Warning: Permanently added '10.128.1.173' (ECDSA) to the list of known hosts. 2021/10/18 13:10:04 fuzzer started 2021/10/18 13:10:04 dialing manager at 10.128.0.169:45165 2021/10/18 13:10:07 syscalls: 1698 2021/10/18 13:10:07 code coverage: enabled 2021/10/18 13:10:07 comparison tracing: enabled 2021/10/18 13:10:07 extra coverage: enabled 2021/10/18 13:10:07 setuid sandbox: enabled 2021/10/18 13:10:07 namespace sandbox: enabled 2021/10/18 13:10:07 Android sandbox: /sys/fs/selinux/policy does not exist 2021/10/18 13:10:07 fault injection: enabled 2021/10/18 13:10:07 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/10/18 13:10:07 net packet injection: enabled 2021/10/18 13:10:07 net device setup: enabled 2021/10/18 13:10:07 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/10/18 13:10:07 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/10/18 13:10:07 USB emulation: enabled 2021/10/18 13:10:07 hci packet injection: enabled 2021/10/18 13:10:07 wifi device emulation: enabled 2021/10/18 13:10:07 802.15.4 emulation: enabled 2021/10/18 13:10:07 fetching corpus: 0, signal 0/2000 (executing program) syzkaller login: [ 69.551992][ T6542] cgroup: Unknown subsys name 'net' [ 69.567363][ T6542] cgroup: Unknown subsys name 'rlimit' 2021/10/18 13:10:08 fetching corpus: 50, signal 41711/45118 (executing program) 2021/10/18 13:10:08 fetching corpus: 100, signal 52148/57059 (executing program) 2021/10/18 13:10:08 fetching corpus: 150, signal 61508/67770 (executing program) 2021/10/18 13:10:08 fetching corpus: 200, signal 70270/77727 (executing program) 2021/10/18 13:10:08 fetching corpus: 250, signal 76287/84947 (executing program) 2021/10/18 13:10:08 fetching corpus: 300, signal 84116/93855 (executing program) 2021/10/18 13:10:08 fetching corpus: 350, signal 89004/99838 (executing program) 2021/10/18 13:10:09 fetching corpus: 400, signal 93505/105376 (executing program) 2021/10/18 13:10:09 fetching corpus: 450, signal 96940/109870 (executing program) 2021/10/18 13:10:09 fetching corpus: 500, signal 100776/114665 (executing program) [ 71.116487][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.123118][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 2021/10/18 13:10:09 fetching corpus: 550, signal 103291/118256 (executing program) 2021/10/18 13:10:09 fetching corpus: 600, signal 107098/122924 (executing program) 2021/10/18 13:10:09 fetching corpus: 650, signal 110497/127192 (executing program) 2021/10/18 13:10:09 fetching corpus: 699, signal 114355/131763 (executing program) 2021/10/18 13:10:09 fetching corpus: 748, signal 117646/135776 (executing program) 2021/10/18 13:10:10 fetching corpus: 798, signal 120918/139820 (executing program) 2021/10/18 13:10:10 fetching corpus: 848, signal 123728/143362 (executing program) 2021/10/18 13:10:10 fetching corpus: 897, signal 126430/146814 (executing program) 2021/10/18 13:10:10 fetching corpus: 946, signal 128673/149820 (executing program) 2021/10/18 13:10:10 fetching corpus: 996, signal 130612/152543 (executing program) 2021/10/18 13:10:10 fetching corpus: 1045, signal 133576/156130 (executing program) 2021/10/18 13:10:11 fetching corpus: 1095, signal 136029/159246 (executing program) 2021/10/18 13:10:11 fetching corpus: 1145, signal 137958/161856 (executing program) 2021/10/18 13:10:11 fetching corpus: 1195, signal 140137/164644 (executing program) 2021/10/18 13:10:11 fetching corpus: 1245, signal 141509/166767 (executing program) 2021/10/18 13:10:11 fetching corpus: 1295, signal 143356/169212 (executing program) 2021/10/18 13:10:11 fetching corpus: 1345, signal 144676/171251 (executing program) 2021/10/18 13:10:11 fetching corpus: 1395, signal 146200/173381 (executing program) 2021/10/18 13:10:11 fetching corpus: 1445, signal 147561/175402 (executing program) 2021/10/18 13:10:12 fetching corpus: 1494, signal 149245/177638 (executing program) 2021/10/18 13:10:12 fetching corpus: 1544, signal 150375/179391 (executing program) 2021/10/18 13:10:12 fetching corpus: 1594, signal 151579/181247 (executing program) 2021/10/18 13:10:12 fetching corpus: 1644, signal 153318/183430 (executing program) 2021/10/18 13:10:12 fetching corpus: 1694, signal 154981/185560 (executing program) 2021/10/18 13:10:12 fetching corpus: 1743, signal 156470/187515 (executing program) 2021/10/18 13:10:12 fetching corpus: 1793, signal 157843/189330 (executing program) 2021/10/18 13:10:12 fetching corpus: 1843, signal 158965/190987 (executing program) 2021/10/18 13:10:13 fetching corpus: 1893, signal 160584/192974 (executing program) 2021/10/18 13:10:13 fetching corpus: 1943, signal 161728/194583 (executing program) 2021/10/18 13:10:13 fetching corpus: 1993, signal 163031/196342 (executing program) 2021/10/18 13:10:13 fetching corpus: 2043, signal 164254/198003 (executing program) 2021/10/18 13:10:13 fetching corpus: 2093, signal 165490/199665 (executing program) 2021/10/18 13:10:14 fetching corpus: 2143, signal 166935/201466 (executing program) 2021/10/18 13:10:14 fetching corpus: 2193, signal 168427/203277 (executing program) 2021/10/18 13:10:14 fetching corpus: 2243, signal 169694/204838 (executing program) 2021/10/18 13:10:14 fetching corpus: 2293, signal 171131/206539 (executing program) 2021/10/18 13:10:14 fetching corpus: 2343, signal 172071/207911 (executing program) 2021/10/18 13:10:14 fetching corpus: 2393, signal 173958/209929 (executing program) 2021/10/18 13:10:14 fetching corpus: 2443, signal 175072/211343 (executing program) 2021/10/18 13:10:15 fetching corpus: 2493, signal 176204/212802 (executing program) 2021/10/18 13:10:15 fetching corpus: 2543, signal 177202/214151 (executing program) 2021/10/18 13:10:15 fetching corpus: 2593, signal 178522/215646 (executing program) 2021/10/18 13:10:15 fetching corpus: 2643, signal 179413/216833 (executing program) 2021/10/18 13:10:15 fetching corpus: 2692, signal 180306/218084 (executing program) 2021/10/18 13:10:15 fetching corpus: 2742, signal 181436/219404 (executing program) 2021/10/18 13:10:16 fetching corpus: 2792, signal 182549/220723 (executing program) 2021/10/18 13:10:16 fetching corpus: 2842, signal 183496/221923 (executing program) 2021/10/18 13:10:16 fetching corpus: 2892, signal 184556/223231 (executing program) 2021/10/18 13:10:16 fetching corpus: 2942, signal 185535/224374 (executing program) 2021/10/18 13:10:16 fetching corpus: 2992, signal 186526/225562 (executing program) 2021/10/18 13:10:16 fetching corpus: 3042, signal 187949/226925 (executing program) 2021/10/18 13:10:17 fetching corpus: 3091, signal 188947/228054 (executing program) 2021/10/18 13:10:17 fetching corpus: 3139, signal 189712/229073 (executing program) 2021/10/18 13:10:17 fetching corpus: 3189, signal 190449/230088 (executing program) 2021/10/18 13:10:17 fetching corpus: 3239, signal 191458/231233 (executing program) 2021/10/18 13:10:17 fetching corpus: 3289, signal 192568/232397 (executing program) 2021/10/18 13:10:17 fetching corpus: 3339, signal 193771/233587 (executing program) 2021/10/18 13:10:18 fetching corpus: 3389, signal 194519/234545 (executing program) 2021/10/18 13:10:18 fetching corpus: 3439, signal 195408/235549 (executing program) 2021/10/18 13:10:18 fetching corpus: 3489, signal 196121/236485 (executing program) 2021/10/18 13:10:18 fetching corpus: 3539, signal 196793/237390 (executing program) 2021/10/18 13:10:18 fetching corpus: 3589, signal 197479/238248 (executing program) 2021/10/18 13:10:18 fetching corpus: 3639, signal 198481/239262 (executing program) 2021/10/18 13:10:18 fetching corpus: 3689, signal 199673/240383 (executing program) 2021/10/18 13:10:18 fetching corpus: 3738, signal 200432/241246 (executing program) 2021/10/18 13:10:19 fetching corpus: 3787, signal 201067/242050 (executing program) 2021/10/18 13:10:19 fetching corpus: 3837, signal 201970/242962 (executing program) 2021/10/18 13:10:19 fetching corpus: 3887, signal 202723/243796 (executing program) 2021/10/18 13:10:19 fetching corpus: 3937, signal 203718/244687 (executing program) 2021/10/18 13:10:19 fetching corpus: 3987, signal 204419/245515 (executing program) 2021/10/18 13:10:19 fetching corpus: 4037, signal 205281/246388 (executing program) 2021/10/18 13:10:19 fetching corpus: 4087, signal 206046/247194 (executing program) 2021/10/18 13:10:20 fetching corpus: 4137, signal 206708/247970 (executing program) 2021/10/18 13:10:20 fetching corpus: 4187, signal 207540/248811 (executing program) 2021/10/18 13:10:20 fetching corpus: 4236, signal 208083/249540 (executing program) 2021/10/18 13:10:20 fetching corpus: 4286, signal 208611/250230 (executing program) 2021/10/18 13:10:20 fetching corpus: 4336, signal 209406/250998 (executing program) 2021/10/18 13:10:20 fetching corpus: 4386, signal 209880/251652 (executing program) 2021/10/18 13:10:21 fetching corpus: 4436, signal 210846/252486 (executing program) 2021/10/18 13:10:21 fetching corpus: 4486, signal 212249/253431 (executing program) 2021/10/18 13:10:21 fetching corpus: 4536, signal 212785/254041 (executing program) 2021/10/18 13:10:21 fetching corpus: 4586, signal 213502/254689 (executing program) 2021/10/18 13:10:21 fetching corpus: 4636, signal 214025/255331 (executing program) 2021/10/18 13:10:21 fetching corpus: 4686, signal 214631/255956 (executing program) 2021/10/18 13:10:21 fetching corpus: 4736, signal 215236/256590 (executing program) 2021/10/18 13:10:21 fetching corpus: 4786, signal 215682/257158 (executing program) 2021/10/18 13:10:21 fetching corpus: 4836, signal 216410/257787 (executing program) 2021/10/18 13:10:22 fetching corpus: 4885, signal 216949/258335 (executing program) 2021/10/18 13:10:22 fetching corpus: 4934, signal 217799/258964 (executing program) 2021/10/18 13:10:22 fetching corpus: 4984, signal 218518/259556 (executing program) 2021/10/18 13:10:22 fetching corpus: 5034, signal 219347/260191 (executing program) 2021/10/18 13:10:22 fetching corpus: 5083, signal 219895/260738 (executing program) 2021/10/18 13:10:22 fetching corpus: 5133, signal 220465/261292 (executing program) 2021/10/18 13:10:23 fetching corpus: 5182, signal 220981/261782 (executing program) 2021/10/18 13:10:23 fetching corpus: 5232, signal 221845/262361 (executing program) 2021/10/18 13:10:23 fetching corpus: 5282, signal 222402/262858 (executing program) 2021/10/18 13:10:23 fetching corpus: 5332, signal 223037/263380 (executing program) 2021/10/18 13:10:23 fetching corpus: 5381, signal 223782/263953 (executing program) 2021/10/18 13:10:23 fetching corpus: 5428, signal 224318/264409 (executing program) 2021/10/18 13:10:24 fetching corpus: 5478, signal 224833/264889 (executing program) 2021/10/18 13:10:24 fetching corpus: 5528, signal 225759/265432 (executing program) 2021/10/18 13:10:24 fetching corpus: 5578, signal 226720/265958 (executing program) 2021/10/18 13:10:24 fetching corpus: 5628, signal 227189/266412 (executing program) 2021/10/18 13:10:24 fetching corpus: 5678, signal 227789/266867 (executing program) 2021/10/18 13:10:24 fetching corpus: 5727, signal 228626/267327 (executing program) 2021/10/18 13:10:25 fetching corpus: 5776, signal 229040/267724 (executing program) 2021/10/18 13:10:25 fetching corpus: 5825, signal 229444/268128 (executing program) 2021/10/18 13:10:25 fetching corpus: 5875, signal 229964/268545 (executing program) 2021/10/18 13:10:25 fetching corpus: 5925, signal 230854/268995 (executing program) 2021/10/18 13:10:25 fetching corpus: 5975, signal 231372/269372 (executing program) 2021/10/18 13:10:25 fetching corpus: 6024, signal 231892/269748 (executing program) 2021/10/18 13:10:25 fetching corpus: 6074, signal 232381/270106 (executing program) 2021/10/18 13:10:26 fetching corpus: 6124, signal 232961/270469 (executing program) 2021/10/18 13:10:26 fetching corpus: 6174, signal 233452/270810 (executing program) 2021/10/18 13:10:26 fetching corpus: 6224, signal 233936/271186 (executing program) 2021/10/18 13:10:26 fetching corpus: 6274, signal 234532/271535 (executing program) 2021/10/18 13:10:26 fetching corpus: 6324, signal 235067/271850 (executing program) 2021/10/18 13:10:26 fetching corpus: 6374, signal 235699/272185 (executing program) 2021/10/18 13:10:26 fetching corpus: 6423, signal 236087/272499 (executing program) 2021/10/18 13:10:27 fetching corpus: 6473, signal 236542/272783 (executing program) 2021/10/18 13:10:27 fetching corpus: 6522, signal 236999/273081 (executing program) 2021/10/18 13:10:27 fetching corpus: 6572, signal 237394/273361 (executing program) 2021/10/18 13:10:27 fetching corpus: 6622, signal 237906/273647 (executing program) 2021/10/18 13:10:27 fetching corpus: 6672, signal 238280/273922 (executing program) 2021/10/18 13:10:27 fetching corpus: 6722, signal 238601/274198 (executing program) 2021/10/18 13:10:27 fetching corpus: 6772, signal 239143/274469 (executing program) 2021/10/18 13:10:28 fetching corpus: 6822, signal 239620/274544 (executing program) 2021/10/18 13:10:28 fetching corpus: 6872, signal 240013/274545 (executing program) 2021/10/18 13:10:28 fetching corpus: 6922, signal 240472/274545 (executing program) 2021/10/18 13:10:28 fetching corpus: 6972, signal 240869/274562 (executing program) 2021/10/18 13:10:28 fetching corpus: 7022, signal 241337/274562 (executing program) 2021/10/18 13:10:28 fetching corpus: 7072, signal 241735/274563 (executing program) 2021/10/18 13:10:28 fetching corpus: 7122, signal 242149/274563 (executing program) 2021/10/18 13:10:29 fetching corpus: 7172, signal 242602/274563 (executing program) 2021/10/18 13:10:29 fetching corpus: 7222, signal 243031/274563 (executing program) 2021/10/18 13:10:29 fetching corpus: 7271, signal 243420/274566 (executing program) 2021/10/18 13:10:29 fetching corpus: 7321, signal 244116/274566 (executing