last executing test programs: 1m6.965306629s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000040c0)={&(0x7f0000001100)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000004080)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x14}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 55.39219854s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000040c0)={&(0x7f0000001100)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000004080)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x14}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 43.869395632s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000040c0)={&(0x7f0000001100)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000004080)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x14}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 31.958796926s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000040c0)={&(0x7f0000001100)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000004080)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x14}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 21.269040857s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000040c0)={&(0x7f0000001100)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000004080)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x14}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 9.674827693s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000040c0)={&(0x7f0000001100)={0x10, 0x0, 0x8}, 0xc, &(0x7f0000004080)={&(0x7f0000001140)={{0x14}, [@NFT_MSG_NEWTABLE={0x24, 0x0, 0xa, 0x101, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_USERDATA={0x4}]}, @NFT_MSG_DELOBJ={0x20, 0x14, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_DELTABLE={0x34, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_USERDATA={0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x14}], {0x14}}, 0xb4}, 0x1, 0x0, 0x0, 0x24008000}, 0x0) 1.944990444s ago: executing program 1: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_opts(r0, 0x29, 0x3b, &(0x7f00000003c0)=@fragment={0x87, 0x0, 0x81, 0x0, 0x0, 0x1, 0x64}, 0x8) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000001880)=ANY=[@ANYRES32=r1], &(0x7f00000001c0)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0)={0x0, 0x0, 0xe9bd}, 0x10}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$pppl2tp(0x18, 0x1, 0x1) unshare(0x26020480) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r2}, 0x10) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x10, 0x3, 0x0) (async) r4 = socket$netlink(0x10, 0x3, 0x0) (async) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x28}}, 0x0) (async) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000035000b0fd25a806c8c6f94f90424fc60", 0x14}], 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010000507000000000400000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf09000000000000b609010000000000650006000010000018010000646c6c2500000000002020207b9af8ff000000002d9a00000000000037090000f8ffffffb702000008000000b70300000000000015000000060000003d93000000000000b5030000000000008500000076000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) sendmsg$nl_route_sched(r4, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8}}]}, 0x40}}, 0x0) (async) getsockopt$inet_mreqn(r3, 0x0, 0x24, &(0x7f00000002c0)={@broadcast, @rand_addr, 0x0}, &(0x7f0000000300)=0xc) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000340)={&(0x7f0000002d00)=@newtaction={0x944, 0x30, 0x20, 0x70bd2b, 0x25dfdbfb, {}, [{0x174, 0x1, [@m_connmark={0x170, 0xd, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x1, 0x7, 0x101}, 0x200}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x80, 0x3, 0x20000000, 0x5, 0x80000001}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x3, 0x0, 0x200, 0x6}}}]}, {0xeb, 0x6, "1a57eaadb03acd28007cb077bf63ac505e8aea9a92ae0a6a7f16754f199d725a6c89c76d204549c229d4d8ad1738485e3d4539f84e4c23603a9039cc7144745a15cac64ccd4d189afbdecfcad3206acb682a0bd47f3edaea6635ed88f45af745b3eb8eff8a5fb18e577099b472980fbcbbf724db9246d000c081786169b69fe1dd34eb49b354831035308a240c92e1898f326d515e22c2b73246d43997c1a80067e3fd8cbde60fdd76ac60d7ac0017b5b1fd8263ef96fa72d023758df5448928df9331c343b269d87bf2d56146be7e0fa683c6fdbd7445050c024c2668a1bfa5e829465c085ae7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, {0x76c, 0x1, [@m_skbmod={0x114, 0xd, 0x0, 0x0, {{0xb}, {0x80, 0x2, 0x0, 0x1, [@TCA_SKBMOD_ETYPE={0x6, 0x5, 0x1}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x61c}, @TCA_SKBMOD_SMAC={0xa, 0x4, @broadcast}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_PARMS={0x24, 0x2, {{0x4, 0x6, 0x7, 0x5, 0x2cc}, 0x10}}, @TCA_SKBMOD_DMAC={0xa, 0x3, @multicast}, @TCA_SKBMOD_ETYPE={0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x7}, @TCA_SKBMOD_SMAC={0xa, 0x4, @random="818b4406268f"}, @TCA_SKBMOD_SMAC={0xa}]}, {0x6c, 0x6, "c3991db1818bd6d8fde6969058323848d3e57c91f1a815acbf75b05b2b145a3991571217c136516528cc43b4f413dc1ba2c003e8a4afab996fe592ac374ed4e3e51b773196f1b72cd6fb88f847606c3e83075c750827d764bbc9c952f9c52e57284d80081db79c3a"}, {0xc}, {0xc, 0x8, {0x2}}}}, @m_ife={0x8c, 0xc, 0x0, 0x0, {{0x8}, {0x58, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6, 0x5, 0x1}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_PRIO={0x8}, @IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}]}, @TCA_IFE_TYPE={0x6, 0x5, 0xfffc}, @TCA_IFE_PARMS={0x1c, 0x1, {{0x5, 0x8, 0x10000000, 0x1cb4, 0x1000}, 0x1}}, @TCA_IFE_METALST={0x14, 0x6, [@IFE_META_SKBMARK={0x4, 0x1, @void}, @IFE_META_TCINDEX={0x4, 0x5, @void}, @IFE_META_SKBMARK={0x8, 0x1, @val=0x80000001}]}]}, {0xd, 0x6, "356d4e379827cc66d9"}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}, @m_csum={0x134, 0xf, 0x0, 0x0, {{0x9}, {0x90, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x1400, 0x7, 0x3, 0x0, 0x3ff}, 0x62}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x6, 0x4, 0x7, 0x7ff}, 0x30}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x20, 0x9, 0x4, 0x0, 0x100}, 0x13}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x401, 0x6, 0x1, 0x4, 0x3}, 0x20}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x0, 0x8f1, 0x10000000, 0x4c}, 0x71}}]}, {0x7c, 0x6, "2df5d4a5195352eb8502e9319b4c5de7b5f714819a934334fc16a0e6635b9a961b7b4d1be043f4a2b43041aa2b09df0114e7f910844fd58a777d9ce0e303a69988b79a7fdf6b8cd6e91615372275a8221a9a027f6e57e860ddfbe17061ba4d4145a6763421f19241880e38517ceb3f304e406d976f9e9d9b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_mirred={0x184, 0x0, 0x0, 0x0, {{0xb}, {0xc4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x3ff, 0x8d52, 0x6, 0x4, 0x3f}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x2, 0x5, 0x10000000, 0x9, 0x7}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1f, 0x5, 0x7, 0x0, 0x5}, 0x3, r7}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x200, 0x1, 0xca, 0x4}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x26, 0x4, 0x0, 0xfff, 0x2}, 0x6, r9}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x9, 0x5, 0x7, 0x7, 0x1}, 0x3}}]}, {0x98, 0x6, "b3c0affcec250b3ed543aa1a30751e5fb226edabb6b418c6c30828cd890b4da63a1daf0d1778bf687d24df74de3b893d2d6962e7fdace6c15835fdaf80ee79463a91c3c0ef3226128d67a1fa49cf18187113ed21d9a7e50804e3980e19c70c73bf91b6f75ee29d5d1e5b54ea79fdbc6e480541aacd08dbb22d8fbe1a45d4463165f8621ded272ccae1ecd5a52c567dfa23bf7026"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_vlan={0x7c, 0xf, 0x0, 0x0, {{0x9}, {0x14, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x231}]}, {0x3f, 0x6, "6201393a51c96c7ead5c953734b4309828c614364d4ea7559cbc9dfe91d1dc4de570c1b7983e28f4a9894a2d0bbbd86eecd74c49b46107d9ec3d98"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_connmark={0x1ac, 0x20, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3a42, 0x3, 0x7, 0xfffffffa, 0x7}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x136, 0xffffffffcffffffc, 0x0, 0x6}, 0x4}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff8, 0x7f, 0x20000008, 0x1, 0x5}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x81, 0xfc, 0x8, 0x8, 0x8}, 0xfff9}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xf6, 0x80000000, 0x10000000, 0x1}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x8, 0x7794, 0x9}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x401, 0x3, 0x5, 0x100, 0x5}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1, 0x6, 0x0, 0x4, 0x7f}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0xffffffffffffffff, 0x7764, 0xfffffffd}, 0x1ddb}}]}, {0x7f, 0x6, "28dc7dded1369d4b7f872ca56b31eba996bd21354312ac40d7f52c1c1c4f3192a9840dc7420bfef08ed48732cff1fdbee63fff1b335fcf9432fed0345e55398171313f95a7686b36bc32a244970ae34ada4029188e102c9127acdc43da3d7d793fa0ca584b5d8354913336b6136cce92d78fd65d42f099e368fb83"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_ctinfo={0xe8, 0x7, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_MASK={0x8, 0x5, 0x7ff}, @TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x8, 0x5, 0x7, 0x400}}]}, {0x9a, 0x6, "f54756c38ca571a7370aca702d931adeeb8f432d34e8246fa0f3d3664314792326abacdc0edb2ddb53445f12c039d2f3da6d5c237bd0f40db5a02a5e48ae394e929e29b71a6aa891ff67528973586ff51ced0144956a2c642d9755a61a06c6b2046eab28d0db12410e7b8edea8e2417affcf0a4c31da0a9bc501f882234ac73c74dfe51c324d3055efb5af73976e4ab3da672a6c9717"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}, {0x50, 0x1, [@m_ife={0x4c, 0x6, 0x0, 0x0, {{0x8}, {0x10, 0x2, 0x0, 0x1, [@TCA_IFE_SMAC={0xa, 0x4, @broadcast}]}, {0x17, 0x6, "f9f92e45e06c37e1ee93ec644e1edc673eb4c3"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}, 0x944}, 0x1, 0x0, 0x0, 0x40000}, 0x4000010) (async) r10 = socket(0x1, 0x803, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) 1.75225227s ago: executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "774c3302b1f1b066a380bfe207b87eee3eae02bd83c2a1221c61cc28de9738dd65a7087c64eb12c6b6de92c94c30ac369a9c40de052c528fa8db2e5e374fb46ca3db74fa6de1fc0d3b3daed2a0227652"}, 0xd8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec00000021000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa00000000000000000000000000000000000000000400e1d26a4030aec84ed660da487ebb000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000ffffe000000200000000000000000000000000000000ac141400"/164], 0xec}}, 0x0) sendmsg$tipc(r3, &(0x7f0000000840)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x55, 0x0}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000600)={'vxcan1\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0xe) sendto$inet6(r8, &(0x7f00000000c0)="547875344b02c1b85c3c11f098b996438997828c65f734548aab7be0abd5e8a05a", 0x21, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) shutdown(r7, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000000040)=0x200028, 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) readv(r8, &(0x7f0000000080)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000540)={@empty, r6}, 0x14) 1.636459726s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r3, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="d2023300802b0001080211000000080211"], 0x2f0}}, 0x0) 1.531397637s ago: executing program 1: sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x5460, &(0x7f0000000100)={'veth1_vlan\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x2c, 0x2}}) 1.507109003s ago: executing program 0: getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x7e, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha256\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) accept4(r0, 0x0, 0x0, 0xa00000000000000) 1.317237018s ago: executing program 0: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) pwritev(r1, &(0x7f00000004c0), 0x0, 0x8040000, 0xffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x810) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf32(r3, &(0x7f0000002240)=ANY=[], 0x1278) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, 0x0, 0xa) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 1.303021445s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f00000095c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000009a00)={0x0, 0x0, &(0x7f00000099c0)={&(0x7f0000009940)={0x3c, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x3c}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r0, &(0x7f0000000d40)={0x0, 0x8, &(0x7f0000000080)={&(0x7f0000000c80)={0x20, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3}]}]}, 0x20}}, 0x0) epoll_create1(0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) 1.171780983s ago: executing program 0: sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0}, 0x20) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "d80002", 0x0, 0x11, 0x0, @private1, @mcast2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) 1.148432451s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan1\x00'}) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x0) syz_emit_ethernet(0xcb, &(0x7f0000000ec0)=ANY=[@ANYBLOB, @ANYRES8, @ANYBLOB="f90580f6e56f22ed923b3e83d2a9f485fb2fd8195405"], 0x0) 1.143623258s ago: executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "774c3302b1f1b066a380bfe207b87eee3eae02bd83c2a1221c61cc28de9738dd65a7087c64eb12c6b6de92c94c30ac369a9c40de052c528fa8db2e5e374fb46ca3db74fa6de1fc0d3b3daed2a0227652"}, 0xd8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec00000021000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa00000000000000000000000000000000000000000400e1d26a4030aec84ed660da487ebb000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000ffffe000000200000000000000000000000000000000ac141400"/164], 0xec}}, 0x0) sendmsg$tipc(r3, &(0x7f0000000840)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x55, 0x0}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000600)={'vxcan1\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0xe) sendto$inet6(r8, &(0x7f00000000c0)="547875344b02c1b85c3c11f098b996438997828c65f734548aab7be0abd5e8a05a", 0x21, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) shutdown(r7, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000000040)=0x200028, 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) readv(r8, &(0x7f0000000080)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000540)={@empty, r6}, 0x14) 1.067567855s ago: executing program 0: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "774c3302b1f1b066a380bfe207b87eee3eae02bd83c2a1221c61cc28de9738dd65a7087c64eb12c6b6de92c94c30ac369a9c40de052c528fa8db2e5e374fb46ca3db74fa6de1fc0d3b3daed2a0227652"}, 0xd8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec00000021000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa00000000000000000000000000000000000000000400e1d26a4030aec84ed660da487ebb000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000ffffe000000200000000000000000000000000000000ac141400"/164], 0xec}}, 0x0) sendmsg$tipc(r3, &(0x7f0000000840)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x55, 0x0}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000600)={'vxcan1\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0xe) sendto$inet6(r8, &(0x7f00000000c0)="547875344b02c1b85c3c11f098b996438997828c65f734548aab7be0abd5e8a05a", 0x21, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) shutdown(r7, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000000040)=0x200028, 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) readv(r8, &(0x7f0000000080)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000540)={@empty, r6}, 0x14) 989.302361ms ago: executing program 3: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x2041}, 0x10) socket$tipc(0x1e, 0x5, 0x0) socket(0x200000000000011, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000010004b040000000002eb9245e18fedac", @ANYRES32=r1, @ANYBLOB="00000100000000005000128008000100677265004400028006000f0001000000080011006115e48c0700000000000000e745b15f0013afa5f10eaeb97f1f86f8e19baaf64dd790b93b74aeee7d2fd7d1c50fc61b4543e3ed215e8691d18b509a3d91403e27cc2d708a0f06003b05c7d9bc82744ba624d172bce2", @ANYRES8=r1, @ANYBLOB="080004009b00000005000800fa00000008000600ac1414bb"], 0x70}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001340)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x6, 0x2, 0x1, 0x28}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB], &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair(0x18, 0x0, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000140)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) sendmmsg$unix(r5, &(0x7f0000002c80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000002c0)="39301b42", 0x4}], 0x1}}], 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r4}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) pwritev(0xffffffffffffffff, &(0x7f0000000180)=[{&(0x7f00000000c0)="6bee85a7ed06b996ff9256483d9f3b41b44370c092bad25e572fcce500567c21666f97384c3c94bca88825678f5c4279fa47408d10d0d21a1860705341f7e07711ecfb85807c95be8709c15e834d1e384aaa62429a7dd545ce105bcbf47e37d0d60f57c22e54c1c27d85137f8b867b8ebabfe1d0484fb1bb5edfee7fa5ba14283c95dea2ea5a94921ee79f34451510d6e4a045c7f8f27df7702c374bce518fb380e606ed7e7b382c447c45dcf47e78d048", 0xb1}, {&(0x7f0000000040)="9c", 0x1}], 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) syz_emit_ethernet(0xfc0, &(0x7f0000003180)=ANY=[@ANYBLOB="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"], 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{}, &(0x7f00000002c0), &(0x7f0000000300)}, 0x20) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r8}, 