last executing test programs: 36.97814347s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r0, &(0x7f00000002c0)=[{&(0x7f0000000280)="e3", 0x1}, {&(0x7f0000000140)}], 0x2) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 36.787412007s ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xffffffff}, [@map_val={0x18, 0x0, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000280)='GPL\x00', 0x8, 0x66, &(0x7f0000000740)=""/102, 0x41000, 0x1, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000002c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x2, 0xd, 0x4, 0x8}, 0x10, 0x0, 0x0, 0x3, 0x0, &(0x7f0000000440)=[{0x1, 0x3, 0xb, 0x6}, {0x3, 0x4, 0xb}, {0x4, 0x2, 0xf, 0xb}], 0x10, 0x3}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x73}}, @printk={@lu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x73}}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x8906, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=@ringbuf, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket(0x10, 0x803, 0x0) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x34, 0x2, [@TCA_HHF_QUANTUM={0x8}, @TCA_HHF_ADMIT_BYTES, @TCA_HHF_HH_FLOWS_LIMIT={0x8}, @TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_ADMIT_BYTES={0x8}, @TCA_HHF_RESET_TIMEOUT={0x2e}]}}]}, 0x60}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_KEY(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)={0x28, r9, 0x1, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}}, 0x0) (async) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='ext4_ext_remove_space_done\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) (async) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) sendto$inet(r2, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) (async) getsockopt$ARPT_SO_GET_ENTRIES(r2, 0x6, 0xb, 0x0, &(0x7f00000001c0)) 36.572668643s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1f, 0x803, 0x1000000) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x24d8}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) listen(0xffffffffffffffff, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000a80)) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=@newlink={0x34, 0x12, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xc, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000040)=0x4000, 0x4) connect$phonet_pipe(0xffffffffffffffff, &(0x7f0000000100), 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x439, 0xfffffffc, 0x3, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x2, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4002, 0x10}}}}}}]}, 0x48}}, 0x0) 32.234916976s ago: executing program 4: sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r3}, [@NDA_LLADDR={0xa, 0x2, @random="2ee308099cc8"}, @NDA_VLAN={0x6}]}, 0x30}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002900)=@newqdisc={0x74, 0x58, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xfff1}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}, @qdisc_kind_options=@q_skbprio={{0xc}, {0x8}}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x1, 0x0]}}]}]}, 0x74}}, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) preadv(0xffffffffffffffff, &(0x7f0000000200), 0x0, 0x3, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10880) socket(0x1, 0x803, 0x0) setsockopt$packet_add_memb(r7, 0x107, 0x1, &(0x7f00000001c0)={r8, 0x1, 0x6, @dev}, 0x10) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x10) sendmsg$NL80211_CMD_GET_MPATH(0xffffffffffffffff, 0x0, 0x48000) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r10 = epoll_create1(0x0) ioctl$FS_IOC_SETFLAGS(r10, 0x40088a01, &(0x7f0000000000)) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x94, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x32822}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}]}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8}, @IFLA_LINK_NETNSID={0x8}, @IFLA_IFALIAS={0x14, 0x14, 'veth1\x00'}, @IFLA_PROP_LIST={0x2c, 0x34, 0x0, 0x1, [{0x14, 0x35, 'bond_slave_1\x00'}, {0x14, 0x35, 'dvmrp1\x00'}]}]}, 0x94}}, 0x4080) 31.880649424s ago: executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) mmap(&(0x7f00002b0000/0x1000)=nil, 0x1000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) 31.853889355s ago: executing program 3: socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x6a98047402e98331}, 0x14}}, 0x0) socket$packet(0x11, 0x0, 0x300) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 31.737876921s ago: executing program 3: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket(0x400000000010, 0x3, 0x0) syz_emit_ethernet(0x22, &(0x7f00000000c0)={@local, @dev, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x3a, 0x0, @remote={0xac, 