program) 2021/10/18 13:10:29 fetching corpus: 7371, signal 244769/274566 (executing program) 2021/10/18 13:10:29 fetching corpus: 7421, signal 245286/274574 (executing program) 2021/10/18 13:10:29 fetching corpus: 7470, signal 245641/274574 (executing program) 2021/10/18 13:10:29 fetching corpus: 7520, signal 246388/274574 (executing program) 2021/10/18 13:10:30 fetching corpus: 7569, signal 246844/274574 (executing program) 2021/10/18 13:10:30 fetching corpus: 7619, signal 247317/274574 (executing program) 2021/10/18 13:10:30 fetching corpus: 7669, signal 248091/274574 (executing program) 2021/10/18 13:10:30 fetching corpus: 7719, signal 248610/274574 (executing program) 2021/10/18 13:10:30 fetching corpus: 7768, signal 249097/274574 (executing program) 2021/10/18 13:10:30 fetching corpus: 7818, signal 249590/274581 (executing program) 2021/10/18 13:10:31 fetching corpus: 7868, signal 250018/274581 (executing program) 2021/10/18 13:10:31 fetching corpus: 7917, signal 250405/274598 (executing program) 2021/10/18 13:10:31 fetching corpus: 7966, signal 250918/274598 (executing program) 2021/10/18 13:10:31 fetching corpus: 8016, signal 251619/274598 (executing program) 2021/10/18 13:10:31 fetching corpus: 8065, signal 252150/274598 (executing program) 2021/10/18 13:10:31 fetching corpus: 8115, signal 252761/274598 (executing program) 2021/10/18 13:10:31 fetching corpus: 8164, signal 253197/274629 (executing program) 2021/10/18 13:10:32 fetching corpus: 8214, signal 253551/274631 (executing program) 2021/10/18 13:10:32 fetching corpus: 8264, signal 254144/274631 (executing program) 2021/10/18 13:10:32 fetching corpus: 8314, signal 254529/274631 (executing program) 2021/10/18 13:10:32 fetching corpus: 8364, signal 255064/274631 (executing program) 2021/10/18 13:10:32 fetching corpus: 8413, signal 255582/274631 (executing program) 2021/10/18 13:10:32 fetching corpus: 8463, signal 255894/274631 (executing program) 2021/10/18 13:10:32 fetching corpus: 8513, signal 256360/274631 (executing program) 2021/10/18 13:10:33 fetching corpus: 8561, signal 256758/274652 (executing program) 2021/10/18 13:10:33 fetching corpus: 8611, signal 257106/274693 (executing program) 2021/10/18 13:10:33 fetching corpus: 8661, signal 257510/274693 (executing program) 2021/10/18 13:10:33 fetching corpus: 8711, signal 257898/274693 (executing program) 2021/10/18 13:10:33 fetching corpus: 8758, signal 258290/274693 (executing program) 2021/10/18 13:10:33 fetching corpus: 8807, signal 258586/274693 (executing program) 2021/10/18 13:10:33 fetching corpus: 8857, signal 258998/274693 (executing program) 2021/10/18 13:10:34 fetching corpus: 8907, signal 259440/274693 (executing program) 2021/10/18 13:10:34 fetching corpus: 8957, signal 259784/274695 (executing program) 2021/10/18 13:10:34 fetching corpus: 9007, signal 260192/274698 (executing program) 2021/10/18 13:10:34 fetching corpus: 9057, signal 260722/274698 (executing program) 2021/10/18 13:10:34 fetching corpus: 9107, signal 261045/274698 (executing program) 2021/10/18 13:10:34 fetching corpus: 9157, signal 261376/274699 (executing program) 2021/10/18 13:10:34 fetching corpus: 9207, signal 261657/274745 (executing program) 2021/10/18 13:10:34 fetching corpus: 9257, signal 262070/274745 (executing program) 2021/10/18 13:10:35 fetching corpus: 9307, signal 262650/274773 (executing program) 2021/10/18 13:10:35 fetching corpus: 9357, signal 263090/274773 (executing program) 2021/10/18 13:10:35 fetching corpus: 9406, signal 263371/274773 (executing program) 2021/10/18 13:10:35 fetching corpus: 9455, signal 263586/274773 (executing program) 2021/10/18 13:10:35 fetching corpus: 9505, signal 264065/274773 (executing program) 2021/10/18 13:10:35 fetching corpus: 9555, signal 264269/274773 (executing program) 2021/10/18 13:10:35 fetching corpus: 9605, signal 264759/274773 (executing program) 2021/10/18 13:10:36 fetching corpus: 9655, signal 265141/274773 (executing program) 2021/10/18 13:10:36 fetching corpus: 9704, signal 265545/274774 (executing program) 2021/10/18 13:10:36 fetching corpus: 9754, signal 265841/274774 (executing program) 2021/10/18 13:10:36 fetching corpus: 9804, signal 266246/274774 (executing program) 2021/10/18 13:10:36 fetching corpus: 9853, signal 266511/274774 (executing program) 2021/10/18 13:10:36 fetching corpus: 9902, signal 266870/274784 (executing program) 2021/10/18 13:10:37 fetching corpus: 9951, signal 267187/274784 (executing program) 2021/10/18 13:10:37 fetching corpus: 10001, signal 267586/274784 (executing program) 2021/10/18 13:10:37 fetching corpus: 10050, signal 267966/274784 (executing program) 2021/10/18 13:10:37 fetching corpus: 10100, signal 268238/274784 (executing program) 2021/10/18 13:10:37 fetching corpus: 10149, signal 268544/274784 (executing program) 2021/10/18 13:10:37 fetching corpus: 10198, signal 269010/274787 (executing program) 2021/10/18 13:10:37 fetching corpus: 10248, signal 269418/274793 (executing program) 2021/10/18 13:10:38 fetching corpus: 10298, signal 269717/274848 (executing program) 2021/10/18 13:10:38 fetching corpus: 10348, signal 269995/274848 (executing program) 2021/10/18 13:10:38 fetching corpus: 10396, signal 270421/274848 (executing program) 2021/10/18 13:10:38 fetching corpus: 10446, signal 270836/274848 (executing program) 2021/10/18 13:10:38 fetching corpus: 10495, signal 271144/274848 (executing program) 2021/10/18 13:10:38 fetching corpus: 10545, signal 271521/274848 (executing program) 2021/10/18 13:10:39 fetching corpus: 10594, signal 271773/274865 (executing program) 2021/10/18 13:10:39 fetching corpus: 10644, signal 272163/274877 (executing program) 2021/10/18 13:10:39 fetching corpus: 10655, signal 272225/274877 (executing program) 2021/10/18 13:10:39 fetching corpus: 10656, signal 272229/274877 (executing program) 2021/10/18 13:10:39 fetching corpus: 10656, signal 272229/274877 (executing program) 2021/10/18 13:10:40 starting 6 fuzzer processes 13:10:40 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000006210a01000000000000000008000000000900010073797a30000000df37000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a3000000000080003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000f8fee76c0000000000000000000a20000000000a010000b1370000000000000000000900010073797a300000000038"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendfile(r4, r3, 0x0, 0x100000001) 13:10:40 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000000000c) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "c5a85b848ec0967e", "a9d1adfacb07204bddf0f5699e0cda5f1978e40ab8f3f48c5c0a3e2690f3907f", "19ba05ba", "ed3e24f335a355ca"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "947a5a1500", "b11d00", "3faf4d7f", "a7caa9e4e891a86b"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0xc8dd090000000000, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={0x77359400}, 0x10) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="cd", 0x200001c1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 13:10:41 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 13:10:41 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, 0x0, 0x0) 13:10:41 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) [ 104.117365][ T6555] chnl_net:caif_netlink_parms(): no params data found 13:10:42 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x20000000, 0x4) [ 104.386371][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.413115][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.424540][ T6555] device bridge_slave_0 entered promiscuous mode [ 104.457543][ T6557] chnl_net:caif_netlink_parms(): no params data found [ 104.493941][ T6555] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.501336][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.515909][ T6555] device bridge_slave_1 entered promiscuous mode [ 104.617705][ T6555] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.662987][ T6555] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.723186][ T6557] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.730894][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.738712][ T6557] device bridge_slave_0 entered promiscuous mode [ 104.762147][ T6557] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.769339][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.777776][ T6557] device bridge_slave_1 entered promiscuous mode [ 104.790305][ T6555] team0: Port device team_slave_0 added [ 104.814090][ T6555] team0: Port device team_slave_1 added [ 104.845892][ T6557] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.875701][ T6557] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.885936][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.901003][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.947532][ T6555] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.047877][ T6557] team0: Port device team_slave_0 added [ 105.055356][ T6555] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.062614][ T6555] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.089614][ T6555] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.114299][ T6557] team0: Port device team_slave_1 added [ 105.223971][ T6555] device hsr_slave_0 entered promiscuous mode [ 105.235409][ T6555] device hsr_slave_1 entered promiscuous mode [ 105.278764][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.289487][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.319188][ T6557] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.360082][ T6557] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.367925][ T6557] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.394745][ T6557] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.438335][ T6561] chnl_net:caif_netlink_parms(): no params data found [ 105.472419][ T6557] device hsr_slave_0 entered promiscuous mode [ 105.479233][ T6557] device hsr_slave_1 entered promiscuous mode [ 105.486438][ T6557] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.496038][ T6557] Cannot create hsr debugfs directory [ 105.755665][ T41] Bluetooth: hci0: command 0x0409 tx timeout [ 105.827896][ T6561] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.840157][ T6561] bridge0: port 1(bridge_slave_0) entered disabled state [ 105.848596][ T6561] device bridge_slave_0 entered promiscuous mode [ 105.893861][ T6561] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.901262][ T6561] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.908953][ T6561] device bridge_slave_1 entered promiscuous mode [ 105.955857][ T6574] chnl_net:caif_netlink_parms(): no params data found [ 105.967679][ T6561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.990637][ T1052] Bluetooth: hci1: command 0x0409 tx timeout [ 106.019435][ T6561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.107558][ T6561] team0: Port device team_slave_0 added [ 106.117944][ T6561] team0: Port device team_slave_1 added [ 106.177470][ T6555] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 106.224782][ T6555] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 106.242886][ T6574] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.249961][ T6574] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.258601][ T6574] device bridge_slave_0 entered promiscuous mode [ 106.276145][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.283200][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.309462][ T6561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.328371][ T6555] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 106.349447][ T6574] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.357210][ T6574] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.365900][ T6574] device bridge_slave_1 entered promiscuous mode [ 106.379626][ T6561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.386993][ T6561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.414439][ T6561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.426828][ T6555] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 106.550489][ T7643] Bluetooth: hci3: command 0x0409 tx timeout [ 106.562062][ T6557] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 106.576722][ T6561] device hsr_slave_0 entered promiscuous mode [ 106.586413][ T6561] device hsr_slave_1 entered promiscuous mode [ 106.594463][ T6561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 106.605906][ T6561] Cannot create hsr debugfs directory [ 106.615604][ T6845] chnl_net:caif_netlink_parms(): no params data found [ 106.636035][ T6574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.645563][ T6557] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 106.668407][ T6574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.687448][ T6557] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 106.748674][ T6557] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 106.824855][ T6574] team0: Port device team_slave_0 added [ 106.860020][ T6574] team0: Port device team_slave_1 added [ 106.898311][ T6845] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.908233][ T6845] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.917442][ T6845] device bridge_slave_0 entered promiscuous mode [ 106.928887][ T6845] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.936788][ T6845] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.945895][ T6845] device bridge_slave_1 entered promiscuous mode [ 106.953007][ T1055] Bluetooth: hci4: command 0x0409 tx timeout [ 107.001905][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.009065][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.039324][ T6574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.080688][ T6574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.087672][ T6574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.114895][ T6574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.163990][ T6845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 107.180649][ T6845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 107.209485][ T6574] device hsr_slave_0 entered promiscuous mode [ 107.235200][ T6574] device hsr_slave_1 entered promiscuous mode [ 107.243032][ T6574] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.252371][ T6574] Cannot create hsr debugfs directory [ 107.295539][ T6845] team0: Port device team_slave_0 added [ 107.312724][ T6845] team0: Port device team_slave_1 added [ 107.429383][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.436811][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.465507][ T6845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.481273][ T6555] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.491837][ T6561] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 107.515221][ T6845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.522992][ T6845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.552249][ T6845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.572704][ T6561] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 107.592146][ T6555] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.618949][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.629039][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.638468][ T6561] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 107.680992][ T1055] Bluetooth: hci5: command 0x0409 tx timeout [ 107.694092][ T6561] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 107.708003][ T6845] device hsr_slave_0 entered promiscuous mode [ 107.716349][ T6845] device hsr_slave_1 entered promiscuous mode [ 107.723776][ T6845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 107.732211][ T6845] Cannot create hsr debugfs directory [ 107.741837][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 107.751875][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 107.761635][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state [ 107.769009][ T8082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 107.793373][ T6557] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.807957][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 107.816264][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 107.825725][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 107.834794][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 107.841933][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 107.850277][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 107.858936][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 107.868290][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 107.877450][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 107.886537][ T41] Bluetooth: hci0: command 0x041b tx timeout [ 107.916625][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 107.925411][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 107.935690][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 107.979580][ T6557] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.998306][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.009281][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.023095][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.031679][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.080755][ T41] Bluetooth: hci1: command 0x041b tx timeout [ 108.090857][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.103682][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.112496][ T8082] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.119818][ T8082] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.129155][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.138117][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.157306][ T6555] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.183643][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.192202][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.203179][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.212337][ T41] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.219401][ T41] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.249659][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.258912][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.268460][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.279495][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.289168][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 108.298549][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 108.307346][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 108.317134][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 108.344232][ T6574] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 108.357119][ T6574] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 108.370786][ T6574] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 108.380765][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 108.434575][ T6574] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 108.444262][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.452634][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.461299][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 108.469549][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 108.482006][ T6555] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.493260][ T6557] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 108.578644][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 108.589355][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 108.630675][ T8082] Bluetooth: hci3: command 0x041b tx timeout [ 108.658965][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 108.669624][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 108.689210][ T6845] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 108.703842][ T6561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.718426][ T6557] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.729124][ T6845] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 108.738983][ T6845] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 108.762699][ T6561] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.785267][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 108.793460][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 108.803025][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 108.812852][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 108.822109][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.829180][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.837679][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 108.846886][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 108.855713][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.862990][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.871429][ T6845] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 108.887843][ T6555] device veth0_vlan entered promiscuous mode [ 108.911177][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 108.919299][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 108.929398][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 108.938641][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 108.947776][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 108.957034][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 108.966273][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 108.975602][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 108.983707][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 108.992058][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 109.009326][ T6555] device veth1_vlan entered promiscuous mode [ 109.040703][ T8097] Bluetooth: hci4: command 0x041b tx timeout [ 109.052571][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.062637][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.073875][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.083363][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 109.093078][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 109.123390][ T6561] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 109.134365][ T6561] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 109.155852][ T6557] device veth0_vlan entered promiscuous mode [ 109.162564][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.172834][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 109.182096][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 109.194526][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 109.205489][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 109.215425][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 109.224488][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 109.235832][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 109.245050][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 109.254505][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 109.268783][ T6574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.306357][ T6557] device veth1_vlan entered promiscuous mode [ 109.318566][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 109.328179][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 109.340262][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 109.352097][ T6561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.395271][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 109.404624][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 109.413172][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 109.427522][ T6555] device veth0_macvtap entered promiscuous mode [ 109.436934][ T6574] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.457642][ T7643] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.466734][ T7643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.477555][ T7643] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.496222][ T6555] device veth1_macvtap entered promiscuous mode [ 109.535843][ T6557] device veth0_macvtap entered promiscuous mode [ 109.548806][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.557339][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 109.567226][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 109.576210][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 109.585784][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 109.615115][ T6557] device veth1_macvtap entered promiscuous mode [ 109.638634][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 109.647517][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 109.656535][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 109.665665][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 109.674660][ T8097] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.682001][ T8097] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.689557][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 109.698413][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 109.707354][ T8097] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.714634][ T8097] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.726572][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.757982][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 109.763457][ T20] Bluetooth: hci5: command 0x041b tx timeout [ 109.776628][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.789992][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.803590][ T6555] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.811980][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 109.819959][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.828962][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.842023][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 109.853274][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 109.863742][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 109.875134][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 109.885687][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 109.897926][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 109.908519][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 109.919955][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 109.938755][ T6845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.947858][ T1055] Bluetooth: hci0: command 0x040f tx timeout [ 109.958924][ T6557] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 109.969975][ T6557] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.981681][ T6557] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.994316][ T6555] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.004693][ T6555] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.013800][ T6555] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.022659][ T6555] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.034069][ T6561] device veth0_vlan entered promiscuous mode [ 110.041485][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.049258][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 110.058787][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 110.067667][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.076891][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.085597][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 110.094458][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 110.107774][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 110.116287][ T8097] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 110.132912][ T6557] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.142233][ T6557] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.153386][ T6557] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.160654][ T1055] Bluetooth: hci1: command 0x040f tx timeout [ 110.162714][ T6557] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.237667][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.246139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.255112][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.264145][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.273264][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 110.281636][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 110.291790][ T6561] device veth1_vlan entered promiscuous mode [ 110.299788][ T6845] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.350253][ T6574] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.373706][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 110.383333][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 110.392532][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 110.410452][ T20] bridge0: port 1(bridge_slave_0) entered blocking state [ 110.418669][ T20] bridge0: port 1(bridge_slave_0) entered forwarding state [ 110.427272][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 110.437275][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 110.446389][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 110.453534][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.512035][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 110.537837][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 110.552371][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 110.561639][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 110.571077][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 110.579893][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 110.624709][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 110.633970][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 110.651460][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 110.666509][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 110.677237][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 110.686870][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 110.696374][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 110.710704][ T8216] Bluetooth: hci3: command 0x040f tx timeout [ 110.717322][ T6561] device veth0_macvtap entered promiscuous mode [ 110.738056][ T6574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.759346][ T6845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 110.775993][ T6845] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 110.788087][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 110.809448][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 110.819286][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 110.829073][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 110.854392][ T6561] device veth1_macvtap entered promiscuous mode [ 110.877675][ T254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.904171][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 110.910052][ T254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.915915][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 110.938542][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 110.969312][ T6845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.979639][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.027796][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.035827][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 111.066954][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.090722][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 111.108226][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.119391][ T8082] Bluetooth: hci4: command 0x040f tx timeout [ 111.121740][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.133469][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 111.142248][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 111.149846][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 111.158268][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 111.167157][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 111.203595][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 111.211287][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.217545][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.232748][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.242602][ T6561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 111.260365][ T6561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.279823][ T6561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.312980][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.321817][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 111.335286][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 111.347514][ T6561] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.359483][ T6561] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.377532][ T6561] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.390182][ T6561] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.428714][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.443515][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.460557][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.462752][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.558647][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 111.579285][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 111.592018][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 111.628113][ T6574] device veth0_vlan entered promiscuous mode [ 111.680387][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.688856][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 111.764876][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 111.781210][ T41] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 111.794214][ T6574] device veth1_vlan entered promiscuous mode [ 111.836095][ T6845] device veth0_vlan entered promiscuous mode [ 111.847415][ T8282] Bluetooth: hci5: command 0x040f tx timeout [ 111.881436][ T8282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 111.895157][ T25] audit: type=1804 audit(1634562650.116:2): pid=8285 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir162522329/syzkaller.DepaFL/0/cgroup.controllers" dev="sda1" ino=13900 res=1 errno=0 [ 111.899784][ T8282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 111.983659][ T8282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 111.985391][ T25] audit: type=1804 audit(1634562650.206:3): pid=8287 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir162522329/syzkaller.DepaFL/0/cgroup.controllers" dev="sda1" ino=13900 res=1 errno=0 [ 112.012405][ T8282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 112.090911][ T8282] Bluetooth: hci0: command 0x0419 tx timeout [ 112.129637][ T6845] device veth1_vlan entered promiscuous mode [ 112.153090][ T8282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 112.172891][ T8282] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 112.185847][ T8282] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 112.203857][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.204924][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.220680][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.236321][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.245480][ T8216] Bluetooth: hci1: command 0x0419 tx timeout [ 112.264585][ T6574] device veth0_macvtap entered promiscuous mode [ 112.302242][ T8216] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 112.321294][ T8216] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 112.331046][ T8216] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.357619][ T6845] device veth0_macvtap entered promiscuous mode 13:10:50 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000006210a01000000000000000008000000000900010073797a30000000df37000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a3000000000080003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000f8fee76c0000000000000000000a20000000000a010000b1370000000000000000000900010073797a300000000038"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendfile(r4, r3, 0x0, 0x100000001) [ 112.376582][ T6574] device veth1_macvtap entered promiscuous mode [ 112.390955][ T8282] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.424329][ T8282] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 112.457283][ T8282] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 112.478506][ T8220] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 112.513472][ T6845] device veth1_macvtap entered promiscuous mode [ 112.532515][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 112.572879][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 112.589915][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 112.603528][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.636419][ T25] audit: type=1804 audit(1634562650.856:4): pid=8313 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir162522329/syzkaller.DepaFL/1/cgroup.controllers" dev="sda1" ino=13900 res=1 errno=0 [ 112.646110][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.681498][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.698133][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.727136][ T25] audit: type=1804 audit(1634562650.946:5): pid=8314 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir162522329/syzkaller.DepaFL/1/cgroup.controllers" dev="sda1" ino=13900 res=1 errno=0 [ 112.734862][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.774123][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.776299][ T8272] syz-executor.1 (8272) used greatest stack depth: 21136 bytes left [ 112.798068][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.800833][ T20] Bluetooth: hci3: command 0x0419 tx timeout [ 112.828802][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.848290][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.859526][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.872937][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.884340][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.896639][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.907656][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 112.920708][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 112.953705][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 112.963479][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 112.992646][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.004139][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.030452][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 113.048811][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 113.064467][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.087486][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.099683][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.116382][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.132564][ T6574] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 13:10:51 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000000000c) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "c5a85b848ec0967e", "a9d1adfacb07204bddf0f5699e0cda5f1978e40ab8f3f48c5c0a3e2690f3907f", "19ba05ba", "ed3e24f335a355ca"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "947a5a1500", "b11d00", "3faf4d7f", "a7caa9e4e891a86b"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0xc8dd090000000000, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={0x77359400}, 0x10) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="cd", 0x200001c1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) [ 113.151479][ T6574] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.171760][ T6574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 113.209973][ T7054] Bluetooth: hci4: command 0x0419 tx timeout [ 113.212549][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.246764][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.259304][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.271515][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.282395][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.293866][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.304600][ T6845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 113.326153][ T6845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 113.346595][ T6845] batman_adv: batadv0: Interface activated: batadv_slave_1 13:10:51 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000006210a01000000000000000008000000000900010073797a30000000df37000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a3000000000080003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000f8fee76c0000000000000000000a20000000000a010000b1370000000000000000000900010073797a300000000038"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendfile(r4, r3, 0x0, 0x100000001) 13:10:51 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, 0x0, 0x0) [ 113.407228][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.441754][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 113.479436][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 113.520946][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready 13:10:51 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, 0x0, 0x0) [ 113.565301][ T6574] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.613744][ T6574] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.646265][ T6574] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.703948][ T6574] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 13:10:52 executing program 