last executing test programs: 44.988463405s ago: executing program 3: sendmsg$NL80211_CMD_DISASSOCIATE(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0xb8, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x80, 0x2a, [@erp={0x2a, 0x1}, @mesh_chsw={0x76, 0x6}, @fast_bss_trans={0x37, 0x6f, {0x0, 0x1, "815c298fc2609e56a4038cddb086f05e", "be760eafcc8cc32146e1768e01a3090f35bb02dea2aac14661935ed71fd9321a", "b01fef78f6911d801c98e6ec7e94b31be91e70f6a9809bb78af8ee637f1f8127", [{0x0, 0x1b, "64f410c74f0a894970b1e53c229aa3368d34f7145a8be1e6a79046"}]}}]}]}, 0xb8}}, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000580)=ANY=[@ANYBLOB="034886dd040027000300300000006000000001002f0081e949b93897bc3b0000000000007d01ff0200"/51], 0xfdef) 44.715196422s ago: executing program 3: sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="5000a747", @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c000280380001"], 0x58}, 0x1, 0xf000}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) write$binfmt_script(r1, &(0x7f0000000a40)={'#! ', './file0'}, 0xb) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)={0x328, 0x13, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_OBJ_USERDATA={0xd, 0x8, "a68ec3ccc83264fd80"}, @NFTA_OBJ_USERDATA={0xfd, 0x8, "4300a68269e5a1d49e2bc17410c274786089282461fbda59df15cb9a859a14ca8a388763ca9a4446433a714f220bf4c2dd97ea1fc409d5b15073abe1d938632bdad3bfd5508c2bda88b61412f52322564c16f849379be42506ba0fa3ee086a4673688a6b8bad34653457510f404b69785d89408ebda7b57663d16e6efefcda5645431b5f8c9a2b19bbef86d1e7cd022cf81103a7da01e22e9de9835224e61f581b619430585ceff2f4f2c7e97c7b9921278a368f82fc6c9393e830197dde5ae91f7e537558be970de3b6dccf659fff4c25a4c1d0f4187d558162cd2a73e0ef5ca8a776acab35880b132fc4a6d196fac7c67ca32e9ac738c27c"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x5}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_OBJ_USERDATA={0xfd, 0x8, "05822c4ca6b3a9b82ddd7ad5ec52bf94bdee50b363eb2aa60a45a1c64dcbecdf96fe2196f9d5fe8720c6a0a66c3bd69c52f84ca59e23f83c59dae7249ceb3efd5f5be983aed1f835ee9617fd6c733a55ebc1fa735ebb9921cb247b7acf6de95de7171616808510b2313b262858ec8aaabc63eec403dfe440e10a8c30549f906275efd37f9ace0277e5714dcc5c996cb428fa53a65fccfb54d3b702030b83ea6e005b06f4733cfa556fc00d70dbab6352fd6d8ccec22d826372c7f61519aa3a74f0372e5c3d2fe79e637e380af3126929edd83d4ee888206e873c6cd557d2825d11f8669a74c485dae3853c783fdf09c60704e178200b0a3ff9"}, @NFTA_OBJ_USERDATA={0xc8, 0x8, "3b539b1e07eae50711364ef955f980b36b23a215a38df2f34f4f29e7313e847369811251ce27da2e5635b8e5e0363fa42797a5af59c59d30eb1d4704c6718640529e3c4c4c208cdddd2d7913e611fc0172d8bc72acd232f41048762dc907f9d569b54b32fbc18534651267b6ec1f8ff552a9f5ad01a0491988e28b9ad339c6c20ee73dc183d82f706bbb9343446795b484cc3bea77e4069d5b0b7808dbff88741f6e6dbb31cb57a88939eb5a541ac435d779b98f3402faa10be623dfde4aa9602d53b2d0"}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, 0x328}, 0x1, 0x0, 0x0, 0x800}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000000d1400000000000020000000080003000000341200"/34], 0x20}}, 0x0) 44.510332851s ago: executing program 3: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x1, @local}}, 0x80, 0x0, 0x0, &(0x7f0000001a00)=ANY=[@ANYBLOB], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000a80)={0x0, 0x0, 0x0}, 0x0) 44.432017496s ago: executing program 3: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000400)={@in={{0x2, 0x0, @empty}}, 0xaa, 0x0, 0x43, 0x0, "8b62d38162d11d34e29ca77dcbf24898d6a94f553da1788337c9c9b9ae7339d4fa08282a85f3f595ecc7ea4970f940447ed103956cd02d6f7c2b69aac55e1b172f0c0dcc8ca7134702e02bd673843fac"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000001c0)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x3b, 0x0, "5819f9e6b047ec2003b8892ff3889dcf131d5f1d34e7b933aa1500cac85514b454ad6485d8ba26286d9bb88fa7887d95da6e6cc5f6e88372034cda51a10260c291dee9ed3a8b490de400"}, 0xd8) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000240)='bridge0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000040)="8417de2a29e62d44fc1400e077090f11cea46f1b755244ce", 0x18}], 0x1, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000000000002900000036"], 0x18}}], 0x1, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup, r2, 0x0, 0x0, 0x0, @prog_fd}, 0x20) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket(0xb, 0x6, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r3) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)='/proc/n\x00\x00/\x00\x00t4\x10c+\x0fG\xf9aK\fX\a0$\x00\x00\x82q\xee'}, 0x30) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r4, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0x80, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x54, 0x3, 0x0, 0x1, [{0x50, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4c, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x45, 0x1, "3376f30cb055e146113bdcf69072633793afbed775cc92af2c4f558b370b1deb84fe0831ca654fb3c005382852722e41546b54b78eeff4d8c15d4949b0d3bec031"}]}]}]}]}], {0x14, 0x10}}, 0x104}}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000180)="394800001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r6, &(0x7f0000000240)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) 44.128564511s ago: executing program 3: socket$nl_audit(0x10, 0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000700)={0x0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r8, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) r9 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r10, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}}}, &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="000000000000e0ff000005000000"], 0x14}}, 0x0) socket$inet6(0xa, 0x2, 0x0) setsockopt$MRT6_FLUSH(0xffffffffffffffff, 0x29, 0xd4, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r12, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=r13, @ANYBLOB="8b0404007d14aec356f75e6c08000100736974002400028006000f000101000000000000000b0c44060008001200000005000a0001000000e8eb7ff77f575466ae0a9e2d8c1c9727b8e9f7c1132daa525f18a90a802a38e0de527533a1211f0de5e04e06428be9e42f6c8c03a8302b046e3fe1393bfb86164879ce01d664f656a3afe66ead1e4200"/148], 0x50}}, 0x20000810) 43.929237646s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x80a, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004f000000850000007d00000095000000000000001d7c19e37320e14a137bd16fbcd23d2ea5e02125bc0f731921fe1608cda1efb6bae8a54f094ddc3faece258ffae99ee3de6bff8ca9d25881ea4687175b94c29e5b0db979505d7972a562ead7fa321fc22d9f90214e9b6b3443bdd5903ea333c9e4886e93ad88d06518eea6f4d3ef6286eba9deb3b080fa1ec25582dd312267fba440779f4a6a7f5ffd9d80941ac4e49d2e82a7d06be4424af732b5b26e6d0929a28170db7affa76c4f3d864a818e83d4a28cefdcddd43378eb08fc3348"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000400)}], 0x1}, 0x0) close(r4) socket$netlink(0x10, 0x3, 0x8) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0x9, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000140)='P', &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r5, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_vlan={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x9}, 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x4000000) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r7}, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'ip6gre0\x00', &(0x7f0000000100)=@ethtool_sset_info={0x25}}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000200)="7611e6a049eb8bf216288961b73bda7934cf87f6504e47c3bb1bcb65e3f02de78df39b120067acdf78985147e6d5f7460ee3232e7dbc491b157316d3b988a4b5494fbaa0394a84e1c86d0adafb6e19056b6d87c7ebe9b096e2a8981551391e0c74a8465666984c7e1bfe2ab634820ee6e508e3d7ab72a98d8645848738c7cf8a68ab592c1be2a39a1c1db9a9f7910dd6c53e5aa046c2fa88ea1044905d", &(0x7f00000002c0)=@udp6=r1}, 0x20) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32, @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x14040000}, 0x0) 36.320417706s ago: executing program 4: epoll_create1(0x0) (async) socketpair$unix(0x1, 0x0, 0x0, 0x0) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (async) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x70, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x20001300, 0x20001330], 0x0, 0x0, &(0x7f0000001300)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000000c8000000000000000000000000000000000000000000000000000004000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff00000000"]}, 0x108) (async) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000002140)=[{0x28, 0x0, 0x0, 0xfff7f010}, {0x80000006}]}, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000280), 0xffffffffffffffff) r3 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r3, 0x29, 0x2a, &(0x7f0000000080)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) (async) setsockopt$inet6_group_source_req(r3, 0x29, 0x2b, &(0x7f0000000480)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='devices.list\x00', 0x26e1, 0x0) close(r5) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f00000002c0)='percpu_alloc_percpu\x00'}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xe80, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32=r4], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x88, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r6}, 0xc) 36.113486712s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000005000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c0000000101010100000000000001000a0000003c0001800c00028005000100000000002c000180140003002001000000000000200000000000000114000400ff0200000000000000000000000000010c00198008000100eb"], 0x5c}}, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000008004500001400000000000c907801000000"], 0x0) accept$alg(r1, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0xfff, 0x9}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r7, 0x0, 0x7, 0x0) close(r6) ioctl$int_in(0xffffffffffffffff, 0x0, 0x0) writev(r5, &(0x7f0000000100)=[{&(0x7f0000000140)='Y', 0x1}, {0x0}], 0x2) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000880)=@mangle={'mangle\x00', 0x44, 0x6, 0x438, 0x1d0, 0x300, 0x1d0, 0x268, 0x268, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, 0x0, {[{{@ip={@multicast1, @private, 0x0, 0x0, 'bond_slave_0\x00', 'veth0_to_bond\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @TTL={0x28, 'TTL\x00', 0x0, {0x2, 0x9}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'pimreg1\x00', 'rose0\x00'}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@rand_addr, @multicast1, 0x0, 0x0, 'pim6reg0\x00', 'dummy0\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@ip={@remote, @local, 0x0, 0x0, 'veth1_to_hsr\x00', 'veth0_to_hsr\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @private}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, &(0x7f0000000240)={0x0, 0xf2, "6e49990599aedeab59b0a37eac1191a3d115dcf5eef8f66e8c18433df42ef2edd1413b96d8eacffa8146bd0ec5a8c6a214b4bc6f92622129292f823df395e173571f70285ca0c65cdaf72224321ccf569bd2190f14bb508b04e24aabaaff5327562c52eed12f1652f44cee357f1ff58ff5a5dedef49f4274ee3f6588a23e46f7fe8b0b8c2b3c563fb2e29253902e9a052b06f6a9c74613a92f11bec5e35d7e85cbd8e70d66de98298f178171259ecf4f3742d7936d546deba4d91a7945b059b13dd1321b5e6a62986f40c1f1124b4a4846597282d23baae326c1810b5fe94382ffe137f3357bac3f00655d7c9d37c267aeb7"}, &(0x7f0000000340)=0xfa) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r9, 0x84, 0xa, &(0x7f0000000380)={0x8, 0x80, 0x0, 0x0, 0x2, 0x6, 0x0, 0x7, r10}, &(0x7f0000000400)=0x20) syz_emit_ethernet(0x46, &(0x7f00000004c0)=ANY=[@ANYBLOB="fd400000080024475466a8f086dd60902d0300100000fe880000000000000000000000000001fe8000000000000000000000000000aa0001000000000000090212da0100000063c66b4b59f077e001a2934a4754d811948e8c91c156690e3ad41249afae23d896000000009561d672cd3093842afb6f237894f6f83bb280cfcd37c435ad4073af5687ae2d04965e158d420e6f71a0704d88b72ba914"], 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, &(0x7f0000000240)=0x3, 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) 35.62334966s ago: executing program 4: r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x88, 0x2e, &(0x7f0000000200)={0xa4, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) 35.567970438s ago: executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r0, 0x400) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_proto_private(r0, 0x89e6, &(0x7f0000000400)="476833e7c1b55b4333733d44abfaf8ac450f40d76400ab860e71c3a848e88b900b671ed990e1d31510d8764a2b8dfc19c9ae39283f7ab986136e63487b4a4644a0c866ad3c01c7adbf046c2a532a16c2817f99f0f83d88c4f760bd75402e3fc3db08f350d741f9928a4b0635c08591114851ccad9c36cfecc99de4ea5ff9e27990599d08c21e7c61c334b15c7df9848a61bf4610bddf9aa9a20a35318655ac4c54b76ca7fc8cbd8e95f7108c334bc8b51c225154581a49ba4b5ef0bf418f144f475230ed64e1d1d6a96ee6c1872961e74069bc") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket(0x10, 0x3, 0x0) unshare(0x400) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) tee(r4, r4, 0x2, 0x0) bind$netlink(r3, &(0x7f0000177ff4)={0x10, 0x0, 0x25dfdbfc}, 0xc) write(r3, &(0x7f0000000140)="2600000022004701050000070000000000000020002b1f000a4a51f1ee839cd53400b017ca5b", 0x26) connect$netlink(r3, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x1}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000b4bffc), 0x4) write(r3, &(0x7f0000000000)='\"', 0x1) recvmmsg(r3, &(0x7f0000000780), 0x3ffffffffffff81, 0x2, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x6, 0x2, 0x0, 0x0, 0x0, {[@sack_perm={0x4, 0x2}]}}}}}}}, 0x0) 33.980214544s ago: executing program 1: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) (async) r1 = socket(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x4) (rerun: 64) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r2) (async, rerun: 64) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) (async, rerun: 64) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b70200000e000000bfa30000000000000703000000feffff"], 0x0}, 0x80) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r5) sendmsg$IEEE802154_SCAN_REQ(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r6, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_SCAN_TYPE={0x5}]}, 0x1c}}, 0x4004000) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000c80)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f00000003c0)=[0x0, 0x0], 0x0, 0x8, &(0x7f0000000400)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x0, 0x0, 0x0, 0x0, 0xf, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) (rerun: 32) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x6, 0x3, &(0x7f0000000700)=@raw=[@map_idx={0x18, 0x6, 0x5, 0x0, 0x5}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], &(0x7f0000000740)='syzkaller\x00', 0x9, 0xaf, &(0x7f0000000780)=""/175, 0x41100, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x7, 0x3}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0xd, 0x56800000, 0x4}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000008c0)=[0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1]}, 0x90) (async, rerun: 32) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) (rerun: 32) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r9, 0x58}, 0x10) (async) close(r9) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000027c0)=@base={0x4, 0x4, 0x4, 0x10005, 0x800}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r10, 0x58}, 0x10) (async) close(r10) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000009c0)=@bpf_tracing={0x1a, 0xa, &(0x7f0000000cc0)=ANY=[@ANYRESHEX=r2], &(0x7f0000000040)='GPL\x00', 0x6, 0x5c, &(0x7f0000000280)=""/92, 0x0, 0xd, '\x00', r7, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x6, 0xe, 0x1, 0x5}, 0x10, 0x1ab4d, r8, 0x0, &(0x7f0000000980)=[r9, 0x1, 0x1, r2, r10]}, 0x90) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x5, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESHEX=r7, @ANYRES16=r3, @ANYRES16=r2, @ANYRES16=r3, @ANYRES64=r4], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', r7, 0x32}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r11}, 0x10) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) (async, rerun: 32) r13 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r12, &(0x7f0000000000)=',', 0x1, 0x0, &(0x7f0000000140)={0x11, 0x0, r14, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async, rerun: 64) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (rerun: 64) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipmr_getroute={0x1c, 0x1a, 0x1, 0x0, 0x0, {0x80, 0x80, 0x20}}, 0x1c}}, 0x0) setsockopt$inet6_group_source_req(r13, 0x29, 0x2f, &(0x7f0000000b40)={0x5, {{0xa, 0x4e20, 0x1, @private0, 0x2}}, {{0xa, 0x4e21, 0x9, @mcast1, 0xf4fc}}}, 0x108) (async, rerun: 64) r15 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$WG_CMD_SET_DEVICE(r15, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000800)={0x1c, r0, 0x405, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8}]}, 0x1c}}, 0x0) 33.861881462s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'macvlan1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000a00)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r1], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4}, 0x48) syz_emit_ethernet(0x52, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) unshare(0x22020600) bpf$MAP_CREATE(0x0, &(0x7f000000c9c0)=@base={0x9, 0x0, 0x0, 0x0, 0x6}, 0x48) accept4$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000300)=0x1c, 0x80800) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes)\x00'}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000640)='cpuset.effective_cpus\x00', 0x0, 0x0) connect$rose(r4, &(0x7f0000000780)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}}, 0x1c) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000340)="71e67a15cdf0311cfcf33a52a7d86bd1", 0x20) r5 = accept4$alg(r3, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) socket$kcm(0x10, 0x0, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$L2TP_CMD_TUNNEL_CREATE(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_type(r7, &(0x7f00000001c0), 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) sendfile(r9, r8, 0x0, 0x8fa) recvmmsg(r5, &(0x7f00000008c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000080)=""/5, 0x5}], 0x1}}], 