0x24}, @remote}}}}}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000100)=@ethtool_ringparam={0xa, 0x0, 0x300}}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), r1) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000200), 0xc, &(0x7f0000000540)={&(0x7f00000004c0)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="e3042abd7000fbdbdf254400000800030000", @ANYRES32=r3, @ANYBLOB="34002380060004009800000006000100b000000005001e0001000000080017000000000006000d00060000000500110001000000"], 0x50}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000000)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r8 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r7, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) socket$key(0xf, 0x3, 0x2) bpf$LINK_DETACH(0x22, 0x0, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000006680)=ANY=[@ANYBLOB="140000001000010100000000000000000000000a64000000060a09040000000000000000020000000900010073797a30000000000900020073797a320000000038000480340001800b000100657874686472000024000280050002000000000008000140000000150800034000000000080004"], 0x8c}}, 0x0) write$cgroup_type(r5, &(0x7f0000000000), 0x182000) ioctl$FS_IOC_SETFLAGS(r9, 0x40086602, &(0x7f0000000080)=0x80000) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000400)={0xffffffffffffffff, 0xe0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f00000002c0)}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000e80)=@bpf_lsm={0x1d, 0x4, &(0x7f0000001440)=ANY=[@ANYBLOB="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"], &(0x7f0000000880)='GPL\x00', 0x1f, 0x96, &(0x7f00000008c0)=""/150, 0x0, 0x2, '\x00', r11, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000b80)={0x9}, 0x8}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000b00)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES16, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r12, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 31.603785531s ago: executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGSKNS(r0, 0x894c, 0x0) writev(0xffffffffffffffff, &(0x7f0000000000), 0x0) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='devices.list\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x5, 0x3, 0x2}, 0x10, 0xffffffffffffffff, r2, 0x0, 0x0, 0x0, 0x10, 0xfffffffd}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.stat\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x0, 0x0, &(0x7f0000000380)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 31.523680778s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1}, 0x18) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000280)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) accept4$alg(r5, 0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES32, @ANYRESDEC, @ANYRESOCT=r2, @ANYRESOCT, @ANYRES64=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8891}, 0x20040050) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14800000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2542000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f91124fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 31.320373316s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async) r3 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r3, 0x10d, 0xf4, 0x0, &(0x7f0000000000)) (async) r4 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f0000000780)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xfffffffc, 'bridge_slave_1\x00'}) (async) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) syz_genetlink_get_family_id$gtp(&(0x7f0000000100), r0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000002c0)) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x1a, &(0x7f0000000300), 0x0) r7 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r7, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r8 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 64) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (rerun: 64) bind$inet(r8, 0x0, 0x0) (async) setsockopt$inet_int(r5, 0x0, 0x21, &(0x7f0000000240)=0xfdfffdfd, 0x4) connect$inet(r8, 0x0, 0x0) setsockopt$inet_int(r8, 0x0, 0x19, 0x0, 0x0) (async, rerun: 64) listen(r7, 0x3) (async, rerun: 64) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r10 = accept4(r7, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r10) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) close(0xffffffffffffffff) 31.258415363s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="200000001200010a"], 0x26}}, 0x0) recvmmsg(r1, &(0x7f0000001a00)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000680)=""/4096, 0xe88}, {0x0}, {&(0x7f0000000440)=""/135, 0x87}], 0x3}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000005580)=[{&(0x7f0000003380)=""/4096, 