r5}}, 0x24}}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="020b0700fc670000e4a17c45c8d260c9", 0x33fe0}], 0x1}, 0x0) (async) 1.830283852s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x3, 0x8, 0x0, &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x5, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f0000000140)=""/250}, 0x90) syz_emit_ethernet(0xa7, &(0x7f0000000700)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa14008100000086dd60f4a45d006d3a01fe8000000000000000000000000000bbff020000000000000000000000fa000102009078000005006050835900000000fc010000000000000000000000000000fc0100000000000000000000000000003a0000000000000000000000000000003c1543903366a97c46ad4f8869ce51a806160e4827a3645336dd6b347c39dabd975609a5fd6ba189903bf9b165fda119d72be4da5e08fe0fb8"], 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000580)={r0, 0x81, 0x7}) r4 = openat$cgroup_ro(r3, &(0x7f00000005c0)='pids.current\x00', 0x7a05, 0x1700) bind$rxrpc(r3, &(0x7f0000000440)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @remote}}, 0x24) write$cgroup_int(r4, &(0x7f0000000000), 0xffe000) syz_emit_ethernet(0x3b6, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000d40)={0xffffffffffffffff}) r6 = syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_MODIFY(r3, &(0x7f0000000640)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB="24000010", @ANYRES16=r6, @ANYBLOB="00022dbd7000ffdbdf250700000006000e00ff01000006001a004e210000"], 0x24}, 0x1, 0x0, 0x0, 0x49001}, 0x4000000) unshare(0x68040200) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x12, r7, 0x0) write$cgroup_subtree(r8, &(0x7f0000000500)=ANY=[], 0x32600) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100), 0xfecc) write$cgroup_type(r9, &(0x7f0000000000), 0x180000) r11 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r11, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) sendmsg$inet(r5, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="000026d4f47f00000000000001000000000000000000000014000000000000000000000002000000000000000000000014000000000000000000000002000000000000000000000011000000000000000000001100000000000000020000000100000000000000e7ffffff00000000000000000000000007"], 0xf}, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x4, 0x2010, r0, 0xed4ae000) getsockopt$CAN_RAW_JOIN_FILTERS(r10, 0x65, 0x6, &(0x7f0000000680), &(0x7f00000006c0)=0x4) 1.770341758s ago: executing program 4: socket(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000000)={0xa, 0x48f4, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@hoplimit={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x40}}], 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x40}}}, 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013007b990000000000000000fc0000"], 0xb8}}, 0x0) 1.609657502s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000000c0)={'ip6tnl0\x00', &(0x7f00000002c0)={'ip6_vti0\x00', 0x0, 0x2f, 0x91, 0x2, 0x3ff, 0x64, @private0, @private1, 0x20, 0x7800, 0x9, 0x7}}) setsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f0000000180)={@private=0xa010100, @empty, r4}, 0xc) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=ANY=[@ANYRESDEC, @ANYRES32=r5, @ANYBLOB="00004df6c4e8ffa52d775865f555fd4edbb52fe79be72d781a8ea0e71964c187"], 0x6c}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000280), &(0x7f00000013c0)=0xc) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r7, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@dellink={0x2c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x2c}}, 0x0) 1.584343532s ago: executing program 4: socket(0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r1 = socket(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$sock(0xffffffffffffffff, &(0x7f00000096c0)=[{{&(0x7f00000064c0)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}, {{&(0x7f0000007740)=@un=@abs, 0x80, 0x0}}], 0x2, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r4, r3, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r4, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r2}, 0x20) sendmmsg$inet6(r2, &(0x7f0000002000)=[{{0x0, 0x0, &(0x7f0000000180), 0x1}}, {{0x0, 0x0, &(0x7f0000000640)=[{&(0x7f00000009c0)='.', 0xef}], 0x7}}], 0x44, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=@bridge_setlink={0x34, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r0}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0x5, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x5}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r5}, &(0x7f0000000000), &(0x7f0000000040)=r6}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r6}, 0x57) 1.259891615s ago: executing program 4: socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x20, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}}, 0x0) 1.150177546s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4400000010003904000000000000000085410013000000111fac7c0e5c142fe228debab2de75a6549fecbac84ce547b601dd706b60ff4df835ae91bce45d7caa580d7bd40efc", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b0001006970766c616e0000140002800600010000000000"], 0x44}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) (async) r1 = socket$l2tp(0x2, 0x2, 0x73) ioctl$sock_inet_SIOCSIFADDR(r1, 0x891c, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}}, 0x0) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x24, 0x4, 0x8, 0x3, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x11}]}, 0x24}}, 0x0) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e1d, 0x0, @private2, 0x9}, 0x1c) (async) bind$inet6(r2, &(0x7f0000000100)={0xa, 0x4e1d, 0x0, @private2, 0x9}, 0x1c) listen(r2, 0x0) (async) listen(r2, 0x0) syz_emit_ethernet(0x9a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c210000086dd600a843500640600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="90c2010090780000080a00000000004de0df0000000402030300000f00f2daa8000000000000000800050e000000000000000000000000fe13f989fddcea2cc2dd53f53ecd0a83ec96481e102000"/91], 0x0) (async) syz_emit_ethernet(0x9a, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c210000086dd600a843500640600fe8000000000000000000000000000aafe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYBLOB="90c2010090780000080a00000000004de0df0000000402030300000f00f2daa8000000000000000800050e000000000000000000000000fe13f989fddcea2cc2dd53f53ecd0a83ec96481e102000"/91], 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(0xffffffffffffffff, 0x84, 0x10, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000e5c000)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_int(0xffffffffffffffff, 0x10d, 0xbb, &(0x7f0000000040), 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="18c40187ab6949546f85011d51ef22bb438f547b0db41f6ba72b27fd613b6b486900", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b89f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000008500000069000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000e80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x17, 0x1c, &(0x7f0000001480)=ANY=[@ANYBLOB="18c40187ab6949546f85011d51ef22bb438f547b0db41f6ba72b27fd613b6b486900", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b89f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7050000080000008500000069000000bf91000000000000b7020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000e80)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) accept$inet6(0xffffffffffffffff, 0x0, 0x0) (async) accept$inet6(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000040), &(0x7f00000002c0)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{}, &(0x7f0000000040), &(0x7f00000002c0)}, 0x20) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x16, 0x0, 0x4, 0xffff, 0x0, 0x1}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r6}, 0x48) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r7}, 0x38) (async) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x2, r7}, 0x38) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000004180)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x400, 0x1000, &(0x7f00000028c0)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, r4}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001400)={{0x1, 0xffffffffffffffff}, &(0x7f0000001340), &(0x7f00000013c0)=r8}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={r7, 0xffffffffffffffff}, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001740)={r6, 0x58, &(0x7f00000016c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000002700)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000002800)={0xf, 0x20, &(0x7f0000001940)=ANY=[@ANYBLOB="180000ffe9e0ff0a001800000000000000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085200000590b0000db7b8000fcffffff9da44000fcffffffb7080000000000007b8af8ff00000000b7080000ff0000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r10, @ANYBLOB="0000000000000000b70500000800000085000000a500000018170000", @ANYRES32, @ANYBLOB="000000000000000000950700980c00009500000000000000"], &(0x7f0000001580)='GPL\x00', 0xd446, 0xc9, &(0x7f00000015c0)=""/201, 0x41100, 0x5, '\x00', r11, 0x16, 0xffffffffffffffff, 0x8, &(0x7f0000001780)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000026c0)={0x0, 0xb, 0x7, 0x7fffffff}, 0x10, r12, 0xffffffffffffffff, 0x7, 0x0, &(0x7f0000002740)=[{}, {0x2, 0x2, 0xc, 0x8}, {0x2, 0x3, 0xb, 0x8}, {0x4, 0x3, 0xd, 0xa}, {0x1, 0x3, 0x8, 0x8}, {0x3, 0x2, 0x8, 0x3}, {0x4, 0x2, 0x8, 0x2}]}, 0x90) bpf$BPF_PROG_QUERY(0x10, 0x0, 0x0) 1.126987096s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued_recursive\x00', 0x26e1, 0x0) pipe(&(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0xd0, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000008e25900ee8d386dd601646b085a2009a2f00ff020000000000000000000000000001fc010000000000000000000000000000000000000000000005020000000000000420880b00460000670c12d787bc48454ad5ab0dbcd795bf5fb1f628b38949083230f6690fa256ac9e09b06b584ba6ff6075c5d0d2ffd980"], 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010100000100000000000200fffc0900010073797a30000000000800024000000001cc000000030a01020000000000000000020000000900010073797a3000000000aa000300"], 0x1e4}}, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r0) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x28, r4, 0x8, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x62}]}, 0x28}, 0x1, 0x0, 0x0, 0x24000014}, 0x8041) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0xc000000, &(0x7f0000000680)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="070000000000000000000c00000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000000002c0050800400050011000100cabee339084eeef16f162471f40000000800070000000000050002"], 0x54}}, 0x0) 881.143813ms ago: executing program 2: r0 = socket$inet6(0xa, 0x3, 0x2c) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x1c) write$binfmt_misc(r0, &(0x7f00000000c0)=ANY=[@ANYRES32=r0], 0xffd8) 822.949831ms ago: executing program 3: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000440)="5ccd037d445afe9f53de6b82b83b02c2aac389e0436529871009e785a4a8159ff1713c7919c9c6f4dbb57e43513c9897aeba032832d63c795da4f844618e4fa4ead01848921156cbb289d43f62a2dc931c42f944bc28124d73ad35bfb9c364542b7f3f58e3bb5ba1c7045a316c92699e8b", 0x71}, {&(0x7f0000000400)}, {0x0}, {&(0x7f0000000840)="d1bceba2aa7a73d94e11bcd4b24268930f3f9f338457d603eabf8a52c72f36e39a71018effd8252cb7b6", 0x2a}, {&(0x7f0000001c40)}, {&(0x7f0000000000)="90f8fc8467a842fb908551c87f1658b0b8fe1e5f633f11677c37b601f3e77b0fc77f7087004bd15da0ff5a", 0x2b}], 0x6, &(0x7f0000002200)}, 0x0) recvmmsg(r1, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000001c00)=[{&(0x7f0000002240)=""/4097, 0x1001}], 0x1, 0x0, 0xfffffd7f}}], 0x1, 0x0, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000080)={@cgroup=r2, 0x15, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) setsockopt$inet_int(r1, 0x0, 0x22, &(0x7f0000000300)=0x9, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000940)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r4 = accept$alg(r3, 0x0, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000}}], 0x1, 0x0, 0x0) getsockopt$IP6T_SO_GET_ENTRIES(0xffffffffffffffff, 0x29, 0x33, 0x0, &(0x7f0000001980)) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$alg(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f0000000500)="e178278f9a685743d2a4a8013dd8758f5add12160cd9f9c1c5f8b5061275d3e2080d884d35b29c290f82cca828712e792bebbcbdf687dc3cf15ef88e443153cb6dbd0e4f2f456aefcfa05cb6c46917789b40f5d5dff75a0a32558804349e473cbfb768fe987243c72c74637d154dca1b0f95d3ee99445c7707563f8e49fb697802755c1d51cdee2cc4010b79e139716ba64c66e7e33db8c8455809b3f75b02b80609ab57e51419a51409d23b764466be7c979f11e2a2e3799895abbf9418d54fb1b50fe016ea1f8033d1a75895cdde9dc8ca11af0d94b2b0dcd75664d48a0d", 0xdf}, {&(0x7f0000000600)="2ea1d31888c6223708419a18c353ef51ffd78bffce70fd8cd88525738f53b9e3c198ec72e6c319c197691326f2dd04e8d975386c79f4b154109e339975ad993e79a2fe119944880d2028c6c8fa266c48aaddcd545f3274516533af2df79b1cc2291a6e4427237329045f46abd43e0b270df2ac375c0fbff833b145bd12a3c468c4457f3e9a5b9becdaf24229d932ccbc1efcbbeb64133ee1e573d4a2b5d9ccad74e13bf21a51650683aabdc5de2e63d1699aac7303d257a2fb878dc1758ffeaee5880d6ad3ca3f38394be24a0c75297bfbf95665b68abd54aa23da2428dab0296556cc8f", 0xe4}, {&(0x7f0000000340)="b66ddedb440537295386bd31682a265ae03491c6cf92bb32f0623884c5c58a50582dbbc0fe2130651521afeb00e9b4706308df0d78eb0cbbaca80bf4330ce8df847c0e0cb9643f7d292fec38a6593aff54d3a093b5ef6fa2971aafd7af6b815169330f6cd0a2b09a21405528082017301eb718f0e386e6f786050d95eb74983b805d60bb4e222335cb8f9c751fbeea6ad81cc8ed9b", 0x95}], 0x3, 0x0, 0x0, 0x40008c0}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r5, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, r6, 0x1, 0x0, 0x60, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@gettaction={0xdc, 0x32, 0x400, 0x70bd28, 0x25dfdbfe, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xffffffff}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7fffffff}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0xe79}, @action_gd=@TCA_ACT_TAB={0x54, 0x1, [{0x10, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'skbmod\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}]}, @action_gd=@TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0xf, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x6}]}, 0xdc}}, 0x0) getsockopt$inet6_mptcp_buf(r8, 0x11c, 0x2, &(0x7f0000000080)=""/78, &(0x7f0000000100)=0x4e) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz1\x00', 0x200002, 0x0) r9 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$MRT(r9, 0x0, 0xcc, 0x0, 0x0) 639.720217ms ago: executing program 2: r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_virt_wifi\x00', 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r2, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f0000000440)=0x8) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000880)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0x8, 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendto(0xffffffffffffffff, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x2c, r5, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x6}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x2c}}, 0x0) 576.421083ms ago: executing program 3: socket$inet6_sctp(0xa, 0x5, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b730000850000006dd2f296b45800000007000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xfffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x2, &(0x7f0000000440)=ANY=[], &(0x7f0000000440)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xa}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'jitterentropy_rng\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r4 = accept$alg(r3, 0x0, 0x0) sendmsg$alg(r4, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000880)=0x4) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000340)={0x0, 0x8002}, &(0x7f00000003c0)=0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r5, 0x84, 0x6c, &(0x7f00000004c0)={r6, 0xae, "23740f8f2c6628401c537636621a923eca45e9cfb6fe3409185fde3d42c3ec12725e7cf98c851b313615cc53fcb4909d93fd2b4f339b407cd7540bd78f07fc125f866d995ebf0dc4f0ea5eac6d21960536fe461ff4acb6c04df73a131718dc9ccef976ab6a70fd2c55ceb41434b9790aea3425ab1b5fd26b84ff5e2d596a1ea7de9548a91ff9b2dea95be8e78dddc59106c4b74d3372cdc95e680b48952c8fa4f59bc22095759d91d6605913ed8e"}, &(0x7f0000000400)=0xb6) r7 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_TARGET(r7, 0x0, 0x43, 