0x1, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000000380)=[{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000002480)="01", 0x1}], 0x1}], 0x1, 0x0) 33.593022304s ago: executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x81}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x4, 0x650, [0x20000cc0, 0x0, 0x0, 0x20000f94, 0x200011da], 0x0, &(0x7f0000000080), &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"]}, 0x6c8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000015100008c3ff8b7bba0000000000000000", @ANYRES32=0x0, @ANYBLOB="000004000000020008002e0004000000"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) unshare(0x20040600) pipe(&(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161) sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e020000100000000ac1414aa00000000ac1414"], 0x30}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x3c}}, 0x0) 33.403269803s ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00042dbd00000000000e00000000"], 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000100)="580000001500add427323b472545b45602117fffffff81000e224e237f000001925ac96ccb20d0607da7c75e38a80020007b00090080007f000001e809000000ff0000f03ac710a6960000ffffffffffffffffffe7ee0000", 0x58}], 0x1) 33.0721853s ago: executing program 2: r0 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r0, 0x84, 0x72, &(0x7f0000000000), 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r2}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0xe}, [@call={0x85, 0x0, 0x0, 0x41}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x0, 0x300) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r4, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=0x0, @ANYBLOB="05"], 0x9) sendto$inet6(r4, &(0x7f0000000100)="ea", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r4, 0x84, 0x18, &(0x7f0000000340), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xa, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@p, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x2}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x5e}}]}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000016"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r5) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0xfff, 0x7, 0x1000}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r6}, 0x10) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000080), 0x4) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 33.002324814s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, 0x0, 0x0}, 0x90) r0 = socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r0, &(0x7f0000000b40)=[{{0x0, 0xa000000, 0x0}}], 0x1, 0x0, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) r4 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000000500)=[{{&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB='p'], 0x70}}], 0x1, 0x2000c044) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r1, 0x0, r3, 0x0, 0x7151, 0x0) 32.951478226s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00'}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00), 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=r3], 0xf) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r6 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) shutdown(r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x90) bind$unix(0xffffffffffffffff, &(0x7f0000000080)=@file={0x0, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000080)="18", 0x10, 0x0, &(0x7f00000000c0)={0x11, 0xc, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000140)={0x59, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xd}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x5c}}, 0x0) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f00000001c0)={0x1, 0x8, 0x3, 0x2, @vifc_lcl_addr=@rand_addr=0x64010100, @multicast1}, 0x10) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00'}) 32.37186042s ago: executing program 1: socket$vsock_stream(0x28, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x13, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32], 0xc) 32.246558993s ago: executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ID={0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}, @NHA_FDB={0x4}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r2) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d8000000100081044e81f782db44b904021d080005000000e8fe55a1190015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee18000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x70, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x70}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r2) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="110100000000000000001d00000008000300", @ANYRES32=r7, @ANYBLOB="24002f800c00038008000100fdffffff080001"], 0x40}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x2c, r9, 0x6a5672979d8c2d89, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}}, 0x0) r10 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r10, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x3, [@ptr={0xb, 0x0, 0x0, 0x2, 0x4}, @datasec={0x5, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x80, 0x1}], "b516"}, @volatile={0x1, 0x0, 0x0, 0x9, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x7fff}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x9}}]}, {0x0, [0x2e]}}, &(0x7f0000000640)=""/212, 0x97, 0xd4, 0x1, 0x70}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = socket(0x0, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r11, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 32.096338223s ago: executing program 2: r0 = socket$kcm(0x2, 0x3, 0x84) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) shutdown(r1, 0x0) recvmmsg(r1, &(0x7f0000001a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001980)=""/213, 0xd5}}], 0x1, 0x0, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$packet_int(r2, 0x107, 0x12, &(0x7f0000000380), 0x4) write(0xffffffffffffffff, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000200), 0xfffffd9d) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x0, 0x0, 0xb40, 0x5, 0xc05, r4, 0x7fff, '\x00', r6, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0x14, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000646c6c2500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r7, @ANYRESOCT], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000001800010000000000000000001d01000008000a00", @ANYRES32, @ANYBLOB='\bv\t\x00', @ANYRES8=r7], 0x24}, 0x1, 0x0, 0x0, 0x4000804}, 0xa801) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) sendmsg$inet(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000007000000890704e068000000110000000000000000dbc790ad000000fc000000000000001400000000000000000000000200000004000000000000001c000000000000000000000008"], 0x68}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r9, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r9, 0x1) setsockopt(r9, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r9, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) 32.04453059s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000054c0)={0x14, 0x0, 0x301, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) write$cgroup_pressure(r1, &(0x7f0000000040)={'full', 0x20, 0x0, 0x20, 0x40}, 0x2f) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x85, &(0x7f0000000ac0), 0x90) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSFLAGS1(0xffffffffffffffff, 0x40047459, &(0x7f00000000c0)=0x41) pwritev(r2, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd020000", 0x5}], 0x1, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r3, 0x0, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x43, 0x3}, 0x10) r4 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f0000000040)={0x43}, 0x10) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, &(0x7f00000001c0)={0x0, 0xc, 0x0, 0x3}, 0x10) r6 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x43, 0x2}}}, 0x10) r7 = socket$inet(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x4000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x2, 0x3, 0x290, 0xb, 0x0, 0xf0, 0xf8, 0xf0, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x1f8, 0x3, 0x0, {[{{@ip={@multicast1, @multicast1, 0x0, 0x0, 'ip6gretap0\x00', 'syzkaller1\x00', {}, {}, 0x11}, 0xb000000, 0xd8, 0xf8, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x8}}, @common=@unspec=@quota={{0x38}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0x100, 0x0, {}, [@common=@ttl={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2f0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000040)={0x43, 0x4}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x43) 31.037474697s ago: executing program 4: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000000100)={'syzkaller0\x00'}) ioctl$SIOCSIFHWADDR(r1, 0x4020940d, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) 30.603772567s ago: executing program 2: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x4, 0x2}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000280)={'#! ', '', [{0x20, '\xa4\t\xef\xa6'}, {0x20, '\\$'}, {0x20, '}\'-\xdb('}, {0x20, 'GPL\x00'}, {0x20, 'memory.events\x00'}, {0x20, 'GPL\x00'}]}, 0x2b) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) r2 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r2, 0x10d, 0xef, 0x0, &(0x7f0000000000)) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xe, 0xff, 0x6, 0x3, 0x3000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10000000, 0x0, 0x5}, 0x87) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32=r3, @ANYBLOB="00000000000000006608000000000000180000000800000000000000000000009500000000000000c60a000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b502000000000000850000000600000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000240)={0x3, 0x5}, 0x4) 30.556656745s ago: executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x81}, 0x20) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty, 0x0, 0x1}, 0x20) socket$inet_udp(0x2, 0x2, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r4, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x6}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000140)=@nat={'nat\x00', 0x19, 0x4, 0x650, [0x20000cc0, 0x0, 0x0, 0x20000f94, 0x200011da], 0x0, &(0x7f0000000080), &(0x7f0000000cc0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff020000001100000000000000884c6970365f76746930000000000000000076657468315f746f5f626f6e640000006261746164765f736c6176655f30000067726574617030000000000000000000aaaaaaaaaaaaffffffffffffaaaaaaaaaabb0000ffffff00e60000008e010000c60100006c696d697400000000000000000000000000000000000000000000000000000020000000000000001f000000070000000800000000000000bc0a00005fa900000200000000000000766c616e0000000000000000000000000000000000000000000000000000000008000000000000000100040088f703036e666c6f6700000000000000000000000000000000000000000000000000000050000000000000000600000001f009000000000062ff4f8e196063e655e48c9080b9bdd9cac7acc17bb10127a7b1745a2684a73a40a23cce76c4acb9a5a59792972625615d195c5e4bf5e8af948147c2e145767d00000000434c41535349465900000000000000000000000000000000000000000000000008000000000000000900000000000000736e6174000000000000000000000000000000000000000000000000000000001000000000000000bbbbbbbbbbbb00001000000000000000110000000400000092007663616e3000000000000000000000006970766c616e310000000000000000006970366772653000000000000000000077673100000000000000000000000000bbbbbbbbbbbb00000000ffffaaaaaaaaaaaaffffa3ffffff6e000000a6000000de0000006172707265706c790000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000ffffffff000000006172707265706c7900000000000000000000000000000000000000000000000010000000000000000180c20000020000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000002000000ffffffff01000000030000000800000088e56e696376663000000000000000000000697036677265746170300000000000006d61637674617030000000000000000065727370616e30000000000000000000aaaaaaaaaaaaffff00ffff000180c200000eff00000000ffb6000000e6000000160200006c696d69740000000000000000000000000000000000000000000000000000002000000000000000ff7f020007000000010000800000000099000000760800000400000000000000434f4e4e5345434d41524b000000000000000000000000000000000000000000080000000000000002000000000000005345434d41524b00000000000000000000000000000000000000000000000000080100000000000001000000ff0f000073797374656d5f753a6f626a6563745f723a6175646974645f657865635f743a733000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000003000000fcffffff0100000009000000290000006005626f6e645f736c6176655f310000000076657468315f746f5f626174616476006970766c616e3100000000000000000065727370616e30000000000000000000aaaaaaaaaabb0000000000ffaaaaaaaaaa3600ff0000ffffce000000ce0000000601000061727000000000000000000000000000000000000000000000000000000000003800000000000000030188ca00010000ac141415ffffffff0a010100ff00000000000000000000ff00ff00ffffffffffffffffff00ffffd201020000000000006172707265706c790000000000000000000000000000000000000000000000001000000000000000ffffffffffff0000fcffffff00000000"]}, 0x6c8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000600)={&(0x7f0000000540), 0xc, &(0x7f00000005c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000015100008c3ff8b7bba0000000000000000", @ANYRES32=0x0, @ANYBLOB="000004000000020008002e0004000000"], 0x28}, 0x1, 0x0, 0x0, 0x40040}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) unshare(0x20040600) pipe(&(0x7f0000000240)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socket$nl_rdma(0x10, 0x3, 0x14) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure\x00', 0x26e1, 0x0) r8 = socket$kcm(0x2, 0x1000000000000002, 0x0) setsockopt$sock_attach_bpf(r8, 0x1, 0x3e, &(0x7f00000002c0)=r7, 0x161) sendmsg$inet(r8, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="2c000000000000000000000007000000441c0503e020000100000000ac1414aa00000000ac1414"], 0x30}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8}, @TCA_RATE={0x6, 0x5, {0x2, 0x4}}]}, 0x3c}}, 0x0) 30.155443837s ago: executing program 2: unshare(0x20040600) r0 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2}, 0x24) socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x7a, &(0x7f0000000280)={@local, @multicast, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @private}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00'}, 0x1c) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d0000"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x90) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030031000b12d25a80648c2594f90324fc60100c044002200600053582c137153e370248078000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000004c0)=ANY=[@ANYRES32=r2, @ANYRESOCT=r1, @ANYRESHEX=r1], &(0x7f0000000480)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x39, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x90) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) r6 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r6, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xd0, 0x0}}], 0x73d, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) r7 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r7, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x1}}, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_CMD_GET_NODES(r8, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)={0x1c, r9, 0x1, 0x0, 0x0, {{}, {0x0, 0x6}}}, 0xfd53}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4c4000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0xf, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r11, r10, 0x7}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r12, &(0x7f0000002c00)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r13, &(0x7f0000001700)=[{{&(0x7f0000000140)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000340)=@file={0x1, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000080)=ANY=[], 0x18}}], 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r11}, &(0x7f00000000c0), &(0x7f0000000140)=r2}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r14, 0x1, 0x2e, &(0x7f0000000000)=r14, 0x4) 30.022943248s ago: executing program 2: socket$inet_smc(0x2b, 0x1, 0x0) socket(0x0, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xd1, &(0x7f0000000040)=0xd758, 0x4) ioctl$SIOCRSSCAUSE(r1, 0x89e1, &(0x7f0000000180)) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) r3 = socket$packet(0x11, 0x3, 0x300) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x60}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000001e00)={'lo\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'pim6reg0\x00'}) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x0, r5}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x6, [@enum={0x0, 0x2, 0x0, 0x6, 0x4, [{0x2}, {0x3}]}]}, {0x0, [0x0, 0x5f, 0x5f, 0x30]}}, 0x0, 0x3a}, 0x20) r8 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r7) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f0000002d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)={@map=0x1, r10, 0x2e, 0x0, 0x0, @prog_id}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000100)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="070600000000000000002d00000005002b000300000008002f00000000000c000500000000000000000008000200", @ANYRES32=r11, @ANYBLOB="05002e00ff0000000c0005"], 0x4c}}, 0x0) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x38, 0x2, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x1}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x40800}, 0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="5000000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="43b000a13aadf600280012800b00010067656e657665000018000280140007"], 0x50}}, 0x0) 2.212071078s ago: executing program 1: socket(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x1000)=nil, 0x4000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffee6}, &(0x7f0000000000)=0x1d) 1.006938636s ago: executing program 4: r0 = socket$can_j1939(0x1d, 0x2, 0x7) (async) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(0xffffffffffffffff, 0x6, 0x23, 0x0, 0x0) writev(0xffffffffffffffff, 0x0, 0x0) (async) close(0xffffffffffffffff) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) (async) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x2e, &(0x7f0000000000), &(0x7f00000001c0)=0xc) (async) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x29, 