0x1000}, {&(0x7f00000044c0)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0xa, 0x0, 0x0) r2 = socket(0x22, 0x3, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) recvmmsg(r0, &(0x7f0000002100)=[{{&(0x7f0000000380)=@hci, 0x80, &(0x7f0000001e00)=[{&(0x7f0000001680)=""/214, 0xd6}, {&(0x7f0000001780)=""/92, 0x5c}, {&(0x7f0000001800)=""/249, 0xf9}, {&(0x7f00000001c0)=""/61, 0x3d}, {&(0x7f00000055c0)=""/4096, 0x1000}, {&(0x7f0000001900)=""/227, 0xe3}, {&(0x7f0000001c80)=""/129, 0x81}, {&(0x7f0000001d40)=""/132, 0x84}], 0x8, &(0x7f0000001e80)=""/206, 0xce}, 0x1ff}, {{&(0x7f0000001f80)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f00000065c0)=""/4096, 0x1000}], 0x1, &(0x7f00000075c0)=""/4096, 0x1000}, 0x2}, {{&(0x7f0000002000)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000400), 0x0, &(0x7f0000002080)=""/97, 0x61}, 0x4}], 0x3, 0x2042, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r4, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b402000000000000791100000000000085000000010000009500000000000000359bb9f486b136000000008762000000f33ad18fa9b151092e9172d8ca80be3fd2fe548fa036cf6151d76a8b71e51807e420da77440079a86cdda66fedd4922a95cd42662d9dafae9602325ef1a30b8aba9c271a51a56f7f73de45084cd90fa9ac55778d6c272c473383785c34c5b372e52138cf7f6c081c29a5ee"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000029c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0x2d1, 0xfffffffffffffd85, &(0x7f00000000c0)="b9ff0303000d698cb89e40f008006000000e00001100630a77", 0x0, 0x100, 0x2000000, 0x0, 0x0, &(0x7f0000000440)}, 0x28) shutdown(r4, 0x1) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value, 0x8) setsockopt$inet_sctp6_SCTP_INITMSG(r1, 0x84, 0x2, &(0x7f0000000180)={0x2, 0x1, 0x7, 0x3}, 0x8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 31.196647226s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x19, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 31.158684104s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r3 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r3, 0x10d, 0xae, 0x0, &(0x7f0000000000)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x107, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wlan0\x00'}, {0x14, 0x1, 'ip_vti0\x00'}]}]}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x94}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) r6 = socket(0x200000100000011, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000040)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000100)=0x800b, 0x4) sendmsg$netlink(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000c00)={0x300, 0x0, 0x0, 0x0, 0x0, "", [@nested={0x2ed, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0x4}, @generic="2cdedb0a2837c9a30dbb758ea75fe361a1f474ad600bcd3680a16195edb5d0abe0c95e6a48b2f756cdf95c7204904c79f67ed94063227d05c1a2cd79e9436c70606bd35f900c64dd567a4161b37988e18ee1a4278196f7918d06e0d78d9c65b50ed57c9835de069cc4dcf1e133793086c8a29b9777010c5a2d1a7792a5b6dcb54a386294ae83bf57668004ffd1cb113bd9b591346699", @typed={0x29, 0x0, 0x0, 0x0, @binary="d303108241814a170b29f85382bd9bf3a6aea9736dcc2528e6c3b3a7595a3b5555e8b7f606"}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="3b1c2a7c6d15754c252f9e98e440c7f33b694f5a7b1d1787afa96933be350a2b15e6ce3fa84aae2d5835cc763991bd12f693c6f2aaf100f7e73ce04e5254aae66b290f01fde4d4450e302543eca5fce5580b61d6d0af2cef6556da8a98cf5d3762c00ec8072cd1655cd94eac1ff71e98f67e7413e2f9fd7d3a4424d7c1e48861ff9c53b4029ee1c478ce", @generic="536cec0063e4fb492fb69ec6b3c6e11144acdd205d03921fd330b577d3c30ffa0fec9f48a2045fc2d6050b9ee9d98999ed3d52e42363799cb5da722f82b8077dcfdf958066a98b25fd64c60cf29f0a6b34e4f06f2e0a70bfb6e91e69c16ba49d06eb3642dfa6c15c9c9162c18234d31e01257ae8cfc8af4c98db70b18f089ef6052bedf70aecfe08e4076e276a8b8350aa38dd524acbbf71af62e40f1caca8876ae37dd41241310daea17a02c2ed296fbbaf2fc0599dc47c6923e898e715b2f63f60c684db7810f0ea73d5c6d586bbff7b1fc50a4742a42245b4cdfb", @typed={0xc, 0x0, 0x0, 0x0, @u64}, @generic="a4df80e118799edecf310900000000000000d8873d97dc9dce436f239a5653630beb767775ee4ffb13ce7c584280397ab66310b631380497813018debd98802a7e3e9e9756e7207e1d5304dc8d2f171c6a22b5d8dfa0c876453fea68181c88edef3e0b091f51a3bbd3d934b674944cb8328d1a2687bdb900f278c2c7e09eb8967275b12d970d2d3f2ba9047433a73282b6"]}]}, 0x300}], 0x1}, 0x0) sendmsg$rds(r5, &(0x7f0000000000)={&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000640)=[@cswp={0x58, 0x114, 0x7, {{}, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x0, 0x100000000, 0x0, 0x80000000}}], 0x58}, 0x0) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r9, &(0x7f0000000040)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0x3, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}, 0x40) sendmsg$IPSET_CMD_RENAME(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x28, 