0x38) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000001240), r7) sendmsg$BATADV_CMD_TP_METER(0xffffffffffffffff, &(0x7f0000001300)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000012c0)={&(0x7f0000001280)={0x3c, r9, 0x4, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x5}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0xbc}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000c000) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000500), 0x0, 0x1, r8}, 0x38) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000791028000000000095009ad900000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) 944.38644ms ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x6, 0x3, 0x0, 0x67b}, {0xfa7b, 0x4, 0x3, 0x3}, {0x936e, 0x3f, 0x77, 0xf7}, {0x1, 0x8, 0x78}, {0x204, 0x9d, 0x0, 0x6}]}, 0x10) (async) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x8, [@datasec={0x6, 0x1, 0x0, 0xf, 0x2, [{0x5, 0x5}], "f527"}, @datasec={0x0, 0x0, 0x0, 0xf, 0x2, [], "c737"}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x48, 0x0, 0x1}, 0x20) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x7c}]}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000180), 0xc) 911.351793ms ago: executing program 0: ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0xc0c0583b, &(0x7f0000000000)={0x0, 0x0, 0x2, 0x0, '\x00', [{0x1, 0x7, 0x4, 0xfffffffffffffff9, 0x3, 0x2}, {0x88, 0x200, 0xe, 0x7, 0x10001, 0x5}], ['\x00', '\x00']}) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0}, &(0x7f0000000180)=0x8) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f00000001c0)={r1, 0x9, 0x100, 0x0, 0x401, 0x1}, 0x14) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$EXT4_IOC_GETFSUUID(r2, 0x8008662c, &(0x7f0000000200)) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r2, 0x8982, &(0x7f0000000240)={0x8, 'veth0_to_bond\x00', {'tunl0\x00'}, 0x6}) pipe(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f00000002c0)={0x43, 0x2}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000380)={{r4, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)=r3}, 0x20) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000400)={r1, 0x1c, &(0x7f00000003c0)=[@in6={0xa, 0x4e22, 0x0, @private2, 0x1ff}]}, &(0x7f0000000440)=0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r4) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_STATION(r4, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x74, r6, 0x800, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0xff80}, @NL80211_ATTR_OPMODE_NOTIF={0x5}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x8, 0x13, [{0xb, 0x1}, {0x4, 0x1}, {0x60, 0x1}, {0x24}]}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0xff}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x8001}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x3}, @NL80211_ATTR_STA_SUPPORTED_RATES={0xd, 0x13, [{0x2, 0x1}, {0x16, 0x1}, {0x30, 0x1}, {0x1}, {0x1b}, {0x12, 0x1}, {0x60}, {0x60, 0x1}, {0x18, 0x1}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x4000880}, 0x80) ioctl$BTRFS_IOC_SYNC(r2, 0x9408, 0x0) sendmsg$NL80211_CMD_TDLS_OPER(r4, &(0x7f0000000780)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000680)={0x8c, r6, 0x400, 0x70bd2b, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xff, 0x46}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_TDLS_OPERATION={0x5}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x2}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TDLS_OPERATION={0x5, 0x8a, 0x3}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x8c}, 0x1, 0x0, 0x0, 0x10800}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000b00)={r4, 0xe0, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000000800)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x1, &(0x7f0000000840)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000880)=[0x0], 0x0, 0xda, &(0x7f00000008c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000940), &(0x7f0000000980), 0x8, 0x8e, 0x8, 0x8, &(0x7f00000009c0)}}, 0x10) sendmsg$nl_route_sched_retired(r3, &(0x7f0000001080)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000001040)={&(0x7f0000000b40)=@newtclass={0x4f4, 0x28, 0x300, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x10, 0x8}, {0xffff, 0x7}, {0xc, 0x8}}, [@c_cbq={{0x8}, {0x490, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xb, 0xf}, 0xfffffffb}}, @TCA_CBQ_RTAB={0x404, 0x6, [0x8dd, 0xffffffff, 0x0, 0x6, 0x20, 0x1, 0x81, 0xffffffe0, 0x2, 0x0, 0x3f, 0x9, 0x9, 0x20, 0x2599, 0x6, 0x0, 0xd8, 0x8, 0x2ab63315, 0x2, 0x1, 0x1, 0x2, 0x5, 0x0, 0xfffff6a2, 0x0, 0x2, 0xb9, 0xff, 0xfffffff7, 0xfffffffe, 0xf69a, 0x80cb, 0x8, 0x10001, 0x2, 0x9, 0x1, 0x400, 0x4, 0x6, 0x5, 0x2b, 0x3, 0x4, 0x0, 0x9, 0x7fffffff, 0x100, 0x3, 0x10001, 0x7f, 0x3, 0x7fffffff, 0x0, 0x7b, 0x7, 0x7, 0x0, 0x9, 0x36, 0x1, 0x0, 0xfffffff7, 0x2, 0x80000001, 0x8, 0x7e2, 0x4, 0x1ff, 0x3, 0x20, 0x5, 0x1, 0x744b, 0x189, 0xba, 0x7a, 0x9, 0x1, 0x101, 0x3, 0x3, 0xfffff624, 0x0, 0x7, 0x400, 0xffffff00, 0x2, 0x6, 0x7, 0xc98f, 0xff, 0x10000, 0x7ff, 0xfffffffd, 0x8001, 0x8, 0x340, 0x1, 0x1000, 0x8001, 0xfff, 0x3, 0xffff8000, 0x8, 0xffff, 0xfffffffe, 0x100, 0x6, 0x1, 0x1ae, 0xfffffeff, 0x1000, 0x2, 0x7, 0x9, 0x6, 0x5, 0x5, 0x7ff, 0x5, 0x7f, 0x7, 0x6, 0xffffffff, 0x7, 0x6, 0x9, 0x15, 0x92, 0x5, 0x215, 0xb3f, 0xd13, 0x4, 0x4045, 0xb1, 0x8000, 0x6, 0xff, 0x5, 0x7, 0x2, 0xfffffe01, 0x7fff, 0x9, 0x1, 0x2, 0xfe4d, 0x8, 0xffffffc1, 0x7, 0xfffff624, 0x0, 0x7, 0x4, 0x2, 0x9, 0xfffffff7, 0x1, 0x2, 0x4, 0x9674, 0x7a, 0x45e, 0x5, 0x2, 0x6, 0x8, 0x4, 0x20, 0xf3, 0xff, 0x8, 0x101, 0x7, 0x80000001, 0x8, 0x0, 0xfffffe01, 0x7fffffff, 0x8, 0x3ff, 0x6, 0xfdc, 0x2, 0x0, 0x1, 0x3, 0x4, 0xfffffff7, 0x80000001, 0x40, 0x1, 0xd36, 0x7, 0x1ff, 0x5, 0xdfe, 0x2, 0x400, 0x3f, 0x200, 0xff, 0x0, 0x3, 0x7fffffff, 0x200000, 0x776, 0x4, 0x8, 0xffffffff, 0x8000, 0x7, 0x7, 0x7f, 0x5, 0x20, 0x3, 0x5, 0x8001, 0x3, 0x2, 0x3, 0x3, 0xca, 0xe6e, 0x0, 0x40, 0x3ff, 0x9, 0x7, 0xae8, 0x81, 0x85d, 0x2400, 0x7, 0x80, 0x5fe, 0x861, 0x101, 0x7, 0x1, 0x7, 0x9, 0x1, 0x0, 0x2, 0x5b, 0x5, 0x9, 0x6, 0x3]}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xe, 0x7}, 0xffff, 0xeec}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x0, 0x1, 0x0, 0x4, 0x6, 0x4}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x5, 0x8, 0x1, 0x0, 0x1}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0x8, 0xe}, 0x4, 0x1}}, @TCA_CBQ_LSSOPT={0x18, 0x1, {0x4, 0x1, 0x19, 0x0, 0x1000, 0x2, 0x200, 0x1f}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xa, 0x9}, 0xffffffe0, 0x81}}, @TCA_CBQ_FOPT={0x10, 0x3, {{0xfff2, 0xb}, 0x1, 0x20}}]}}, @c_atm={{0x8}, {0x30, 0x2, [@TCA_ATM_EXCESS={0x8, 0x4, {0x0, 0xffe0}}, @TCA_ATM_HDR={0x24, 0x3, "c61948ae97677cc7862a915a1d977cf2c6054fc9245a743b8fa7625780f7b61b"}]}}]}, 0x4f4}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) ioctl$EXT4_IOC_MIGRATE(r5, 0x6609) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000001180)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x1c, 0x0, 0x200, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004}, 0x20004000) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f00000011c0)='wg2\x00', 0x4) socket$inet(0x2, 0x0, 0x2dd) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r3, 0x84, 0x6c, &(0x7f0000001200)={r1, 0xe9, "de0ce80b4593524a19cf6ce53482e6f692c1d7f6653905b964cc7a923088da9d15bb08ef1bd92e74006ddbe23f18cb0931599a1f1bdf13286faa1fce517a81b7ff604506e96005bf74f60ca7f0752c67d79740e6d7779ab70988a4f0be5bec24f17822f4686817aec20416c2cc9e32b4e8f31ed4a8cd1d2c7c076c03c00bcccc6a08df328739af4ed269375212a5c18c4d861c8ce846c0673d8c0e46973cf866ec45fc816cb7b061346eaf6fff78eb67888b575edd4fcf174bec36cd9d9916caf6ebf157d969c3b97e78cae500950a4ce7dd56626cd4d987ecb92bd04b83349cfb53d34c5ccaccc62a"}, &(0x7f0000001300)=0xf1) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000001340)={r9, 0x4, 0x3, 0x7ff}, &(0x7f0000001380)=0x10) r10 = accept4$rose(0xffffffffffffffff, &(0x7f00000013c0)=@full={0xb, @dev, @rose, 0x0, [@rose, @default, @netrom, @null, @default, @bcast]}, &(0x7f0000001400)=0x40, 0x0) setsockopt$rose(r10, 0x104, 0x1, &(0x7f0000001440)=0x7fe00, 0x4) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000001480)={0x0, 'macvlan1\x00', {}, 0x7}) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(r5, 0x80489439, &(0x7f00000014c0)) r11 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r11, &(0x7f0000001540)={0x1f, @none}, 0x8) 823.643426ms ago: executing program 4: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) pwritev(r1, &(0x7f00000004c0), 0x0, 0x8040000, 0xffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x810) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf32(r3, &(0x7f0000002240)=ANY=[], 0x1278) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, 0x0, 0xa) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 576.325528ms ago: executing program 4: sendmsg$NLBL_CIPSOV4_C_LIST(0xffffffffffffffff, 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000140)) pwritev(r1, &(0x7f00000004c0), 0x0, 0x8040000, 0xffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, 0x0, 0x810) pwritev(r0, &(0x7f0000000240)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f00000006c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf32(r3, &(0x7f0000002240)=ANY=[], 0x1278) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) r5 = openat$cgroup_devices(r4, &(0x7f0000000000)='devices.deny\x00', 0x2, 0x0) write$cgroup_devices(r5, &(0x7f0000000140)=ANY=[], 0xa) socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) 561.59237ms ago: executing program 3: connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x628, 0x3d0, 0xd0, 0xd0, 0x1a0, 0x3d0, 0x558, 0x558, 0x558, 0x558, 0x558, 0x6, 0x0, {[{{@ipv6={@dev, @private1, [], [], 'veth1\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x3a010000}}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x300}}, {{@ipv6={@private0, @remote, [], [], 'veth0_to_team\x00', 'tunl0\x00', {}, {}, 0x11, 0x0, 0x3}, 0x0, 0x138, 0x160, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, @mcast2}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@ipv6={@loopback, @private2, [], [], 'batadv0\x00', 'veth0_to_batadv\x00'}, 0x0, 0x160, 0x188, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @empty, @private0, @local}}]}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r2 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_ED_LEVEL(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x400, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x2c}, 0x1, 0x0, 0x0, 0x804}, 0x4000) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x5, &(0x7f0000000440)={&(0x7f0000000ec0)={0x114, r2, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) 400.441532ms ago: executing program 4: unshare(0x28000600) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000006000)=[@in={0xd, 0x0, @local}]}, &(0x7f0000005ec0)=0x10) 251.853903ms ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_dccp(0xa, 0x6, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x7000000, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[@ANYBLOB="14000000100001000000000000739c000000000a6c000000060a0b04000000000000000002000000400004803c0001800b00010065787468647200002c00028008000340000000000800014000000000050002000000000008000640000000040800044000000004090001"], 0x94}}, 0x0) 208.782228ms ago: executing program 3: sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, 0x0, 0x0, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x5, 0x8}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000180), &(0x7f0000000100)}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r0}, 0x20) socket$packet(0x11, 0x2, 0x300) syz_emit_ethernet(0x86, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x50, 0x3a, 0x0, @remote, @local, {[], @pkt_toobig={0x3, 0x2, 0x0, 0x0, {0x0, 0x6, "d80002", 0x0, 0x11, 0x0, @private1, @mcast2, [@dstopts={0x0, 0x0, '\x00', [@ra={0x5, 0x2f, 0x1}]}], "fb36eeca6fad50b375a22a584d16ca55"}}}}}}}, 0x0) 102.200594ms ago: executing program 3: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='dctcp-reno\x00', 0xb) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x6, 0x1a, &(0x7f0000000180), 0x8) 92.106369ms ago: executing program 4: socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x0, 0x4, 0x4}, 0x48) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r2, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@ipv6_newroute={0x28, 0x18, 0x0, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc}]}, 0x28}, 0x1, 0x11}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001900599c6d0e000091d028ef8020ab0700040005"], 0xfe33) 12.828679ms ago: executing program 1: r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000280)={0x41}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000900)={0x41, 0x4}, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x41, 0x0, 0x4}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x2}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x0, 0x0, @local}}, 0x0, 0x0, 0x0, 0x0, "774c3302b1f1b066a380bfe207b87eee3eae02bd83c2a1221c61cc28de9738dd65a7087c64eb12c6b6de92c94c30ac369a9c40de052c528fa8db2e5e374fb46ca3db74fa6de1fc0d3b3daed2a0227652"}, 0xd8) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=ANY=[@ANYBLOB="ec00000021000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000009c001100e0000001000000000000000000000000ac1414aa000000000000000000000000ac1414aa00000000000000000000000000000000000000000400e1d26a4030aec84ed660da487ebb000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000ffffe000000200000000000000000000000000000000ac141400"/164], 0xec}}, 0x0) sendmsg$tipc(r3, &(0x7f0000000840)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x55, 0x0}, 0x0) r5 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000600)={'vxcan1\x00', 0x0}) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5}, 0xe) sendto$inet6(r8, &(0x7f00000000c0)="547875344b02c1b85c3c11f098b996438997828c65f734548aab7be0abd5e8a05a", 0x21, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @private2}, 0x1c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) shutdown(r7, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) setsockopt$XDP_RX_RING(r9, 0x11b, 0x2, &(0x7f0000000040)=0x200028, 0x4) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) readv(r8, &(0x7f0000000080)=[{&(0x7f0000001fc0)=""/4096, 0x1000}], 0x1) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000540)={@empty, r6}, 0x14) 0s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x1}]}, &(0x7f0000000100)='GPL\x00'}, 0x90) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="f0020000", @ANYRES16=r2, @ANYBLOB="010400000000000000003b00000008000300", @ANYRES32, @ANYBLOB="d2023300802b0001080211000000080211"], 0x2f0}}, 0x0) kernel console output (not intermixed with test programs): 967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir313461555/syzkaller.7vogMJ/180/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 167.378478][ T5120] Bluetooth: hci0: command tx timeout [ 167.414134][ T29] audit: type=1804 audit(1719202939.732:16): pid=9394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir313461555/syzkaller.7vogMJ/180/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 167.667395][ T11] hsr_slave_0: left promiscuous mode [ 167.685560][ T11] hsr_slave_1: left promiscuous mode [ 167.694397][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.707357][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.724847][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.739689][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.780533][ T11] veth1_macvtap: left promiscuous mode [ 167.789589][ T11] veth0_macvtap: left promiscuous mode [ 167.795637][ T11] veth1_vlan: left promiscuous mode [ 167.801080][ T11] veth0_vlan: left promiscuous mode [ 168.284582][ T11] team0 (unregistering): Port device team_slave_1 removed [ 168.323148][ T11] team0 (unregistering): Port device team_slave_0 removed [ 168.781944][ T9347] chnl_net:caif_netlink_parms(): no params data found [ 168.970436][ T9423] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 168.991386][ T9423] sctp: [Deprecated]: syz-executor.3 (pid 9423) Use of int in max_burst socket option deprecated. [ 168.991386][ T9423] Use struct sctp_assoc_value instead [ 169.028003][ T9423] __nla_validate_parse: 7 callbacks suppressed [ 169.043175][ T9426] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.056190][ T9423] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.099671][ T9419] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.109352][ T9419] team0: Port device bond0 added [ 169.286719][ T9437] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.308747][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.323145][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.409822][ T9347] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.424863][ T5120] Bluetooth: hci0: command tx timeout [ 169.432099][ T9347] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.446382][ T9347] bridge_slave_0: entered allmulticast mode [ 169.466573][ T9347] bridge_slave_0: entered promiscuous mode [ 169.479369][ T9347] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.486949][ T9347] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.494350][ T9347] bridge_slave_1: entered allmulticast mode [ 169.501736][ T9347] bridge_slave_1: entered promiscuous mode [ 169.523798][ T2779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.541293][ T2779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.629378][ T9448] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.642879][ T9347] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.672779][ T9347] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.808789][ T9347] team0: Port device team_slave_0 added [ 169.817355][ T9458] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 169.818445][ T9347] team0: Port device team_slave_1 added [ 169.861719][ T9458] sctp: [Deprecated]: syz-executor.3 (pid 9458) Use of int in max_burst socket option deprecated. [ 169.861719][ T9458] Use struct sctp_assoc_value instead [ 169.887060][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.890861][ T9458] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.894219][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.932246][ T9347] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.972852][ T9347] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.990726][ T9347] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.021886][ T9466] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.040088][ T9347] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.186538][ T9347] hsr_slave_0: entered promiscuous mode [ 170.194750][ T9347] hsr_slave_1: entered promiscuous mode [ 170.202743][ T9347] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.219615][ T9347] Cannot create hsr debugfs directory [ 170.234059][ T9469] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.615807][ T9457] syz-executor.1 (9457) used greatest stack depth: 17008 bytes left [ 170.939467][ T9347] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 170.960304][ T9495] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.985214][ T9347] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 170.997178][ T9347] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 171.015675][ T9347] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 171.067220][ T9499] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 171.223078][ T9347] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.291490][ T9347] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.319660][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.326908][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.372769][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.380009][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 171.410130][ T9512] batadv1: entered allmulticast mode [ 171.505109][ T5120] Bluetooth: hci0: command tx timeout [ 171.794662][ T9528] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.920180][ T9536] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.031758][ T9347] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.189542][ T9347] veth0_vlan: entered promiscuous mode [ 172.246746][ T9347] veth1_vlan: entered promiscuous mode [ 172.346939][ T9347] veth0_macvtap: entered promiscuous mode [ 172.391949][ T9347] veth1_macvtap: entered promiscuous mode [ 172.433377][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.452431][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.463422][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.479141][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.489123][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.507189][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.518949][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.546882][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.565818][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.577948][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.588715][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.599792][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.612747][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.654376][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.720699][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.759050][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.818421][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.851460][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.890494][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.930075][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.984927][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.030879][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.085688][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.132785][ T9347] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.187278][ T9347] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.246330][ T9347] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.421066][ T9347] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.465069][ T9347] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.486701][ T9347] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.516672][ T9347] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.584045][ T5120] Bluetooth: hci0: command tx timeout [ 173.767626][ T64] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.785068][ T9578] dccp_close: ABORT with 220 bytes unread [ 173.800694][ T64] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.856930][ T9582] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 173.871672][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.915525][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.192543][ T5195] IPVS: starting estimator thread 0... [ 174.275930][ T9602] __nla_validate_parse: 2 callbacks suppressed [ 174.275950][ T9602] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.294031][ T9600] IPVS: using max 21 ests per chain, 50400 per kthread [ 174.461036][ T9603] dccp_close: ABORT with 220 bytes unread [ 174.606706][ T9610] dccp_close: ABORT with 220 bytes unread [ 174.825203][ T9621] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 174.845763][ T9621] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.875400][ T9621] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 174.980111][ T9629] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.011283][ T9633] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 175.012335][ T9632] IPVS: stopping master sync thread 9633 ... [ 175.349824][ T9640] dccp_close: ABORT with 220 bytes unread [ 175.385921][ T9642] dccp_close: ABORT with 229 bytes unread [ 175.567825][ T9659] can: request_module (can-proto-0) failed. [ 175.657302][ T29] audit: type=1800 audit(1719202948.052:17): pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 175.690424][ T9668] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.715385][ T9668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.723476][ T29] audit: type=1804 audit(1719202948.072:18): pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2316400866/syzkaller.tLBcSN/133/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 175.808167][ T29] audit: type=1804 audit(1719202948.072:19): pid=9671 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2316400866/syzkaller.tLBcSN/133/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 176.039608][ T9680] dccp_close: ABORT with 229 bytes unread [ 176.279601][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.851213][ T9720] dccp_close: ABORT with 229 bytes unread [ 176.953468][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.971648][ T9722] dccp_close: ABORT with 220 bytes unread [ 177.000149][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 177.012782][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 177.021328][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 177.043163][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 177.052691][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 177.060206][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 177.110997][ T9727] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.126744][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.159574][ T45] IPVS: starting estimator thread 0... [ 177.294484][ T9735] IPVS: using max 28 ests per chain, 67200 per kthread [ 177.314723][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.356895][ T9737] dccp_close: ABORT with 220 bytes unread [ 177.558183][ T64] bridge_slave_1: left allmulticast mode [ 177.581537][ T64] bridge_slave_1: left promiscuous mode [ 177.602864][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.627751][ T64] bridge_slave_0: left allmulticast mode [ 177.639193][ T9751] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.641430][ T64] bridge_slave_0: left promiscuous mode [ 177.664745][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.678101][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.781928][ T9758] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 177.841001][ T9761] sctp: [Deprecated]: syz-executor.1 (pid 9761) Use of int in max_burst socket option deprecated. [ 177.841001][ T9761] Use struct sctp_assoc_value instead [ 177.922725][ T9758] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.131615][ T29] audit: type=1804 audit(1719202950.522:20): pid=9774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir313461555/syzkaller.7vogMJ/220/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 178.335119][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.357354][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.378146][ T64] bond0 (unregistering): Released all slaves [ 178.418321][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.652830][ T9773] team0 (unregistering): Port device team_slave_0 removed [ 178.680263][ T9773] team0 (unregistering): Port device team_slave_1 removed [ 179.020107][ T9728] chnl_net:caif_netlink_parms(): no params data found [ 179.111680][ T5121] Bluetooth: hci0: command tx timeout [ 179.134555][ T9806] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 179.158076][ T64] hsr_slave_0: left promiscuous mode [ 179.163820][ T9806] sctp: [Deprecated]: syz-executor.1 (pid 9806) Use of int in max_burst socket option deprecated. [ 179.163820][ T9806] Use struct sctp_assoc_value instead [ 179.199318][ T64] hsr_slave_1: left promiscuous mode [ 179.212075][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.223758][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.237314][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.254093][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.362443][ T64] veth1_macvtap: left promiscuous mode [ 179.373863][ T64] veth0_macvtap: left promiscuous mode [ 179.387182][ T64] veth1_vlan: left promiscuous mode [ 179.392677][ T64] veth0_vlan: left promiscuous mode [ 179.584114][ T9825] __nla_validate_parse: 4 callbacks suppressed [ 179.584134][ T9825] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.930837][ T64] team0 (unregistering): Port device team_slave_1 removed [ 179.971313][ T64] team0 (unregistering): Port device team_slave_0 removed [ 180.351981][ T9808] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 180.360926][ T9808] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.393706][ T9826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.571101][ T9826] team0 (unregistering): Port device team_slave_0 removed [ 180.594056][ T9826] team0 (unregistering): Port device team_slave_1 removed [ 180.764134][ T9728] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.799188][ T9728] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.834530][ T9728] bridge_slave_0: entered allmulticast mode [ 180.856975][ T9728] bridge_slave_0: entered promiscuous mode [ 180.874655][ T9843] dccp_close: ABORT with 229 bytes unread [ 180.886934][ T9728] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.907448][ T9728] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.921030][ T9728] bridge_slave_1: entered allmulticast mode [ 180.932086][ T9728] bridge_slave_1: entered promiscuous mode [ 181.053149][ T9728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.102481][ T9728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.173175][ T9841] tap0: tun_chr_ioctl cmd 35108 [ 181.184158][ T5121] Bluetooth: hci0: command tx timeout [ 181.215002][ T9857] dccp_close: ABORT with 234 bytes unread [ 181.218272][ T9728] team0: Port device team_slave_0 added [ 181.267777][ T9728] team0: Port device team_slave_1 added [ 181.311067][ T9862] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 181.320192][ T9862] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.357798][ T9864] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.417126][ T9728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.431985][ T9728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.468018][ T9728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.491337][ T9868] batadv_slave_1: entered promiscuous mode [ 181.514811][ T9728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.538039][ T9728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.570802][ T9728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.599291][ T9867] batadv_slave_1: left promiscuous mode [ 181.719352][ T9882] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.777137][ T9883] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.802099][ T9880] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.839931][ T9728] hsr_slave_0: entered promiscuous mode [ 181.858988][ T9728] hsr_slave_1: entered promiscuous mode [ 181.877431][ T9728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.900559][ T9728] Cannot create hsr debugfs directory [ 182.032379][ T9888] dccp_close: ABORT with 236 bytes unread [ 182.182929][ T9898] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 182.191778][ T9898] netlink: 38 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.380717][ T9906] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 182.605227][ T29] audit: type=1804 audit(1719202955.002:21): pid=9922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir313461555/syzkaller.7vogMJ/232/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 182.813411][ T9924] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.859249][ T9930] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 182.958620][ T9728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 182.991511][ T9728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 183.020723][ T9728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 183.051806][ T9728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 183.265281][ T5121] Bluetooth: hci0: command tx timeout [ 183.429972][ T9728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.473068][ T9728] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.505465][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.512673][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.556184][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.563351][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.016873][ T9728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.103704][ T9987] batadv_slave_1: entered promiscuous mode [ 184.122722][ T9728] veth0_vlan: entered promiscuous mode [ 184.161785][ T9986] batadv_slave_1: left promiscuous mode [ 184.190976][ T9728] veth1_vlan: entered promiscuous mode [ 184.281842][ T9728] veth0_macvtap: entered promiscuous mode [ 184.299018][ T9995] x_tables: unsorted underflow at hook 2 [ 184.311377][ T9728] veth1_macvtap: entered promiscuous mode [ 184.365111][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.383422][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.393779][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.405810][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.417695][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.431377][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.441418][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.454857][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.466275][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.479380][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.489702][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.502796][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.516474][ T9728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.571973][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.583241][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.593224][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.604976][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.615599][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.626517][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.637527][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.649770][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.659860][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.670740][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.681180][ T9728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.695770][ T9728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.710636][ T9728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 184.785901][T10010] team0: Port device syz_tun added [ 184.806929][T10011] __nla_validate_parse: 4 callbacks suppressed [ 184.806950][T10011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.975809][T10011] team0 (unregistering): Port device team_slave_0 removed [ 184.999656][T10011] team0 (unregistering): Port device team_slave_1 removed [ 185.019299][T10011] team0 (unregistering): Port device bond0 removed [ 185.038048][T10011] team0 (unregistering): Port device syz_tun removed [ 185.069067][ T9728] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.078121][ T9728] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.087143][ T9728] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.097595][ T9728] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.343484][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.352246][ T5121] Bluetooth: hci0: command tx timeout [ 185.375814][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.435120][T10032] vlan2: entered promiscuous mode [ 185.495492][T10039] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 185.526967][ T4309] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.560632][ T4309] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.653274][T10049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.751971][T10049] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 185.820184][T10051] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.841956][T10064] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 185.863922][T10064] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 185.872196][T10064] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 185.882603][T10064] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 185.900969][T10064] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.932182][T10064] vlan2: entered allmulticast mode [ 185.971142][T10068] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 185.979861][T10068] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.339689][T10086] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 186.372226][T10090] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.374454][T10086] sctp: [Deprecated]: syz-executor.3 (pid 10086) Use of int in max_burst socket option deprecated. [ 186.374454][T10086] Use struct sctp_assoc_value instead [ 186.411210][T10090] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 186.416296][T10086] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 186.982956][T10123] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 186.999911][T10123] sctp: [Deprecated]: syz-executor.4 (pid 10123) Use of int in max_burst socket option deprecated. [ 186.999911][T10123] Use struct sctp_assoc_value instead [ 187.028247][T10123] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 187.268912][T10139] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.428524][T10153] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 187.468002][T10153] sctp: [Deprecated]: syz-executor.4 (pid 10153) Use of int in max_burst socket option deprecated. [ 187.468002][T10153] Use struct sctp_assoc_value instead [ 187.516048][T10153] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 187.758496][T10170] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 187.948362][T10184] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.948416][T10185] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 187.984783][T10185] sctp: [Deprecated]: syz-executor.4 (pid 10185) Use of int in max_burst socket option deprecated. [ 187.984783][T10185] Use struct sctp_assoc_value instead [ 188.344274][ T4309] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.414409][T10190] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 188.824345][T10216] sctp: [Deprecated]: syz-executor.4 (pid 10216) Use of int in max_burst socket option deprecated. [ 188.824345][T10216] Use struct sctp_assoc_value instead [ 189.065012][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 189.075059][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 189.086977][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 189.099369][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 189.111948][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 189.124298][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 189.418872][ T4309] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.469785][T10258] sctp: [Deprecated]: syz-executor.4 (pid 10258) Use of int in max_burst socket option deprecated. [ 189.469785][T10258] Use struct sctp_assoc_value instead [ 189.602407][ T4309] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.760667][ T4309] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.051431][T10229] chnl_net:caif_netlink_parms(): no params data found [ 190.405299][T10309] sctp: [Deprecated]: syz-executor.4 (pid 10309) Use of int in max_burst socket option deprecated. [ 190.405299][T10309] Use struct sctp_assoc_value instead [ 190.448661][T10309] __nla_validate_parse: 11 callbacks suppressed [ 190.448681][T10309] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.451924][T10229] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.492288][T10229] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.500168][T10229] bridge_slave_0: entered allmulticast mode [ 190.509358][T10229] bridge_slave_0: entered promiscuous mode [ 190.521539][ T4309] bridge_slave_1: left allmulticast mode [ 190.524612][T10314] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.536649][ T4309] bridge_slave_1: left promiscuous mode [ 190.536898][ T4309] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.558370][ T4309] bridge_slave_0: left allmulticast mode [ 190.569290][ T4309] bridge_slave_0: left promiscuous mode [ 190.584312][ T4309] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.733020][T10324] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.010188][ T4309] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.028063][ T4309] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.039826][ T4309] bond0 (unregistering): Released all slaves [ 191.062802][T10229] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.070333][T10229] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.077779][T10229] bridge_slave_1: entered allmulticast mode [ 191.085460][T10229] bridge_slave_1: entered promiscuous mode [ 191.184453][ T5121] Bluetooth: hci0: command tx timeout [ 191.252883][T10229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.281547][T10229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.324744][T10331] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.432415][T10332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.519734][T10229] team0: Port device team_slave_0 added [ 191.591271][ T4309] hsr_slave_0: left promiscuous mode [ 191.608029][T10344] validate_nla: 5 callbacks suppressed [ 191.608054][T10344] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 191.624524][ T4309] hsr_slave_1: left promiscuous mode [ 191.634789][T10344] sctp: [Deprecated]: syz-executor.4 (pid 10344) Use of int in max_burst socket option deprecated. [ 191.634789][T10344] Use struct sctp_assoc_value instead [ 191.654596][ T4309] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.657157][T10344] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.662011][ T4309] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.730943][ T4309] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.743090][ T4309] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.801780][ T4309] veth1_macvtap: left promiscuous mode [ 191.803309][T10357] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.818817][ T4309] veth0_macvtap: left promiscuous mode [ 191.830164][ T4309] veth1_vlan: left promiscuous mode [ 191.842402][ T4309] veth0_vlan: left promiscuous mode [ 192.415234][ T4309] team0 (unregistering): Port device team_slave_1 removed [ 192.459377][ T4309] team0 (unregistering): Port device team_slave_0 removed [ 192.844246][T10229] team0: Port device team_slave_1 added [ 192.937637][T10229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 192.957187][T10229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.008895][T10229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.051026][T10374] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.066520][T10229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.100797][T10229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.165114][T10380] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 193.183675][T10229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.220891][T10385] sctp: [Deprecated]: syz-executor.3 (pid 10385) Use of int in max_burst socket option deprecated. [ 193.220891][T10385] Use struct sctp_assoc_value instead [ 193.237078][T10376] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 193.253430][T10376] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 193.270359][ T5121] Bluetooth: hci0: command tx timeout [ 193.287702][T10380] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.337801][T10229] hsr_slave_0: entered promiscuous mode [ 193.362593][T10229] hsr_slave_1: entered promiscuous mode [ 193.405295][T10229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.420416][T10229] Cannot create hsr debugfs directory [ 194.117419][T10420] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 194.128574][T10229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 194.136054][T10420] sctp: [Deprecated]: syz-executor.0 (pid 10420) Use of int in max_burst socket option deprecated. [ 194.136054][T10420] Use struct sctp_assoc_value instead [ 194.164366][T10229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 194.187424][T10229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 194.211388][T10229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 194.231852][T10424] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 194.348992][T10229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.389944][T10229] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.414815][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.421970][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.473876][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.481048][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.541105][T10229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 194.552219][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.767472][ C1] vcan0: j1939_tp_rxtimer: 0xffff88802cf77c00: rx timeout, send abort [ 194.778148][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88802cf77c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 194.866787][T10229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.063787][T10229] veth0_vlan: entered promiscuous mode [ 195.083316][T10229] veth1_vlan: entered promiscuous mode [ 195.182571][T10229] veth0_macvtap: entered promiscuous mode [ 195.226593][T10229] veth1_macvtap: entered promiscuous mode [ 195.281569][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.313810][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.334724][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.354099][ T5120] Bluetooth: hci0: command tx timeout [ 195.359734][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.375296][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.386629][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.396632][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.407216][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.417274][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.429157][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.440744][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.451465][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.470321][T10229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.514531][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.536967][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.558811][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.580752][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.614035][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.646320][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.668557][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.679673][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.690626][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.701442][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.712675][T10229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.723663][T10229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.736601][T10229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.752840][T10229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.771407][T10229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.781117][T10229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.790605][T10229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.802596][T10482] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 196.091299][ T2779] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.145741][ T2779] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.337213][T10488] syzkaller0: entered promiscuous mode [ 196.351043][T10488] syzkaller0: entered allmulticast mode [ 196.380833][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.404193][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.415072][T10505] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 196.442377][T10505] __nla_validate_parse: 6 callbacks suppressed [ 196.442397][T10505] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 197.426189][ T5120] Bluetooth: hci0: command tx timeout [ 198.345702][T10541] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.394181][T10541] team_slave_0: entered promiscuous mode [ 198.400302][T10541] team_slave_1: entered promiscuous mode [ 198.407150][T10541] bond_slave_0: entered promiscuous mode [ 198.413045][T10541] bond_slave_1: entered promiscuous mode [ 198.420801][T10541] macvtap1: entered promiscuous mode [ 198.430726][T10541] team0: entered promiscuous mode [ 198.436421][T10541] bond0: entered promiscuous mode [ 198.443266][T10546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.455154][T10541] macvtap1: entered allmulticast mode [ 198.464071][T10541] team0: entered allmulticast mode [ 198.470443][T10541] team_slave_0: entered allmulticast mode [ 198.485598][T10541] team_slave_1: entered allmulticast mode [ 198.491503][T10541] bond0: entered allmulticast mode [ 198.497143][T10541] bond_slave_0: entered allmulticast mode [ 198.503794][T10541] bond_slave_1: entered allmulticast mode [ 198.522211][T10541] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 199.073080][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.868536][T10592] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 199.908311][T10592] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.294964][ T2862] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.546896][ T2862] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.726493][ T2862] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.980158][ T2862] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.074310][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 201.084805][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 201.100908][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 201.120238][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 201.128891][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 201.138809][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 201.235994][ T29] audit: type=1804 audit(1719202973.632:22): pid=10635 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1258485289/syzkaller.10g6nt/112/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 201.676646][T10651] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 201.689655][ T2862] bridge_slave_1: left allmulticast mode [ 201.714089][ T2862] bridge_slave_1: left promiscuous mode [ 201.719862][ T2862] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.735971][T10653] sctp: [Deprecated]: syz-executor.1 (pid 10653) Use of int in max_burst socket option deprecated. [ 201.735971][T10653] Use struct sctp_assoc_value instead [ 201.773607][ T2862] bridge_slave_0: left allmulticast mode [ 201.785006][T10651] netlink: 209572 bytes leftover after parsing attributes in process `syz-executor.1'. [ 201.803599][ T2862] bridge_slave_0: left promiscuous mode [ 201.810729][ T2862] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.289195][ T2862] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.300830][ T2862] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.312414][ T2862] bond0 (unregistering): Released all slaves [ 202.711822][T10682] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 202.727953][ T29] audit: type=1804 audit(1719202975.102:23): pid=10682 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir313461555/syzkaller.7vogMJ/306/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 202.833209][T10625] chnl_net:caif_netlink_parms(): no params data found [ 202.915985][ T2862] hsr_slave_0: left promiscuous mode [ 202.939013][ T2862] hsr_slave_1: left promiscuous mode [ 202.965282][ T2862] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.974231][ T2862] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.993457][ T2862] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.003136][ T2862] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.059170][ T2862] veth1_macvtap: left promiscuous mode [ 203.071392][ T2862] veth0_macvtap: left promiscuous mode [ 203.079930][ T2862] veth1_vlan: left promiscuous mode [ 203.092232][ T2862] veth0_vlan: left promiscuous mode [ 203.184638][ T5121] Bluetooth: hci0: command tx timeout [ 203.718651][ T2862] team0 (unregistering): Port device team_slave_1 removed [ 203.761442][ T2862] team0 (unregistering): Port