0x4c, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x2, 0x0, 0x0, 0x80, '\x00', 0x0, 0x0, 0x0, 0x2, 0x7ffffffd}, 0x48) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r5, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) (async) connect$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) (async) sendmmsg$inet6(r5, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="8252", 0x2}], 0x1}}], 0x1, 0x6400c000) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x4}, 0x48) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000840)={&(0x7f00000008c0)=ANY=[@ANYBLOB="0200feb50000c043879211dc644efe35dd300038428527097998a681ad49050842b283b75c4494e98c7fdfea9d3f771d68ef296220138554aa404a3348d3ab75b143f0f8c174baaff627adaae8bded3a5a63be248c80691fe70dd3292d12bd76a835afa06ab4d2aac96726607ebd6ba0f7dffa551bd37e967351d471b2e59c8ffc704f5599a36700000000000000000000000002", @ANYRES16=0x0, @ANYBLOB="00042bbd7000ffdbdf2514000000080017000900000008000600fcffffff08000d0002000000080017003a00000008000a000000000005000b000000000008000900ffffffff08000400ff03000008000f0005000000"], 0x5c}, 0x1, 0x0, 0x0, 0x24000010}, 0x4800) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000208500000001000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000e00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r7}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendto$inet6(r5, &(0x7f0000000300), 0x16, 0x0, 0x0, 0xfffffffffffffdfd) (async) bind$can_j1939(r0, &(0x7f0000000240)={0x1d, r2}, 0x18) 520.142763ms ago: executing program 0: socket$vsock_stream(0x28, 0x1, 0x0) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x13, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32], 0xc) 0s ago: executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x11, 0x0, 0x0) setsockopt$inet_sctp_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xb, &(0x7f0000001140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="680000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800c0001006d6163766c616e003000028008000100100000001c0005800a000400aaaaaaaaaabb00000a000400aaaaaaaaaa000000080003000300000008000500", @ANYRES32=r1, @ANYBLOB], 0x68}}, 0x0) kernel console output (not intermixed with test programs): fter parsing attributes in process `syz-executor.1'. [ 99.570822][ T6190] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 99.613805][ T6190] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.808942][ T29] audit: type=1804 audit(1718674117.890:6): pid=6201 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3307890906/syzkaller.u2gXxJ/73/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 99.903091][ T6198] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 99.940076][ T6204] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.947237][ T6204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.992822][ T6198] geneve2: entered promiscuous mode [ 100.014315][ T6198] geneve2: entered allmulticast mode [ 100.276190][ T6217] x_tables: duplicate underflow at hook 1 [ 100.408363][ T6223] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.421938][ T6223] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.492231][ T6229] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.503593][ T6229] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 100.512103][ T6229] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.629588][ T6233] trusted_key: syz-executor.2 sent an empty control message without MSG_MORE. [ 100.952693][ T6249] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.960011][ T6249] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.365912][ T6257] tipc: Invalid UDP bearer configuration [ 101.366006][ T6257] tipc: Enabling of bearer rejected, failed to enable media [ 101.808281][ T29] audit: type=1804 audit(1718674119.890:7): pid=6278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir126571132/syzkaller.NOfRbr/63/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 101.912896][ T6281] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.920114][ T6281] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.993777][ T6274] geneve2: entered promiscuous mode [ 102.016271][ T6274] geneve2: entered allmulticast mode [ 102.213097][ T6290] Cannot find del_set index 0 as target [ 102.738906][ T6302] validate_nla: 2 callbacks suppressed [ 102.738924][ T6302] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 102.781396][ T6305] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 102.925556][ T6312] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.932773][ T6312] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.573642][ T6339] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 103.638325][ T6339] batman_adv: batadv0: Adding interface: team0 [ 103.673825][ T6339] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.774603][ T6339] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 103.820792][ T6340] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 103.838513][ T6342] __nla_validate_parse: 12 callbacks suppressed [ 103.838531][ T6342] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.873444][ T6340] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.891828][ T6340] team0: entered promiscuous mode [ 103.897890][ T6340] team_slave_0: entered promiscuous mode [ 103.915107][ T6342] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.927870][ T6340] team_slave_1: entered promiscuous mode [ 103.938814][ T6340] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.948136][ T6340] batman_adv: batadv0: Interface activated: team0 [ 103.965207][ T6340] batman_adv: batadv0: Interface deactivated: team0 [ 103.973637][ T6340] batman_adv: batadv0: Removing interface: team0 [ 103.983863][ T6340] bridge0: port 3(team0) entered blocking state [ 104.005391][ T6340] bridge0: port 3(team0) entered disabled state [ 104.011866][ T6340] team0: entered allmulticast mode [ 104.017515][ T6340] team_slave_0: entered allmulticast mode [ 104.023261][ T6340] team_slave_1: entered allmulticast mode [ 104.042548][ T6340] bridge0: port 3(team0) entered blocking state [ 104.048902][ T6340] bridge0: port 3(team0) entered forwarding state [ 104.064870][ T6348] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 104.146805][ T6350] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 104.179813][ T6354] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 104.194559][ T6360] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.203232][ T6354] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 104.406840][ T6368] tipc: Started in network mode [ 104.435394][ T6368] tipc: Node identity , cluster identity 4711 [ 104.441518][ T6368] tipc: Failed to obtain node identity [ 104.470146][ T6368] tipc: Enabling of bearer rejected, failed to enable media [ 104.651725][ T6380] syz_tun: entered promiscuous mode [ 104.682148][ T6384] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.702357][ T6380] syz_tun: left promiscuous mode [ 104.745787][ T6384] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.046215][ T6392] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.094800][ T6392] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 105.120692][ T6392] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.469336][ T6407] dvmrp0: entered allmulticast mode [ 105.716447][ T6416] x_tables: duplicate underflow at hook 1 [ 105.722461][ T6407] dvmrp0: left allmulticast mode [ 106.248714][ T6431] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.255894][ T6431] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.278800][ T6429] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 106.600057][ T6440] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 106.739413][ T6453] dvmrp0: entered allmulticast mode [ 106.766429][ T6453] dvmrp0: left allmulticast mode [ 106.865787][ T6465] x_tables: duplicate underflow at hook 1 [ 106.898178][ T6469] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 107.184126][ T6488] syzkaller1: entered promiscuous mode [ 107.203506][ T6488] syzkaller1: entered allmulticast mode [ 107.286951][ T6491] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 107.291967][ T6494] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.532912][ T6506] bridge0: port 4(vlan2) entered blocking state [ 107.553659][ T6506] bridge0: port 4(vlan2) entered disabled state [ 107.567666][ T6506] vlan2: entered allmulticast mode [ 107.588129][ T6506] vlan2: left allmulticast mode [ 108.226250][ T6517] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 108.545571][ T6527] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 108.903810][ T6540] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 109.088122][ T6553] __nla_validate_parse: 22 callbacks suppressed [ 109.088141][ T6553] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.117032][ T6553] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 109.134490][ T6553] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.254631][ T6556] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 109.266112][ T6556] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.448505][ T6562] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.681221][ T6573] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.796487][ T6577] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 109.852352][ T6579] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.886123][ T6579] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.942253][ T6584] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 109.960971][ T6582] Cannot find add_set index 0 as target [ 109.974179][ T6584] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 110.010180][ T6584] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 110.012743][ T6590] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.051977][ T6592] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 110.112339][ T6593] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 110.579664][ T6616] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 110.598781][ T6616] bridge0: port 3(team0) entered disabled state [ 110.625370][ T6616] team0: left allmulticast mode [ 110.635849][ T6616] team_slave_0: left allmulticast mode [ 110.642602][ T6616] team_slave_1: left allmulticast mode [ 110.669918][ T6616] team0: left promiscuous mode [ 110.682269][ T6616] team_slave_0: left promiscuous mode [ 110.694874][ T6616] team_slave_1: left promiscuous mode [ 110.701923][ T6616] bridge0: port 3(team0) entered disabled state [ 110.765935][ T6616] batman_adv: batadv0: Adding interface: team0 [ 110.791322][ T6616] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.826415][ T6616] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 110.880875][ T6617] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 110.939804][ T6617] team0: entered promiscuous mode [ 110.951067][ T6617] team_slave_0: entered promiscuous mode [ 110.959153][ T6617] team_slave_1: entered promiscuous mode [ 110.967716][ T6617] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.974718][ T6617] batman_adv: batadv0: Interface activated: team0 [ 110.989703][ T6617] batman_adv: batadv0: Interface deactivated: team0 [ 110.999752][ T6617] batman_adv: batadv0: Removing interface: team0 [ 111.008393][ T6617] bridge0: port 3(team0) entered blocking state [ 111.020510][ T6617] bridge0: port 3(team0) entered disabled state [ 111.030535][ T6617] team0: entered allmulticast mode [ 111.039442][ T6617] team_slave_0: entered allmulticast mode [ 111.049829][ T6617] team_slave_1: entered allmulticast mode [ 111.067636][ T6617] bridge0: port 3(team0) entered blocking state [ 111.074137][ T6617] bridge0: port 3(team0) entered forwarding state [ 111.099472][ T6632] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 111.905399][ T6658] team0: left allmulticast mode [ 111.910342][ T6658] team_slave_0: left allmulticast mode [ 111.960060][ T6658] team_slave_1: left allmulticast mode [ 112.006203][ T6658] team0: left promiscuous mode [ 112.011026][ T6658] team_slave_0: left promiscuous mode [ 112.116320][ T6658] team_slave_1: left promiscuous mode [ 112.155693][ T6658] bridge0: port 3(team0) entered disabled state [ 112.202807][ T6658] batman_adv: batadv0: Adding interface: team0 [ 112.255379][ T6658] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 112.297331][ T6658] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 112.353392][ T6659] team0: entered promiscuous mode [ 112.393774][ T6659] team_slave_0: entered promiscuous mode [ 112.408169][ T6659] team_slave_1: entered promiscuous mode [ 112.439519][ T6659] 8021q: adding VLAN 0 to HW filter on device team0 [ 112.455361][ T6659] batman_adv: batadv0: Interface activated: team0 [ 112.485179][ T6659] batman_adv: batadv0: Interface deactivated: team0 [ 112.526780][ T6659] batman_adv: batadv0: Removing interface: team0 [ 112.566770][ T6659] bridge0: port 3(team0) entered blocking state [ 112.573164][ T6659] bridge0: port 3(team0) entered disabled state [ 112.612936][ T6659] team0: entered allmulticast mode [ 112.619215][ T6659] team_slave_0: entered allmulticast mode [ 112.638412][ T6659] team_slave_1: entered allmulticast mode [ 112.896198][ T6679] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 113.502163][ T6696] validate_nla: 6 callbacks suppressed [ 113.502181][ T6696] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 113.549376][ T6696] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 113.575624][ T5116] Bluetooth: hci3: command 0x0405 tx timeout [ 113.615600][ T6699] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 113.999927][ T6709] tipc: Enabled bearer , priority 10 [ 114.137469][ T6715] netlink: 'syz-executor.0': attribute type 32 has an invalid length. [ 114.561167][ T6729] __nla_validate_parse: 18 callbacks suppressed [ 114.561186][ T6729] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 114.583740][ T6729] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 115.241840][ T6740] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 115.258134][ T6740] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 115.293238][ T6743] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 115.335870][ T6743] team0: left allmulticast mode [ 115.340821][ T6743] team_slave_1: left allmulticast mode [ 115.355975][ T6743] team0: left promiscuous mode [ 115.360990][ T6743] team_slave_0: left promiscuous mode [ 115.372540][ T6743] team_slave_1: left promiscuous mode [ 115.379109][ T6743] bridge0: port 3(team0) entered disabled state [ 115.424105][ T6743] batman_adv: batadv0: Adding interface: team0 [ 115.441062][ T6743] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.514066][ T6743] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 115.905115][ T6759] netlink: 'syz-executor.0': attribute type 32 has an invalid length. [ 116.015468][ T6763] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.0'. [ 116.026540][ T6763] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 116.291160][ T6771] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 117.121891][ T6744] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 117.130427][ T6744] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.140373][ T6744] team0: entered promiscuous mode [ 117.145583][ T6744] team_slave_0: entered promiscuous mode [ 117.151569][ T6744] team_slave_1: entered promiscuous mode [ 117.160863][ T6744] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.169436][ T6744] batman_adv: batadv0: Interface activated: team0 [ 117.183842][ T6744] batman_adv: batadv0: Interface deactivated: team0 [ 117.190606][ T6744] batman_adv: batadv0: Removing interface: team0 [ 117.205917][ T6744] bridge0: port 3(team0) entered blocking state [ 117.212330][ T6744] bridge0: port 3(team0) entered disabled state [ 117.222485][ T6744] team0: entered allmulticast mode [ 117.227779][ T6744] team_slave_1: entered allmulticast mode [ 117.275315][ T6782] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.360670][ T6791] x_tables: duplicate underflow at hook 2 [ 117.788289][ T6807] netlink: 'syz-executor.0': attribute type 32 has an invalid length. [ 117.789539][ T6806] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.829192][ T6806] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.409093][ T6824] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 118.464596][ T6824] bridge0: port 3(team0) entered disabled state [ 118.512647][ T6824] team0: left allmulticast mode [ 118.531056][ T6824] team_slave_0: left allmulticast mode [ 118.551735][ T6824] team_slave_1: left allmulticast mode [ 118.577922][ T6824] team0: left promiscuous mode [ 118.622634][ T6824] team_slave_0: left promiscuous mode [ 118.628536][ T6838] x_tables: duplicate underflow at hook 2 [ 118.634765][ T6824] team_slave_1: left promiscuous mode [ 118.644762][ T6824] bridge0: port 3(team0) entered disabled state [ 118.667997][ T6824] batman_adv: batadv0: Adding interface: team0 [ 118.674209][ T6824] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.710176][ T6824] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 118.711432][ T6839] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 118.739874][ T6829] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 118.752362][ T6829] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.765535][ T6829] team0: entered promiscuous mode [ 118.770687][ T6829] team_slave_0: entered promiscuous mode [ 118.778918][ T6829] team_slave_1: entered promiscuous mode [ 118.788288][ T6829] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.811823][ T6829] batman_adv: batadv0: Interface activated: team0 [ 118.819099][ T6829] batman_adv: batadv0: Interface deactivated: team0 [ 118.831356][ T6829] batman_adv: batadv0: Removing interface: team0 [ 118.841083][ T6829] bridge0: port 3(team0) entered blocking state [ 118.851198][ T6829] bridge0: port 3(team0) entered disabled state [ 118.862384][ T6829] team0: entered allmulticast mode [ 118.871174][ T6829] team_slave_0: entered allmulticast mode [ 118.884869][ T6829] team_slave_1: entered allmulticast mode [ 118.899164][ T6829] bridge0: port 3(team0) entered blocking state [ 118.905639][ T6829] bridge0: port 3(team0) entered forwarding state [ 118.931380][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.938597][ T6831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.988652][ T6848] netlink: 'syz-executor.3': attribute type 32 has an invalid length. [ 119.607010][ T6872] tipc: Started in network mode [ 119.624672][ T6872] tipc: Node identity ac1414aa, cluster identity 4711 [ 119.632042][ C1] syz_tun: tun_net_xmit 58 [ 119.683386][ T6872] syz_tun: tun_net_xmit 118 [ 119.698413][ T6872] tipc: Enabled bearer , priority 10 [ 119.705147][ C1] syz_tun: tun_net_xmit 58 [ 119.815617][ C1] syz_tun: tun_net_xmit 118 [ 119.965071][ C1] syz_tun: tun_net_xmit 118 [ 120.104999][ T6865] __nla_validate_parse: 2 callbacks suppressed [ 120.105016][ T6865] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 120.120791][ C1] syz_tun: tun_net_xmit 118 [ 120.241940][ T6886] bridge0: port 1(bridge_slave_0) entered blocking state [ 120.249187][ T6886] bridge0: port 1(bridge_slave_0) entered forwarding state [ 120.265170][ C1] syz_tun: tun_net_xmit 118 [ 120.310717][ T6890] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.329809][ T6890] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.376034][ C1] syz_tun: tun_net_xmit 62 [ 120.405159][ C1] syz_tun: tun_net_xmit 118 [ 120.513899][ T6896] netlink: 'syz-executor.1': attribute type 32 has an invalid length. [ 120.522809][ T6895] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 120.545139][ C1] syz_tun: tun_net_xmit 118 [ 120.545482][ T6895] bridge0: port 3(team0) entered disabled state [ 120.573157][ T6895] team0: left allmulticast mode [ 120.650278][ T6895] team_slave_0: left allmulticast mode [ 120.665388][ T6895] team_slave_1: left allmulticast mode [ 120.685016][ T25] tipc: Node number set to 2886997162 [ 120.690509][ T6895] team0: left promiscuous mode [ 120.704086][ T6895] team_slave_0: left promiscuous mode [ 120.729775][ T6895] team_slave_1: left promiscuous mode [ 120.750026][ T6895] bridge0: port 3(team0) entered disabled state [ 120.763204][ T6895] batman_adv: batadv0: Adding interface: team0 [ 120.774212][ T6895] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.825791][ C1] syz_tun: tun_net_xmit 118 [ 120.830489][ T6895] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 120.861972][ T6900] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 120.891010][ T6900] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.924367][ T6900] team0: entered promiscuous mode [ 120.940655][ T6900] team_slave_0: entered promiscuous mode [ 120.960988][ T6900] team_slave_1: entered promiscuous mode [ 120.981447][ T6900] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.007390][ T6900] batman_adv: batadv0: Interface activated: team0 [ 121.022165][ T6900] batman_adv: batadv0: Interface deactivated: team0 [ 121.046998][ T6900] batman_adv: batadv0: Removing interface: team0 [ 121.076251][ T6900] bridge0: port 3(team0) entered blocking state [ 121.082672][ T6900] bridge0: port 3(team0) entered disabled state [ 121.105992][ C1] syz_tun: tun_net_xmit 118 [ 121.111057][ T6900] team0: entered allmulticast mode [ 121.130609][ T6900] team_slave_0: entered allmulticast mode [ 121.145106][ T6900] team_slave_1: entered allmulticast mode [ 121.193158][ T6900] bridge0: port 3(team0) entered blocking state [ 121.199633][ T6900] bridge0: port 3(team0) entered forwarding state [ 121.229695][ T6905] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 121.255757][ C1] syz_tun: tun_net_xmit 58 [ 121.291661][ T6905] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 121.320341][ T6905] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 121.346100][ T6905] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 121.365362][ T6905] team0: Failed to send options change via netlink (err -105) [ 121.376090][ T6905] team0: Port device netdevsim0 added [ 121.420285][ T6905] syz-executor.2 (6905) used greatest stack depth: 17976 bytes left [ 121.552411][ T6916] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 121.595748][ T6916] team0: left allmulticast mode [ 121.600746][ T6916] team_slave_0: left allmulticast mode [ 121.626218][ T6916] team_slave_1: left allmulticast mode [ 121.631749][ T6916] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 121.645226][ C1] syz_tun: tun_net_xmit 118 [ 121.669167][ T6916] team0: left promiscuous mode [ 121.687617][ T6916] team_slave_0: left promiscuous mode [ 121.724276][ T6916] team_slave_1: left promiscuous mode [ 121.748577][ T6916] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 121.767704][ T6916] bridge0: port 3(team0) entered disabled state [ 121.807311][ T6916] batman_adv: batadv0: Adding interface: team0 [ 121.827201][ T6916] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.916947][ T6916] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 121.955564][ T6920] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 121.977837][ T6920] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.005528][ T6920] team0: entered promiscuous mode [ 122.022799][ T6920] team_slave_0: entered promiscuous mode [ 122.051424][ T6920] team_slave_1: entered promiscuous mode [ 122.073695][ T6920] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 122.108255][ T6920] 8021q: adding VLAN 0 to HW filter on device team0 [ 122.129744][ T6920] batman_adv: batadv0: Interface activated: team0 [ 122.146281][ T6920] batman_adv: batadv0: Interface deactivated: team0 [ 122.166477][ T6920] batman_adv: batadv0: Removing interface: team0 [ 122.195256][ T6920] bridge0: port 3(team0) entered blocking state [ 122.201949][ T6920] bridge0: port 3(team0) entered disabled state [ 122.215616][ T6920] team0: entered allmulticast mode [ 122.220936][ T6920] team_slave_0: entered allmulticast mode [ 122.232880][ T6920] team_slave_1: entered allmulticast mode [ 122.238812][ T6920] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 122.316345][ T6933] bond_slave_0: entered promiscuous mode [ 122.322413][ T6933] bond_slave_1: entered promiscuous mode [ 122.349360][ T6933] vlan2: entered promiscuous mode [ 122.363421][ T6933] bond0: entered promiscuous mode [ 122.381145][ T6933] bridge0: entered promiscuous mode [ 122.410442][ T6933] bond0: left promiscuous mode [ 122.417702][ T6933] bridge0: left promiscuous mode [ 122.434453][ T6933] bond_slave_0: left promiscuous mode [ 122.439978][ T6933] bond_slave_1: left promiscuous mode [ 122.526116][ T6934] tipc: Enabling of bearer rejected, already enabled [ 122.705082][ C1] syz_tun: tun_net_xmit 118 [ 122.862074][ T6943] netlink: 'syz-executor.0': attribute type 32 has an invalid length. [ 122.936693][ T6949] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 122.998099][ T6949] bridge0: port 3(team0) entered disabled state [ 123.064057][ T6949] team0: left allmulticast mode [ 123.107684][ T6949] team_slave_0: left allmulticast mode [ 123.139470][ T6949] team_slave_1: left allmulticast mode [ 123.162217][ T6949] team0: left promiscuous mode [ 123.181673][ T6949] team_slave_0: left promiscuous mode [ 123.204009][ T6949] team_slave_1: left promiscuous mode [ 123.224966][ T6949] bridge0: port 3(team0) entered disabled state [ 123.265669][ T6949] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.293531][ T6949] bond0: (slave team0): Enslaving as an active interface with an up link [ 123.370442][ T6953] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.518449][ T6966] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.529317][ T6966] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.735200][ C1] syz_tun: tun_net_xmit 118 [ 123.760035][ T6979] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.779272][ T6979] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.954061][ T6971] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.961301][ T6971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.046917][ T6983] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.054146][ T6983] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.260380][ T6997] netlink: 'syz-executor.2': attribute type 32 has an invalid length. [ 124.263893][ T6994] bridge0: port 1(bridge_slave_0) entered blocking state [ 124.275917][ T6994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 124.506514][ T7012] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 124.662270][ T7021] xt_policy: neither incoming nor outgoing policy selected [ 124.775065][ C1] syz_tun: tun_net_xmit 118 [ 125.122352][ T7033] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.129527][ T7033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.223622][ T7018] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.309905][ T7040] netlink: 'syz-executor.0': attribute type 32 has an invalid length. [ 125.815156][ C1] syz_tun: tun_net_xmit 118 [ 125.843369][ T7067] syz_tun: tun_net_xmit 86 [ 126.010186][ T7073] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.032206][ T7073] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.099808][ T7071] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.107044][ T7071] bridge0: port 1(bridge_slave_0) entered forwarding state [ 126.206130][ T7077] netlink: 'syz-executor.2': attribute type 32 has an invalid length. [ 126.264802][ T7087] tap0: tun_chr_ioctl cmd 1074025677 [ 126.278318][ T7087] tap0: linktype set to 780 [ 126.303397][ T7088] tap0: tun_chr_ioctl cmd 1074025673 [ 126.719019][ T7109] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.739144][ T7109] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.855176][ C1] syz_tun: tun_net_xmit 86 [ 126.860353][ C1] syz_tun: tun_net_xmit 118 [ 127.068362][ T7120] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.075630][ T7120] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.468585][ T7130] netlink: 'syz-executor.4': attribute type 32 has an invalid length. [ 127.475793][ T7098] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.530290][ T7133] xt_policy: neither incoming nor outgoing policy selected [ 127.895058][ C1] syz_tun: tun_net_xmit 118 [ 127.900629][ C1] syz_tun: tun_net_xmit 86 [ 128.204155][ T7157] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.237933][ T7157] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 128.423875][ T7170] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.431079][ T7170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.442114][ T7174] xt_limit: Overflow, try lower: 0/0 [ 128.465912][ T7166] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 128.864339][ T7192] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.936546][ C1] syz_tun: tun_net_xmit 118 [ 128.958057][ T7204] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 128.994054][ T7204] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 129.028797][ T7204] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.287956][ T7225] tipc: Enabled bearer , priority 10 [ 129.481525][ T7231] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 129.678462][ T7238] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 129.705120][ T7237] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.712301][ T7237] bridge0: port 1(bridge_slave_0) entered forwarding state [ 129.976482][ C1] syz_tun: tun_net_xmit 118 [ 130.458081][ T7266] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 130.618998][ T7272] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 130.679937][ T7279] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.687256][ T7279] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.707679][ T7278] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 131.015061][ C1] syz_tun: tun_net_xmit 118 [ 131.030966][ T7290] xt_CT: You must specify a L4 protocol and not use inversions on it [ 131.039923][ T7294] tipc: Enabling of bearer rejected, already enabled [ 131.065309][ C0] syz_tun: tun_net_xmit 58 [ 131.314074][ T7307] syz_tun: entered promiscuous mode [ 131.332632][ T7307] macvlan2: entered promiscuous mode [ 131.422678][ T7310] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 131.547090][ T29] audit: type=1804 audit(1718674149.630:8): pid=7312 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1441640609/syzkaller.i1rO6K/81/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 131.615226][ C0] syz_tun: tun_net_xmit 58 [ 131.739866][ T7321] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.747094][ T7321] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.815170][ C1] syz_tun: tun_net_xmit 58 [ 131.849570][ T7327] __nla_validate_parse: 4 callbacks suppressed [ 131.849588][ T7327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.055352][ C1] syz_tun: tun_net_xmit 118 [ 132.192709][ T7346] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 132.229437][ T7352] syz_tun: tun_net_xmit 86 [ 132.625150][ C1] syz_tun: tun_net_xmit 58 [ 132.787176][ T7369] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.794364][ T7369] bridge0: port 1(bridge_slave_0) entered forwarding state [ 132.903344][ T7371] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 132.953397][ T7371] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 132.963134][ T7371] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.004083][ T7379] tipc: Enabling of bearer rejected, already enabled [ 133.095181][ C1] syz_tun: tun_net_xmit 118 [ 133.192141][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.198583][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.255129][ C1] syz_tun: tun_net_xmit 86 [ 133.487100][ T7393] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.501093][ T7393] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.629166][ T7396] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 133.981816][ T7412] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 133.994420][ T7412] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.013270][ T7410] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.020520][ T7410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.135058][ C1] syz_tun: tun_net_xmit 118 [ 134.274574][ T7424] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.285007][ T7424] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.295315][ C1] syz_tun: tun_net_xmit 86 [ 134.345640][ T7427] ieee802154 phy0 wpan0: encryption failed: -90 [ 134.657678][ T7437] tipc: Enabling of bearer rejected, already enabled [ 134.685175][ C0] syz_tun: tun_net_xmit 58 [ 134.844353][ T7442] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.873930][ T7442] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 135.045206][ C0] syz_tun: tun_net_xmit 58 [ 135.123130][ T7447] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.130357][ T7447] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.175263][ C1] syz_tun: tun_net_xmit 118 [ 135.248368][ T7453] syz_tun: entered promiscuous mode [ 135.271722][ T7453] syz_tun: left promiscuous mode [ 135.403924][ T7462] syz_tun: entered promiscuous mode [ 135.413334][ T7462] macvlan2: entered promiscuous mode [ 135.445189][ C1] syz_tun: tun_net_xmit 58 [ 135.526883][ T7469] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.615225][ C1] syz_tun: tun_net_xmit 58 [ 135.952460][ T7493] syz_tun: tun_net_xmit 86 [ 136.123343][ T7497] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.130549][ T7497] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.215190][ C1] syz_tun: tun_net_xmit 118 [ 136.436112][ T7516] tipc: Enabling of bearer rejected, already enabled [ 136.740766][ T7528] delete_channel: no stack [ 136.764127][ T7533] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 136.792948][ T7533] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 136.855139][ T5116] Bluetooth: hci3: command 0x0405 tx timeout [ 136.888092][ T7532] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.895293][ T7532] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.015629][ C0] syz_tun: tun_net_xmit 86 [ 137.023567][ T7544] bridge0: port 2(bridge_slave_1) entered listening state [ 137.176730][ T2839] wlan1: Trigger new scan to find an IBSS to join [ 137.255130][ C1] syz_tun: tun_net_xmit 118 [ 137.385905][ T7557] __nla_validate_parse: 9 callbacks suppressed [ 137.385924][ T7557] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.055150][ C0] syz_tun: tun_net_xmit 86 [ 138.172268][ T7581] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.218731][ T7575] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.267903][ T7582] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.275249][ T7582] bridge0: port 1(bridge_slave_0) entered forwarding state [ 138.295856][ C1] syz_tun: tun_net_xmit 118 [ 138.595911][ T7588] syz_tun: tun_net_xmit 86 [ 138.677747][ T7594] ip6_vti0: entered allmulticast mode [ 138.731870][ T7593] ip6_vti0: left allmulticast mode [ 138.932168][ T7603] tipc: Enabling of bearer rejected, already enabled [ 139.183349][ T7606] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 139.215079][ T7606] netlink: 9364 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.237335][ T7606] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 139.335106][ C1] syz_tun: tun_net_xmit 118 [ 139.406902][ T7625] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 139.515695][ T7628] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.522908][ T7628] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.655322][ C1] syz_tun: tun_net_xmit 86 [ 140.219016][ T1053] wlan1: Trigger new scan to find an IBSS to join [ 140.241362][ T7660] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.291723][ T7661] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.375125][ C1] syz_tun: tun_net_xmit 118 [ 140.695439][ C1] syz_tun: tun_net_xmit 86 [ 141.174575][ T7694] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.181800][ T7694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.415196][ C1] syz_tun: tun_net_xmit 118 [ 142.065953][ T7720] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 142.451731][ T7739] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.458986][ T7739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.465122][ C1] syz_tun: tun_net_xmit 118 [ 142.823724][ T7749] syz_tun: tun_net_xmit 42 [ 142.887532][ T7751] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 142.936346][ T7751] team0: left allmulticast mode [ 142.946574][ T7751] team_slave_0: left allmulticast mode [ 142.952185][ T7751] team_slave_1: left allmulticast mode [ 142.959551][ T7751] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 