0x0, &(0x7f0000003000)=0x1e) recvmsg(r4, &(0x7f0000000780)={0x0, 0x0, 0x0}, 0x0) sendmsg$alg(0xffffffffffffffff, 0x0, 0x0) unshare(0x8040480) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000700)=0x6, 0x12) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x11, 0x12, 0xffffffffffffffff, 0x87708000) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000040), 0x4) 498.074921ms ago: executing program 2: sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000041c0)=[{{&(0x7f0000000000)={0xa, 0x48f4, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c, 0x0, 0x0, &(0x7f0000000400)=[@hoplimit={{0x14}}, @pktinfo={{0x24, 0x29, 0x32, {@private2}}}], 0x40}}], 0x1, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@updpolicy={0xb8, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in=@dev, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x60, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x40}}}, 0xb8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="b800000013007b990000000000000000fc0000"], 0xb8}}, 0x0) 404.046045ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xf, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800080000000000000000001811400000000000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000021b70400000000000085000000c300000095", @ANYRES32=r0, @ANYRESDEC=r0, @ANYRES64, @ANYRES8=0x0], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=@updpolicy={0xc4, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x1, 0x0, 0x1}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000011c0)=ANY=[@ANYBLOB="5800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062726964676500000400028005001100000000000500100004"], 0x58}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x2}}, 0xb8}}, 0x0) 398.716159ms ago: executing program 2: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet6_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000080)={@mcast1, @ipv4={'\x00', '\xff\xff', @local}, @private1}) r3 = socket$kcm(0x2, 0x3, 0x84) r4 = socket$inet(0x2, 0x1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f00004e7000/0x2000)=nil, 0x2000, 0x0, 0x13, r5, 0x0) mmap(&(0x7f0000266000/0x1000)=nil, 0x1000, 0x0, 0x11, r5, 0x0) mmap(&(0x7f0000b15000/0x3000)=nil, 0x3000, 0x0, 0x11, r5, 0x0) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x28011, r5, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='pids.current\x00', 0x275a, 0x0) mmap(&(0x7f00008b7000/0x4000)=nil, 0x4000, 0x0, 0xb4013, r6, 0x0) mmap(&(0x7f00004e7000/0x4000)=nil, 0x4000, 0x0, 0x13, r6, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c00000024000100000000000000000000000000060003000020"], 0x1c}}, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r4, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f00000000c0)='bridge_slave_1\x00', 0x10) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d0000100000000000000000000000030005000000000002004e21ac1e0001000000000000000003000600000000000200000000000000000000000000000008001200000002"], 0x80}}, 0x0) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f00000007c0)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e358e95cfa567fab0c28cc905cd00c0947085ae6fdf8a3e4dcccaf1cf532bd0b982365fd"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r9, 0x2000000, 0xe40, 0x60ff, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8860040dffd00139fb7a884bdfc14f48786dd", 0x0, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, 0x0, 0x1c) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000140), 0x4) sendmsg$inet(r3, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYRES64=r2], 0x68}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r0, 0x89e1, &(0x7f0000000000)={r1}) 191.357646ms ago: executing program 4: unshare(0x20000400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) readv(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r5, &(0x7f0000007c80)={0x0, 0x0, &(0x7f0000007c40)={&(0x7f0000007c00)={0x14, 0x0, 0x3a14550a05f4e177}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r5) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), r5) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r6, 0xb01}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r5) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_CT_DIRECTION={0x5}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000840)={0x50, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}, @NL80211_ATTR_CONTROL_PORT_NO_ENCRYPT={0x4}]}, 0x50}}, 0x0) 159.642446ms ago: executing program 3: socket$inet_udp(0x2, 0x2, 0x0) socket$unix(0x1, 0x1, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x58, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @beacon={{{}, {}, @broadcast}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]}, 0x58}}, 0x0) 147.394849ms ago: executing program 2: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, 0x0, 0x0) 0s ago: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000480)={@cgroup=r1, 0xffffffffffffffff, 0x20, 0x0, 0x0, @prog_id}, 0x20) setsockopt$inet_group_source_req(r0, 0x0, 0x2b, 0x0, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f00000047c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x18}}], 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="b800000019000100"/56], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): T29] audit: type=1804 audit(1718508022.247:68): pid=6267 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1689670221/syzkaller.uLKu9K/67/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 114.637329][ T6278] bond0: entered promiscuous mode [ 114.649690][ T6278] bond_slave_0: entered promiscuous mode [ 114.662668][ T6278] bond_slave_1: entered promiscuous mode [ 114.684709][ T6278] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 114.715302][ T6285] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.732663][ T6281] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.926785][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.075273][ T1037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.193669][ T6302] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.294324][ T6302] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 115.522695][ T1037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.555168][ T6317] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 115.625174][ T6317] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 115.667849][ T6317] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 115.743428][ T1037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.912855][ T1037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.268799][ T1037] bridge_slave_1: left allmulticast mode [ 116.274511][ T1037] bridge_slave_1: left promiscuous mode [ 116.317916][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.395335][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 116.404841][ T5127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 116.414307][ T5127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 116.438541][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 116.446347][ T5127] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 116.454209][ T5127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 116.487368][ T29] audit: type=1800 audit(1718508024.477:69): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 116.556946][ T1037] bridge_slave_0: left allmulticast mode [ 116.594147][ T29] audit: type=1804 audit(1718508024.527:70): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir66044292/syzkaller.rfn6cQ/82/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 116.604281][ T1037] bridge_slave_0: left promiscuous mode [ 116.633442][ T29] audit: type=1804 audit(1718508024.527:71): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir66044292/syzkaller.rfn6cQ/82/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 116.670397][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.688378][ T29] audit: type=1804 audit(1718508024.537:72): pid=6355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir66044292/syzkaller.rfn6cQ/82/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 116.786143][ T6366] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 116.811237][ T6366] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 116.854408][ T6366] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 117.218606][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.232122][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.253783][ T1037] bond0 (unregistering): Released all slaves [ 117.638867][ T6380] 8021q: adding VLAN 0 to HW filter on device batadv8 [ 117.960869][ T6390] __nla_validate_parse: 6 callbacks suppressed [ 117.960891][ T6390] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.094025][ T6402] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.130414][ T6396] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.177883][ T6387] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.187101][ T6387] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.196432][ T6387] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.205708][ T6387] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.322158][ T1037] hsr_slave_0: left promiscuous mode [ 118.353955][ T1037] hsr_slave_1: left promiscuous mode [ 118.423955][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.444679][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.481343][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.498271][ T53] Bluetooth: hci4: command tx timeout [ 118.510248][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.598496][ T1037] veth1_macvtap: left promiscuous mode [ 118.610554][ T1037] veth0_macvtap: left promiscuous mode [ 118.623627][ T1037] veth1_vlan: left promiscuous mode [ 118.636326][ T1037] veth0_vlan: left promiscuous mode [ 118.829703][ T6435] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 118.859147][ T6435] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 118.887531][ T6435] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 119.417137][ T1037] team0 (unregistering): Port device team_slave_1 removed [ 119.498547][ T1037] team0 (unregistering): Port device team_slave_0 removed [ 119.620238][ T6445] syz-executor.4 uses old SIOCAX25GETINFO [ 120.120980][ T6441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.171310][ T6441] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 120.190103][ T6442] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.222207][ T6444] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.308657][ T6454] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 120.434880][ T6453] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 120.577854][ T53] Bluetooth: hci4: command tx timeout [ 120.718916][ T6347] chnl_net:caif_netlink_parms(): no params data found [ 120.778016][ T6473] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.880430][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.081358][ T6473] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.090300][ T6473] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.099369][ T6473] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.108209][ T6473] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 121.121456][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 121.121474][ T29] audit: type=1800 audit(1718508029.117:83): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 121.180503][ T29] audit: type=1804 audit(1718508029.157:84): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2966971468/syzkaller.cZSa3P/77/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 121.218879][ T6347] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.226306][ T6347] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.245386][ T6347] bridge_slave_0: entered allmulticast mode [ 121.257355][ T6347] bridge_slave_0: entered promiscuous mode [ 121.268299][ T29] audit: type=1804 audit(1718508029.157:85): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2966971468/syzkaller.cZSa3P/77/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 121.272601][ T6347] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.321996][ T6347] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.340766][ T6347] bridge_slave_1: entered allmulticast mode [ 121.361435][ T6347] bridge_slave_1: entered promiscuous mode [ 121.363361][ T29] audit: type=1804 audit(1718508029.167:86): pid=6489 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2966971468/syzkaller.cZSa3P/77/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 121.405517][ T29] audit: type=1804 audit(1718508029.237:87): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2966971468/syzkaller.cZSa3P/77/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 121.442694][ T29] audit: type=1804 audit(1718508029.237:88): pid=6491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2966971468/syzkaller.cZSa3P/77/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 121.491770][ T6347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.510072][ T6347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.602738][ T6500] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 121.631417][ T6500] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 121.651116][ T6347] team0: Port device team_slave_0 added [ 121.677072][ T6347] team0: Port device team_slave_1 added [ 121.687668][ T6500] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 121.816904][ T6347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.841569][ T6347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.885069][ T6347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.900816][ T6347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.908536][ T6347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.970117][ T6347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 122.086159][ T6514] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 122.321781][ T6347] hsr_slave_0: entered promiscuous mode [ 122.348131][ T6347] hsr_slave_1: entered promiscuous mode [ 122.559022][ C1] net_ratelimit: 2 callbacks suppressed [ 122.559045][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 122.657648][ T53] Bluetooth: hci4: command tx timeout [ 123.171672][ T29] audit: type=1800 audit(1718508031.167:89): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1954 res=0 errno=0 [ 123.212739][ T29] audit: type=1804 audit(1718508031.167:90): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1689670221/syzkaller.uLKu9K/85/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 123.253528][ T29] audit: type=1804 audit(1718508031.167:91): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1689670221/syzkaller.uLKu9K/85/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 123.295812][ T29] audit: type=1804 audit(1718508031.167:92): pid=6551 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1689670221/syzkaller.uLKu9K/85/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 123.699846][ T6347] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 123.730516][ T6347] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 123.765841][ T6347] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 123.804221][ T6347] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 123.936032][ T6567] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 123.953181][ T6546] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.110173][ T6347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 124.169440][ T6347] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.190463][ T6576] __nla_validate_parse: 5 callbacks suppressed [ 124.190483][ T6576] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.202311][ T6577] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 124.229475][ T6577] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 124.239682][ T5173] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.246010][ T6577] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 124.246882][ T5173] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.288546][ T6570] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.309385][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 124.316621][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 124.625095][ T6592] netlink: 'syz-executor.4': attribute type 64 has an invalid length. [ 124.737839][ T53] Bluetooth: hci4: command tx timeout [ 125.004791][ T6347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 125.106681][ T6347] veth0_vlan: entered promiscuous mode [ 125.178205][ T6347] veth1_vlan: entered promiscuous mode [ 125.279542][ T6613] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 125.300136][ T6613] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.344564][ T6347] veth0_macvtap: entered promiscuous mode [ 125.366136][ T6347] veth1_macvtap: entered promiscuous mode [ 125.423016][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.454792][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.495926][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.533893][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.562971][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.607491][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.637807][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.666587][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.694497][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.752549][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.777749][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.800140][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.833100][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.870684][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.894713][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.927513][ T6347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.951207][ T6347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.981982][ T6347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.016098][ T6631] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.049219][ T6628] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.089514][ T6347] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.123823][ T6347] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.143482][ T6347] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.194947][ T6347] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.515843][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.559091][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.604694][ T6649] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.661886][ T6649] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 126.706814][ T6654] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.775106][ T6655] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.817120][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.845758][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.868694][ T6661] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 126.902210][ T6661] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 126.983763][ T6661] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 127.074960][ T6639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.413988][ T6681] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.424558][ T6680] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.487149][ T6683] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.111526][ T6698] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 128.909048][ T6730] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 128.988776][ T3516] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.025141][ T6735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.148933][ T6706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.177040][ T6737] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 129.453503][ T6746] __nla_validate_parse: 4 callbacks suppressed [ 129.453525][ T6746] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.477749][ T6744] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.608488][ T6750] x_tables: ip_tables: ah match: only valid for protocol 51 [ 129.764747][ T6749] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.891751][ T3516] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.919395][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 129.929156][ T5127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 129.939159][ T5127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 129.960261][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 129.970413][ T5127] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 130.012362][ T5127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 130.084226][ T6749] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.120131][ T6767] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 130.190387][ T3516] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.293456][ T6749] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.442479][ T3516] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.535580][ T6749] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.581780][ T6780] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.620093][ T6779] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.790907][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 130.790925][ T29] audit: type=1800 audit(1718508038.787:101): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 130.795682][ T6749] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.809876][ T29] audit: type=1804 audit(1718508038.807:102): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2966971468/syzkaller.cZSa3P/87/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 130.887959][ T29] audit: type=1804 audit(1718508038.857:103): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2966971468/syzkaller.cZSa3P/87/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 130.932343][ T29] audit: type=1804 audit(1718508038.857:104): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2966971468/syzkaller.cZSa3P/87/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 130.970662][ T6787] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.979113][ T29] audit: type=1804 audit(1718508038.877:105): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2966971468/syzkaller.cZSa3P/87/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 131.013499][ T29] audit: type=1804 audit(1718508038.877:106): pid=6786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2966971468/syzkaller.cZSa3P/87/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 131.066360][ T6749] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.145274][ T6749] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.186268][ T6749] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.208078][ T3516] bridge_slave_1: left allmulticast mode [ 131.214504][ T3516] bridge_slave_1: left promiscuous mode [ 131.232326][ T3516] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.256272][ T3516] bridge_slave_0: left allmulticast mode [ 131.269242][ T3516] bridge_slave_0: left promiscuous mode [ 131.287788][ T3516] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.433602][ T6781] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 131.905436][ T3516] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.923249][ T3516] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.936097][ T3516] bond0 (unregistering): Released all slaves [ 131.991044][ T6797] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.019307][ T6803] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 132.098908][ T5127] Bluetooth: hci4: command tx timeout [ 132.325950][ T6828] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.379868][ T6825] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.575312][ T6757] chnl_net:caif_netlink_parms(): no params data found [ 132.625013][ T6837] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.719020][ T3516] hsr_slave_0: left promiscuous mode [ 132.740651][ T3516] hsr_slave_1: left promiscuous mode [ 132.777924][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.785376][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.817260][ T3516] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 132.844400][ T3516] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 132.853224][ T6852] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.914775][ T3516] veth1_macvtap: left promiscuous mode [ 132.928230][ T3516] veth0_macvtap: left promiscuous mode [ 132.936916][ T3516] veth1_vlan: left promiscuous mode [ 132.951540][ T3516] veth0_vlan: left promiscuous mode [ 133.152841][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.162742][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.716301][ T6853] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.753907][ T3516] team0 (unregistering): Port device team_slave_1 removed [ 133.795795][ T3516] team0 (unregistering): Port device team_slave_0 removed [ 134.180939][ T5127] Bluetooth: hci4: command tx timeout [ 134.237957][ T6866] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 134.623950][ T6883] __nla_validate_parse: 1 callbacks suppressed [ 134.623972][ T6883] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.660370][ T6757] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.669423][ T6757] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.688936][ T6757] bridge_slave_0: entered allmulticast mode [ 134.709247][ T6757] bridge_slave_0: entered promiscuous mode [ 134.721322][ T6878] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.786106][ T6757] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.819080][ T6757] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.826684][ T6757] bridge_slave_1: entered allmulticast mode [ 134.870391][ T6757] bridge_slave_1: entered promiscuous mode [ 134.928600][ T6891] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 134.966433][ T6891] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 135.000220][ T6891] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 135.022152][ T6757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.042090][ T6888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.116013][ T6903] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 135.141838][ T6757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.186474][ T6903] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 135.220468][ T6906] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 135.235160][ T6903] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.352320][ T6757] team0: Port device team_slave_0 added [ 135.374808][ T6903] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 135.375222][ T6911] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.402465][ T6906] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 135.425997][ T6757] team0: Port device team_slave_1 added [ 135.516171][ T6914] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 135.546415][ T6918] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.631526][ T6757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.654466][ T6757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.713845][ T6757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.779597][ T6757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.786596][ T6757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.914454][ T6757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.929689][ T29] audit: type=1804 audit(1718508043.907:107): pid=6925 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name=E3CED329A1618B95918620A1835F7756B82C1D5A75A8F115D6E756D2DD357320F63759526F59C0CA dev="sda1" ino=1956 res=1 errno=0 [ 136.153885][ T6945] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.171625][ T6757] hsr_slave_0: entered promiscuous mode [ 136.220678][ T6757] hsr_slave_1: entered promiscuous mode [ 136.257696][ T5127] Bluetooth: hci4: command tx timeout [ 136.263751][ T6951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.311620][ T6954] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.596659][ T6959] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.485585][ T6757] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 137.551370][ T6757] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 137.590647][ T6757] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 137.638685][ T6757] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 138.002099][ T6757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 138.136747][ T6757] 8021q: adding VLAN 0 to HW filter on device team0 [ 138.194102][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.201349][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.274721][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.281945][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 138.337679][ T5127] Bluetooth: hci4: command tx timeout [ 138.491039][ T6757] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 139.156042][ T6757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.201719][ T7063] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 139.209450][ T7063] IPv6: NLM_F_CREATE should be set when creating new route [ 139.216771][ T7063] IPv6: NLM_F_CREATE should be set when creating new route [ 139.578427][ T6757] veth0_vlan: entered promiscuous mode [ 139.623817][ T6757] veth1_vlan: entered promiscuous mode [ 139.691439][ T7077] __nla_validate_parse: 9 callbacks suppressed [ 139.691458][ T7077] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.732017][ T6757] veth0_macvtap: entered promiscuous mode [ 139.744068][ T6757] veth1_macvtap: entered promiscuous mode [ 139.773539][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.827730][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.854889][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.887731][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.919612][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.945870][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.966810][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.997708][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.020905][ T6757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 140.056182][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.087562][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.107607][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.138247][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.156355][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.174847][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.207304][ T6757] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 140.227507][ T6757] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.261335][ T6757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 140.271692][ T7086] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.305571][ T7093] validate_nla: 12 callbacks suppressed [ 140.305591][ T7093] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 140.349754][ T6757] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.387853][ T6757] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.396602][ T6757] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.458546][ T6757] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.583121][ T7118] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.757122][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.795839][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.933176][ T2833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.956525][ T2833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.262009][ T7139] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 141.605169][ T7159] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 141.636368][ T7159] macvtap1: entered promiscuous mode [ 141.655753][ T7159] macvtap1: entered allmulticast mode [ 141.679140][ T7159] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 141.704047][ T7159] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 141.714816][ T7159] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 141.781395][ T7161] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.801626][ T7169] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 142.064884][ T7175] syzkaller0: entered promiscuous mode [ 142.110054][ T7175] syzkaller0: entered allmulticast mode [ 142.364496][ T7196] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 142.407830][ T7196] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.441162][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.548582][ T7206] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.933049][ T7215] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.943355][ T7223] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 144.970364][ T7249] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 145.464156][ T7274] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.509732][ T1037] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.760276][ T1037] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.793758][ T7286] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.826508][ T7286] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 145.973501][ T1037] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.171293][ T1037] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.500749][ T7321] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.701731][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 146.711933][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 146.723225][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 146.733218][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 146.741843][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 146.755953][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 146.917802][ T1037] bridge_slave_1: left allmulticast mode [ 146.933992][ T1037] bridge_slave_1: left promiscuous mode [ 146.957887][ T1037] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.996173][ T1037] bridge_slave_0: left allmulticast mode [ 147.018465][ T1037] bridge_slave_0: left promiscuous mode [ 147.036511][ T1037] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.907122][ T1037] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 147.920401][ T1037] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 147.932731][ T1037] bond0 (unregistering): Released all slaves [ 147.982194][ T7345] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.004917][ T7351] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 148.049983][ T7360] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 148.088119][ T7360] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.438482][ T7382] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.625175][ T7394] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 148.818422][ T5128] Bluetooth: hci4: command tx timeout [ 149.022828][ T1037] hsr_slave_0: left promiscuous mode [ 149.068160][ T1037] hsr_slave_1: left promiscuous mode [ 149.102331][ T7417] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 149.128227][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.135783][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.178576][ T1037] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.186034][ T1037] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.267727][ T1037] veth1_macvtap: left promiscuous mode [ 149.273428][ T1037] veth0_macvtap: left promiscuous mode [ 149.298416][ T1037] veth1_vlan: left promiscuous mode [ 149.303823][ T1037] veth0_vlan: left promiscuous mode [ 150.231164][ T1037] team0 (unregistering): Port device team_slave_1 removed [ 150.274465][ T1037] team0 (unregistering): Port device team_slave_0 removed [ 150.737651][ T7414] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.780345][ T7424] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 150.897544][ T5128] Bluetooth: hci4: command tx timeout [ 151.068652][ T7453] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.084591][ T7444] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.092978][ T7450] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 151.130052][ T7444] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 151.429452][ T7324] chnl_net:caif_netlink_parms(): no params data found [ 151.451495][ T7466] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 151.508903][ T7466] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 151.915565][ T7324] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.944121][ T7324] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.974920][ T7324] bridge_slave_0: entered allmulticast mode [ 152.004490][ T7324] bridge_slave_0: entered promiscuous mode [ 152.048408][ T7492] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.068733][ T7502] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 152.172680][ T7500] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 152.192876][ T7324] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.210258][ T7324] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.223973][ T7324] bridge_slave_1: entered allmulticast mode [ 152.275015][ T7324] bridge_slave_1: entered promiscuous mode [ 152.662946][ T7521] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 152.724696][ T7324] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.740528][ T7324] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.931841][ T7539] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 152.978152][ T5128] Bluetooth: hci4: command tx timeout [ 152.997325][ T7541] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.019807][ T7543] xt_TCPMSS: Only works on TCP SYN packets [ 153.094491][ T7324] team0: Port device team_slave_0 added [ 153.130663][ T7324] team0: Port device team_slave_1 added [ 153.166480][ T7543] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.192279][ T7541] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 153.205579][ T7547] bridge_slave_1: left allmulticast mode [ 153.212065][ T7547] bridge_slave_1: left promiscuous mode [ 153.228078][ T7547] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.269707][ T7547] bridge_slave_0: left allmulticast mode [ 153.285711][ T7547] bridge_slave_0: left promiscuous mode [ 153.303947][ T7547] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.443590][ T7556] lo speed is unknown, defaulting to 1000 [ 153.514183][ T7556] lo speed is unknown, defaulting to 1000 [ 153.519415][ T7324] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.551410][ T7324] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.612863][ T7324] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.626109][ T7556] lo speed is unknown, defaulting to 1000 [ 153.631028][ T7324] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.640286][ T7324] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.688021][ T7324] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.893109][ T7324] hsr_slave_0: entered promiscuous mode [ 153.972855][ T7324] hsr_slave_1: entered promiscuous mode [ 154.052443][ T7576] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.335648][ T7556] infiniband syz0: set active [ 154.350769][ T7556] infiniband syz0: added lo [ 154.357023][ T5172] lo speed is unknown, defaulting to 1000 [ 154.364595][ T7587] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.388496][ T7556] syz0: rxe_create_cq: returned err = -12 [ 154.405197][ T7588] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 154.421138][ T7556] infiniband syz0: Couldn't create ib_mad CQ [ 154.442447][ T7556] infiniband syz0: Couldn't open port 1 [ 154.486791][ T7592] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 154.560750][ T7556] RDS/IB: syz0: added [ 154.588317][ T7556] smc: adding ib device syz0 with port count 1 [ 154.594777][ T7556] smc: ib device syz0 port 1 has pnetid [ 154.610173][ T7587] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 154.701286][ T5172] lo speed is unknown, defaulting to 1000 [ 154.731216][ T7556] lo speed is unknown, defaulting to 1000 [ 154.788224][ T7604] tls_set_device_offload: netdev not found [ 155.058258][ T5128] Bluetooth: hci4: command tx timeout [ 155.509303][ T7556] lo speed is unknown, defaulting to 1000 [ 155.669259][ T7634] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 156.045438][ T7655] __nla_validate_parse: 2 callbacks suppressed [ 156.045458][ T7655] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.213831][ T7324] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 156.257699][ T7556] lo speed is unknown, defaulting to 1000 [ 156.268586][ T7324] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 156.322124][ T7324] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 156.399755][ T7324] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 156.698110][ T7674] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.809654][ T7324] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.902740][ T7324] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.964715][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.971973][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.022236][ T5172] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.029468][ T5172] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.078847][ T7677] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.118509][ T7556] lo speed is unknown, defaulting to 1000 [ 157.234855][ T7324] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.668160][ T7703] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.710033][ T7706] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.790720][ T7713] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.923716][ T7556] lo speed is unknown, defaulting to 1000 [ 157.963728][ T7324] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.183528][ T7324] veth0_vlan: entered promiscuous mode [ 158.222282][ T7722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.239628][ T7324] veth1_vlan: entered promiscuous mode [ 158.365149][ T7324] veth0_macvtap: entered promiscuous mode [ 158.412006][ T7324] veth1_macvtap: entered promiscuous mode [ 158.526112][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.567859][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.607767][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.647497][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.679023][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.697888][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.717789][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.761773][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.809499][ T7324] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.909220][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.958054][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.977961][ T7745] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.978258][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.999593][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.040331][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.069101][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.084839][ T7324] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.095472][ T7324] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.107575][ T7324] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.115587][ T7744] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.131622][ T7747] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.240966][ T7324] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.272006][ T7324] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.289899][ T7324] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.309842][ T7324] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.334382][ T7755] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 159.667337][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.705907][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.816412][ T1037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.846536][ T1037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.180427][ T7797] rdma_rxe: rxe_newlink: failed to add lo [ 160.515094][ T7806] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 161.383467][ T7854] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 161.417933][ T7854] __nla_validate_parse: 8 callbacks suppressed [ 161.417954][ T7854] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 161.494785][ T7860] rdma_rxe: rxe_newlink: failed to add lo [ 162.088100][ T4545] udevd[4545]: worker [6343] terminated by signal 33 (Unknown signal 33) [ 162.153615][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.542027][ T7906] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.626426][ T7873] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.658280][ T7910] syz0: rxe_newlink: already configured on lo [ 162.686619][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.724225][ T7906] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 162.816729][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.021861][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.090892][ T7921] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.180849][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 163.193143][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 163.201602][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 163.228490][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 163.239581][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 163.247983][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 163.538672][ T7929] lo speed is unknown, defaulting to 1000 [ 163.558101][ T60] bridge_slave_1: left allmulticast mode [ 163.572329][ T60] bridge_slave_1: left promiscuous mode [ 163.622707][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.718470][ T60] bridge_slave_0: left allmulticast mode [ 163.724192][ T60] bridge_slave_0: left promiscuous mode [ 163.756431][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.602557][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.616236][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.631760][ T60] bond0 (unregistering): Released all slaves [ 164.650332][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.677247][ T7961] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.745198][ T7966] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.756028][ T7967] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 164.999339][ T8001] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.133125][ T7996] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 165.151950][ T7996] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.160742][ T7996] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.222441][ T7996] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.229744][ T7996] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.237464][ T7996] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.244675][ T7996] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.334720][ T7996] bridge0: entered promiscuous mode [ 165.341742][ T7996] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 165.377924][ T53] Bluetooth: hci4: command tx timeout [ 165.651616][ T8022] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.836844][ T60] hsr_slave_0: left promiscuous mode [ 165.856110][ T60] hsr_slave_1: left promiscuous mode [ 165.884391][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 165.897630][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 165.929024][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 165.936489][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.020329][ T60] veth1_macvtap: left promiscuous mode [ 166.026211][ T60] veth0_macvtap: left promiscuous mode [ 166.032114][ T60] veth1_vlan: left promiscuous mode [ 166.038980][ T60] veth0_vlan: left promiscuous mode [ 166.608687][ T60] team0 (unregistering): Port device team_slave_1 removed [ 166.655601][ T60] team0 (unregistering): Port device team_slave_0 removed [ 167.157996][ T8030] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.200496][ T8031] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 167.226242][ T8040] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.363202][ T8042] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.458418][ T53] Bluetooth: hci4: command tx timeout [ 167.767968][ T8066] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.798673][ T8066] xt_cgroup: xt_cgroup: no path or classid specified [ 167.976926][ T7929] chnl_net:caif_netlink_parms(): no params data found [ 168.054676][ T8073] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.235841][ T8081] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.277541][ T8079] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.342545][ T7929] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.368322][ T5128] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 168.380238][ T5128] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 168.380468][ T7929] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.396483][ T5128] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 168.405923][ T5128] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 168.410589][ T7929] bridge_slave_0: entered allmulticast mode [ 168.422554][ T5128] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 168.430212][ T5128] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 168.435929][ T7929] bridge_slave_0: entered promiscuous mode [ 168.485760][ T7929] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.508065][ T7929] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.515452][ T7929] bridge_slave_1: entered allmulticast mode [ 168.528610][ T7929] bridge_slave_1: entered promiscuous mode [ 168.538327][ T8082] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 168.675003][ T7929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 168.712080][ T8083] lo speed is unknown, defaulting to 1000 [ 168.722793][ T7929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 168.888005][ T7929] team0: Port device team_slave_0 added [ 168.918425][ T7929] team0: Port device team_slave_1 added [ 168.970305][ T8100] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 169.059560][ T8100] infiniband syz0: set down [ 169.136414][ T8111] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.162999][ T60] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.250084][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.271512][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.337630][ T7929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.360923][ T8107] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 169.390183][ T8107] infiniband syz0: set active [ 169.396620][ T9] lo speed is unknown, defaulting to 1000 [ 169.413192][ T9] lo speed is unknown, defaulting to 1000 [ 169.448191][ T8100] x_tables: duplicate underflow at hook 2 [ 169.486754][ T8122] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.538081][ T53] Bluetooth: hci4: command tx timeout [ 169.542417][ T60] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.561619][ T7929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.579052][ T7929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.605912][ T7929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.621457][ T5171] lo speed is unknown, defaulting to 1000 [ 169.632185][ T8100] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.701108][ T60] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.870021][ T60] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.985422][ T7929] hsr_slave_0: entered promiscuous mode [ 169.995880][ T7929] hsr_slave_1: entered promiscuous mode [ 170.189181][ T8151] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.371756][ T8156] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 170.497770][ T53] Bluetooth: hci1: command tx timeout [ 170.504776][ T8166] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 170.778525][ T8167] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 171.051854][ T8169] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 171.093749][ T60] bridge_slave_1: left allmulticast mode [ 171.109560][ T60] bridge_slave_1: left promiscuous mode [ 171.131534][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.183779][ T60] bridge_slave_0: left allmulticast mode [ 171.209244][ T60] bridge_slave_0: left promiscuous mode [ 171.230629][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.563947][ T8191] x_tables: duplicate underflow at hook 2 [ 171.618601][ T53] Bluetooth: hci4: command tx timeout [ 172.588250][ T53] Bluetooth: hci1: command tx timeout [ 172.841010][ T60] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.853610][ T60] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.866624][ T60] bond0 (unregistering): Released all slaves [ 172.895816][ T8175] __nla_validate_parse: 1 callbacks suppressed [ 172.895837][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.974998][ T8180] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 172.997918][ T8181] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 173.015024][ T8191] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.031103][ T8194] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 173.194033][ T8083] chnl_net:caif_netlink_parms(): no params data found [ 173.240654][ T8201] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.018476][ T8200] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.311415][ T8205] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 174.331565][ T8208] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.405961][ T8210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.589862][ T8219] sctp: [Deprecated]: syz-executor.3 (pid 8219) Use of struct sctp_assoc_value in delayed_ack socket option. [ 174.589862][ T8219] Use struct sctp_sack_info instead [ 174.657810][ T53] Bluetooth: hci1: command tx timeout [ 175.049547][ T60] hsr_slave_0: left promiscuous mode [ 175.069491][ T60] hsr_slave_1: left promiscuous mode [ 175.088055][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.096613][ T60] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 175.105227][ T60] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 175.113977][ T60] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 175.143731][ T60] veth1_macvtap: left promiscuous mode [ 175.149566][ T60] veth0_macvtap: left promiscuous mode [ 175.155344][ T60] veth1_vlan: left promiscuous mode [ 175.160929][ T60] veth0_vlan: left promiscuous mode [ 175.732240][ T8246] x_tables: duplicate underflow at hook 2 [ 175.901675][ T60] team0 (unregistering): Port device team_slave_1 removed [ 175.941031][ T60] team0 (unregistering): Port device team_slave_0 removed [ 176.353239][ T8227] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.394632][ T8083] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.418214][ T8083] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.426656][ T8083] bridge_slave_0: entered allmulticast mode [ 176.445489][ T8083] bridge_slave_0: entered promiscuous mode [ 176.454736][ T8083] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.462388][ T8083] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.469760][ T8083] bridge_slave_1: entered allmulticast mode [ 176.477974][ T8083] bridge_slave_1: entered promiscuous mode [ 176.499878][ T8233] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 176.516390][ T8240] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 176.545729][ T8240] infiniband syz0: set down [ 176.568771][ T8241] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 176.615938][ T8241] infiniband syz0: set active [ 176.624693][ T8246] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.637317][ T7929] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 176.712754][ T8248] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.738334][ T53] Bluetooth: hci1: command tx timeout [ 176.778448][ T5169] lo speed is unknown, defaulting to 1000 [ 176.802475][ T5172] lo speed is unknown, defaulting to 1000 [ 176.817833][ T7929] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 176.839767][ T8083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.878373][ T8083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 176.908944][ T5169] lo speed is unknown, defaulting to 1000 [ 176.909108][ T7929] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 176.990685][ T8268] sctp: [Deprecated]: syz-executor.2 (pid 8268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 176.990685][ T8268] Use struct sctp_sack_info instead [ 177.008953][ T8268] sctp: [Deprecated]: syz-executor.2 (pid 8268) Use of struct sctp_assoc_value in delayed_ack socket option. [ 177.008953][ T8268] Use struct sctp_sack_info instead [ 177.722539][ T8263] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 177.995603][ T7929] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 178.129735][ T8280] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.159636][ T8083] team0: Port device team_slave_0 added [ 178.180575][ T8083] team0: Port device team_slave_1 added [ 178.301458][ T8083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.319782][ T8083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.373672][ T8083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.402125][ T8083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.409686][ T8292] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.417175][ T8083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.472383][ T8083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.593468][ T8083] hsr_slave_0: entered promiscuous mode [ 178.608294][ T8083] hsr_slave_1: entered promiscuous mode [ 178.626880][ T8083] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.635922][ T8083] Cannot create hsr debugfs directory [ 178.643829][ T8297] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.692378][ T8298] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 178.741439][ T8300] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.832503][ T8301] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 178.985769][ T8307] sctp: [Deprecated]: syz-executor.2 (pid 8307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 178.985769][ T8307] Use struct sctp_sack_info instead [ 179.011675][ T8307] sctp: [Deprecated]: syz-executor.2 (pid 8307) Use of struct sctp_assoc_value in delayed_ack socket option. [ 179.011675][ T8307] Use struct sctp_sack_info instead [ 179.157566][ T7929] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.258673][ T7929] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.265976][ T8313] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 179.302912][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.310198][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.327145][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.334431][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.005138][ T8329] pim6reg: entered allmulticast mode [ 180.050273][ T8314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.077965][ T8337] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.467315][ T8338] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 180.488780][ T8329] pim6reg: left allmulticast mode [ 180.671947][ T7929] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 180.722694][ T8344] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.796612][ T8346] sctp: [Deprecated]: syz-executor.2 (pid 8346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.796612][ T8346] Use struct sctp_sack_info instead [ 180.817127][ T8346] sctp: [Deprecated]: syz-executor.2 (pid 8346) Use of struct sctp_assoc_value in delayed_ack socket option. [ 180.817127][ T8346] Use struct sctp_sack_info instead [ 180.832194][ T7929] veth0_vlan: entered promiscuous mode [ 180.871235][ T7929] veth1_vlan: entered promiscuous mode [ 181.053773][ T8083] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 181.070685][ T8083] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 181.091652][ T8354] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.103890][ T7929] veth0_macvtap: entered promiscuous mode [ 181.112687][ T8083] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 181.133630][ T7929] veth1_macvtap: entered promiscuous mode [ 181.143851][ T8083] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 181.242689][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.268102][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.287477][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.309020][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.327894][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.357635][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.379538][ T7929] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.393243][ T8361] syzkaller0: entered allmulticast mode [ 181.404091][ T8360] syzkaller0: left allmulticast mode [ 181.437809][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.457674][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.477476][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.498743][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.517723][ T7929] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.547645][ T7929] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.569232][ T7929] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 181.580060][ T8369] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.622951][ T8372] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 181.659281][ T8376] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.678435][ T7929] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.687201][ T7929] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.737947][ T7929] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 181.746713][ T7929] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.405422][ T8373] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 183.029981][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.047230][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.123206][ T8083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.195247][ T8083] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.202828][ T2833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.221439][ T2833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.380264][ T8416] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 183.572047][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.579329][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.656285][ T1149] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.663545][ T1149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.735011][ T8417] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 184.034354][ T8423] __nla_validate_parse: 1 callbacks suppressed [ 184.034375][ T8423] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.179984][ T8424] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.250566][ T8425] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 184.373409][ T8083] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 184.425211][ T8431] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.620572][ T8440] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 184.648534][ T8441] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 184.656741][ T8441] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 184.678210][ T8441] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.735518][ T8083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.862753][ T8083] veth0_vlan: entered promiscuous mode [ 185.004709][ T8455] trusted_key: syz-executor.3 sent an empty control message without MSG_MORE. [ 185.031254][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.085172][ T8457] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.156036][ T8458] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 185.226387][ T8083] veth1_vlan: entered promiscuous mode [ 185.240493][ T8463] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.320789][ T8468] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.376249][ T8083] veth0_macvtap: entered promiscuous mode [ 185.446352][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.486777][ T8471] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.516730][ T8083] veth1_macvtap: entered promiscuous mode [ 185.572530][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.630299][ T8476] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 185.643331][ T8476] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 185.652429][ T8476] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.668462][ T8474] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 185.752849][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.808137][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.832016][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.853283][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.872642][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.887855][ T5128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 185.896039][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.897342][ T5128] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 185.917088][ T5128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 185.925137][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.935709][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.948743][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.959839][ T5128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 185.968515][ T5128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 185.976121][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 185.994031][ T8083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.003062][ T8478] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.120248][ T8485] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 186.161324][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.202145][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.237762][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.267565][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.292669][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.329440][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.359168][ T8083] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.372425][ T8083] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.400064][ T8083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.429956][ T8083] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.448623][ T8083] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.457371][ T8083] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.481180][ T8083] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.544708][ T8481] lo speed is unknown, defaulting to 1000 [ 186.705991][ T12] bridge_slave_1: left allmulticast mode [ 186.720634][ T12] bridge_slave_1: left promiscuous mode [ 186.726492][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.801881][ T12] bridge_slave_0: left allmulticast mode [ 186.823648][ T12] bridge_slave_0: left promiscuous mode [ 186.847263][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.379903][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.394132][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.406515][ T12] bond0 (unregistering): Released all slaves [ 187.423098][ T8512] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 187.432471][ T8512] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 187.499498][ T8526] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 187.918473][ T8545] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 188.028005][ T53] Bluetooth: hci4: command tx timeout [ 188.113743][ T2833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 188.140201][ T2833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 188.446891][ T12] hsr_slave_0: left promiscuous mode [ 188.470153][ T12] hsr_slave_1: left promiscuous mode [ 188.479334][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.487741][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.503702][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.523395][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 189.337916][ T8560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.833325][ T12] veth1_macvtap: left promiscuous mode [ 189.856243][ T12] veth0_macvtap: left promiscuous mode [ 189.869016][ T12] veth1_vlan: left promiscuous mode [ 189.884991][ T12] veth0_vlan: left promiscuous mode [ 190.108729][ T53] Bluetooth: hci4: command tx timeout [ 190.460644][ T12] team0 (unregistering): Port device team_slave_1 removed [ 190.525416][ T12] team0 (unregistering): Port device team_slave_0 removed [ 190.954130][ T8567] __nla_validate_parse: 11 callbacks suppressed [ 190.954155][ T8567] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.990761][ T8569] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 191.127741][ T3516] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.171108][ T3516] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.202067][ T8481] chnl_net:caif_netlink_parms(): no params data found [ 191.262029][ T8586] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.187893][ T53] Bluetooth: hci4: command tx timeout [ 192.256580][ T8596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.890467][ T8612] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.948933][ T8614] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 193.019660][ T8481] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.027995][ T8618] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.037570][ T8481] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.037779][ T8481] bridge_slave_0: entered allmulticast mode [ 193.082945][ T8481] bridge_slave_0: entered promiscuous mode [ 193.109099][ T8481] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.128611][ T8481] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.145563][ T8481] bridge_slave_1: entered allmulticast mode [ 193.163300][ T8481] bridge_slave_1: entered promiscuous mode [ 193.194000][ T8618] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.229766][ T8626] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 193.259589][ T8626] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 193.285104][ T8626] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.364711][ T8481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.401082][ T8481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.434861][ T8631] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 193.522399][ T8633] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 193.593379][ T8481] team0: Port device team_slave_0 added [ 193.616551][ T8481] team0: Port device team_slave_1 added [ 194.267818][ T53] Bluetooth: hci4: command tx timeout [ 194.546061][ T8639] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.581987][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.598353][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.819383][ T8644] bond0: (slave bond_slave_0): Releasing backup interface [ 194.838176][ T8644] bond_slave_0: left promiscuous mode [ 194.864171][ T8647] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.912885][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.937580][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.987153][ T8481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.000661][ T8654] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 195.020502][ T8481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.038206][ T8481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.117531][ T8481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.143734][ T8656] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 195.252015][ T8665] can: request_module (can-proto-0) failed. [ 195.254868][ T8656] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 195.399513][ T8481] hsr_slave_0: entered promiscuous mode [ 195.429631][ T8481] hsr_slave_1: entered promiscuous mode [ 195.576503][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 196.662660][ T5132] Bluetooth: hci2: command 0x0406 tx timeout [ 196.662681][ T5123] Bluetooth: hci0: command 0x0406 tx timeout [ 196.669295][ T5132] Bluetooth: hci3: command 0x0405 tx timeout [ 196.931929][ T8703] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.182924][ T8713] __nla_validate_parse: 1 callbacks suppressed [ 197.182953][ T8713] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.305135][ T8716] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 197.367045][ T8718] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 197.388293][ T8720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.633069][ T8726] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.834139][ T8481] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 197.892070][ T8481] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 198.019747][ T8481] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 198.043831][ T8481] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 198.217297][ T8757] Illegal XDP return value 4294967294 on prog (id 244) dev N/A, expect packet loss! [ 198.234316][ T8759] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 198.286049][ T8757] wireguard0: entered promiscuous mode [ 198.303604][ T8757] wireguard0: entered allmulticast mode [ 198.369533][ T8763] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.443254][ T8481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.476784][ T8763] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 198.540729][ T8481] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.632216][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.639477][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.687200][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.694546][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 199.301126][ T8481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.382379][ T8792] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.432913][ T8795] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.472144][ T8481] veth0_vlan: entered promiscuous mode [ 199.510602][ T8481] veth1_vlan: entered promiscuous mode [ 199.575882][ T8481] veth0_macvtap: entered promiscuous mode [ 199.588309][ T8481] veth1_macvtap: entered promiscuous mode [ 199.617766][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.649164][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.666097][ T8803] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.677520][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.689241][ T8803] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.706671][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.727520][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.757460][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.769841][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.827477][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.859963][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.952557][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.978623][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.999247][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.022206][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.043313][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.056009][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.067300][ T8481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.081243][ T8481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.095510][ T8481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.124815][ T8481] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.145403][ T8481] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.165713][ T8481] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.190146][ T8481] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.519677][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.552301][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.608721][ T8831] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 200.624138][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.630955][ T8831] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 200.650984][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.665479][ T8835] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 200.692737][ T8835] bond0: (slave ipvlan0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 200.742724][ T8835] bond0: (slave ipvlan0): The slave device specified does not support setting the MAC address [ 200.754192][ T8835] bond0: (slave ipvlan0): Error -95 calling set_mac_address [ 200.813506][ T29] audit: type=1804 audit(1718508108.807:108): pid=8837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3657810189/syzkaller.pkwKWL/242/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 200.896653][ T29] audit: type=1804 audit(1718508108.857:109): pid=8837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3657810189/syzkaller.pkwKWL/242/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 200.944456][ T8843] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 201.060592][ T8848] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.301621][ T8859] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 201.486447][ T8870] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 202.114089][ T8903] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 202.143794][ T8904] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 202.377694][ T8912] dummy0: entered promiscuous mode [ 202.427627][ T8912] dummy0: left promiscuous mode [ 202.655782][ T8930] __nla_validate_parse: 5 callbacks suppressed [ 202.655807][ T8930] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.734153][ T8937] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.838540][ T8937] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 202.878719][ T8945] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.153376][ T63] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.332772][ T8963] dummy0: entered promiscuous mode [ 203.377008][ T8963] dummy0: left promiscuous mode [ 203.641000][ T8970] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.729013][ T8983] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.913010][ T8989] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 204.362925][ T5128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 204.373458][ T5128] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 204.388592][ T5128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 204.396804][ T5128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 204.405231][ T5128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 204.416386][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 204.444633][ T9016] dummy0: entered promiscuous mode [ 204.465609][ T9016] dummy0: left promiscuous mode [ 204.566490][ T63] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.704243][ T63] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 204.805052][ T9011] lo speed is unknown, defaulting to 1000 [ 204.953077][ T63] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.025107][ T9036] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.040875][ T9030] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.320052][ T63] bridge_slave_1: left allmulticast mode [ 205.342596][ T63] bridge_slave_1: left promiscuous mode [ 205.363205][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.466648][ T9043] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.477469][ T63] bridge_slave_0: left allmulticast mode [ 205.489394][ T63] bridge_slave_0: left promiscuous mode [ 205.510472][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.391186][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.417145][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.432347][ T63] bond0 (unregistering): Released all slaves [ 206.487910][ T9062] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 206.498291][ T9062] veth0_macvtap: left promiscuous mode [ 206.503966][ T5128] Bluetooth: hci4: command tx timeout [ 206.513300][ T9062] macvtap0: entered promiscuous mode [ 206.548682][ T9062] macvtap0: refused to change device tx_queue_len [ 206.595720][ T9060] veth1_vlan: left promiscuous mode [ 206.611446][ T9060] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 206.643467][ T9078] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.202277][ T9104] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 207.412319][ T9011] chnl_net:caif_netlink_parms(): no params data found [ 207.565259][ T9120] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 207.746614][ T9122] __nla_validate_parse: 4 callbacks suppressed [ 207.746633][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.792417][ T63] hsr_slave_0: left promiscuous mode [ 207.808723][ T63] hsr_slave_1: left promiscuous mode [ 207.829114][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 207.847629][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 207.856580][ T9124] x_tables: duplicate underflow at hook 3 [ 207.868343][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 207.886114][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 207.920438][ T63] veth1_macvtap: left promiscuous mode [ 207.926165][ T63] veth0_macvtap: left promiscuous mode [ 207.932452][ T63] veth1_vlan: left promiscuous mode [ 207.938053][ T63] veth0_vlan: left promiscuous mode [ 208.577920][ T5128] Bluetooth: hci4: command tx timeout [ 208.633270][ T63] team0 (unregistering): Port device team_slave_1 removed [ 208.676020][ T63] team0 (unregistering): Port device team_slave_0 removed [ 209.161400][ T9122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.199183][ T9126] syzkaller1: entered promiscuous mode [ 209.215060][ T9126] syzkaller1: entered allmulticast mode [ 209.236283][ T9132] netem: change failed [ 209.257567][ T9137] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.406320][ T9146] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.540934][ T9011] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.558327][ T9011] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.577642][ T9011] bridge_slave_0: entered allmulticast