3: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r0, 0x0, 0x0) [ 113.760727][ T6845] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.773273][ T25] audit: type=1804 audit(1634562651.996:6): pid=8331 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir162522329/syzkaller.DepaFL/2/cgroup.controllers" dev="sda1" ino=13906 res=1 errno=0 [ 113.826886][ T6845] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.857372][ T6845] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.883466][ T6845] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.883589][ T25] audit: type=1804 audit(1634562652.056:7): pid=8335 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir162522329/syzkaller.DepaFL/2/cgroup.controllers" dev="sda1" ino=13906 res=1 errno=0 [ 113.919112][ T7054] Bluetooth: hci5: command 0x0419 tx timeout 13:10:52 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000006210a01000000000000000008000000000900010073797a30000000df37000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a3000000000080003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000f8fee76c0000000000000000000a20000000000a010000b1370000000000000000000900010073797a300000000038"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendfile(r4, r3, 0x0, 0x100000001) [ 114.313083][ T10] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.338195][ T25] audit: type=1804 audit(1634562652.556:8): pid=8363 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir658957452/syzkaller.D6FgIf/4/cgroup.controllers" dev="sda1" ino=13907 res=1 errno=0 [ 114.354447][ T254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.385975][ T10] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.475335][ T7054] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.492846][ T254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.560478][ T25] audit: type=1804 audit(1634562652.716:9): pid=8363 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir658957452/syzkaller.D6FgIf/4/cgroup.controllers" dev="sda1" ino=13907 res=1 errno=0 [ 114.576798][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.604898][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 114.648600][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 114.681389][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 114.714879][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 13:10:53 executing program 0: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000006210a01000000000000000008000000000900010073797a30000000df37000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a3000000000080003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000f8fee76c0000000000000000000a20000000000a010000b1370000000000000000000900010073797a300000000038"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendfile(r4, r3, 0x0, 0x100000001) [ 114.778003][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 114.797410][ T8160] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 115.136417][ T25] audit: type=1804 audit(1634562653.356:10): pid=8391 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir162522329/syzkaller.DepaFL/3/cgroup.controllers" dev="sda1" ino=13902 res=1 errno=0 [ 115.250879][ T25] audit: type=1804 audit(1634562653.416:11): pid=8393 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir162522329/syzkaller.DepaFL/3/cgroup.controllers" dev="sda1" ino=13902 res=1 errno=0 [ 132.549456][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.555867][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 193.988015][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.994346][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.217527][ T8480] chnl_net:caif_netlink_parms(): no params data found [ 208.297873][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.307744][ T8480] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.315589][ T8480] device bridge_slave_0 entered promiscuous mode [ 208.326752][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.333884][ T8480] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.343399][ T8480] device bridge_slave_1 entered promiscuous mode [ 208.375964][ T8480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.389438][ T8480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.424380][ T8480] team0: Port device team_slave_0 added [ 208.435544][ T8480] team0: Port device team_slave_1 added [ 208.469950][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.479252][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.507274][ T8480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.520828][ T8480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.528240][ T8480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.556551][ T8480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.600272][ T8480] device hsr_slave_0 entered promiscuous mode [ 208.608169][ T8480] device hsr_slave_1 entered promiscuous mode [ 208.615755][ T8480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.626172][ T8480] Cannot create hsr debugfs directory [ 208.774112][ T8480] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 208.789850][ T8480] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 208.802020][ T8480] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 208.814081][ T8480] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 208.839871][ T8480] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.847473][ T8480] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.855421][ T8480] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.862946][ T8480] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.920348][ T8480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.933451][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 208.944256][ T2966] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.953893][ T2966] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.964035][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 208.979480][ T8480] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.992146][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 209.004164][ T2966] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.011346][ T2966] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.029039][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 209.038247][ T8215] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.045403][ T8215] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.070883][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 209.079567][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 209.094253][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 209.115388][ T8480] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 209.127351][ T8480] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 209.142216][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 209.151553][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 209.164354][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 209.192395][ T8480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.201401][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 209.209992][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 209.239508][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 209.254092][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 209.280364][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 209.288976][ T8215] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 209.301150][ T7054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 209.310582][ T7054] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 209.318986][ T8480] device veth0_vlan entered promiscuous mode [ 209.334552][ T8480] device veth1_vlan entered promiscuous mode [ 209.362221][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 209.371445][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 209.381431][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 209.391194][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 209.404906][ T8480] device veth0_macvtap entered promiscuous mode [ 209.416602][ T8480] device veth1_macvtap entered promiscuous mode [ 209.440939][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.452721][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.462797][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.474999][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.487657][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.499010][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.511733][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.522608][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.533090][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 209.544933][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.558072][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.568027][ T7643] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 209.576929][ T7643] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 209.585533][ T7643] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 209.597227][ T7643] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 209.609718][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.621896][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.632073][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.642943][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.653125][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.663719][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.674413][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.685046][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.696596][ T8480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 209.707185][ T8480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.718118][ T8480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.731455][ T8480] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.740448][ T8480] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.750040][ T8480] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.759759][ T8480] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.771162][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 209.787199][ T2966] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 209.861737][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.917248][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.925772][ T254] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.934010][ T254] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.949197][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 209.961860][ T8082] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 210.025401][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.069213][ T7] Bluetooth: hci2: command 0x0409 tx timeout [ 210.163216][ T8827] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:12:28 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 13:12:28 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000000000c) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "c5a85b848ec0967e", "a9d1adfacb07204bddf0f5699e0cda5f1978e40ab8f3f48c5c0a3e2690f3907f", "19ba05ba", "ed3e24f335a355ca"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "947a5a1500", "b11d00", "3faf4d7f", "a7caa9e4e891a86b"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0xc8dd090000000000, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={0x77359400}, 0x10) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="cd", 0x200001c1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 13:12:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) 13:12:28 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x20000000, 0x4) 13:12:28 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000006210a01000000000000000008000000000900010073797a30000000df37000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a3000000000080003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000f8fee76c0000000000000000000a20000000000a010000b1370000000000000000000900010073797a300000000038"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendfile(r4, r3, 0x0, 0x100000001) 13:12:28 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01400000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) [ 210.369902][ T8852] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:12:28 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) 13:12:28 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x20000000, 0x4) [ 210.568590][ T25] audit: type=1804 audit(1634562748.790:12): pid=8847 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir658957452/syzkaller.D6FgIf/5/cgroup.controllers" dev="sda1" ino=13942 res=1 errno=0 13:12:29 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) listen(r0, 0x0) 13:12:29 executing program 5: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r0, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r1, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r0, 0x111, 0x1, 0x20000000, 0x4) [ 210.722602][ T25] audit: type=1804 audit(1634562748.870:13): pid=8855 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir658957452/syzkaller.D6FgIf/5/cgroup.controllers" dev="sda1" ino=13942 res=1 errno=0 13:12:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01400000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) 13:12:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 13:12:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 211.075440][ T8890] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.225988][ T8897] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 13:12:29 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, r1, 0x0, 0x800000000000c) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000000180)=@gcm_256={{0x304}, "c5a85b848ec0967e", "a9d1adfacb07204bddf0f5699e0cda5f1978e40ab8f3f48c5c0a3e2690f3907f", "19ba05ba", "ed3e24f335a355ca"}, 0x38) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x4) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000080)=@gcm_128={{0x304}, "947a5a1500", "b11d00", "3faf4d7f", "a7caa9e4e891a86b"}, 0x28) sendto$inet6(r0, &(0x7f00000005c0), 0xffffffffffffff7f, 0xc8dd090000000000, 0x0, 0xfffffffffffffe60) setsockopt$sock_timeval(r0, 0x1, 0x20, &(0x7f0000000040)={0x77359400}, 0x10) sendto$inet6(r0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="cd", 0x200001c1, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) 13:12:29 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x56ca30912f54a0fd, {0x43}}, 0x10) 13:12:29 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01400000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) 13:12:29 executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000000006c0000000000000000000a20000006210a01000000000000000008000000000900010073797a30000000df37000000120a0102000000000000000000000000040004800900020002000000000000000900010073797a3000000000080003"], 0x1}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000f8fee76c0000000000000000000a20000000000a010000b1370000000000000000000900010073797a300000000038"], 0x1}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r2, r1, 0x0, 0x100000001) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$FITRIM(0xffffffffffffffff, 0xc0185879, 0x0) sendfile(r4, r3, 0x0, 0x100000001) 13:12:29 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) 13:12:29 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 211.693515][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.735614][ T8918] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. 