142.968331][ T7751] team0: left promiscuous mode [ 142.973213][ T7751] team_slave_0: left promiscuous mode [ 142.979086][ T7751] team_slave_1: left promiscuous mode [ 142.992957][ T7751] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 143.005280][ T7751] bridge0: port 3(team0) entered disabled state [ 143.041181][ T7751] batman_adv: batadv0: Adding interface: team0 [ 143.047611][ T7751] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.106357][ T7751] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 143.123813][ T7757] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 143.125860][ T7741] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.256121][ T1053] wlan1: Trigger new scan to find an IBSS to join [ 143.270077][ T7759] netlink: 376 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.505061][ C1] syz_tun: tun_net_xmit 118 [ 143.847725][ T7792] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 143.876046][ T7789] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.883191][ T7789] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.895189][ C1] syz_tun: tun_net_xmit 42 [ 143.940740][ T7792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.998841][ T7795] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 144.151263][ T7800] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.177637][ T11] wlan1: Creating new IBSS network, BSSID 06:62:3d:11:18:93 [ 144.182761][ T7800] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.224042][ T7810] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 144.241372][ T7810] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 144.255671][ T7807] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 144.263614][ T7810] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.373901][ T7810] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.415623][ T7812] can: request_module (can-proto-0) failed. [ 144.443597][ T7815] netlink: 644 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.465671][ T7815] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 144.520795][ T7821] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 144.535083][ C1] syz_tun: tun_net_xmit 118 [ 144.935063][ C1] syz_tun: tun_net_xmit 42 [ 145.022073][ T7835] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 145.115219][ T7842] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.254855][ T7844] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.347214][ T7852] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 145.353075][ T7846] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 145.575054][ C1] syz_tun: tun_net_xmit 118 [ 145.588346][ T7867] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.595667][ T7867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.623757][ T7870] netlink: set zone limit has 8 unknown bytes [ 145.644413][ T7866] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 145.696492][ T7874] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 145.704700][ T7870] vlan2: entered allmulticast mode [ 146.250135][ T7903] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 146.294517][ T7903] bridge0: port 3(team0) entered disabled state [ 146.320973][ T7895] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 146.346011][ T7903] team0: left allmulticast mode [ 146.366714][ T7903] team_slave_0: left allmulticast mode [ 146.385259][ T7903] team_slave_1: left allmulticast mode [ 146.396865][ T7903] team0: left promiscuous mode [ 146.410950][ T7903] team_slave_0: left promiscuous mode [ 146.417183][ T7903] team_slave_1: left promiscuous mode [ 146.427764][ T7903] bridge0: port 3(team0) entered disabled state [ 146.439417][ T7903] batman_adv: batadv0: Adding interface: team0 [ 146.446549][ T7903] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.476084][ T7903] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 146.495474][ T7907] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.502685][ T7907] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.616185][ C1] syz_tun: tun_net_xmit 118 [ 146.680086][ T7920] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 146.756840][ T7927] netlink: set zone limit has 8 unknown bytes [ 146.790970][ T7927] vlan2: entered allmulticast mode [ 147.127116][ T7930] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.134262][ T7930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.140269][ T7937] xt_cgroup: invalid path, errno=-2 [ 147.333276][ T7948] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 147.382757][ T7956] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 147.480708][ T7952] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.487884][ T7952] bridge0: port 1(bridge_slave_0) entered forwarding state [ 147.554468][ T7966] Bluetooth: hci3: unsupported parameter 33 [ 147.574943][ T7966] Bluetooth: hci3: unsupported parameter 65535 [ 147.595805][ T7966] Bluetooth: hci3: unsupported parameter 33 [ 147.601754][ T7966] Bluetooth: hci3: unsupported parameter 65535 [ 147.602260][ T5245] IPVS: starting estimator thread 0... [ 147.639551][ T7975] tipc: Started in network mode [ 147.655286][ C1] syz_tun: tun_net_xmit 118 [ 147.665877][ T7975] tipc: Node identity eebdaf86ae9, cluster identity 4711 [ 147.692505][ T7975] tipc: Enabled bearer , priority 10 [ 147.725156][ T7976] IPVS: using max 22 ests per chain, 52800 per kthread [ 148.022927][ T7988] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.030192][ T7988] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.173400][ T7984] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.368917][ T8001] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 148.485218][ T8006] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 148.695058][ C1] syz_tun: tun_net_xmit 118 [ 148.809101][ T5161] tipc: Node number set to 1076735878 [ 149.132706][ T8025] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.177523][ T8025] __nla_validate_parse: 5 callbacks suppressed [ 149.177541][ T8025] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.264447][ T8023] xt_CT: No such helper "pptp" [ 149.438663][ T8029] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.445904][ T8029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.511609][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 149.526500][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 149.534430][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 149.543237][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 149.561333][ T5118] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 149.576169][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 149.735083][ C1] syz_tun: tun_net_xmit 118 [ 149.868754][ T8047] netlink: 180 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.889716][ T8047] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 149.936536][ T8049] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 150.287394][ T8031] chnl_net:caif_netlink_parms(): no params data found [ 150.550505][ T8081] tipc: Enabling of bearer rejected, already enabled [ 150.573100][ T8078] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.708166][ T8031] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.756379][ T8031] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.775223][ C1] syz_tun: tun_net_xmit 118 [ 150.794040][ T8031] bridge_slave_0: entered allmulticast mode [ 150.812700][ T8031] bridge_slave_0: entered promiscuous mode [ 150.823479][ T8031] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.847451][ T8031] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.864874][ T8031] bridge_slave_1: entered allmulticast mode [ 150.881622][ T8031] bridge_slave_1: entered promiscuous mode [ 150.894167][ T8093] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.924730][ T8094] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 150.964307][ T8031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.003766][ T8031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.138110][ T8031] team0: Port device team_slave_0 added [ 151.194839][ T8031] team0: Port device team_slave_1 added [ 151.275006][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.288662][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.327585][ T8031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.393777][ T8031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.400379][ T8105] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 151.405577][ T8031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.439494][ T8031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.552939][ T8031] hsr_slave_0: entered promiscuous mode [ 151.571992][ T8031] hsr_slave_1: entered promiscuous mode [ 151.596744][ T8031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.634587][ T8031] Cannot create hsr debugfs directory [ 151.663219][ T5118] Bluetooth: hci1: command tx timeout [ 151.815066][ C1] syz_tun: tun_net_xmit 118 [ 152.162691][ T8031] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.371165][ T8031] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.473430][ T8145] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 152.572231][ T8031] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.797329][ T8031] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.855208][ C1] syz_tun: tun_net_xmit 118 [ 152.868479][ T8166] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 153.119547][ T8031] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 153.171434][ T8031] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 153.200670][ T8031] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 153.247445][ T8031] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 153.378188][ T8188] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 153.439063][ T8031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.488731][ T8031] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.534921][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.542138][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.599168][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.606388][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.706391][ T8194] syz-executor.4[8194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.709190][ T8194] syz-executor.4[8194] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 153.740820][ T5118] Bluetooth: hci1: command tx timeout [ 153.769074][ T8195] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 153.895206][ C1] syz_tun: tun_net_xmit 118 [ 153.925318][ T29] audit: type=1800 audit(1718674172.000:9): pid=8199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1945 res=0 errno=0 [ 153.944061][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.982640][ T29] audit: type=1804 audit(1718674172.030:10): pid=8203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1441640609/syzkaller.i1rO6K/128/memory.events" dev="sda1" ino=1945 res=1 errno=0 [ 154.043737][ T29] audit: type=1804 audit(1718674172.030:11): pid=8199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1441640609/syzkaller.i1rO6K/128/memory.events" dev="sda1" ino=1945 res=1 errno=0 [ 154.282846][ T8222] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 154.294551][ T8031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.440453][ T8031] veth0_vlan: entered promiscuous mode [ 154.490543][ T8031] veth1_vlan: entered promiscuous mode [ 154.564510][ T8031] veth0_macvtap: entered promiscuous mode [ 154.582414][ T8031] veth1_macvtap: entered promiscuous mode [ 154.611934][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.642664][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.660383][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.672855][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.689587][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.704292][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.729198][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.757820][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.794638][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.829525][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.870583][ T8031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 154.913764][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.925923][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.936636][ C1] syz_tun: tun_net_xmit 118 [ 154.957001][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 154.967993][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.986299][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.010504][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.031402][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.048974][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.059820][ T8031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.071056][ T8031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.084850][ T8031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.140642][ T8031] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.157422][ T8031] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.166447][ T8031] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.180999][ T8031] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.195495][ T8254] No such timeout policy "syz0" [ 155.205593][ T8246] bridge0: port 3(gretap0) entered blocking state [ 155.212567][ T8246] bridge0: port 3(gretap0) entered disabled state [ 155.221525][ T8246] gretap0: entered allmulticast mode [ 155.251874][ T8248] gretap0: left allmulticast mode [ 155.262871][ T8248] bridge0: port 3(gretap0) entered disabled state [ 155.536861][ T8264] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 155.555855][ T8266] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 155.589016][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.619982][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.628518][ T8271] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.0'. [ 155.645246][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.675868][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.690356][ T8275] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 155.729072][ T8275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 155.800748][ T8279] Cannot find set identified by id 0 to match [ 155.813755][ T29] audit: type=1804 audit(1718674173.890:12): pid=8282 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1568273131/syzkaller.b9QUcy/178/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 155.847633][ T5116] Bluetooth: hci1: command tx timeout [ 155.967154][ T8283] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.985278][ C1] syz_tun: tun_net_xmit 118 [ 156.028720][ T8290] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 156.043452][ T29] audit: type=1804 audit(1718674174.110:13): pid=8294 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir126571132/syzkaller.NOfRbr/223/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 156.347481][ T8310] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 156.430391][ T8315] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 156.478720][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.574743][ T8319] sch_tbf: burst 0 is lower than device bridge4 mtu (1514) ! [ 156.640805][ T8324] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 156.808252][ T8336] No such timeout policy "syz0" [ 156.828222][ T8337] IPv4: Oversized IP packet from 172.20.20.24 [ 156.837058][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 156.844022][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 156.911109][ T8333] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.015221][ C1] syz_tun: tun_net_xmit 118 [ 157.163454][ T8347] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 157.324578][ T8369] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.609060][ T8385] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 157.901708][ T5116] Bluetooth: hci1: command 0x0419 tx timeout [ 158.016033][ T8394] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.055174][ C1] syz_tun: tun_net_xmit 118 [ 158.336400][ T8417] bridge0: port 3(gretap0) entered blocking state [ 158.356278][ T8417] bridge0: port 3(gretap0) entered disabled state [ 158.406179][ T8417] gretap0: entered allmulticast mode [ 158.490997][ T8422] gretap0: left allmulticast mode [ 158.513358][ T8422] bridge0: port 3(gretap0) entered disabled state [ 158.814681][ T8433] No such timeout policy "syz0" [ 159.105265][ C1] syz_tun: tun_net_xmit 118 [ 159.169389][ T8439] net_ratelimit: 2 callbacks suppressed [ 159.169409][ T8439] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 159.260581][ T1053] wlan1: Trigger new scan to find an IBSS to join [ 159.506002][ T8459] xt_CT: You must specify a L4 protocol and not use inversions on it [ 159.670663][ T8465] bridge0: port 4(gretap0) entered blocking state [ 159.687163][ T8465] bridge0: port 4(gretap0) entered disabled state [ 159.703264][ T8465] gretap0: entered allmulticast mode [ 159.722272][ T8465] gretap0: entered promiscuous mode [ 159.747358][ T8467] gretap0: left allmulticast mode [ 159.768984][ T8467] gretap0: left promiscuous mode [ 159.785938][ T8467] bridge0: port 4(gretap0) entered disabled state [ 159.985646][ T5118] Bluetooth: hci1: command 0x0419 tx timeout [ 160.135324][ C1] syz_tun: tun_net_xmit 118 [ 160.154195][ T8479] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.304588][ T8481] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.921243][ T8502] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 161.163220][ T8519] IPv4: Oversized IP packet from 172.20.20.10 [ 161.169963][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 161.176425][ C1] IPv4: Oversized IP packet from 172.20.20.10 [ 161.183034][ C1] syz_tun: tun_net_xmit 118 [ 161.533193][ T8531] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 162.051027][ T8546] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 162.215367][ C1] syz_tun: tun_net_xmit 118 [ 162.602955][ T8567] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 162.785224][ T8576] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.252299][ T8593] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.265361][ C1] syz_tun: tun_net_xmit 118 [ 163.641785][ T8610] syz_tun: tun_net_xmit 