mode [ 209.599241][ T9011] bridge_slave_0: entered promiscuous mode [ 209.636631][ T9011] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.666428][ T9011] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.679677][ T9011] bridge_slave_1: entered allmulticast mode [ 209.707648][ T9011] bridge_slave_1: entered promiscuous mode [ 209.767349][ T9163] Bluetooth: MGMT ver 1.22 [ 209.872739][ T9011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 209.923930][ T9011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.131290][ T9173] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.180292][ T9180] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.215107][ T9011] team0: Port device team_slave_0 added [ 210.251705][ T9011] team0: Port device team_slave_1 added [ 210.314927][ T9194] xt_TCPMSS: Only works on TCP SYN packets [ 210.410964][ T9011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 210.456854][ T9011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.517167][ T9011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 210.564703][ T9011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 210.597554][ T9011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 210.653087][ T9011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 210.670388][ T5128] Bluetooth: hci4: command tx timeout [ 210.863022][ T9011] hsr_slave_0: entered promiscuous mode [ 210.880011][ T9011] hsr_slave_1: entered promiscuous mode [ 211.111964][ T9223] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 211.634287][ T9011] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 211.645213][ T9011] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 211.680544][ T9011] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 211.702146][ T9011] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 211.721371][ T9246] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 211.771507][ T9248] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.903520][ T9011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.961348][ T9011] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.990881][ T5172] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.998135][ T5172] bridge0: port 1(bridge_slave_0) entered forwarding state [ 212.050434][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.057659][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 212.266864][ T9256] ebtables: ebtables: counters copy to user failed while replacing table [ 212.398236][ T9266] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.550636][ T9277] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 212.595698][ T9277] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 212.629476][ T9278] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 212.679773][ T9011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.738115][ T5128] Bluetooth: hci4: command tx timeout [ 212.861386][ T9011] veth0_vlan: entered promiscuous mode [ 212.936204][ T9011] veth1_vlan: entered promiscuous mode [ 213.068351][ T9011] veth0_macvtap: entered promiscuous mode [ 213.095102][ T9011] veth1_macvtap: entered promiscuous mode [ 213.161211][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.205757][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.214707][ T9296] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.239865][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.287517][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.305970][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.332800][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.353045][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.373963][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.409345][ T9011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.478698][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.492606][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.504205][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.514965][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.525729][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.536919][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.549144][ T9011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.566254][ T9011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.578943][ T9011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.623279][ T9318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.689498][ T9318] team_slave_0: entered promiscuous mode [ 213.695568][ T9318] team_slave_1: entered promiscuous mode [ 213.704458][ T9318] macvtap1: entered promiscuous mode [ 213.710449][ T9318] team0: entered promiscuous mode [ 213.716443][ T9318] macvtap1: entered allmulticast mode [ 213.722174][ T9318] team0: entered allmulticast mode [ 213.729910][ T9318] team_slave_0: entered allmulticast mode [ 213.740770][ T9318] team_slave_1: entered allmulticast mode [ 213.762625][ T9318] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 213.787109][ T9320] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.804433][ T9011] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.820177][ T9011] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.839730][ T9011] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.858615][ T9011] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.897668][ T9322] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.973507][ T9322] team0: left allmulticast mode [ 213.995534][ T9322] team_slave_0: left allmulticast mode [ 214.013987][ T9322] team_slave_1: left allmulticast mode [ 214.027715][ T9322] team0: left promiscuous mode [ 214.038756][ T9322] team_slave_0: left promiscuous mode [ 214.044270][ T9322] team_slave_1: left promiscuous mode [ 214.051091][ T9334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.077910][ T9322] macvtap1: left promiscuous mode [ 214.081754][ T9329] ebtables: ebtables: counters copy to user failed while replacing table [ 214.086364][ T9322] macvtap1: left allmulticast mode [ 214.451163][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.473994][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.547771][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.564324][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.650316][ T9345] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 214.878025][ T9352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.921306][ T9352] vlan0: entered promiscuous mode [ 215.129115][ T9363] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.226997][ T9367] netlink: zone id is out of range [ 215.243462][ T9367] netlink: zone id is out of range [ 215.252246][ T9367] netlink: zone id is out of range [ 215.288767][ T9367] netlink: zone id is out of range [ 215.322496][ T9367] netlink: zone id is out of range [ 215.349412][ T9367] netlink: zone id is out of range [ 215.377064][ T9367] netlink: set zone limit has 4 unknown bytes [ 215.724002][ T9402] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 215.759099][ T9402] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 215.792141][ T9402] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.810663][ T9402] NCSI netlink: No device for ifindex 0 [ 216.124595][ T9421] x_tables: duplicate underflow at hook 3 [ 216.239790][ T9427] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.247935][ T9426] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 216.325249][ T9427] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 216.447381][ T9432] lo speed is unknown, defaulting to 1000 [ 216.870059][ T2833] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.598828][ T2833] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.850526][ T2833] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.913016][ T9484] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.932918][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 217.941842][ T9483] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.954107][ T5127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 217.962357][ T5127] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 217.977648][ T5127] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 217.985560][ T5127] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 217.993174][ T5127] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.215196][ T2833] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.282287][ T9483] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 218.452890][ T9481] lo speed is unknown, defaulting to 1000 [ 218.627870][ T2833] bridge_slave_1: left allmulticast mode [ 218.642705][ T2833] bridge_slave_1: left promiscuous mode [ 218.661031][ T2833] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.713310][ T2833] bridge_slave_0: left allmulticast mode [ 218.757504][ T2833] bridge_slave_0: left promiscuous mode [ 218.773547][ T2833] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.494513][ T2833] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.508171][ T2833] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.521344][ T2833] bond0 (unregistering): Released all slaves [ 219.846186][ T9534] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.017865][ T5127] Bluetooth: hci4: command tx timeout [ 220.028912][ T9534] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 220.092661][ T9543] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.453082][ T9554] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.839647][ T2833] hsr_slave_0: left promiscuous mode [ 221.058188][ T2833] hsr_slave_1: left promiscuous mode [ 221.098095][ T2833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.105573][ T2833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.148945][ T2833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.156433][ T2833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.232460][ T2833] veth1_macvtap: left promiscuous mode [ 221.240566][ T2833] veth0_macvtap: left promiscuous mode [ 221.246264][ T2833] veth1_vlan: left promiscuous mode [ 221.251721][ T2833] veth0_vlan: left promiscuous mode [ 222.002736][ T2833] team0 (unregistering): Port device team_slave_1 removed [ 222.049934][ T2833] team0 (unregistering): Port device team_slave_0 removed [ 222.097811][ T5127] Bluetooth: hci4: command tx timeout [ 222.575749][ T9580] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.648326][ T9581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.667636][ T9590] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.843864][ T9481] chnl_net:caif_netlink_parms(): no params data found [ 223.215905][ T9481] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.246936][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.261281][ T9481] bridge_slave_0: entered allmulticast mode [ 223.276782][ T9481] bridge_slave_0: entered promiscuous mode [ 223.305561][ T9481] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.323678][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.338004][ T9481] bridge_slave_1: entered allmulticast mode [ 223.355969][ T9481] bridge_slave_1: entered promiscuous mode [ 223.485848][ T9481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.513044][ T9481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.539592][ T9634] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 223.746989][ T9642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.820704][ T9481] team0: Port device team_slave_0 added [ 223.846452][ T9481] team0: Port device team_slave_1 added [ 223.969387][ T9651] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.106218][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.123963][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.179454][ T5127] Bluetooth: hci4: command tx timeout [ 224.194632][ T9481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.222925][ T9481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.230066][ T9481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.257226][ T9481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.277480][ T9655] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 224.390110][ T9481] hsr_slave_0: entered promiscuous mode [ 224.401821][ T9481] hsr_slave_1: entered promiscuous mode [ 224.409967][ T9661] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 224.420522][ T9661] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.452118][ T9661] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 224.616047][ T9664] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 224.666831][ T9668] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 224.723723][ T9672] x_tables: eb_tables: quota.0 match: invalid size 24 (kernel) != (user) 0 [ 224.744597][ T9674] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_vlan, syncid = 4, id = 0 [ 224.770211][ T9668] debugfs: Directory 'netdev:' with parent 'phy6' already present! [ 225.090612][ T9691] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.112805][ T9693] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.180688][ T9697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.210208][ T9695] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.278907][ T9693] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 225.373044][ T9704] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.722431][ T9727] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.742003][ T29] audit: type=1804 audit(1718508133.737:110): pid=9724 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1539510152/syzkaller.yugvjl/93/cgroup.controllers" dev="sda1" ino=1939 res=1 errno=0 [ 225.903195][ T9734] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.967656][ T9481] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 225.985313][ T9481] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.009420][ T9734] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 226.027746][ T9481] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.058480][ T9481] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.188473][ T9735] ebtables: ebtables: counters copy to user failed while replacing table [ 226.258077][ T5127] Bluetooth: hci4: command tx timeout [ 226.564642][ T9747] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.711332][ T9481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 226.945716][ T9481] 8021q: adding VLAN 0 to HW filter on device team0 [ 226.994917][ T1149] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.002162][ T1149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.071333][ T5173] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.078609][ T5173] bridge0: port 2(bridge_slave_1) entered forwarding state [ 227.109886][ T9753] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.194673][ T9755] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 227.212017][ T9755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.373135][ T9481] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 227.403285][ T9770] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.468048][ T9771] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 227.518298][ T9766] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 227.629641][ T9776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.660456][ T9776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.671483][ T9776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.685232][ T9776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.707503][ T9776] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.735411][ T9776] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.779210][ T9779] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 227.810998][ T9784] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.818494][ T9784] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.016759][ T9481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.081892][ T9797] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 228.092945][ T9797] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.215354][ T9481] veth0_vlan: entered promiscuous mode [ 228.257241][ T9481] veth1_vlan: entered promiscuous mode [ 228.345070][ T9481] veth0_macvtap: entered promiscuous mode [ 228.375693][ T9481] veth1_macvtap: entered promiscuous mode [ 228.455353][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.466464][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.477161][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.489304][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.506967][ T9481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.573440][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.584626][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.596884][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.613198][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.623398][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.634187][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.644491][ T9481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.671139][ T9481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.693365][ T9481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.715986][ T9481] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.745655][ T9481] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.768859][ T9481] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.783380][ T9481] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.802776][ T9810] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 229.047712][ T60] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.058020][ T60] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.092554][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 229.166281][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.176930][ T9821] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 229.188079][ T9821] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.268577][ T60] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.307596][ T60] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 229.347690][ T9840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 229.358617][ T9840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.375191][ T9840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 229.397014][ T9840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.794178][ T9853] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 230.099770][ T9865] __nla_validate_parse: 7 callbacks suppressed [ 230.099792][ T9865] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.326446][ T9872] lo speed is unknown, defaulting to 1000 [ 230.396763][ T9879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.420648][ T9879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.438706][ T9879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.465712][ T9879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.509510][ T9882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 230.563783][ T9882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.606938][ T9882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 230.634803][ T9882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.669525][ T9887] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.755292][ T9887] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 231.237202][ T9912] xt_cgroup: xt_cgroup: no path or classid specified [ 231.781043][ T9927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 231.895752][ T9930] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 232.073552][ T60] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.151009][ T9929] lo speed is unknown, defaulting to 1000 [ 232.151791][ T9941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 232.207704][ T9941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.239968][ T9941] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 232.292162][ T9941] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.511606][ T60] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.562902][ T9953] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.650200][ T60] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.832377][ T5128] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 232.841933][ T5128] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 232.851404][ T5128] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 232.864366][ T60] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.875834][ T5128] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 232.884645][ T5128] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 232.896988][ T5128] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 232.970021][ T9965] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 233.028099][ T9965] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 233.223526][ T9960] lo speed is unknown, defaulting to 1000 [ 233.285900][ T9972] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 233.325696][ T60] bridge_slave_1: left allmulticast mode [ 233.339647][ T60] bridge_slave_1: left promiscuous mode [ 233.351233][ T60] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.440082][ T60] bridge_slave_0: left allmulticast mode [ 233.473907][ T60] bridge_slave_0: left promiscuous mode [ 233.489042][ T60] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.099068][ C1] ------------[ cut here ]------------ [ 234.105867][ C1] WARNING: CPU: 1 PID: 2833 at net/ipv4/route.c:1241 ip_rt_bug+0x2a/0x110 [ 234.114498][ C1] Modules linked in: [ 234.118555][ C1] CPU: 1 PID: 2833 Comm: kworker/u8:8 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 234.128852][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 234.138962][ C1] Workqueue: bat_events batadv_nc_worker [ 234.144648][ C1] RIP: 0010:ip_rt_bug+0x2a/0x110 [ 234.149625][ C1] Code: f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 db 59 b2 f7 66 90 e8 d4 59 b2 f7 48 89 df be 02 00 00 00 e8 97 0f 6d ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 234.169278][ C1] RSP: 0018:ffffc90000a18680 EFLAGS: 00010286 [ 234.175356][ C1] RAX: 0823961eec1c6e00 RBX: ffff88802cd53b40 RCX: ffffffff8172d78a [ 234.183389][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcabb80 RDI: ffffffff8c1ff680 [ 234.191396][ C1] RBP: 0000000000000001 R08: ffffffff92fb561f R09: 1ffffffff25f6ac3 [ 234.199420][ C1] R10: dffffc0000000000 R11: fffffbfff25f6ac4 R12: dffffc0000000000 [ 234.207493][ C1] R13: dffffc0000000000 R14: ffff88805fd01d00 R15: ffff888016349380 [ 234.215499][ C1] FS: 0000000000000000(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 234.224511][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 234.231139][ C1] CR2: 0000001b33a26000 CR3: 0000000060a86000 CR4: 00000000003506f0 [ 234.239164][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 234.247167][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 234.255170][ C1] Call Trace: [ 234.258476][ C1] [ 234.261331][ C1] ? __warn+0x163/0x4e0 [ 234.265497][ C1] ? ip_rt_bug+0x2a/0x110 [ 234.269884][ C1] ? report_bug+0x2b3/0x500 [ 234.274425][ C1] ? ip_rt_bug+0x2a/0x110 [ 234.278792][ C1] ? handle_bug+0x3e/0x70 [ 234.283143][ C1] ? exc_invalid_op+0x1a/0x50 [ 234.287878][ C1] ? asm_exc_invalid_op+0x1a/0x20 [ 234.292936][ C1] ? mark_lock+0x9a/0x350 [ 234.297293][ C1] ? ip_rt_bug+0x2a/0x110 [ 234.301702][ C1] ip_push_pending_frames+0xbf/0x150 [ 234.307020][ C1] __icmp_send+0xf89/0x14e0 [ 234.311570][ C1] ? __icmp_send+0x59c/0x14e0 [ 234.316275][ C1] ? __pfx___icmp_send+0x10/0x10 [ 234.321283][ C1] ? mark_lock+0x9a/0x350 [ 234.325621][ C1] ? look_up_lock_class+0x77/0x160 [ 234.330796][ C1] ? mark_lock+0x9a/0x350 [ 234.335173][ C1] ipv4_link_failure+0x62f/0xa10 [ 234.340161][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 234.345633][ C1] ? do_raw_write_lock+0x148/0x4f0 [ 234.350784][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 234.356248][ C1] arp_error_report+0x114/0x160 [ 234.361136][ C1] neigh_invalidate+0x244/0x470 [ 234.366010][ C1] neigh_timer_handler+0x8a5/0xfd0 [ 234.371173][ C1] call_timer_fn+0x18e/0x650 [ 234.375774][ C1] ? call_timer_fn+0xc0/0x650 [ 234.380485][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 234.386233][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 234.391410][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 234.397065][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 234.402734][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 234.408402][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 234.413636][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 234.418885][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 234.424564][ C1] __run_timer_base+0x66a/0x8e0 [ 234.429472][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 234.434855][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 234.441240][ C1] run_timer_softirq+0xb7/0x170 [ 234.446106][ C1] handle_softirqs+0x2c4/0x970 [ 234.450903][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 234.455722][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 234.461056][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 234.466288][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 234.470942][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 234.476190][ C1] irq_exit_rcu+0x9/0x30 [ 234.480482][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 234.486143][ C1] [ 234.489119][ C1] [ 234.492051][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 234.498079][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 234.503374][ C1] Code: 2b 00 74 08 4c 89 f7 e8 4a 94 89 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 234.523085][ C1] RSP: 0018:ffffc90009fbf9e0 EFLAGS: 00000206 [ 234.529224][ C1] RAX: 0000000000000001 RBX: 1ffff920013f7f48 RCX: 0000000000000001 [ 234.537206][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcacd00 RDI: ffffffff8c1ff680 [ 234.545215][ C1] RBP: ffffc90009fbfb40 R08: ffffffff92fb5587 R09: 1ffffffff25f6ab0 [ 234.553243][ C1] R10: dffffc0000000000 R11: fffffbfff25f6ab1 R12: 1ffff920013f7f44 [ 234.561257][ C1] R13: dffffc0000000000 R14: ffffc90009fbfa40 R15: 0000000000000246 [ 234.569295][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 234.574333][ C1] ? batadv_nc_worker+0xcb/0x610 [ 234.579429][ C1] ? __pfx_lock_release+0x10/0x10 [ 234.584490][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 234.590533][ C1] batadv_nc_worker+0xec/0x610 [ 234.595312][ C1] ? batadv_nc_worker+0xcb/0x610 [ 234.600300][ C1] ? batadv_nc_worker+0xcb/0x610 [ 234.605259][ C1] ? process_scheduled_works+0x945/0x1830 [ 234.611017][ C1] process_scheduled_works+0xa2c/0x1830 [ 234.616599][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 234.622641][ C1] ? assign_work+0x364/0x3d0 [ 234.627268][ C1] worker_thread+0x86d/0xd70 [ 234.631909][ C1] ? __kthread_parkme+0x169/0x1d0 [ 234.636944][ C1] ? __pfx_worker_thread+0x10/0x10 [ 234.642090][ C1] kthread+0x2f0/0x390 [ 234.646169][ C1] ? __pfx_worker_thread+0x10/0x10 [ 234.651311][ C1] ? __pfx_kthread+0x10/0x10 [ 234.655914][ C1] ret_from_fork+0x4b/0x80 [ 234.660365][ C1] ? __pfx_kthread+0x10/0x10 [ 234.664963][ C1] ret_from_fork_asm+0x1a/0x30 [ 234.669803][ C1] [ 234.672831][ C1] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 234.680109][ C1] CPU: 1 PID: 2833 Comm: kworker/u8:8 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 234.690351][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 234.700423][ C1] Workqueue: bat_events batadv_nc_worker [ 234.706080][ C1] Call Trace: [ 234.709452][ C1] [ 234.712291][ C1] dump_stack_lvl+0x241/0x360 [ 234.716979][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 234.722175][ C1] ? __pfx__printk+0x10/0x10 [ 234.726784][ C1] ? vscnprintf+0x5d/0x90 [ 234.731124][ C1] panic+0x349/0x860 [ 234.735034][ C1] ? __warn+0x172/0x4e0 [ 234.739197][ C1] ? __pfx_panic+0x10/0x10 [ 234.743636][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 234.748588][ C1] __warn+0x346/0x4e0 [ 234.752589][ C1] ? ip_rt_bug+0x2a/0x110 [ 234.756974][ C1] report_bug+0x2b3/0x500 [ 234.761325][ C1] ? ip_rt_bug+0x2a/0x110 [ 234.765660][ C1] handle_bug+0x3e/0x70 [ 234.769820][ C1] exc_invalid_op+0x1a/0x50 [ 234.774324][ C1] asm_exc_invalid_op+0x1a/0x20 [ 234.779178][ C1] RIP: 0010:ip_rt_bug+0x2a/0x110 [ 234.784153][ C1] Code: f3 0f 1e fa 41 57 41 56 41 55 41 54 53 48 89 d3 e8 db 59 b2 f7 66 90 e8 d4 59 b2 f7 48 89 df be 02 00 00 00 e8 97 0f 6d ff 90 <0f> 0b 90 31 c0 5b 41 5c 41 5d 41 5e 41 5f c3 cc cc cc cc f3 0f 1e [ 234.803763][ C1] RSP: 0018:ffffc90000a18680 EFLAGS: 00010286 [ 234.809847][ C1] RAX: 0823961eec1c6e00 RBX: ffff88802cd53b40 RCX: ffffffff8172d78a [ 234.817843][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcabb80 RDI: ffffffff8c1ff680 [ 234.825820][ C1] RBP: 0000000000000001 R08: ffffffff92fb561f R09: 1ffffffff25f6ac3 [ 234.833793][ C1] R10: dffffc0000000000 R11: fffffbfff25f6ac4 R12: dffffc0000000000 [ 234.841791][ C1] R13: dffffc0000000000 R14: ffff88805fd01d00 R15: ffff888016349380 [ 234.849772][ C1] ? mark_lock+0x9a/0x350 [ 234.854118][ C1] ip_push_pending_frames+0xbf/0x150 [ 234.859411][ C1] __icmp_send+0xf89/0x14e0 [ 234.863934][ C1] ? __icmp_send+0x59c/0x14e0 [ 234.868619][ C1] ? __pfx___icmp_send+0x10/0x10 [ 234.873567][ C1] ? mark_lock+0x9a/0x350 [ 234.877910][ C1] ? look_up_lock_class+0x77/0x160 [ 234.883072][ C1] ? mark_lock+0x9a/0x350 [ 234.887448][ C1] ipv4_link_failure+0x62f/0xa10 [ 234.892407][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 234.897890][ C1] ? do_raw_write_lock+0x148/0x4f0 [ 234.903032][ C1] ? __pfx_ipv4_link_failure+0x10/0x10 [ 234.908520][ C1] arp_error_report+0x114/0x160 [ 234.913389][ C1] neigh_invalidate+0x244/0x470 [ 234.918264][ C1] neigh_timer_handler+0x8a5/0xfd0 [ 234.923406][ C1] call_timer_fn+0x18e/0x650 [ 234.928015][ C1] ? call_timer_fn+0xc0/0x650 [ 234.932721][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 234.938364][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 234.943487][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 234.949142][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 234.954810][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 234.960472][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 234.965678][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 234.970982][ C1] ? __pfx_neigh_timer_handler+0x10/0x10 [ 234.976628][ C1] __run_timer_base+0x66a/0x8e0 [ 234.981499][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 234.986913][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 234.993277][ C1] run_timer_softirq+0xb7/0x170 [ 234.998150][ C1] handle_softirqs+0x2c4/0x970 [ 235.002944][ C1] ? __irq_exit_rcu+0xf4/0x1c0 [ 235.007740][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 235.013058][ C1] ? irqtime_account_irq+0xd4/0x1e0 [ 235.018273][ C1] __irq_exit_rcu+0xf4/0x1c0 [ 235.022881][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 235.028102][ C1] irq_exit_rcu+0x9/0x30 [ 235.032369][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 235.038014][ C1] [ 235.040978][ C1] [ 235.043919][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 235.049919][ C1] RIP: 0010:lock_acquire+0x264/0x550 [ 235.055240][ C1] Code: 2b 00 74 08 4c 89 f7 e8 4a 94 89 00 f6 44 24 61 02 0f 85 85 01 00 00 41 f7 c7 00 02 00 00 74 01 fb 48 c7 44 24 40 0e 36 e0 45 <4b> c7 44 25 00 00 00 00 00 43 c7 44 25 09 00 00 00 00 43 c7 44 25 [ 235.074852][ C1] RSP: 0018:ffffc90009fbf9e0 EFLAGS: 00000206 [ 235.080923][ C1] RAX: 0000000000000001 RBX: 1ffff920013f7f48 RCX: 0000000000000001 [ 235.088897][ C1] RDX: dffffc0000000000 RSI: ffffffff8bcacd00 RDI: ffffffff8c1ff680 [ 235.096898][ C1] RBP: ffffc90009fbfb40 R08: ffffffff92fb5587 R09: 1ffffffff25f6ab0 [ 235.104881][ C1] R10: dffffc0000000000 R11: fffffbfff25f6ab1 R12: 1ffff920013f7f44 [ 235.112871][ C1] R13: dffffc0000000000 R14: ffffc90009fbfa40 R15: 0000000000000246 [ 235.120870][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 235.125903][ C1] ? batadv_nc_worker+0xcb/0x610 [ 235.130855][ C1] ? __pfx_lock_release+0x10/0x10 [ 235.135900][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 235.141910][ C1] batadv_nc_worker+0xec/0x610 [ 235.146690][ C1] ? batadv_nc_worker+0xcb/0x610 [ 235.151636][ C1] ? batadv_nc_worker+0xcb/0x610 [ 235.156587][ C1] ? process_scheduled_works+0x945/0x1830 [ 235.162309][ C1] process_scheduled_works+0xa2c/0x1830 [ 235.167888][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 235.173884][ C1] ? assign_work+0x364/0x3d0 [ 235.178497][ C1] worker_thread+0x86d/0xd70 [ 235.183139][ C1] ? __kthread_parkme+0x169/0x1d0 [ 235.188191][ C1] ? __pfx_worker_thread+0x10/0x10 [ 235.193324][ C1] kthread+0x2f0/0x390 [ 235.197440][ C1] ? __pfx_worker_thread+0x10/0x10 [ 235.202566][ C1] ? __pfx_kthread+0x10/0x10 [ 235.207189][ C1] ret_from_fork+0x4b/0x80 [ 235.211612][ C1] ? __pfx_kthread+0x10/0x10 [ 235.216205][ C1] ret_from_fork_asm+0x1a/0x30 [ 235.220988][ C1] [ 235.224301][ C1] Kernel Offset: disabled [ 235.228747][ C1] Rebooting in 86400 seconds..