device team_slave_0 removed [ 204.298147][T10740] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 204.309621][T10740] sctp: [Deprecated]: syz-executor.0 (pid 10740) Use of int in max_burst socket option deprecated. [ 204.309621][T10740] Use struct sctp_assoc_value instead [ 204.340736][T10740] netlink: 209572 bytes leftover after parsing attributes in process `syz-executor.0'. [ 204.421332][T10746] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 204.450401][T10746] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.492482][T10625] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.514143][T10625] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.551492][T10625] bridge_slave_0: entered allmulticast mode [ 204.581792][T10625] bridge_slave_0: entered promiscuous mode [ 204.712745][T10625] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.732984][T10625] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.751011][T10625] bridge_slave_1: entered allmulticast mode [ 204.761168][T10625] bridge_slave_1: entered promiscuous mode [ 204.851123][T10625] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.879980][T10625] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.037475][T10625] team0: Port device team_slave_0 added [ 205.065426][T10625] team0: Port device team_slave_1 added [ 205.151490][T10625] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.173971][T10625] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.224242][T10625] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.252952][T10625] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.266059][ T5121] Bluetooth: hci0: command tx timeout [ 205.285702][T10625] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.331789][T10625] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.364545][T10791] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 205.403013][T10791] sctp: [Deprecated]: syz-executor.4 (pid 10791) Use of int in max_burst socket option deprecated. [ 205.403013][T10791] Use struct sctp_assoc_value instead [ 205.464592][T10791] netlink: 209572 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.467589][T10625] hsr_slave_0: entered promiscuous mode [ 205.509217][T10625] hsr_slave_1: entered promiscuous mode [ 205.526582][T10625] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 205.545593][T10625] Cannot create hsr debugfs directory [ 205.706532][T10806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.355457][T10625] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 206.391247][T10625] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 206.422148][T10625] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 206.449078][T10625] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 206.568684][T10858] pim6reg1: entered promiscuous mode [ 206.578466][T10858] pim6reg1: entered allmulticast mode [ 206.682961][T10625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.728539][T10625] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.742048][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.749349][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.778662][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.785963][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.142928][T10625] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.182291][T10888] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 207.205293][T10888] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.344217][ T5121] Bluetooth: hci0: command tx timeout [ 207.400281][T10625] veth0_vlan: entered promiscuous mode [ 207.470887][T10625] veth1_vlan: entered promiscuous mode [ 207.590569][T10625] veth0_macvtap: entered promiscuous mode [ 207.624923][T10909] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 207.633326][T10909] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.655206][T10625] veth1_macvtap: entered promiscuous mode [ 207.706665][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.758670][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.786445][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.817372][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.840811][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.861515][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.878720][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.890191][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.900586][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.911537][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.921564][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.932608][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 207.955648][T10625] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 207.995339][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.042438][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.068926][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.100592][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.114696][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.125733][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.136786][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.148049][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.160201][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.171056][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.181213][T10625] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.193677][T10625] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.213712][T10625] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.226025][T10926] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 208.279630][T10625] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.316868][T10625] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.341899][T10625] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.371882][T10625] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.573161][ T2862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.611680][ T2862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.672697][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.759928][T10951] team0 (unregistering): left allmulticast mode [ 208.773445][T10951] team_slave_0: left allmulticast mode [ 208.779961][T10951] team_slave_1: left allmulticast mode [ 208.786169][T10951] bond0: left allmulticast mode [ 208.791346][T10951] bond_slave_0: left allmulticast mode [ 208.806548][T10951] bond_slave_1: left allmulticast mode [ 208.814101][T10951] team0 (unregistering): left promiscuous mode [ 208.825232][T10951] team_slave_0: left promiscuous mode [ 208.841195][T10951] team_slave_1: left promiscuous mode [ 208.853488][T10951] bond0: left promiscuous mode [ 208.861794][T10951] bond_slave_0: left promiscuous mode [ 208.874706][T10951] bond_slave_1: left promiscuous mode [ 208.981923][T10951] team0 (unregistering): Port device team_slave_0 removed [ 208.998994][T10951] team0 (unregistering): Port device team_slave_1 removed [ 209.050126][T10951] team0 (unregistering): Port device bond0 removed [ 209.091078][T10955] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 209.109765][T10955] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.165470][ T2821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.173316][ T2821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.255819][T10974] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 209.324675][T10974] sctp: [Deprecated]: syz-executor.0 (pid 10974) Use of int in max_burst socket option deprecated. [ 209.324675][T10974] Use struct sctp_assoc_value instead [ 209.354374][T10979] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.744373][T11000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.917377][T11011] dccp_close: ABORT with 238 bytes unread [ 210.074877][T11026] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 210.099492][T11026] sctp: [Deprecated]: syz-executor.0 (pid 11026) Use of int in max_burst socket option deprecated. [ 210.099492][T11026] Use struct sctp_assoc_value instead [ 210.486191][T11050] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.697227][T11061] dccp_close: ABORT with 238 bytes unread [ 210.736965][T11071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.841784][T11078] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 210.859886][T11078] sctp: [Deprecated]: syz-executor.4 (pid 11078) Use of int in max_burst socket option deprecated. [ 210.859886][T11078] Use struct sctp_assoc_value instead [ 211.196260][T11103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 211.320018][T11105] dccp_close: ABORT with 238 bytes unread [ 211.437055][T11114] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 211.446324][T11114] sctp: [Deprecated]: syz-executor.4 (pid 11114) Use of int in max_burst socket option deprecated. [ 211.446324][T11114] Use struct sctp_assoc_value instead [ 211.620731][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.124399][T11147] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 212.132603][T11147] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.420429][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.439188][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.447328][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.459634][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.472854][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.494352][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 212.501967][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.692562][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.783028][T11173] dccp_close: ABORT with 238 bytes unread [ 212.847588][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.880514][T11187] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 212.896017][T11187] sctp: [Deprecated]: syz-executor.3 (pid 11187) Use of int in max_burst socket option deprecated. [ 212.896017][T11187] Use struct sctp_assoc_value instead [ 212.929792][T11184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.146612][T11200] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 213.157137][T11200] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.219241][ T64] bridge_slave_1: left allmulticast mode [ 213.264372][ T64] bridge_slave_1: left promiscuous mode [ 213.271077][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.342822][ T64] bridge_slave_0: left allmulticast mode [ 213.358945][ T64] bridge_slave_0: left promiscuous mode [ 213.384082][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.710047][T11225] dccp_close: ABORT with 238 bytes unread [ 213.962333][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.976682][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.992007][ T64] bond0 (unregistering): Released all slaves [ 214.014187][T11221] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.126502][T11236] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 214.140792][T11236] sctp: [Deprecated]: syz-executor.0 (pid 11236) Use of int in max_burst socket option deprecated. [ 214.140792][T11236] Use struct sctp_assoc_value instead [ 214.346826][T11160] chnl_net:caif_netlink_parms(): no params data found [ 214.457782][T11252] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 214.471530][T11252] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.544237][ T5121] Bluetooth: hci0: command tx timeout [ 214.789513][ T64] hsr_slave_0: left promiscuous mode [ 214.816795][ T64] hsr_slave_1: left promiscuous mode [ 214.831121][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.831384][T11278] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 214.847282][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.857059][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.880799][T11278] sctp: [Deprecated]: syz-executor.0 (pid 11278) Use of int in max_burst socket option deprecated. [ 214.880799][T11278] Use struct sctp_assoc_value instead [ 214.897170][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.937802][ T64] veth1_macvtap: left promiscuous mode [ 214.943378][ T64] veth0_macvtap: left promiscuous mode [ 214.973815][ T64] veth1_vlan: left promiscuous mode [ 214.993075][ T64] veth0_vlan: left promiscuous mode [ 215.541789][ T64] team0 (unregistering): Port device team_slave_1 removed [ 215.583085][ T64] team0 (unregistering): Port device team_slave_0 removed [ 216.143200][T11294] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 216.153272][T11294] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.163588][T11160] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.208631][T11160] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.234317][T11160] bridge_slave_0: entered allmulticast mode [ 216.257298][T11160] bridge_slave_0: entered promiscuous mode [ 216.289318][T11160] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.302329][T11160] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.314446][T11160] bridge_slave_1: entered allmulticast mode [ 216.323769][T11160] bridge_slave_1: entered promiscuous mode [ 216.428330][T11160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.466158][T11160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.624078][ T5121] Bluetooth: hci0: command tx timeout [ 216.688324][T11309] dccp_close: ABORT with 238 bytes unread [ 216.724765][T11160] team0: Port device team_slave_0 added [ 216.748759][T11160] team0: Port device team_slave_1 added [ 216.824144][T11331] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 216.863693][T11331] sctp: [Deprecated]: syz-executor.1 (pid 11331) Use of int in max_burst socket option deprecated. [ 216.863693][T11331] Use struct sctp_assoc_value instead [ 216.895471][T11160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.921336][T11160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.001672][T11160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.052908][T11160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.071136][T11160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 217.100392][T11160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.198732][T11160] hsr_slave_0: entered promiscuous mode [ 217.219720][T11160] hsr_slave_1: entered promiscuous mode [ 217.239275][T11160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.249562][T11160] Cannot create hsr debugfs directory [ 217.263778][T11349] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 217.286678][T11349] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.442615][T11350] dccp_close: ABORT with 238 bytes unread [ 217.725504][T11372] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 217.762113][T11372] sctp: [Deprecated]: syz-executor.1 (pid 11372) Use of int in max_burst socket option deprecated. [ 217.762113][T11372] Use struct sctp_assoc_value instead [ 217.784560][T11374] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.972533][T11388] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 217.994300][T11388] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 218.184153][T11404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.372914][T11160] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 218.416373][T11160] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 218.464755][T11160] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 218.524621][T11160] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 218.649398][T11414] dccp_close: ABORT with 238 bytes unread [ 218.705501][ T5121] Bluetooth: hci0: command tx timeout [ 218.825111][T11160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.855655][T11435] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.929446][T11160] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.974220][ T5233] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.981426][ T5233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.120051][ T5233] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.127270][ T5233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.174239][T11455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.574179][T11160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.704371][T11160] veth0_vlan: entered promiscuous mode [ 219.746182][T11160] veth1_vlan: entered promiscuous mode [ 219.826640][T11160] veth0_macvtap: entered promiscuous mode [ 219.840844][T11160] veth1_macvtap: entered promiscuous mode [ 219.880614][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.904728][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.918119][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.953383][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.980094][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.006021][T11503] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.022121][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.043072][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.054177][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.074238][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.102438][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.121753][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 220.151720][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.180862][T11160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 