86 [ 164.132807][ T8619] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 164.228903][ T51] wlan1: Trigger new scan to find an IBSS to join [ 164.295250][ C1] syz_tun: tun_net_xmit 118 [ 164.695270][ C1] syz_tun: tun_net_xmit 86 [ 164.988385][ T8649] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.005581][ T8647] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.189696][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.335340][ C1] syz_tun: tun_net_xmit 118 [ 165.561826][ T8662] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 165.735202][ C1] syz_tun: tun_net_xmit 86 [ 165.877971][ T8671] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.385006][ C1] syz_tun: tun_net_xmit 118 [ 166.578625][ T8693] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.648529][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.414479][ T8719] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 167.425040][ C1] syz_tun: tun_net_xmit 118 [ 167.439977][ T8724] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 167.448174][ T29] audit: type=1800 audit(1718674185.520:14): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 167.500700][ T29] audit: type=1804 audit(1718674185.530:15): pid=8725 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir126571132/syzkaller.NOfRbr/262/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 167.540407][ T29] audit: type=1804 audit(1718674185.620:16): pid=8727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir126571132/syzkaller.NOfRbr/262/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 167.806131][ T8736] vlan2: entered promiscuous mode [ 167.811241][ T8736] macvlan1: entered promiscuous mode [ 167.846661][ T8736] vlan2: entered allmulticast mode [ 167.851835][ T8736] macvlan1: entered allmulticast mode [ 167.862961][ T8740] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.884832][ T8736] veth1_vlan: entered allmulticast mode [ 167.897233][ T8736] macvlan1: left allmulticast mode [ 167.902403][ T8736] veth1_vlan: left allmulticast mode [ 167.937643][ T8736] macvlan1: left promiscuous mode [ 167.956613][ T8747] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.029453][ T8743] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.231687][ T8759] ipt_ECN: cannot use operation on non-tcp rule [ 168.401995][ T8766] sit0: mtu greater than device maximum [ 168.453756][ T8767] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.464990][ C1] syz_tun: tun_net_xmit 118 [ 168.901387][ T8792] netlink: 4904 bytes leftover after parsing attributes in process `syz-executor.1'. [ 168.955040][ T8792] netlink: 1788 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.344436][ T8799] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.505002][ C1] syz_tun: tun_net_xmit 118 [ 169.736468][ T8815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.111724][ T8830] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 170.535003][ C1] syz_tun: tun_net_xmit 118 [ 170.574346][ T29] audit: type=1800 audit(1718674188.650:17): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 170.630734][ T29] audit: type=1804 audit(1718674188.650:18): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1546459323/syzkaller.ByBGXn/228/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 170.695112][ T29] audit: type=1804 audit(1718674188.750:19): pid=8842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1546459323/syzkaller.ByBGXn/228/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 171.216073][ T8858] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 171.575087][ C1] syz_tun: tun_net_xmit 118 [ 171.827388][ T8888] __nla_validate_parse: 2 callbacks suppressed [ 171.827410][ T8888] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 172.010887][ T8897] syz-executor.3[8897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.011135][ T8897] syz-executor.3[8897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.615058][ C1] syz_tun: tun_net_xmit 118 [ 172.693929][ T8912] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.665380][ C1] syz_tun: tun_net_xmit 118 [ 173.761736][ T8951] syzkaller1: entered promiscuous mode [ 173.790456][ T8951] syzkaller1: entered allmulticast mode [ 173.870766][ T8959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 173.961151][ T8959] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.968390][ T8959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.021703][ T8964] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.071305][ T8969] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.544153][ T8986] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 174.695123][ C1] syz_tun: tun_net_xmit 118 [ 174.958401][ T9002] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 174.998618][ T9002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.333094][ T9014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.366980][ T9014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 175.735247][ C1] syz_tun: tun_net_xmit 118 [ 175.998199][ T9039] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 176.181672][ T9043] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 176.246711][ T9043] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 176.309562][ T9043] bond1: (slave vcan1): making interface the new active one [ 176.327603][ T9043] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 176.350445][ T9049] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.471022][ T9043] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 176.486745][ T9054] Bluetooth: MGMT ver 1.22 [ 176.769050][ T9066] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 176.777334][ C1] syz_tun: tun_net_xmit 118 [ 176.795246][ T9066] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 176.817202][ T9066] netlink: 181400 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.924819][ T9072] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.010077][ T29] audit: type=1804 audit(1718674195.090:20): pid=9075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1195140547/syzkaller.7YDxz4/45/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 177.035105][ T9066] can: request_module (can-proto-0) failed. [ 177.352394][ T9084] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 177.498455][ T9090] xt_CT: You must specify a L4 protocol and not use inversions on it [ 177.625241][ T9100] pim6reg1: entered promiscuous mode [ 177.642570][ T9100] pim6reg1: entered allmulticast mode [ 177.815180][ C1] syz_tun: tun_net_xmit 118 [ 178.496118][ T9154] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 178.519633][ T9154] netlink: 9348 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.535388][ T5116] Bluetooth: hci2: command 0x0c1a tx timeout [ 178.536189][ T9154] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 178.544628][ T5118] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 178.556119][ T9154] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.578882][ T9157] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 178.609163][ T9157] team0: Port device netdevsim0 added [ 178.855195][ C1] syz_tun: tun_net_xmit 118 [ 179.544382][ T9222] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 179.895183][ C1] syz_tun: tun_net_xmit 162 [ 180.125724][ T9243] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.165094][ T9243] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.203036][ T9247] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.589252][ T9271] €: renamed from bond0 (while UP) [ 180.935965][ C1] syz_tun: tun_net_xmit 162 [ 181.747764][ T9322] pim6reg1: entered promiscuous mode [ 181.753109][ T9322] pim6reg1: entered allmulticast mode [ 181.975293][ C1] syz_tun: tun_net_xmit 162 [ 182.354821][ T9335] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 182.407737][ T9342] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 182.547753][ T9347] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 182.574994][ T9347] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 182.596278][ T9347] bond1: (slave vcan1): making interface the new active one [ 182.604720][ T9347] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 182.711431][ T9347] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.957521][ T9364] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 183.015203][ C1] syz_tun: tun_net_xmit 162 [ 184.055091][ C1] syz_tun: tun_net_xmit 162 [ 184.105777][ T9400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.454880][ T9417] tipc: Started in network mode [ 184.466544][ T9417] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 184.482587][ T9417] tipc: Enabled bearer , priority 10 [ 184.496537][ T9416] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.503705][ T9416] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.584051][ T9419] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.095276][ C1] syz_tun: tun_net_xmit 162 [ 185.410124][ T9457] xt_CT: You must specify a L4 protocol and not use inversions on it [ 185.437399][ T9459] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.444527][ T9459] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.595114][ T8] tipc: Node number set to 8432298 [ 185.756672][ T9466] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 185.939550][ T9482] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.135229][ C1] syz_tun: tun_net_xmit 162 [ 186.404107][ T9503] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.411416][ T9503] bridge0: port 1(bridge_slave_0) entered forwarding state [ 186.455019][ T5110] Bluetooth: hci0: command 0x0406 tx timeout [ 186.461162][ T4489] Bluetooth: hci2: command 0x0c1a tx timeout [ 186.467405][ T4489] Bluetooth: hci4: command 0x0405 tx timeout [ 187.069803][ T9529] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.175192][ C1] syz_tun: tun_net_xmit 162 [ 187.302134][ T9540] can: request_module (can-proto-0) failed. [ 187.354882][ T9544] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.475676][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.602182][ T9550] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.676141][ T9555] veth0_vlan: entered allmulticast mode [ 188.039842][ T9584] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.050003][ T29] audit: type=1804 audit(1718674206.130:21): pid=9578 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1195140547/syzkaller.7YDxz4/81/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 188.086243][ T9584] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.215627][ C1] syz_tun: tun_net_xmit 162 [ 188.368329][ T9595] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 188.385293][ T9595] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 188.496597][ T9605] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 188.564211][ T9609] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 188.575796][ T9609] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 188.585342][ T9609] team0: entered promiscuous mode [ 188.590394][ T9609] team_slave_0: entered promiscuous mode [ 188.597391][ T9609] team_slave_1: entered promiscuous mode [ 188.604880][ T9609] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.612043][ T9609] batman_adv: batadv0: Interface activated: team0 [ 188.619075][ T9609] batman_adv: batadv0: Interface deactivated: team0 [ 188.626139][ T9609] batman_adv: batadv0: Removing interface: team0 [ 188.636050][ T9609] bridge0: port 3(team0) entered blocking state [ 188.642611][ T9609] bridge0: port 3(team0) entered disabled state [ 188.649231][ T9609] team0: entered allmulticast mode [ 188.654493][ T9609] team_slave_0: entered allmulticast mode [ 188.660420][ T9609] team_slave_1: entered allmulticast mode [ 188.668747][ T9609] bridge0: port 3(team0) entered blocking state [ 188.675170][ T9609] bridge0: port 3(team0) entered forwarding state [ 189.089824][ T29] audit: type=1804 audit(1718674207.170:22): pid=9623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1195140547/syzkaller.7YDxz4/88/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 189.255258][ C1] syz_tun: tun_net_xmit 162 [ 189.534598][ T9648] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.877295][ T9670] syz-executor.1[9670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.877442][ T9670] syz-executor.1[9670] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.952974][ T9674] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 189.973281][ T9674] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.120682][ T29] audit: type=1804 audit(1718674208.200:23): pid=9676 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1568273131/syzkaller.b9QUcy/263/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 190.257613][ T9687] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 190.295342][ C1] syz_tun: tun_net_xmit 162 [ 190.316344][ T9687] 8021q: adding VLAN 0 to HW filter on device bond1 [ 190.480733][ T9699] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.943868][ T9732] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 191.026292][ T29] audit: type=1804 audit(1718674209.110:24): pid=9731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1568273131/syzkaller.b9QUcy/267/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 191.199239][ T9740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.243868][ T9740] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.281922][ T29] audit: type=1804 audit(1718674209.360:25): pid=9743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir126571132/syzkaller.NOfRbr/342/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 191.335311][ C1] syz_tun: tun_net_xmit 162 [ 191.709457][ T29] audit: type=1804 audit(1718674209.790:26): pid=9768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1195140547/syzkaller.7YDxz4/95/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 191.977486][ T9779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.375367][ C1] syz_tun: tun_net_xmit 162 [ 192.956777][ T9819] dccp_invalid_packet: P.Data Offset(97) too large [ 193.219305][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.238341][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.247193][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.269768][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.277819][ T5116] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 193.295356][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.415217][ C1] syz_tun: tun_net_xmit 162 [ 193.525946][ T9837] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.812206][ T9826] chnl_net:caif_netlink_parms(): no params data found [ 193.819605][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 193.828624][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 193.932752][ T5109] syz_tun (unregistering): left promiscuous mode [ 194.277658][ T9826] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.305994][ T9826] bridge0: port 1(bridge_slave_0) entered disabled state [ 194.324192][ T9826] bridge_slave_0: entered allmulticast mode [ 194.346413][ T9826] bridge_slave_0: entered promiscuous mode [ 194.373168][ T9826] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.405295][ T9826] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.418778][ T9826] bridge_slave_1: entered allmulticast mode [ 194.438015][ T9826] bridge_slave_1: entered promiscuous mode [ 194.455107][ C1] syz_tun: tun_net_xmit 162 [ 194.479388][ T9867] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.486623][ T9867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.639564][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.671827][ T9826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.718751][ T9826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.746519][ T9878] xt_CT: You must specify a L4 protocol and not use inversions on it [ 194.800676][ T9878] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.835419][ T9878] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 194.927890][ T9826] team0: Port device team_slave_0 added [ 194.949966][ T9826] team0: Port device team_slave_1 added [ 195.151702][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.157040][ T9894] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'. [ 195.179198][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.225195][ T9900] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:0 [ 195.265177][ T9826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.307234][ T9826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.314223][ T9826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.353542][ T53] Bluetooth: hci5: command tx timeout [ 195.384951][ T9826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.495339][ C1] syz_tun: tun_net_xmit 162 [ 195.637716][ T9826] hsr_slave_0: entered promiscuous mode [ 195.663151][ T9826] hsr_slave_1: entered promiscuous mode [ 195.701164][ T9826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.728526][ T9826] Cannot create hsr debugfs directory [ 195.758993][ T9913] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.766204][ T9913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.010338][ T9916] vlan2: entered promiscuous mode [ 196.393163][ T9826] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.535303][ T2437] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 196.546085][ C1] syz_tun: tun_net_xmit 162 [ 196.620950][ T9826] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.783006][ T9826] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.975505][ T9826] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.016469][ T9939] tipc: Enabled bearer , priority 10 [ 197.221715][ T9826] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.233725][ T9826] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.253553][ T9826] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.287381][ T9826] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.425995][ T53] Bluetooth: hci5: command tx timeout [ 197.559473][ T9826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.575164][ C1] syz_tun: tun_net_xmit 162 [ 197.658424][ T9826] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.688007][ T9943] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.733100][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.740329][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 