13:12:30 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x56ca30912f54a0fd, {0x43}}, 0x10) [ 211.842298][ T25] audit: type=1804 audit(1634562750.060:14): pid=8916 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir658957452/syzkaller.D6FgIf/6/cgroup.controllers" dev="sda1" ino=13950 res=1 errno=0 [ 211.897550][ T25] audit: type=1804 audit(1634562750.110:15): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir658957452/syzkaller.D6FgIf/6/cgroup.controllers" dev="sda1" ino=13950 res=1 errno=0 [ 211.950975][ T8915] bond0: (slave bridge1): Enslaving as an active interface with an up link 13:12:30 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x56ca30912f54a0fd, {0x43}}, 0x10) 13:12:30 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="139b0000000000001c0012000c000100626f6e64"], 0x3c}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x3c, 0x10, 0x705, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000001580)=ANY=[@ANYBLOB="8800000024000b0f00"/20, @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000000b0001006d717072696f00005800020001000000000000000000000000000000000010"], 0x88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000800)=@newtfilter={0x24, 0x2a, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3}}, 0x24}}, 0x0) [ 212.146163][ T7643] Bluetooth: hci2: command 0x041b tx timeout 13:12:30 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="01400000000000001c0012800b0001006970766c616e00000c000280060001000200000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) 13:12:30 executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) recvmsg(r0, &(0x7f0000000c00)={0x0, 0x0, 0x0}, 0x40000041) 13:12:30 executing program 5: r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000040)={0x42}, 0x10) bind$tipc(r0, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x56ca30912f54a0fd, {0x43}}, 0x10) [ 212.354708][ T8950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. 13:12:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x200a0, 0x4) 13:12:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x2, 0x470, 0x0, 0x328, 0xffffffff, 0x0, 0x560, 0x560, 0x560, 0xffffffff, 0x560, 0x560, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv4=@private, @port, @icmp_id}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'ip6gre0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 13:12:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) 13:12:31 executing program 4: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095000000000000007c0493250b892e97c689c050ff0473608c1d28d9fd08"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000180)='./cgroup/syz0\x00', 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000611200000000000095000000000000007c04b3250b892e97c689c050ff0473608c1d28d9fd08478e2485c7b1c68e8692839354186aa76da643760bdc652ce5d95f39d7cbe444b1fc84589b81b16650fbc273a66323f919e03bdb0aa4054cc16fd5b872ff4458ff0f00000697fe11b382d991065189d714c526ef323bb581692a86f69129ac359987e34a920607"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r3, r2, 0x2}, 0x10) 13:12:31 executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f00000002c0)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x8c, &(0x7f00000000c0)=""/140, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 13:12:31 executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_DEL(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x301, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x44}}, 0x0) 13:12:31 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000480), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="2800000010000108002bd62b2fe9a2e951000000", @ANYRES32=r3, @ANYBLOB="fffffffd00f9c90008001c00ef"], 0x28}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@newlink={0x28, 0x11, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x600, r3}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) 13:12:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) 13:12:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001440)={r0, 0x0, &(0x7f00000013c0)=""/102}, 0x20) 13:12:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x200a0, 0x4) 13:12:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x2, 0x470, 0x0, 0x328, 0xffffffff, 0x0, 0x560, 0x560, 0x560, 0xffffffff, 0x560, 0x560, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv4=@private, @port, @icmp_id}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'ip6gre0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 13:12:31 executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x30, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_COUNTER_ID={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}}, 0x0) [ 213.405500][ T8989] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 13:12:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001440)={r0, 0x0, &(0x7f00000013c0)=""/102}, 0x20) 13:12:31 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) 13:12:31 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x200a0, 0x4) 13:12:31 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x2, 0x470, 0x0, 0x328, 0xffffffff, 0x0, 0x560, 0x560, 0x560, 0xffffffff, 0x560, 0x560, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv4=@private, @port, @icmp_id}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'ip6gre0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 13:12:31 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x3, 0x2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000200), 0x0}, 0x20) [ 213.629745][ T8989] device veth0 entered promiscuous mode [ 213.651855][ T8998] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. 13:12:31 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001440)={r0, 0x0, &(0x7f00000013c0)=""/102}, 0x20) [ 213.807916][ T9008] device veth2 entered promiscuous mode 13:12:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000000000210000000c00018008000300000000000c000180080003"], 0x2c}}, 0x0) read(r0, &(0x7f00000000c0)=""/168, 0xa8) 13:12:32 executing program 5: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_BT_CHANNEL_POLICY(r0, 0x112, 0xa, &(0x7f0000000040), 0x4) 13:12:32 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x9, &(0x7f0000000000)=0x200a0, 0x4) 13:12:32 executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000240)=@nat={'nat\x00', 0x1b, 0x2, 0x470, 0x0, 0x328, 0xffffffff, 0x0, 0x560, 0x560, 0x560, 0xffffffff, 0x560, 0x560, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv4=@private, @port, @icmp_id}}}, {{@ipv6={@empty, @rand_addr=' \x01\x00', [], [], 'ip6gre0\x00', 'veth1\x00'}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@dev, @ipv6=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) 13:12:32 executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x11, 0x4, 0x4, 0x8, 0x0, 0x1}, 0x40) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001440)={r0, 0x0, &(0x7f00000013c0)=""/102}, 0x20) 13:12:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x3, 0x2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000200), 0x0}, 0x20) 13:12:32 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 13:12:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x3, 0x2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000200), 0x0}, 0x20) 13:12:32 executing program 5: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) sendto(r0, 0x0, 0x0, 0x0, &(0x7f0000000040)=@rc={0x1f, @fixed}, 0x80) 13:12:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000000b030000000000000000000500000308000240000000030800034000000000080003400000000008000240000000000800024000000000060001"], 0x4c}}, 0x0) 13:12:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x6d, 0x9009}, 0x1c}, 0x300}, 0x0) 13:12:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000000000210000000c00018008000300000000000c000180080003"], 0x2c}}, 0x0) read(r0, &(0x7f00000000c0)=""/168, 0xa8) [ 214.236006][ T7] Bluetooth: hci2: command 0x040f tx timeout [ 214.258951][ T9056] nft_compat: unsupported protocol 5 13:12:32 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000000000210000000c00018008000300000000000c000180080003"], 0x2c}}, 0x0) read(r0, &(0x7f00000000c0)=""/168, 0xa8) 13:12:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x6d, 0x9009}, 0x1c}, 0x300}, 0x0) 13:12:32 executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)={0x17, 0x0, 0x3, 0x2}, 0x40) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r0, &(0x7f0000000200), 0x0}, 0x20) 13:12:32 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000000b030000000000000000000500000308000240000000030800034000000000080003400000000008000240000000000800024000000000060001"], 0x4c}}, 0x0) 13:12:32 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000000000210000000c00018008000300000000000c000180080003"], 0x2c}}, 0x0) read(r0, &(0x7f00000000c0)=""/168, 0xa8) 13:12:32 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x6d, 0x9009}, 0x1c}, 0x300}, 0x0) [ 214.555371][ T9069] nft_compat: unsupported protocol 5 13:12:33 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 13:12:33 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000058700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:12:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000000000210000000c00018008000300000000000c000180080003"], 0x2c}}, 0x0) read(r0, &(0x7f00000000c0)=""/168, 0xa8) 13:12:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000000b030000000000000000000500000308000240000000030800034000000000080003400000000008000240000000000800024000000000060001"], 0x4c}}, 0x0) 13:12:33 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000000000210000000c00018008000300000000000c000180080003"], 0x2c}}, 0x0) read(r0, &(0x7f00000000c0)=""/168, 0xa8) 13:12:33 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv6_newrule={0x1c, 0x6d, 0x9009}, 0x1c}, 0x300}, 0x0) [ 215.240348][ T9089] __nla_validate_parse: 2 callbacks suppressed [ 215.240365][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.279071][ T9095] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.290647][ T9095] nft_compat: unsupported protocol 5 13:12:33 executing program 3: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001bc0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2}, 0x8) [ 215.340569][ T9098] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:12:33 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$int_out(r0, 0x40286608, &(0x7f0000000340)) 13:12:33 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c000000000b030000000000000000000500000308000240000000030800034000000000080003400000000008000240000000000800024000000000060001"], 0x4c}}, 0x0) 13:12:33 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000007c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="1fffffff000000000000210000000c00018008000300000000000c000180080003"], 0x2c}}, 0x0) read(r0, &(0x7f00000000c0)=""/168, 0xa8) 13:12:33 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000058700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) [ 215.551598][ T9119] EXT4-fs warning (device sda1): ext4_group_add:1677: No reserved GDT blocks, can't resize [ 215.586984][ T9122] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. 