220.193103][T11498] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.215109][T11494] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.240492][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.251625][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.262551][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.273148][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.285566][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.296309][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.306956][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.322985][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.340197][T11514] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 220.348530][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.359274][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.369747][T11160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.381235][T11160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.402781][T11160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.407562][T11514] sctp: [Deprecated]: syz-executor.0 (pid 11514) Use of int in max_burst socket option deprecated. [ 220.407562][T11514] Use struct sctp_assoc_value instead [ 220.431339][T11160] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.454101][T11160] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.462880][T11160] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.493969][T11160] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.536782][T11521] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 220.552798][T11521] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.775353][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.783218][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.784408][ T5121] Bluetooth: hci0: command tx timeout [ 220.861147][ T1200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.884685][ T1200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.209465][T11553] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 221.240982][T11554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.026720][T11622] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 222.036153][T11622] sctp: [Deprecated]: syz-executor.0 (pid 11622) Use of int in max_burst socket option deprecated. [ 222.036153][T11622] Use struct sctp_assoc_value instead [ 222.464470][T11637] dccp_close: ABORT with 238 bytes unread [ 222.550753][T11650] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 222.572501][T11650] sctp: [Deprecated]: syz-executor.0 (pid 11650) Use of int in max_burst socket option deprecated. [ 222.572501][T11650] Use struct sctp_assoc_value instead [ 222.706420][T11656] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 222.738522][T11656] sctp: [Deprecated]: syz-executor.1 (pid 11656) Use of int in max_burst socket option deprecated. [ 222.738522][T11656] Use struct sctp_assoc_value instead [ 223.100873][ T64] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.255208][T11693] __nla_validate_parse: 6 callbacks suppressed [ 223.255228][T11693] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.370401][T11701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.960752][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 223.982741][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 223.994702][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.009135][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.017292][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 224.027424][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.227844][T11744] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.298367][T11750] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 224.311257][T11744] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.322526][T11750] sctp: [Deprecated]: syz-executor.0 (pid 11750) Use of int in max_burst socket option deprecated. [ 224.322526][T11750] Use struct sctp_assoc_value instead [ 224.389117][ T64] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.586072][ T64] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.737252][ T64] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.831386][T11777] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 224.856475][T11777] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.909259][T11728] chnl_net:caif_netlink_parms(): no params data found [ 224.912996][T11781] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 224.944454][T11781] sctp: [Deprecated]: syz-executor.4 (pid 11781) Use of int in max_burst socket option deprecated. [ 224.944454][T11781] Use struct sctp_assoc_value instead [ 225.166223][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.234707][ T64] bridge_slave_1: left allmulticast mode [ 225.251345][ T64] bridge_slave_1: left promiscuous mode [ 225.274278][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.297844][ T64] bridge_slave_0: left allmulticast mode [ 225.311852][ T64] bridge_slave_0: left promiscuous mode [ 225.320205][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.703336][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 225.718422][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 225.729103][ T64] bond0 (unregistering): Released all slaves [ 225.750395][T11792] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.840952][T11728] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.875179][T11728] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.882450][T11728] bridge_slave_0: entered allmulticast mode [ 225.926818][T11728] bridge_slave_0: entered promiscuous mode [ 225.954842][T11728] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.962138][T11728] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.983655][T11728] bridge_slave_1: entered allmulticast mode [ 226.006192][T11728] bridge_slave_1: entered promiscuous mode [ 226.065131][ T5120] Bluetooth: hci0: command tx timeout [ 226.197714][T11728] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.222179][T11826] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 226.243963][T11826] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.291479][T11728] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.522545][ T64] hsr_slave_0: left promiscuous mode [ 226.561711][ T64] hsr_slave_1: left promiscuous mode [ 226.575234][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.585279][T11851] vxcan1: tx address claim with dlc 1 [ 226.604108][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.619826][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 226.631018][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 226.670669][ T64] veth1_macvtap: left promiscuous mode [ 226.683575][ T64] veth0_macvtap: left promiscuous mode [ 226.708675][ T64] veth1_vlan: left promiscuous mode [ 226.719825][ T64] veth0_vlan: left promiscuous mode [ 227.313574][ T64] team0 (unregistering): Port device team_slave_1 removed [ 227.361407][ T64] team0 (unregistering): Port device team_slave_0 removed [ 227.730671][T11728] team0: Port device team_slave_0 added [ 227.744010][T11853] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.771780][T11849] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.800975][T11728] team0: Port device team_slave_1 added [ 227.937126][T11728] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.952553][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.996985][T11728] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.047409][T11728] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.064041][T11728] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.090865][T11728] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.147985][ T5120] Bluetooth: hci0: command tx timeout [ 228.234828][T11884] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 228.282279][T11890] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 228.304242][T11890] sctp: [Deprecated]: syz-executor.1 (pid 11890) Use of int in max_burst socket option deprecated. [ 228.304242][T11890] Use struct sctp_assoc_value instead [ 228.315014][T11728] hsr_slave_0: entered promiscuous mode [ 228.355472][T11728] hsr_slave_1: entered promiscuous mode [ 228.392691][T11728] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.412191][T11728] Cannot create hsr debugfs directory [ 228.570621][T11899] __nla_validate_parse: 1 callbacks suppressed [ 228.570641][T11899] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.683174][T11897] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.806922][T11911] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 228.833681][T11911] sctp: [Deprecated]: syz-executor.1 (pid 11911) Use of int in max_burst socket option deprecated. [ 228.833681][T11911] Use struct sctp_assoc_value instead [ 229.061738][T11926] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 229.094868][T11926] sctp: [Deprecated]: syz-executor.3 (pid 11926) Use of int in max_burst socket option deprecated. [ 229.094868][T11926] Use struct sctp_assoc_value instead [ 229.145966][T11930] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 229.155517][T11930] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 229.476542][T11728] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.511707][T11728] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.552378][T11728] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.583648][T11950] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.624179][T11946] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 229.640321][T11728] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.670059][T11946] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 229.819629][T11728] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.873061][T11728] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.887436][T11964] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.911241][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.918458][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.934964][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.942227][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 230.060452][T11969] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 230.133679][T11973] sctp: [Deprecated]: syz-executor.4 (pid 11973) Use of int in max_burst socket option deprecated. [ 230.133679][T11973] Use struct sctp_assoc_value instead [ 230.225002][ T5120] Bluetooth: hci0: command tx timeout [ 230.238556][T11979] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 230.248922][T11979] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.545302][ T2821] bridge_slave_1: left allmulticast mode [ 230.551233][ T2821] bridge_slave_1: left promiscuous mode [ 230.572527][ T2821] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.609761][ T2821] bridge_slave_0: left allmulticast mode [ 230.633266][ T2821] bridge_slave_0: left promiscuous mode [ 230.652560][ T2821] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.666748][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 230.693176][T12005] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 230.703131][T12005] netlink: 161700 bytes leftover after parsing attributes in process `syz-executor.1'. [ 231.282795][ T2821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 231.300323][ T2821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 231.311851][ T2821] bond0 (unregistering): Released all slaves [ 231.329541][T11996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.446655][T11728] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.737532][T12028] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 231.821294][T11728] veth0_vlan: entered promiscuous mode [ 231.883270][ T2821] hsr_slave_0: left promiscuous mode [ 231.901612][ T2821] hsr_slave_1: left promiscuous mode [ 231.925340][ T2821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.932804][ T2821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.982198][ T2821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 232.004291][ T2821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 232.047198][ T2821] veth0_macvtap: left promiscuous mode [ 232.052995][ T2821] veth1_vlan: left promiscuous mode [ 232.058758][ T2821] veth0_vlan: left promiscuous mode [ 232.305526][ T5121] Bluetooth: hci0: command tx timeout [ 232.464287][ T5121] Bluetooth: hci4: command 0x0c1a tx timeout [ 232.596677][ T2821] team0 (unregistering): Port device team_slave_1 removed [ 232.646414][ T2821] team0 (unregistering): Port device team_slave_0 removed [ 233.011575][T11728] veth1_vlan: entered promiscuous mode [ 233.167756][T11728] veth0_macvtap: entered promiscuous mode [ 233.192237][T11728] veth1_macvtap: entered promiscuous mode [ 233.294262][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.321787][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.331827][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.344870][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.354865][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.373377][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.373971][T12067] validate_nla: 1 callbacks suppressed [ 233.373985][T12067] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 233.383474][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.413173][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.423226][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 233.434241][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.452568][T12071] sctp: [Deprecated]: syz-executor.4 (pid 12071) Use of int in max_burst socket option deprecated. [ 233.452568][T12071] Use struct sctp_assoc_value instead [ 233.462802][T11728] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.536272][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.568794][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.602908][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.613764][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.624607][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.636307][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.648499][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.669590][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.680382][T11728] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.702384][T11728] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.724288][T11728] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.761655][T12079] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 233.804920][T12075] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 233.815073][T12079] __nla_validate_parse: 7 callbacks suppressed [ 233.815090][T12079] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 233.862937][T12081] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 233.910324][T11728] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.939572][T11728] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.967564][T11728] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.985020][T11728] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 234.188817][ T1200] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.219012][ T1200] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.267459][T12105] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 234.280305][ T1200] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.292569][T12105] sctp: [Deprecated]: syz-executor.4 (pid 12105) Use of int in max_burst socket option deprecated. [ 234.292569][T12105] Use struct sctp_assoc_value instead [ 234.310322][ T1200] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.444868][T12112] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.566398][T12121] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 234.587214][T12121] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.595630][T12122] dccp_close: ABORT with 80 bytes unread [ 234.770562][T12132] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.985833][ T2779] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.116650][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.129451][T12148] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.134159][ T2779] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.356445][ T2779] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.528454][ T2779] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.603613][T12165] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 235.634051][T12165] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 235.866909][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 235.924386][T12183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 235.944708][ T2779] bridge_slave_1: left allmulticast mode [ 235.945151][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.950363][ T2779] bridge_slave_1: left promiscuous mode [ 235.950567][ T2779] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.981407][ T5121] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.989822][ T5121] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 236.000975][ T5121] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 236.011843][ T5121] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 236.019405][ T5121] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 236.033275][ T2779] bridge_slave_0: left allmulticast mode [ 236.047889][ T2779] bridge_slave_0: left promiscuous mode [ 236.053745][ T2779] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.605801][ T2779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.622126][ T2779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.642834][ T2779] bond0 (unregistering): Released all