197.808925][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 197.816148][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.932180][ T9958] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.975510][ T9958] vlan2: entered promiscuous mode [ 198.044610][ T9826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 198.557562][ T9826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.615355][ C1] syz_tun: tun_net_xmit 162 [ 198.687911][ T9826] veth0_vlan: entered promiscuous mode [ 198.723855][ T9826] veth1_vlan: entered promiscuous mode [ 198.837949][ T9826] veth0_macvtap: entered promiscuous mode [ 198.879048][ T9826] veth1_macvtap: entered promiscuous mode [ 198.960910][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.996244][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.025571][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.063641][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.105691][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.129043][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.148987][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.167974][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.194246][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.233303][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.260520][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.287038][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.306062][ T9826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.349643][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.388919][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.409493][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.425142][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.445186][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.472372][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.495202][ T53] Bluetooth: hci5: command tx timeout [ 199.503254][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.533546][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.572727][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.615217][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.641752][ T9826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.655330][ C1] syz_tun: tun_net_xmit 162 [ 199.673263][ T9826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.706890][ T9826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 199.760496][ T9992] tipc: Enabling of bearer rejected, already enabled [ 199.840254][ T9826] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.874981][ T9826] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.893557][ T9826] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.923620][ T9826] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.187512][ T2839] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.215163][ T2839] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.349170][ T1053] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.408495][ T1053] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.438670][ T9996] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 200.613481][T10000] No such timeout policy "syz0" [ 200.644350][T10003] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 200.681847][T10003] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.695493][ C1] syz_tun: tun_net_xmit 162 [ 201.273971][T10028] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 201.317712][T10028] vlan2: entered promiscuous mode [ 201.415580][T10029] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.585594][ T53] Bluetooth: hci5: command tx timeout [ 201.698238][T10033] tipc: Started in network mode [ 201.715291][T10033] tipc: Node identity 26b24002833d, cluster identity 4711 [ 201.722912][T10033] tipc: Enabled bearer , priority 10 [ 201.735265][ C1] syz_tun: tun_net_xmit 162 [ 201.923726][T10042] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 202.236031][ C0] syz_tun: tun_net_xmit 54 [ 202.319146][T10057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.353081][T10057] vlan2: entered promiscuous mode [ 202.582513][T10069] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 202.588952][T10070] bridge0: port 2(bridge_slave_1) entered listening state [ 202.618002][T10069] netlink: 203156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.706046][T10072] tipc: Resetting bearer [ 202.724282][T10072] tipc: Resetting bearer [ 202.762852][T10072] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.775294][ C1] syz_tun: tun_net_xmit 162 [ 202.789547][T10072] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.837528][ T45] tipc: Node number set to 2777628674 [ 202.872646][T10072] tipc: Resetting bearer [ 202.890773][T10072] tipc: Resetting bearer [ 203.134447][T10077] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 203.260927][T10085] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 203.302685][T10085] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.454694][T10097] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 203.474875][T10097] nbd: illegal input index -1708589048 [ 203.475658][ T58] tipc: Resetting bearer [ 203.509013][ T58] tipc: Resetting bearer [ 203.606404][ T5161] IPVS: starting estimator thread 0... [ 203.687290][T10112] tipc: Enabling of bearer rejected, already enabled [ 203.705027][T10110] IPVS: using max 18 ests per chain, 43200 per kthread [ 203.815304][ C1] syz_tun: tun_net_xmit 162 [ 203.980762][T10117] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 204.453459][T10133] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 204.485314][T10133] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 204.506829][T10133] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 204.761362][T10143] dccp_invalid_packet: P.Data Offset(6) too small [ 204.871470][ C1] syz_tun: tun_net_xmit 162 [ 204.945578][T10152] xt_connbytes: Forcing CT accounting to be enabled [ 204.958068][T10153] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.965271][T10153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.972678][T10152] xt_CT: You must specify a L4 protocol and not use inversions on it [ 205.221181][T10162] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 205.367169][ T29] audit: type=1804 audit(1718674223.440:27): pid=10165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1441640609/syzkaller.i1rO6K/241/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 205.514418][ T29] audit: type=1804 audit(1718674223.490:28): pid=10163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3185482595/syzkaller.CkM0AO/8/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 205.690094][ T29] audit: type=1804 audit(1718674223.760:29): pid=10156 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3185482595/syzkaller.CkM0AO/8/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 205.895493][ C1] syz_tun: tun_net_xmit 162 [ 206.163767][T10181] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 206.625754][T10195] tipc: Enabling of bearer rejected, already enabled [ 206.766239][T10204] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.773436][T10204] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.806933][ T29] audit: type=1804 audit(1718674224.890:30): pid=10203 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3185482595/syzkaller.CkM0AO/12/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 206.935071][ C1] syz_tun: tun_net_xmit 162 [ 206.954389][T10213] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 207.085566][ T29] audit: type=1804 audit(1718674225.170:31): pid=10212 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1441640609/syzkaller.i1rO6K/245/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 207.205508][ T29] audit: type=1804 audit(1718674225.290:32): pid=10220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3185482595/syzkaller.CkM0AO/13/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 207.513424][T10235] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 207.659029][T10241] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.666296][T10241] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.935679][T10244] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.973468][T10244] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.983383][ C1] syz_tun: tun_net_xmit 162 [ 208.035565][ T29] audit: type=1804 audit(1718674226.120:33): pid=10247 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3185482595/syzkaller.CkM0AO/15/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 208.211702][T10257] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 208.231767][ T29] audit: type=1804 audit(1718674226.310:34): pid=10249 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir126571132/syzkaller.NOfRbr/378/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 208.258884][T10257] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 208.269524][T10257] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 208.284237][T10259] syzkaller0: entered promiscuous mode [ 208.312518][ T29] audit: type=1804 audit(1718674226.390:35): pid=10255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir126571132/syzkaller.NOfRbr/378/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 208.327223][T10259] syzkaller0: entered allmulticast mode [ 208.429879][T10268] tipc: Resetting bearer [ 208.487279][T10268] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.509589][T10268] team0: Port device batadv0 added [ 208.572399][T10273] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.593683][T10273] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.618420][T10273] (unnamed net_device) (uninitialized): down delay (37750) is not a multiple of miimon (7), value rounded to 37744 ms [ 208.641997][T10279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.779511][T10289] dccp_invalid_packet: P.Data Offset(0) too small [ 208.960373][T10295] syz_tun: tun_net_xmit 86 [ 208.999272][T10293] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.015195][ C1] syz_tun: tun_net_xmit 162 [ 209.210948][T10303] tipc: Enabling of bearer rejected, already enabled [ 209.713973][ T29] audit: type=1804 audit(1718674227.790:36): pid=10318 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir126571132/syzkaller.NOfRbr/382/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 209.980234][ C1] syz_tun: tun_net_xmit 86 [ 210.055350][ C1] syz_tun: tun_net_xmit 162 [ 210.264850][T10343] batadv_slave_0: entered allmulticast mode [ 210.274204][T10343] pim6reg: left allmulticast mode [ 210.279821][T10343] batadv_slave_0: left allmulticast mode [ 210.599599][ T29] audit: type=1804 audit(1718674228.680:37): pid=10361 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3185482595/syzkaller.CkM0AO/26/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 210.847812][T10378] tipc: Enabling of bearer rejected, already enabled [ 210.906737][ T29] audit: type=1804 audit(1718674228.990:38): pid=10382 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1195140547/syzkaller.7YDxz4/139/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 211.015765][ C1] syz_tun: tun_net_xmit 86 [ 211.095079][ C1] syz_tun: tun_net_xmit 162 [ 211.272889][T10410] __nla_validate_parse: 2 callbacks suppressed [ 211.272908][T10410] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.307789][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 211.358486][ T29] audit: type=1804 audit(1718674229.440:39): pid=10409 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1195140547/syzkaller.7YDxz4/142/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 211.423380][T10413] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.430590][T10413] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.460538][ T29] audit: type=1804 audit(1718674229.540:40): pid=10416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir126571132/syzkaller.NOfRbr/389/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 211.532503][ T29] audit: type=1804 audit(1718674229.540:41): pid=10416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir126571132/syzkaller.NOfRbr/389/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 211.583227][ T29] audit: type=1804 audit(1718674229.540:42): pid=10416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir126571132/syzkaller.NOfRbr/389/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 211.800955][T10424] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.904288][T10437] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 211.920300][T10437] x_tables: duplicate underflow at hook 3 [ 211.933800][T10439] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.135198][ C1] syz_tun: tun_net_xmit 162 [ 212.241034][ T29] audit: type=1804 audit(1718674230.320:43): pid=10461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1195140547/syzkaller.7YDxz4/146/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 212.244176][T10461] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.288877][ T29] audit: type=1804 audit(1718674230.370:44): pid=10466 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1441640609/syzkaller.i1rO6K/254/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 212.333825][ T29] audit: type=1804 audit(1718674230.410:45): pid=10459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir126571132/syzkaller.NOfRbr/390/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 212.604746][T10482] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 212.614435][ T29] audit: type=1804 audit(1718674230.680:46): pid=10482 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1568273131/syzkaller.b9QUcy/328/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 212.894814][T10495] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 212.952896][T10495] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 212.975233][ C1] syz_tun: tun_net_xmit 54 [ 213.117660][T10505] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 213.155375][ C1] syz_tun: tun_net_xmit 54 [ 213.177258][ C1] syz_tun: tun_net_xmit 162 [ 213.290976][T10521] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.330940][T10519] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.666086][T10542] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.758997][T10538] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 214.075483][ T2812] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.201727][T10573] IPVS: wrr: TCP 172.20.20.187:0 - no destination available [ 214.225371][ C1] syz_tun: tun_net_xmit 162 [ 214.300814][ T2812] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.542653][ T2812] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.556646][T10591] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 214.587814][T10591] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.762359][ T2812] team0: Port device netdevsim0 removed [ 214.781835][ T2812] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.114609][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 215.128004][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 215.138845][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 215.160145][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 215.167805][ T2812] bridge_slave_1: left allmulticast mode [ 215.178812][ T5116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 215.187099][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 215.191944][ T2812] bridge_slave_1: left promiscuous mode [ 215.223588][ T2812] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.255081][ C1] syz_tun: tun_net_xmit 162 [ 215.261519][ T2812] bridge_slave_0: left allmulticast mode [ 215.270635][ T2812] bridge_slave_0: left promiscuous mode [ 215.285209][ T2812] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.415916][T10620] IPVS: wrr: TCP 172.20.20.187:0 - no destination available [ 215.682737][T10634] xt_CT: You must specify a L4 protocol and not use inversions on it [ 216.005879][ T2812] € (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.018289][ T2812] € (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.028561][ T2812] € (unregistering): Released all slaves [ 216.043026][ T2812] bond0 (unregistering): Released all slaves [ 216.272077][ T2812] tipc: Disabling bearer [ 216.285854][ T2812] tipc: Disabling bearer [ 216.295461][ C1] syz_tun: tun_net_xmit 162 [ 216.318983][ T2812] tipc: Left network mode [ 216.532560][T10657] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 217.116881][T10608] chnl_net:caif_netlink_parms(): no params data found [ 217.129151][T10671] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.169519][T10672] syzkaller0: entered promiscuous mode [ 217.175840][T10672] syzkaller0: entered allmulticast mode [ 217.255672][ T5116] Bluetooth: hci0: command tx timeout [ 217.335379][ C1] syz_tun: tun_net_xmit 162 [ 217.485818][T10690] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.380087][ C1] syz_tun: tun_net_xmit 162 [ 218.822927][ T2812] hsr_slave_0: left promiscuous mode [ 218.839814][ T2812] hsr_slave_1: left promiscuous mode [ 218.866886][ T2812] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.898234][ T2812] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.919934][ T2812] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.933481][ T2812] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.984135][ T2812] veth1_macvtap: left promiscuous mode [ 218.989946][ T2812] veth0_macvtap: left promiscuous mode [ 219.000182][ T2812] veth1_vlan: left promiscuous mode [ 219.010236][ T2812] veth0_vlan: left promiscuous mode [ 219.347197][ T5116] Bluetooth: hci0: command tx timeout [ 219.416808][ C1] syz_tun: tun_net_xmit 162 [ 219.516499][ T2812] team0 (unregistering): Port device team_slave_1 removed [ 219.561487][ T2812] team0 (unregistering): Port device team_slave_0 removed [ 219.802743][ T2812] team0 (unregistering): Port device batadv0 removed [ 219.973865][T10698] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 220.005902][T10698] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 220.024165][T10706] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.098413][T10706] bond0: (slave syz_tun): Releasing backup interface [ 