13:12:33 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) [ 215.634968][ T9122] nft_compat: unsupported protocol 5 [ 215.654424][ T9125] EXT4-fs warning (device sda1): ext4_group_add:1677: No reserved GDT blocks, can't resize [ 215.707026][ T9126] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:12:34 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 13:12:34 executing program 3: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001bc0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2}, 0x8) 13:12:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x1}]}}}]}, 0x3c}}, 0x0) 13:12:34 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$int_out(r0, 0x40286608, &(0x7f0000000340)) 13:12:34 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000058700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:12:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) [ 216.236544][ T9142] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:12:34 executing program 3: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001bc0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2}, 0x8) [ 216.277913][ T9144] EXT4-fs warning (device sda1): ext4_group_add:1677: No reserved GDT blocks, can't resize [ 216.305559][ T8160] Bluetooth: hci2: command 0x0419 tx timeout 13:12:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) 13:12:34 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$int_out(r0, 0x40286608, &(0x7f0000000340)) 13:12:34 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) [ 216.539091][ T9158] EXT4-fs warning (device sda1): ext4_group_add:1677: No reserved GDT blocks, can't resize 13:12:34 executing program 3: r0 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r0, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0x3}, 0x10, &(0x7f0000000100)=[{&(0x7f0000001bc0)='Q', 0x1}], 0x1}}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000001a40)=[{&(0x7f0000000000)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000300)="a0", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f00000000c0)={r2}, 0x8) 13:12:34 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x1}]}}}]}, 0x3c}}, 0x0) 13:12:35 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$cgroup_int(r0, 0x0, 0x0) sendfile(r0, r1, 0x0, 0xf03b0000) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) sendfile(r3, r4, 0x0, 0xf03b0000) sendfile(r3, r2, 0x0, 0x8000000000004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) 13:12:35 executing program 4: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000fc0)=ANY=[@ANYBLOB="480000001000058700"/20, @ANYRES32=r3, @ANYBLOB="000000000000e4ff280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="38000000240007050000004007a2a30005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_FLAGS={0x8, 0x16, 0x3}]}}]}, 0x3c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 13:12:35 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$int_out(r0, 0x40286608, &(0x7f0000000340)) 13:12:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) 13:12:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00800e2c000000460001070700001419000100a00e001c0e0050c00e0000030000ef38bf461e59d7", 0x39}], 0x1) 13:12:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x1}]}}}]}, 0x3c}}, 0x0) [ 217.470889][ T9182] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.494722][ T9186] EXT4-fs warning (device sda1): ext4_group_add:1677: No reserved GDT blocks, can't resize 13:12:35 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) [ 217.593997][ T9185] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. 13:12:35 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000000c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x1}]}}}]}, 0x3c}}, 0x0) 13:12:35 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@typedef={0x1}]}, {0x0, [0x5f]}}, &(0x7f0000000200)=""/201, 0x27, 0xc9, 0x1}, 0x20) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) 13:12:35 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00800e2c000000460001070700001419000100a00e001c0e0050c00e0000030000ef38bf461e59d7", 0x39}], 0x1) 13:12:35 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x7}, @TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x5}]}}]}, 0x50}}, 0x0) 13:12:36 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r0, 0x29, 0x19, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) 13:12:36 executing program 1: r0 = socket(0x11, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, @private0, @rand_addr=' \x01\x00', 0x2000}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', r1, 0x4, 0x6, 0xdd, 0x78, 0xa, @private1, @mcast1, 0x20, 0x8000, 0x8, 0x81}}) 13:12:36 executing program 5: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000000)=0x800, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20}, 0x1c) 13:12:36 executing program 2: r0 = socket$inet6(0x10, 0x3, 0x0) sendmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000100)="5500000018007f5f14fe01b2a4a290930206040000001301020b04123900090035000c030100000019000b08060c110b140022dc1338d54404139b84136ef75afb83de4411001200", 0x48}, {&(0x7f0000000080)="0a00aea34085d1f509872e", 0xb}, {&(0x7f0000000200)="8173", 0x2}], 0x3}, 0x0) 13:12:36 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newsa={0x140, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 13:12:36 executing program 3: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000080)="39000000130009006900000000000000ab00800e2c000000460001070700001419000100a00e001c0e0050c00e0000030000ef38bf461e59d7", 0x39}], 0x1) 13:12:36 executing program 4: r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x24, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x7}, @TCA_HHF_EVICT_TIMEOUT={0x8}, @TCA_HHF_NON_HH_WEIGHT={0x8, 0x7, 0x5}]}}]}, 0x50}}, 0x0) 13:12:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newsa={0x140, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 13:12:37 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 13:12:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newsa={0x140, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 13:12:37 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) 13:12:37 executing program 0: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newsa={0x140, 0x10, 0x501, 0x0, 0x0, {{@in6=@mcast2, @in6=@mcast2}, {@in6=@ipv4={'\x00', '\xff\xff', @local}, 0x0, 0x6c}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) 13:12:37 executing program 5: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0x0, 0x1}, 0x6) [ 226.783837][ T8160] Bluetooth: hci1: command 0x0406 tx timeout [ 226.793718][ T8082] Bluetooth: hci0: command 0x0406 tx timeout [ 226.807480][ T8082] Bluetooth: hci3: command 0x0406 tx timeout [ 231.905292][ T8082] Bluetooth: hci4: command 0x0406 tx timeout [ 231.911370][ T8082] Bluetooth: hci5: command 0x0406 tx timeout [ 255.421506][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.427938][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.856192][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.862717][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 334.293576][ T7054] Bluetooth: hci2: command 0x0406 tx timeout [ 376.371468][ T26] INFO: task syz-executor.1:9223 blocked for more than 143 seconds. [ 376.379885][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 376.387946][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.397565][ T26] task:syz-executor.1 state:D stack:28200 pid: 9223 ppid: 6557 flags:0x00004004 [ 376.408141][ T26] Call Trace: [ 376.413447][ T26] __schedule+0xb44/0x5960 [ 376.418047][ T26] ? find_held_lock+0x2d/0x110 [ 376.427159][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 376.434012][ T26] ? io_schedule_timeout+0x140/0x140 [ 376.439341][ T26] schedule+0xd3/0x270 [ 376.445540][ T26] schedule_preempt_disabled+0xf/0x20 [ 376.451030][ T26] __mutex_lock+0xa34/0x12f0 [ 376.457857][ T26] ? dev_ioctl+0x279/0xee0 [ 376.464684][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 376.473743][ T26] ? dev_load+0x79/0x200 [ 376.478036][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 376.486564][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 376.495363][ T26] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 376.503672][ T26] dev_ioctl+0x279/0xee0 [ 376.507950][ T26] sock_ioctl+0x537/0x640 [ 376.514385][ T26] ? br_ioctl_call+0xa0/0xa0 [ 376.519069][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 376.527866][ T26] ? br_ioctl_call+0xa0/0xa0 [ 376.537700][ T26] __x64_sys_ioctl+0x193/0x200 [ 376.544668][ T26] do_syscall_64+0x35/0xb0 [ 376.549157][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 376.557083][ T26] RIP: 0033:0x7f366cc32a39 [ 376.563697][ T26] RSP: 002b:00007f366a1a8188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.576836][ T26] RAX: ffffffffffffffda RBX: 00007f366cd35f60 RCX: 00007f366cc32a39 [ 376.587285][ T26] RDX: 00000000200000c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 376.604980][ T26] RBP: 00007f366cc8cc5f R08: 0000000000000000 R09: 0000000000000000 [ 376.620144][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.636642][ T26] R13: 00007ffefcc4aabf R14: 00007f366a1a8300 R15: 0000000000022000 [ 376.645954][ T26] INFO: task syz-executor.1:9227 blocked for more than 143 seconds. [ 376.654996][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 376.661006][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.670196][ T26] task:syz-executor.1 state:D stack:28712 pid: 9227 ppid: 6557 flags:0x00004004 [ 376.680701][ T26] Call Trace: [ 376.684524][ T26] __schedule+0xb44/0x5960 [ 376.689115][ T26] ? find_held_lock+0x2d/0x110 [ 376.695177][ T26] ? __mutex_lock+0x9c2/0x12f0 [ 376.699987][ T26] ? io_schedule_timeout+0x140/0x140 [ 376.708929][ T26] schedule+0xd3/0x270 [ 376.713590][ T26] schedule_preempt_disabled+0xf/0x20 [ 376.719099][ T26] __mutex_lock+0xa34/0x12f0 [ 376.724529][ T26] ? dev_ioctl+0x279/0xee0 [ 376.732402][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 376.738196][ T26] ? dev_load+0x79/0x200 [ 376.744661][ T26] ? apparmor_capable+0x1d8/0x460 [ 376.750119][ T26] ? dev_load+0x1a7/0x200 [ 376.755541][ T26] dev_ioctl+0x279/0xee0 [ 376.759859][ T26] sock_ioctl+0x537/0x640 [ 376.765421][ T26] ? br_ioctl_call+0xa0/0xa0 [ 376.770060][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 376.777227][ T26] ? br_ioctl_call+0xa0/0xa0 [ 376.781968][ T26] __x64_sys_ioctl+0x193/0x200 [ 376.786937][ T26] do_syscall_64+0x35/0xb0 [ 376.791509][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 376.797425][ T26] RIP: 0033:0x7f366cc32a39 [ 376.802041][ T26] RSP: 002b:00007f366a187188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 376.810463][ T26] RAX: ffffffffffffffda RBX: 00007f366cd36020 RCX: 00007f366cc32a39 [ 376.820841][ T26] RDX: 0000000020000200 RSI: 00000000000089f3 RDI: 0000000000000003 [ 376.829410][ T26] RBP: 00007f366cc8cc5f R08: 0000000000000000 R09: 0000000000000000 [ 376.837692][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.847080][ T26] R13: 00007ffefcc4aabf R14: 00007f366a187300 R15: 0000000000022000 [ 376.856522][ T26] INFO: task syz-executor.1:9253 blocked for more than 143 seconds. [ 376.865385][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 376.872571][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.882449][ T26] task:syz-executor.1 state:D stack:28712 pid: 9253 ppid: 6557 flags:0x00000004 [ 376.892058][ T26] Call Trace: [ 376.895354][ T26] __schedule+0xb44/0x5960 [ 376.899826][ T26] ? find_held_lock+0x2d/0x110 [ 376.904837][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 376.909683][ T26] ? io_schedule_timeout+0x140/0x140 [ 376.915113][ T26] schedule+0xd3/0x270 [ 376.919192][ T26] schedule_preempt_disabled+0xf/0x20 [ 376.924807][ T26] __mutex_lock+0xa34/0x12f0 [ 376.929416][ T26] ? dev_ioctl+0x279/0xee0 [ 376.936097][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 376.942783][ T26] ? dev_load+0x79/0x200 [ 376.947062][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 376.954731][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 376.961000][ T26] ? netdev_name_node_lookup_rcu+0x108/0x150 [ 376.968515][ T26] dev_ioctl+0x279/0xee0 [ 376.974443][ T26] sock_ioctl+0x537/0x640 [ 376.978885][ T26] ? br_ioctl_call+0xa0/0xa0 [ 376.984285][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 376.990568][ T26] ? br_ioctl_call+0xa0/0xa0 [ 376.995443][ T26] __x64_sys_ioctl+0x193/0x200 [ 377.000299][ T26] do_syscall_64+0x35/0xb0 [ 377.004913][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 377.010823][ T26] RIP: 0033:0x7f366cc32a39 [ 377.015443][ T26] RSP: 002b:00007f366a166188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.024270][ T26] RAX: ffffffffffffffda RBX: 00007f366cd360e0 RCX: 00007f366cc32a39 [ 377.032410][ T26] RDX: 00000000200000c0 RSI: 00000000000089f1 RDI: 0000000000000003 [ 377.040397][ T26] RBP: 00007f366cc8cc5f R08: 0000000000000000 R09: 0000000000000000 [ 377.048527][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.056635][ T26] R13: 00007ffefcc4aabf R14: 00007f366a166300 R15: 0000000000022000 [ 377.064837][ T26] INFO: task syz-executor.1:9254 blocked for more than 144 seconds. [ 377.073197][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 377.079122][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.089884][ T26] task:syz-executor.1 state:D stack:28200 pid: 9254 ppid: 6557 flags:0x00004004 [ 377.100197][ T26] Call Trace: [ 377.104132][ T26] __schedule+0xb44/0x5960 [ 377.108578][ T26] ? find_held_lock+0x2d/0x110 [ 377.113776][ T26] ? __mutex_lock+0x9c2/0x12f0 [ 377.118645][ T26] ? io_schedule_timeout+0x140/0x140 [ 377.124572][ T26] schedule+0xd3/0x270 [ 377.128671][ T26] schedule_preempt_disabled+0xf/0x20 [ 377.134453][ T26] __mutex_lock+0xa34/0x12f0 [ 377.139171][ T26] ? dev_ioctl+0x279/0xee0 [ 377.144259][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 377.150016][ T26] ? dev_load+0x79/0x200 [ 377.154700][ T26] ? apparmor_capable+0x1d8/0x460 [ 377.159761][ T26] ? dev_load+0x1a7/0x200 [ 377.165595][ T26] dev_ioctl+0x279/0xee0 [ 377.169879][ T26] sock_ioctl+0x537/0x640 [ 377.176102][ T26] ? br_ioctl_call+0xa0/0xa0 [ 377.180916][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 377.189702][ T26] ? br_ioctl_call+0xa0/0xa0 [ 377.196310][ T26] __x64_sys_ioctl+0x193/0x200 [ 377.201853][ T26] do_syscall_64+0x35/0xb0 [ 377.206300][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 377.213331][ T26] RIP: 0033:0x7f366cc32a39 [ 377.217773][ T26] RSP: 002b:00007f366a145188 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 377.226836][ T26] RAX: ffffffffffffffda RBX: 00007f366cd361a0 RCX: 00007f366cc32a39 [ 377.235366][ T26] RDX: 0000000020000200 RSI: 00000000000089f3 RDI: 0000000000000003 [ 377.244344][ T26] RBP: 00007f366cc8cc5f R08: 0000000000000000 R09: 0000000000000000 [ 377.253741][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.263712][ T26] R13: 00007ffefcc4aabf R14: 00007f366a145300 R15: 0000000000022000 [ 377.272781][ T26] INFO: task syz-executor.3:9224 blocked for more than 144 seconds. [ 377.280802][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 377.287558][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.296738][ T26] task:syz-executor.3 state:D stack:28040 pid: 9224 ppid: 6561 flags:0x00000004 [ 377.308467][ T26] Call Trace: [ 377.312122][ T26] __schedule+0xb44/0x5960 [ 377.316594][ T26] ? find_held_lock+0x2d/0x110 [ 377.321673][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 377.326468][ T26] ? io_schedule_timeout+0x140/0x140 [ 377.332152][ T26] schedule+0xd3/0x270 [ 377.336255][ T26] schedule_preempt_disabled+0xf/0x20 [ 377.342596][ T26] __mutex_lock+0xa34/0x12f0 [ 377.347916][ T26] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 377.353542][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 377.359264][ T26] ? rtnetlink_rcv_msg+0x388/0xb80 [ 377.364705][ T26] rtnetlink_rcv_msg+0x3be/0xb80 [ 377.369828][ T26] ? rtnl_newlink+0xa0/0xa0 [ 377.374715][ T26] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 377.380383][ T26] netlink_rcv_skb+0x153/0x420 [ 377.385532][ T26] ? rtnl_newlink+0xa0/0xa0 [ 377.390672][ T26] ? netlink_ack+0xa60/0xa60 [ 377.395522][ T26] ? netlink_deliver_tap+0x1a2/0xc30 [ 377.400841][ T26] ? netlink_deliver_tap+0x1b1/0xc30 [ 377.406446][ T26] netlink_unicast+0x533/0x7d0 [ 377.414034][ T26] ? netlink_attachskb+0x880/0x880 [ 377.419185][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 377.425737][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 377.432292][ T26] ? __phys_addr_symbol+0x2c/0x70 [ 377.437396][ T26] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 377.443426][ T26] ? __check_object_size+0x16e/0x3f0 [ 377.449166][ T26] netlink_sendmsg+0x86d/0xda0 [ 377.454086][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 377.459061][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 377.466007][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 377.470982][ T26] sock_sendmsg+0xcf/0x120 [ 377.475964][ T26] sock_write_iter+0x289/0x3c0 [ 377.480863][ T26] ? sock_sendmsg+0x120/0x120 [ 377.486034][ T26] ? find_held_lock+0x2d/0x110 [ 377.490840][ T26] do_iter_readv_writev+0x472/0x750 [ 377.497320][ T26] ? new_sync_write+0x660/0x660 [ 377.502687][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 377.509231][ T26] ? security_file_permission+0xab/0xd0 [ 377.515303][ T26] do_iter_write+0x188/0x710 [ 377.519932][ T26] ? import_iovec+0x10c/0x150 [ 377.525280][ T26] vfs_writev+0x1aa/0x630 [ 377.529710][ T26] ? vfs_iter_write+0xa0/0xa0 [ 377.535688][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 377.540587][ T26] ? __fget_files+0x23d/0x3e0 [ 377.545791][ T26] ? __fget_light+0xea/0x280 [ 377.550507][ T26] do_writev+0x27f/0x300 [ 377.555192][ T26] ? vfs_writev+0x630/0x630 [ 377.559714][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 377.566126][ T26] do_syscall_64+0x35/0xb0 [ 377.570581][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 377.577123][ T26] RIP: 0033:0x7f05bc98fa39 [ 377.582004][ T26] RSP: 002b:00007f05b9f05188 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 377.590441][ T26] RAX: ffffffffffffffda RBX: 00007f05bca92f60 RCX: 00007f05bc98fa39 [ 377.599144][ T26] RDX: 0000000000000001 RSI: 0000000020000380 RDI: 0000000000000003 [ 377.610328][ T26] RBP: 00007f05bc9e9c5f R08: 0000000000000000 R09: 0000000000000000 [ 377.618823][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.627587][ T26] R13: 00007ffd23eada9f R14: 00007f05b9f05300 R15: 0000000000022000 [ 377.636812][ T26] INFO: task syz-executor.2:9230 blocked for more than 144 seconds. [ 377.645719][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 377.653850][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 377.663728][ T26] task:syz-executor.2 state:D stack:28272 pid: 9230 ppid: 8480 flags:0x00000004 [ 377.673914][ T26] Call Trace: [ 377.677221][ T26] __schedule+0xb44/0x5960 [ 377.683120][ T26] ? find_held_lock+0x2d/0x110 [ 377.688341][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 377.694655][ T26] ? io_schedule_timeout+0x140/0x140 [ 377.700400][ T26] schedule+0xd3/0x270 [ 377.705509][ T26] schedule_preempt_disabled+0xf/0x20 [ 377.713803][ T26] __mutex_lock+0xa34/0x12f0 [ 377.718513][ T26] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 377.724064][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 377.729672][ T26] ? rtnetlink_rcv_msg+0x388/0xb80 [ 377.735823][ T26] rtnetlink_rcv_msg+0x3be/0xb80 [ 377.740917][ T26] ? rtnl_newlink+0xa0/0xa0 [ 377.746590][ T26] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 377.752524][ T26] netlink_rcv_skb+0x153/0x420 [ 377.757315][ T26] ? rtnl_newlink+0xa0/0xa0 [ 377.763072][ T26] ? netlink_ack+0xa60/0xa60 [ 377.767724][ T26] ? netlink_deliver_tap+0x1a2/0xc30 [ 377.774864][ T26] ? netlink_deliver_tap+0x1b1/0xc30 [ 377.780194][ T26] netlink_unicast+0x533/0x7d0 [ 377.785426][ T26] ? netlink_attachskb+0x880/0x880 [ 377.791458][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 377.797915][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 377.807076][ T26] ? __phys_addr_symbol+0x2c/0x70 [ 377.813328][ T26] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 377.819088][ T26] ? __check_object_size+0x16e/0x3f0 [ 377.826604][ T26] netlink_sendmsg+0x86d/0xda0 [ 377.832616][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 377.837586][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 377.844780][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 377.849729][ T26] sock_sendmsg+0xcf/0x120 [ 377.855784][ T26] ____sys_sendmsg+0x6e8/0x810 [ 377.860615][ T26] ? kernel_sendmsg+0x50/0x50 [ 377.866625][ T26] ? do_recvmmsg+0x6d0/0x6d0 [ 377.872178][ T26] ? lock_chain_count+0x20/0x20 [ 377.877050][ T26] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 377.883721][ T26] ___sys_sendmsg+0xf3/0x170 [ 377.888338][ T26] ? sendmsg_copy_msghdr+0x160/0x160 [ 377.894579][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 377.899463][ T26] ? __fget_files+0x23d/0x3e0 [ 377.905071][ T26] ? __fget_light+0xea/0x280 [ 377.909785][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 377.916711][ T26] __sys_sendmsg+0xe5/0x1b0 [ 377.921806][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 377.926906][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 377.933337][ T26] do_syscall_64+0x35/0xb0 [ 377.937786][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 377.944304][ T26] RIP: 0033:0x7f9c61133a39 [ 377.948733][ T26] RSP: 002b:00007f9c5e6a9188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.957835][ T26] RAX: ffffffffffffffda RBX: 00007f9c61236f60 RCX: 00007f9c61133a39 [ 377.966318][ T26] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 377.979463][ T26] RBP: 00007f9c6118dc5f R08: 0000000000000000 R09: 0000000000000000 [ 377.987882][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.996069][ T26] R13: 00007ffcf82ec12f R14: 00007f9c5e6a9300 R15: 0000000000022000 [ 378.006287][ T26] [ 378.006287][ T26] Showing all locks held in the system: [ 378.014205][ T26] 3 locks held by kworker/0:1/7: [ 378.019155][ T26] #0: ffff888010c65d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 378.031159][ T26] #1: ffffc90000cc7db0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 378.042090][ T26] #2: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x83/0xe10 [ 378.054255][ T26] 1 lock held by khungtaskd/26: [ 378.059136][ T26] #0: ffffffff8b981ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 378.069375][ T26] 1 lock held by in:imklog/6243: [ 378.074480][ T26] #0: ffff88801b3fcd70 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 378.083877][ T26] 3 locks held by kworker/1:3/7054: [ 378.089073][ T26] #0: ffff888010c64d38 ((wq_completion)events){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 378.099574][ T26] #1: ffffc9000234fdb0 (deferred_process_work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 378.110689][ T26] #2: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: switchdev_deferred_process_work+0xa/0x20 [ 378.121383][ T26] 3 locks held by kworker/1:4/8082: [ 378.126677][ T26] #0: ffff888147fff538 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 378.137831][ T26] #1: ffffc9000caafdb0 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 378.148256][ T26] #2: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 378.157954][ T26] 1 lock held by syz-executor.1/9223: [ 378.165759][ T26] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x279/0xee0 [ 378.174787][ T26] 1 lock held by syz-executor.1/9227: [ 378.180159][ T26] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x279/0xee0 [ 378.189273][ T26] 1 lock held by syz-executor.1/9253: [ 378.194744][ T26] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x279/0xee0 [ 378.206164][ T26] 1 lock held by syz-executor.1/9254: [ 378.212295][ T26] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: dev_ioctl+0x279/0xee0 [ 378.221279][ T26] 1 lock held by syz-executor.4/9222: [ 378.226656][ T26] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 378.236182][ T26] 1 lock held by syz-executor.3/9224: [ 378.241914][ T26] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 378.251523][ T26] 1 lock held by syz-executor.2/9230: [ 378.256887][ T26] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 378.266523][ T26] [ 378.268857][ T26] ============================================= [ 378.268857][ T26] [ 378.280712][ T26] NMI backtrace for cpu 0 [ 378.285068][ T26] CPU: 0 PID: 26 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 378.293576][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.303734][ T26] Call Trace: [ 378.307018][ T26] dump_stack_lvl+0xcd/0x134 [ 378.311715][ T26] nmi_cpu_backtrace.cold+0x47/0x144 [ 378.317124][ T26] ? lapic_can_unplug_cpu+0x80/0x80 [ 378.322410][ T26] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 378.328580][ T26] watchdog+0xc1d/0xf50 [ 378.332892][ T26] ? reset_hung_task_detector+0x30/0x30 [ 378.338470][ T26] kthread+0x3e5/0x4d0 [ 378.342634][ T26] ? set_kthread_struct+0x130/0x130 [ 378.347848][ T26] ret_from_fork+0x1f/0x30 [ 378.355372][ T26] Sending NMI from CPU 0 to CPUs 1: [ 378.360644][ C1] NMI backtrace for cpu 1 [ 378.360656][ C1] CPU: 1 PID: 254 Comm: kworker/u4:3 Not tainted 5.15.0-rc5-syzkaller #0 [ 378.360678][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.360690][ C1] Workqueue: bat_events batadv_nc_worker [ 378.360781][ C1] RIP: 0010:kasan_check_range+0xe/0x180 [ 378.360837][ C1] Code: f5 00 00 00 e9 23 82 3b 02 0f 1f 00 48 89 f2 be f8 00 00 00 e9 13 82 3b 02 0f 1f 00 48 85 f6 0f 84 70 01 00 00 49 89 f9 41 54 <44> 0f b6 c2 49 01 f1 55 53 0f 82 18 01 00 00 48 b8 ff ff ff ff ff [ 378.360856][ C1] RSP: 0018:ffffc900020cfbb8 EFLAGS: 00000202 [ 378.360870][ C1] RAX: 0000000000000000 RBX: 0000000000000001 RCX: ffffffff815c37f1 [ 378.360882][ C1] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffffffff8d6ead10 [ 378.360894][ C1] RBP: 1ffff92000419f7b R08: 0000000000000000 R09: ffffffff8d6ead10 [ 378.360907][ C1] R10: ffffffff88d55a71 R11: 0000000000000000 R12: ffffffff8b981ee0 [ 378.361036][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 00000000000002f3 [ 378.361050][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 378.361068][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 378.361081][ C1] CR2: 00007f2c194ea018 CR3: 000000007027c000 CR4: 00000000003506e0 [ 378.361093][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 378.361102][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 378.361113][ C1] Call Trace: [ 378.361121][ C1] lock_release+0xa1/0x720 [ 378.361143][ C1] ? batadv_nc_worker+0x849/0xfa0 [ 378.361164][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 378.361186][ C1] ? lockdep_hardirqs_off+0x90/0xd0 [ 378.361213][ C1] batadv_nc_worker+0x86b/0xfa0 [ 378.361237][ C1] process_one_work+0x9bf/0x16b0 [ 378.361258][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 378.361277][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 378.361300][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 378.361325][ C1] worker_thread+0x658/0x11f0 [ 378.361346][ C1] ? process_one_work+0x16b0/0x16b0 [ 378.361366][ C1] kthread+0x3e5/0x4d0 [ 378.361387][ C1] ? set_kthread_struct+0x130/0x130 [ 378.361408][ C1] ret_from_fork+0x1f/0x30 [ 378.363083][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.440943][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 378.449218][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.453250][ T26] CPU: 1 PID: 26 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 378.453273][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 378.453284][ T26] Call Trace: [ 378.453293][ T26] dump_stack_lvl+0xcd/0x134 [ 378.453323][ T26] panic+0x2b0/0x6dd [ 378.623101][ T26] ? __warn_printk+0xf3/0xf3 [ 378.627697][ T26] ? lapic_can_unplug_cpu+0x80/0x80 [ 378.632972][ T26] ? preempt_schedule_thunk+0x16/0x18 [ 378.638374][ T26] ? nmi_trigger_cpumask_backtrace+0x191/0x220 [ 378.644525][ T26] ? watchdog.cold+0x130/0x158 [ 378.649311][ T26] watchdog.cold+0x141/0x158 [ 378.653888][ T26] ? reset_hung_task_detector+0x30/0x30 [ 378.659446][ T26] kthread+0x3e5/0x4d0 [ 378.663502][ T26] ? set_kthread_struct+0x130/0x130 [ 378.668688][ T26] ret_from_fork+0x1f/0x30 [ 378.673540][ T26] Kernel Offset: disabled [ 378.677879][ T26] Rebooting in 86400 seconds..