slaves [ 236.907568][T12225] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 236.949242][T12225] sctp: [Deprecated]: syz-executor.1 (pid 12225) Use of int in max_burst socket option deprecated. [ 236.949242][T12225] Use struct sctp_assoc_value instead [ 237.242816][T12234] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 237.320796][ T2779] hsr_slave_0: left promiscuous mode [ 237.341570][ T2779] hsr_slave_1: left promiscuous mode [ 237.363263][ T2779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.376888][ T2779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.413009][ T2779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.448643][ T2779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.492642][ T2779] veth1_macvtap: left promiscuous mode [ 237.500113][ T2779] veth0_macvtap: left promiscuous mode [ 237.506084][ T2779] veth1_vlan: left promiscuous mode [ 237.511512][ T2779] veth0_vlan: left promiscuous mode [ 237.965916][ T2779] team0 (unregistering): Port device team_slave_1 removed [ 238.009720][ T2779] team0 (unregistering): Port device team_slave_0 removed [ 238.064807][ T5121] Bluetooth: hci0: command tx timeout [ 238.460983][T12185] chnl_net:caif_netlink_parms(): no params data found [ 238.649261][T12287] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 238.708660][T12291] sctp: [Deprecated]: syz-executor.3 (pid 12291) Use of int in max_burst socket option deprecated. [ 238.708660][T12291] Use struct sctp_assoc_value instead [ 238.822401][T12185] bridge0: port 1(bridge_slave_0) entered blocking state [ 238.822908][ T29] audit: type=1804 audit(1719203011.212:24): pid=12289 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir313461555/syzkaller.7vogMJ/448/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 238.850738][T12185] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.863748][T12185] bridge_slave_0: entered allmulticast mode [ 238.876050][T12185] bridge_slave_0: entered promiscuous mode [ 238.896478][T12185] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.903691][T12185] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.918953][T12185] bridge_slave_1: entered allmulticast mode [ 238.936048][T12185] bridge_slave_1: entered promiscuous mode [ 239.013569][T12298] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 239.034084][T12298] __nla_validate_parse: 4 callbacks suppressed [ 239.034103][T12298] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.115864][T12185] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.170421][T12185] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.204917][T12312] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 239.299399][T12185] team0: Port device team_slave_0 added [ 239.317343][T12185] team0: Port device team_slave_1 added [ 239.409216][T12185] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.420290][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.447260][T12185] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 239.460988][T12322] netlink: 'syz-executor.3': attribute type 32 has an invalid length. [ 239.473305][T12185] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 239.485380][T12322] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 239.493970][T12185] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.539738][T12185] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 239.564956][T12329] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.686574][T12185] hsr_slave_0: entered promiscuous mode [ 239.705369][T12185] hsr_slave_1: entered promiscuous mode [ 239.713381][T12185] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 239.722486][T12185] Cannot create hsr debugfs directory [ 239.732681][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.052267][T12352] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 240.061788][T12352] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.144176][ T5121] Bluetooth: hci0: command tx timeout [ 240.472955][T12371] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.525462][T12185] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 240.561092][T12185] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 240.595187][T12185] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 240.688348][T12185] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 240.742533][T12384] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.000693][T12185] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.062427][T12185] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.096324][ T29] audit: type=1804 audit(1719203013.492:25): pid=12395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2316400866/syzkaller.tLBcSN/367/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 241.166514][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.173665][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.189932][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.197244][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.285281][T12407] xt_NFQUEUE: number of total queues is 0 [ 241.299010][T12410] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 241.648429][T12185] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.736801][T12427] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 241.859264][T12185] veth0_vlan: entered promiscuous mode [ 241.911636][T12185] veth1_vlan: entered promiscuous mode [ 241.979225][T12446] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 242.014376][T12446] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.029917][T12185] veth0_macvtap: entered promiscuous mode [ 242.071242][T12185] veth1_macvtap: entered promiscuous mode [ 242.085352][T12451] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 242.153018][T12185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.184378][T12185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.200620][T12185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.224227][ T5121] Bluetooth: hci0: command tx timeout [ 242.229726][T12185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.244735][T12185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.256077][T12185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.266023][T12185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.278526][T12185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.293487][T12185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 242.304414][T12185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.319595][T12185] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 242.333373][T12451] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 242.364072][T12451] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 242.413494][T12185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.435464][T12185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.446011][T12185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.458636][T12185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.469418][T12185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.480236][T12185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.490729][T12185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.503369][T12185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.521480][T12185] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.539129][T12185] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.561846][T12185] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.642672][T12185] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.693743][T12185] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.727373][ T29] audit: type=1804 audit(1719203015.122:26): pid=12469 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2684101273/syzkaller.aM1yE9/247/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 242.753596][T12185] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.765394][T12185] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.974698][ T4309] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.998781][ T4309] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.077078][T12492] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 243.078186][ T2779] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 243.096927][ T2779] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 244.316527][T12547] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 244.348298][T12550] __nla_validate_parse: 12 callbacks suppressed [ 244.348317][T12550] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.382122][T12547] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.402553][T12547] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 244.411502][T12547] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.421963][T12547] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 244.435222][T12550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.463815][T12547] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.580834][T12561] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.680530][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.919750][T12580] xt_cgroup: invalid path, errno=-2 [ 244.933980][T12580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.954666][ T29] audit: type=1800 audit(1719203017.352:27): pid=12580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 245.269931][T12594] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 245.340993][T12599] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 245.350087][T12599] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.818774][ T2821] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 246.239037][T12647] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 246.255729][T12648] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 246.696808][ T5118] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 246.708878][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 246.727969][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 246.752897][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 246.764086][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 246.771484][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 247.147650][ T2821] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.205571][T12688] veth1_macvtap: left promiscuous mode [ 247.218737][T12688] macsec0: entered promiscuous mode [ 247.239177][T12692] veth1_macvtap: entered promiscuous mode [ 247.259039][T12692] macsec0: left promiscuous mode [ 247.376577][ T2821] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.515785][ T2821] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.652764][T12668] chnl_net:caif_netlink_parms(): no params data found [ 247.728359][T12718] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 247.824237][ T5120] Bluetooth: hci2: command 0x0406 tx timeout [ 247.987311][ T2821] bridge_slave_1: left allmulticast mode [ 248.004193][ T2821] bridge_slave_1: left promiscuous mode [ 248.009967][ T2821] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.027754][ T2821] bridge_slave_0: left allmulticast mode [ 248.033428][ T2821] bridge_slave_0: left promiscuous mode [ 248.048078][ T2821] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.651137][ T2821] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 248.666917][ T2821] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 248.697193][ T2821] bond0 (unregistering): Released all slaves [ 248.722541][T12668] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.734172][T12668] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.741359][T12668] bridge_slave_0: entered allmulticast mode [ 248.783355][T12668] bridge_slave_0: entered promiscuous mode [ 248.854926][T12668] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.865215][ T5121] Bluetooth: hci0: command tx timeout [ 248.925813][T12668] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.933158][T12668] bridge_slave_1: entered allmulticast mode [ 248.971981][T12668] bridge_slave_1: entered promiscuous mode [ 249.051749][T12760] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 249.160757][T12668] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.351389][T12668] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.502882][ T2821] hsr_slave_0: left promiscuous mode [ 249.509796][ T2821] hsr_slave_1: left promiscuous mode [ 249.516464][ T2821] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.530746][ T2821] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.538978][ T2821] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.547903][ T2821] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 249.568903][ T2821] veth1_macvtap: left promiscuous mode [ 249.574616][ T2821] veth0_macvtap: left promiscuous mode [ 249.580192][ T2821] veth1_vlan: left promiscuous mode [ 249.585865][ T2821] veth0_vlan: left promiscuous mode [ 250.021743][ T2821] team0 (unregistering): Port device team_slave_1 removed [ 250.063039][ T2821] team0 (unregistering): Port device team_slave_0 removed [ 250.427396][T12788] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 250.444837][T12788] __nla_validate_parse: 10 callbacks suppressed [ 250.444858][T12788] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 250.488807][T12668] team0: Port device team_slave_0 added [ 250.502067][T12668] team0: Port device team_slave_1 added [ 250.760865][T12807] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 250.806685][T12668] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.813656][T12668] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.860675][T12668] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.881378][T12814] openvswitch: netlink: Flow actions attr not present in new flow. [ 250.893385][T12668] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.929331][T12668] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.964508][ T5121] Bluetooth: hci0: command 0x041b tx timeout [ 250.972284][T12668] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 251.019839][T12816] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 251.028279][T12816] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.232570][T12833] geneve3: entered promiscuous mode [ 251.254033][T12833] geneve3: entered allmulticast mode [ 251.323660][T12668] hsr_slave_0: entered promiscuous mode [ 251.330531][T12668] hsr_slave_1: entered promiscuous mode [ 251.341393][T12668] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 251.350042][T12668] Cannot create hsr debugfs directory [ 251.391599][T12838] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 251.400452][T12838] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.752195][T12853] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 251.892397][T12869] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 251.913639][T12869] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.188649][T12668] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 252.230829][T12668] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 252.275961][T12668] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 252.307120][T12882] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 252.321194][T12882] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.372747][T12668] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 252.448002][T12893] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.548448][T12899] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.715253][T12668] 8021q: adding VLAN 0 to HW filter on device bond0 [ 252.747152][ T29] audit: type=1800 audit(1719203025.132:28): pid=12909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1936 res=0 errno=0 [ 252.770631][T12668] 8021q: adding VLAN 0 to HW filter on device team0 [ 252.843288][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.850496][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.875525][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.882670][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.917205][T12911] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 252.934155][T12911] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.024351][ T5121] Bluetooth: hci0: command 0x041b tx timeout [ 253.431293][T12668] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 253.621397][T12668] veth0_vlan: entered promiscuous mode [ 253.649135][T12668] veth1_vlan: entered promiscuous mode [ 253.695417][T12668] veth0_macvtap: entered promiscuous mode [ 253.706590][T12668] veth1_macvtap: entered promiscuous mode [ 253.749422][T12668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.769243][T12668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.786145][T12668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.803410][T12668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.816763][T12668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.854226][T12668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.867748][T12668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.890287][T12668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.916665][T12668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.928544][T12668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.947293][T12668] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.974716][T12668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.006022][T12668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.034963][T12668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.056808][T12668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.085423][T12668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.097363][T12668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.110039][T12668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.121526][T12668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.140274][T12668] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.165193][T12668] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.183255][T12668] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.211907][T12972] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 