220.253565][T10726] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.274186][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.350203][T10608] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.358496][T10608] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.369232][T10608] bridge_slave_0: entered allmulticast mode [ 220.395020][T10608] bridge_slave_0: entered promiscuous mode [ 220.413963][T10608] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.437371][T10608] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.444634][T10608] bridge_slave_1: entered allmulticast mode [ 220.466411][T10608] bridge_slave_1: entered promiscuous mode [ 221.001858][T10608] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.042313][T10608] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.069292][T10741] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 221.144589][T10608] team0: Port device team_slave_0 added [ 221.174828][T10608] team0: Port device team_slave_1 added [ 221.277337][T10608] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 221.284660][T10608] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.301185][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 221.301200][ T29] audit: type=1800 audit(1718674239.380:48): pid=10757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 221.328554][T10608] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 221.368188][T10608] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 221.381551][T10608] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.418539][T10608] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 221.433215][ T5116] Bluetooth: hci0: command tx timeout [ 221.570565][ T2812] IPVS: stop unused estimator thread 0... [ 221.628954][T10756] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 221.676848][T10756] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 221.686280][T10608] hsr_slave_0: entered promiscuous mode [ 221.734419][T10608] hsr_slave_1: entered promiscuous mode [ 221.753918][T10608] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 221.770687][T10608] Cannot create hsr debugfs directory [ 222.328902][T10794] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 222.456176][T10799] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147221507 (only 8 groups) [ 222.558102][T10608] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 222.576048][T10608] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 222.594161][T10608] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 222.617239][T10608] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 222.992102][T10808] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 223.204492][T10608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.290049][T10608] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.323214][T10825] bond0: entered promiscuous mode [ 223.359851][T10825] bond_slave_0: entered promiscuous mode [ 223.392548][T10825] bond_slave_1: entered promiscuous mode [ 223.419415][T10825] bond0: left promiscuous mode [ 223.424242][T10825] bond_slave_0: left promiscuous mode [ 223.446497][T10825] bond_slave_1: left promiscuous mode [ 223.464108][ T29] audit: type=1800 audit(1718674241.540:49): pid=10834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 223.508398][ T5116] Bluetooth: hci0: command tx timeout [ 223.555360][ T5245] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.562513][ T5245] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.630588][ T5245] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.637820][ T5245] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.850754][T10842] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 224.071580][T10608] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.198863][T10608] veth0_vlan: entered promiscuous mode [ 224.228173][T10608] veth1_vlan: entered promiscuous mode [ 224.338400][T10608] veth0_macvtap: entered promiscuous mode [ 224.377620][T10608] veth1_macvtap: entered promiscuous mode [ 224.448416][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.472207][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.483886][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.495560][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.505909][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.545283][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.561815][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.573954][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.592636][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.605364][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.616672][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 224.628001][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.641890][T10608] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 224.743871][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.758933][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.770035][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.782912][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.793600][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.806801][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.819365][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.830540][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.840867][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.851868][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.863129][T10608] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 224.874209][T10608] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 224.889904][T10608] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 224.914509][T10608] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.928739][T10608] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.941543][T10608] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 224.950766][T10608] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.132328][ T1053] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.157096][ T1053] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.202944][T10863] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 225.222422][T10863] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.273223][T10863] erspan0: refused to change device tx_queue_len [ 225.343780][T10863] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 225.428243][T10872] xt_CT: You must specify a L4 protocol and not use inversions on it [ 225.446486][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.454344][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.473718][ T51] team0: left allmulticast mode [ 225.504830][ T51] team_slave_1: left allmulticast mode [ 225.513337][ T51] bridge0: port 3(team0) entered disabled state [ 225.547449][ T51] bridge_slave_1: left allmulticast mode [ 225.566718][ T51] bridge_slave_1: left promiscuous mode [ 225.572509][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.616055][ T51] bridge_slave_0: left allmulticast mode [ 225.621745][ T51] bridge_slave_0: left promiscuous mode [ 225.639389][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.227856][ T51] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 226.597999][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.632865][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.663625][ T51] bond0 (unregistering): Released all slaves [ 226.680118][ T51] bond1 (unregistering): Released all slaves [ 226.691214][T10870] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 226.889953][T10888] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 227.233437][T10892] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 227.243280][T10892] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.537321][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.765071][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 255.774245][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 255.790282][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 255.810153][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 255.825526][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 255.832927][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 256.058792][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.704869][ T5118] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 256.714733][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 256.723550][ T5118] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 256.736635][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 256.744428][ T5118] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 256.760524][ T5118] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 257.243737][ T5116] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 257.254868][ T5116] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 257.263172][ T5116] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 257.271867][ T5116] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 257.280528][ T5116] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 257.287900][ T5116] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 257.736197][ T5118] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 257.745345][ T5118] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 257.768560][ T5118] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 257.783643][ T5118] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 257.792406][ T5118] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 257.801589][ T5118] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 257.896377][ T5118] Bluetooth: hci1: command tx timeout [ 258.139190][ T53] Bluetooth: hci3: command 0x0405 tx timeout [ 258.781161][ T5118] Bluetooth: hci6: command tx timeout [ 259.345192][ T5118] Bluetooth: hci7: command tx timeout [ 259.825091][ T5118] Bluetooth: hci8: command tx timeout [ 259.975753][ T5118] Bluetooth: hci1: command tx timeout [ 260.535602][ T2437] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 260.855054][ T5118] Bluetooth: hci6: command tx timeout [ 261.416722][ T5118] Bluetooth: hci7: command tx timeout [ 261.895036][ T5118] Bluetooth: hci8: command tx timeout [ 262.065289][ T5118] Bluetooth: hci1: command tx timeout [ 262.945056][ T5118] Bluetooth: hci6: command tx timeout [ 263.504954][ T5118] Bluetooth: hci7: command tx timeout [ 263.975089][ T5118] Bluetooth: hci8: command tx timeout [ 264.135336][ T5118] Bluetooth: hci1: command tx timeout [ 265.016659][ T5118] Bluetooth: hci6: command tx timeout [ 265.575187][ T5118] Bluetooth: hci7: command tx timeout [ 266.055143][ T5118] Bluetooth: hci8: command tx timeout [ 279.944666][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 279.953951][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 279.963081][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 279.972701][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 279.981015][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 279.989336][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 282.055745][ T53] Bluetooth: hci9: command tx timeout [ 284.136456][ T53] Bluetooth: hci9: command tx timeout [ 286.217681][ T53] Bluetooth: hci9: command tx timeout [ 288.296609][ T53] Bluetooth: hci9: command tx timeout [ 292.546674][ T35] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 317.512100][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 321.092683][ T5118] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 321.102183][ T5118] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 321.112845][ T5118] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 321.121387][ T5118] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 321.129409][ T5118] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 321.137840][ T5118] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 321.695491][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 321.704281][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 321.719978][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 321.728348][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 321.736398][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 321.743822][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 322.228999][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 322.239677][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 322.247932][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 322.267781][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 322.281291][ T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 322.289242][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 322.744883][ T5118] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 322.754561][ T5118] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 322.762758][ T5118] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 322.771887][ T5118] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 322.782328][ T5118] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 322.791661][ T5118] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 323.176347][ T53] Bluetooth: hci10: command tx timeout [ 323.815178][ T53] Bluetooth: hci11: command tx timeout [ 324.375682][ T53] Bluetooth: hci12: command tx timeout [ 324.536164][ T11] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 324.866425][ T53] Bluetooth: hci13: command tx timeout [ 325.273883][ T53] Bluetooth: hci10: command tx timeout [ 325.905157][ T53] Bluetooth: hci11: command tx timeout [ 326.455237][ T53] Bluetooth: hci12: command tx timeout [ 326.935106][ T53] Bluetooth: hci13: command tx timeout [ 327.335121][ T53] Bluetooth: hci10: command tx timeout [ 327.975070][ T53] Bluetooth: hci11: command tx timeout [ 328.535168][ T53] Bluetooth: hci12: command tx timeout [ 329.015273][ T53] Bluetooth: hci13: command tx timeout [ 329.415256][ T53] Bluetooth: hci10: command tx timeout [ 330.055204][ T53] Bluetooth: hci11: command tx timeout [ 330.615256][ T53] Bluetooth: hci12: command tx timeout [ 331.095304][ T53] Bluetooth: hci13: command tx timeout [ 340.062600][ T4489] Bluetooth: hci5: command 0x0406 tx timeout [ 340.062608][ T5118] Bluetooth: hci0: command 0x0406 tx timeout [ 345.055053][ T5116] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 345.064538][ T5116] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 345.073401][ T5116] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 345.082855][ T5116] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 345.098379][ T5116] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 345.108996][ T5116] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 347.185217][ T5116] Bluetooth: hci14: command tx timeout [ 349.257179][ T5116] Bluetooth: hci14: command tx timeout [ 351.335082][ T5116] Bluetooth: hci14: command tx timeout [ 353.415225][ T5116] Bluetooth: hci14: command tx timeout [ 356.536002][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 378.945548][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.020767][T10930] Bluetooth: hci7: command 0x0406 tx timeout [ 381.028176][ T5110] Bluetooth: hci8: command 0x0406 tx timeout [ 381.034236][ T5110] Bluetooth: hci6: command 0x0406 tx timeout [ 381.045313][T10930] Bluetooth: hci1: command 0x0406 tx timeout [ 385.335212][ T30] INFO: task kworker/u8:3:51 blocked for more than 143 seconds. [ 385.343787][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 385.363989][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/18 01:33:23 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 385.375957][ T30] task:kworker/u8:3 state:D stack:20120 pid:51 tgid:51 ppid:2 flags:0x00004000 [ 385.407776][ T30] Workqueue: netns cleanup_net [ 385.412648][ T30] Call Trace: [ 385.424875][ T30] [ 385.428162][ T30] __schedule+0x17e8/0x4a20 [ 385.432715][ T30] ? __pfx___schedule+0x10/0x10 [ 385.437858][ T30] ? __pfx_lock_release+0x10/0x10 [ 385.445359][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 385.450865][ T30] ? kthread_data+0x52/0xd0 [ 385.456709][ T30] ? schedule+0x90/0x320 [ 385.460974][ T30] ? wq_worker_sleeping+0x66/0x240 [ 385.466230][ T30] ? schedule+0x90/0x320 [ 385.470490][ T30] schedule+0x14b/0x320 [ 385.474666][ T30] schedule_preempt_disabled+0x13/0x30 [ 385.482049][ T30] __mutex_lock+0x6a4/0xd70 [ 385.487787][ T30] ? __mutex_lock+0x527/0xd70 [ 385.492588][ T30] ? tipc_net_stop+0x7f/0xf0 [ 385.497451][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 385.502498][ T30] ? ret_from_fork_asm+0x1a/0x30 [ 385.507811][ T30] ? net_generic+0x1f/0x240 [ 385.512344][ T30] tipc_net_stop+0x7f/0xf0 [ 385.516828][ T30] tipc_exit_net+0x3d/0x140 [ 385.521372][ T30] cleanup_net+0x802/0xcc0 [ 385.525991][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 385.530969][ T30] ? process_scheduled_works+0x945/0x1830 [ 385.536899][ T30] process_scheduled_works+0xa2c/0x1830 [ 385.542525][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 385.565162][ T30] ? assign_work+0x364/0x3d0 [ 385.569825][ T30] worker_thread+0x86d/0xd70 [ 385.574442][ T30] ? __kthread_parkme+0x169/0x1d0 [ 385.594958][ T30] ? __pfx_worker_thread+0x10/0x10 [ 385.600139][ T30] kthread+0x2f0/0x390 [ 385.604228][ T30] ? __pfx_worker_thread+0x10/0x10 [ 385.625064][ T30] ? __pfx_kthread+0x10/0x10 [ 385.629729][ T30] ret_from_fork+0x4b/0x80 [ 385.634168][ T30] ? __pfx_kthread+0x10/0x10 [ 385.655268][ T30] ret_from_fork_asm+0x1a/0x30 [ 385.660117][ T30] [ 385.663228][ T30] INFO: task kworker/u8:6:1053 blocked for more than 143 seconds. [ 385.685026][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 385.692717][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 385.725053][ T30] task:kworker/u8:6 state:D stack:19760 pid:1053 tgid:1053 ppid:2 flags:0x00004000 [ 385.744983][ T30] Workqueue: ipv6_addrconf addrconf_dad_work [ 385.751944][ T30] Call Trace: [ 385.765065][ T30] [ 385.768036][ T30] __schedule+0x17e8/0x4a20 [ 385.772583][ T30] ? __pfx___schedule+0x10/0x10 [ 385.784988][ T30] ? __pfx_lock_release+0x10/0x10 [ 385.790067][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 385.805042][ T30] ? kthread_data+0x52/0xd0 [ 385.809620][ T30] ? schedule+0x90/0x320 [ 385.813885][ T30] ? wq_worker_sleeping+0x66/0x240 [ 385.836070][ T30] ? schedule+0x90/0x320 [ 385.840379][ T30] schedule+0x14b/0x320 [ 385.844558][ T30] schedule_preempt_disabled+0x13/0x30 [