254.229914][T12668] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.250374][T12668] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.267252][T12668] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.283317][T12668] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.591647][ T2821] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.633614][ T2821] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.761001][ T2821] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 254.813087][ T2821] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.990215][ T1244] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.029950][T13038] __nla_validate_parse: 6 callbacks suppressed [ 256.029969][T13038] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.061693][T13040] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 256.086241][T13040] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.105239][T13040] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 256.124594][T13040] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 256.132816][T13040] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 256.196257][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.679146][T13064] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.278104][ T2779] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.148577][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 258.158513][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 258.169073][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 258.181217][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 258.190166][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 258.197821][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 258.592000][ T2779] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.715608][ T2779] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.788758][T13118] chnl_net:caif_netlink_parms(): no params data found [ 258.906190][ T2779] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.122449][T13118] bridge0: port 1(bridge_slave_0) entered blocking state [ 259.133051][T13118] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.140556][T13118] bridge_slave_0: entered allmulticast mode [ 259.149379][T13118] bridge_slave_0: entered promiscuous mode [ 259.191955][T13118] bridge0: port 2(bridge_slave_1) entered blocking state [ 259.211079][T13118] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.229934][T13118] bridge_slave_1: entered allmulticast mode [ 259.246769][T13118] bridge_slave_1: entered promiscuous mode [ 259.320834][T13182] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 259.355374][T13118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 259.366419][ T2779] bridge_slave_1: left allmulticast mode [ 259.372093][ T2779] bridge_slave_1: left promiscuous mode [ 259.375893][T13188] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.382470][ T2779] bridge0: port 2(bridge_slave_1) entered disabled state [ 259.410761][ T2779] bridge_slave_0: left allmulticast mode [ 259.424700][ T2779] bridge_slave_0: left promiscuous mode [ 259.430475][ T2779] bridge0: port 1(bridge_slave_0) entered disabled state [ 259.891815][ T2779] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 259.903090][ T2779] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 259.922416][ T2779] bond0 (unregistering): Released all slaves [ 259.936696][T13118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 260.048899][T13118] team0: Port device team_slave_0 added [ 260.109517][T13118] team0: Port device team_slave_1 added [ 260.224040][ T5120] Bluetooth: hci0: command tx timeout [ 260.270519][T13118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.280285][T13118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.306931][T13118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 261.101363][T13118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 261.200637][T13118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 261.448499][T13118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.057864][T13225] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.127744][ T2779] hsr_slave_0: left promiscuous mode [ 262.164269][ T2779] hsr_slave_1: left promiscuous mode [ 262.171064][ T2779] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.178711][ T2779] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.194875][ T2779] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 262.209218][ T2779] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 262.277256][ T2779] veth1_macvtap: left promiscuous mode [ 262.282833][ T2779] veth0_macvtap: left promiscuous mode [ 262.304134][ T5120] Bluetooth: hci0: command tx timeout [ 262.323823][ T2779] veth1_vlan: left promiscuous mode [ 262.329338][ T2779] veth0_vlan: left promiscuous mode [ 263.161086][ T2779] team0 (unregistering): Port device team_slave_1 removed [ 263.197626][ T2779] team0 (unregistering): Port device team_slave_0 removed [ 263.622374][T13118] hsr_slave_0: entered promiscuous mode [ 263.628808][T13118] hsr_slave_1: entered promiscuous mode [ 263.635101][T13118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 263.642746][T13118] Cannot create hsr debugfs directory [ 263.696527][T13242] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 263.822345][T13268] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.878672][T13266] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 263.979520][T13274] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.074618][T13276] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 264.091620][T13276] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 264.327268][T13292] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.384840][ T5120] Bluetooth: hci0: command tx timeout [ 264.673061][T13118] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 264.710755][T13118] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 264.743518][T13118] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 264.777143][T13118] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 264.999060][T13118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.042889][T13118] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.086958][T13324] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 265.108071][T13324] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.176870][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.184050][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.237968][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.245167][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.711165][T13361] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.728237][T13118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 265.871053][T13118] veth0_vlan: entered promiscuous mode [ 265.933151][T13118] veth1_vlan: entered promiscuous mode [ 265.961720][T13373] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 265.991879][T13373] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.076256][T13118] veth0_macvtap: entered promiscuous mode [ 266.095103][T13118] veth1_macvtap: entered promiscuous mode [ 266.132210][T13118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.147799][T13118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.162392][T13118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.173135][T13118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.183052][T13118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.193694][T13118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.203547][T13118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.214534][T13118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.229485][T13118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.240591][T13118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.252402][T13118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.281509][T13118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.305883][T13118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.323939][T13118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.341940][T13118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.358791][T13118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.369706][T13118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.380253][T13118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.391407][T13118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.401879][T13118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.412572][T13118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.425384][T13118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.439700][T13118] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.464278][ T5121] Bluetooth: hci0: command tx timeout [ 266.481689][T13118] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.500330][T13118] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.519335][T13118] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.687067][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.699472][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.709467][T13401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 266.732955][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 266.742230][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 266.819887][ T35] ------------[ cut here ]------------ [ 266.826048][ T35] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0x0 with flags 0x0 [ 266.836458][ T35] WARNING: CPU: 0 PID: 35 at net/mac80211/rate.c:385 __rate_control_send_low+0x659/0x890 [ 266.846345][ T35] Modules linked in: [ 266.850278][ T35] CPU: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc4-syzkaller-00176-g02ea312055da #0 [ 266.860411][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 266.870535][ T35] Workqueue: events_unbound cfg80211_wiphy_work [ 266.876866][ T35] RIP: 0010:__rate_control_send_low+0x659/0x890 [ 266.883146][ T35] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 20 98 e1 8c 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 a8 ee 60 f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db [ 266.902831][ T35] RSP: 0018:ffffc90000ab74c0 EFLAGS: 00010246 [ 266.909306][ T35] RAX: 4e7a148fd0ee8500 RBX: 000000000000000c RCX: ffff88801b2f8000 2024/06/24 04:23:59 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 266.917344][ T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 266.925383][ T35] RBP: ffff8880562bb528 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 266.933406][ T35] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 0000000000000800 [ 266.941451][ T35] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 266.949493][ T35] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 266.958494][ T35] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 266.965141][ T35] CR2: 00007f3626fb598c CR3: 0000000060614000 CR4: 00000000003506f0 [ 266.973153][ T35] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 266.981204][ T35] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 266.989249][ T35] Call Trace: [ 266.992550][ T35] [ 266.995529][ T35] ? __warn+0x163/0x4e0 [ 266.999700][ T35] ? __rate_control_send_low+0x659/0x890 [ 267.005398][ T35] ? report_bug+0x2b3/0x500 [ 267.010005][ T35] ? __rate_control_send_low+0x659/0x890 [ 267.015706][ T35] ? handle_bug+0x3e/0x70 [ 267.020060][ T35] ? exc_invalid_op+0x1a/0x50 [ 267.024806][ T35] ? asm_exc_invalid_op+0x1a/0x20 [ 267.029880][ T35] ? __warn_printk+0x292/0x360 [ 267.034710][ T35] ? __rate_control_send_low+0x659/0x890 [ 267.040380][ T35] rate_control_send_low+0x1a8/0x770 [ 267.045724][ T35] ? __lock_acquire+0x1346/0x1fd0 [ 267.050775][ T35] rate_control_get_rate+0x20e/0x5e0 [ 267.056128][ T35] ieee80211_tx_h_rate_ctrl+0xc88/0x1a10 [ 267.061784][ T35] ? __pfx_validate_chain+0x10/0x10 [ 267.067062][ T35] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 267.073167][ T35] invoke_tx_handlers_late+0xb3/0x18e0 [ 267.078701][ T35] ? invoke_tx_handlers_early+0xa0d/0x1f40 [ 267.084577][ T35] ieee80211_tx+0x2e3/0x470 [ 267.089193][ T35] ? __pfx_ieee80211_tx+0x10/0x10 [ 267.094288][ T35] ? ieee80211_xmit+0x30f/0x3f0 [ 267.099161][ T35] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 267.105213][ T35] __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 267.111050][ T35] ieee80211_handle_roc_started+0x267/0x440 [ 267.116997][ T35] ? ieee80211_handle_roc_started+0x14f/0x440 [ 267.123095][ T35] _ieee80211_start_next_roc+0x7a1/0xb00 [ 267.128801][ T35] cfg80211_wiphy_work+0x221/0x260 [ 267.133962][ T35] ? process_scheduled_works+0x945/0x1830 [ 267.139698][ T35] process_scheduled_works+0xa2c/0x1830 [ 267.145334][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.151340][ T35] ? assign_work+0x364/0x3d0 [ 267.156003][ T35] worker_thread+0x86d/0xd70 [ 267.160634][ T35] ? __kthread_parkme+0x169/0x1d0 [ 267.165718][ T35] ? __pfx_worker_thread+0x10/0x10 [ 267.170868][ T35] kthread+0x2f0/0x390 [ 267.174994][ T35] ? __pfx_worker_thread+0x10/0x10 [ 267.180118][ T35] ? __pfx_kthread+0x10/0x10 [ 267.184771][ T35] ret_from_fork+0x4b/0x80 [ 267.189204][ T35] ? __pfx_kthread+0x10/0x10 [ 267.193933][ T35] ret_from_fork_asm+0x1a/0x30 [ 267.198740][ T35] [ 267.201769][ T35] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 267.209053][ T35] CPU: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc4-syzkaller-00176-g02ea312055da #0 [ 267.219128][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 267.229196][ T35] Workqueue: events_unbound cfg80211_wiphy_work [ 267.235463][ T35] Call Trace: [ 267.238752][ T35] [ 267.241689][ T35] dump_stack_lvl+0x241/0x360 [ 267.246388][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 267.251605][ T35] ? __pfx__printk+0x10/0x10 [ 267.256215][ T35] ? vscnprintf+0x5d/0x90 [ 267.260557][ T35] panic+0x349/0x860 [ 267.264467][ T35] ? __warn+0x172/0x4e0 [ 267.268632][ T35] ? __pfx_panic+0x10/0x10 [ 267.273071][ T35] ? ret_from_fork_asm+0x1a/0x30 [ 267.278024][ T35] __warn+0x346/0x4e0 [ 267.282013][ T35] ? __rate_control_send_low+0x659/0x890 [ 267.287663][ T35] report_bug+0x2b3/0x500 [ 267.292009][ T35] ? __rate_control_send_low+0x659/0x890 [ 267.297753][ T35] handle_bug+0x3e/0x70 [ 267.301927][ T35] exc_invalid_op+0x1a/0x50 [ 267.306449][ T35] asm_exc_invalid_op+0x1a/0x20 [ 267.311322][ T35] RIP: 0010:__rate_control_send_low+0x659/0x890 [ 267.317579][ T35] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 20 98 e1 8c 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 a8 ee 60 f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db [ 267.337197][ T35] RSP: 0018:ffffc90000ab74c0 EFLAGS: 00010246 [ 267.343288][ T35] RAX: 4e7a148fd0ee8500 RBX: 000000000000000c RCX: ffff88801b2f8000 [ 267.351272][ T35] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 267.359257][ T35] RBP: ffff8880562bb528 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 267.367240][ T35] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 0000000000000800 [ 267.375218][ T35] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 267.383226][ T35] ? __warn_printk+0x292/0x360 [ 267.388038][ T35] rate_control_send_low+0x1a8/0x770 [ 267.393336][ T35] ? __lock_acquire+0x1346/0x1fd0 [ 267.398387][ T35] rate_control_get_rate+0x20e/0x5e0 [ 267.403705][ T35] ieee80211_tx_h_rate_ctrl+0xc88/0x1a10 [ 267.409891][ T35] ? __pfx_validate_chain+0x10/0x10 [ 267.415136][ T35] ? __pfx_ieee80211_tx_h_rate_ctrl+0x10/0x10 [ 267.421226][ T35] invoke_tx_handlers_late+0xb3/0x18e0 [ 267.426682][ T35] ? invoke_tx_handlers_early+0xa0d/0x1f40 [ 267.432480][ T35] ieee80211_tx+0x2e3/0x470 [ 267.436982][ T35] ? __pfx_ieee80211_tx+0x10/0x10 [ 267.442027][ T35] ? ieee80211_xmit+0x30f/0x3f0 [ 267.446908][ T35] ? __ieee80211_tx_skb_tid_band+0x49e/0x610 [ 267.452913][ T35] __ieee80211_tx_skb_tid_band+0x4e2/0x610 [ 267.458729][ T35] ieee80211_handle_roc_started+0x267/0x440 [ 267.464612][ T35] ? ieee80211_handle_roc_started+0x14f/0x440 [ 267.470669][ T35] _ieee80211_start_next_roc+0x7a1/0xb00 [ 267.476298][ T35] cfg80211_wiphy_work+0x221/0x260 [ 267.481418][ T35] ? process_scheduled_works+0x945/0x1830 [ 267.487121][ T35] process_scheduled_works+0xa2c/0x1830 [ 267.492677][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 267.498653][ T35] ? assign_work+0x364/0x3d0 [ 267.503234][ T35] worker_thread+0x86d/0xd70 [ 267.507917][ T35] ? __kthread_parkme+0x169/0x1d0 [ 267.512946][ T35] ? __pfx_worker_thread+0x10/0x10 [ 267.518046][ T35] kthread+0x2f0/0x390 [ 267.522101][ T35] ? __pfx_worker_thread+0x10/0x10 [ 267.527540][ T35] ? __pfx_kthread+0x10/0x10 [ 267.532116][ T35] ret_from_fork+0x4b/0x80 [ 267.536520][ T35] ? __pfx_kthread+0x10/0x10 [ 267.541111][ T35] ret_from_fork_asm+0x1a/0x30 [ 267.545891][ T35] [ 267.549142][ T35] Kernel Offset: disabled [ 267.553516][ T35] Rebooting in 86400 seconds..