0x5, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}}, 0x0) socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f70002800500010000000000300003801700018014000300fc"], 0x58}}, 0x0) 31.065186053s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 30.957535874s ago: executing program 1: socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x6a98047402e98331}, 0x14}}, 0x0) socket$packet(0x11, 0x0, 0x300) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 30.929569426s ago: executing program 0: ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000000)=0x4b) socket$inet6(0xa, 0x5, 0x4) ioctl$TUNSETCARRIER(0xffffffffffffffff, 0x400454e2, &(0x7f0000000080)=0x1) (async, rerun: 64) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (async, rerun: 64) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}}, 0x9c) 30.928748836s ago: executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.868270103s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 30.702632503s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}}, 0x0) 30.656491923s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$sock_linger(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) syz_emit_ethernet(0xa9, &(0x7f0000000180)={@random="757e938fd660", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x73, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0x9, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b"}, {0x0, 0x1, "00e9ff0600000000000000a2"}, {0x0, 0x1, "fe906d26efe3"}]}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x20}) write$cgroup_int(r0, &(0x7f0000000040), 0xfea0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x17, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x59}, {}, {}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x1, 0x0, 0x0, 0x0, 0xabc4}, @exit, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000380), 0x101bf) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) writev(r0, &(0x7f0000000100)=[{&(0x7f00000002c0)="84a416d61213086e0c1ff62f96bf3cb53cc5f4009654f450afbd3fd14a9092beb202e850daae23872377b1ce8b6129da3df526cca68703b0292d3c5bf45377d68b2aa85e49dbc4836a3269508e8c5bab40ea36a78ba0c697f2d0574932bb4702bfabd6afb10cfce96f0ef4503396465cff9df57b283dc32f84dd69269c0c9c31dc", 0x81}, {&(0x7f0000000680)="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", 0x18c}], 0x2) ioctl$EXT4_IOC_MOVE_EXT(r0, 0xc028660f, &(0x7f0000000080)={0x0, r1, 0x2, 0x4, 0xa3f7}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000004c0)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d3, &(0x7f00000000c0)) 30.440738102s ago: executing program 2: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000269d56825f02d4e4b411e3cf674e00008e0000002200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.393347371s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x8000) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000140)) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'gre0\x00', &(0x7f0000000580)={'tunl0\x00', 0x0, 0x8, 0x700, 0x2, 0x401, {{0x6, 0x4, 0x0, 0x2f, 0x18, 0x64, 0x0, 0x7, 0x2f, 0x0, @remote, @empty, {[@end, @ssrr={0x89, 0x3}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) socket$kcm(0xa, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000000)) pwritev(0xffffffffffffffff, &(0x7f00000004c0)=[{0x0}, {0x0}, {&(0x7f0000000200)="db", 0xfffff000}], 0x3, 0x8040000, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0x300, 0x0, 0x4, {0x0, 0x0, 0x0, r1, {}, {0x9, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_PLIMIT={0x8, 0x1, 0x5}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x7a}, @TCA_FQ_ORPHAN_MASK={0x8, 0xa, 0x10001}]}}]}, 0x48}}, 0x44000) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000001e00)={'hsr0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000001c0)={r3, 0x1, 0x6, @random="000400000020"}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r3], 0x20}}, 0x0) 30.318989652s ago: executing program 2: sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c, 0x0}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000000)={'syztnl2\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @dev, @private1, 0x0, 0x700}}) socket$inet6(0xa, 0x2, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="500100001a00000000000000000000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000062eb62e4c535f28170316f19f90d489fb58f758ff263155fac474394e06217e3a7", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000000000000000000000330000002001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000005d00140078636263286165732900000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000880000000000000097a2c2df58bf2babea45840d4da5d43241000000"], 0x150}}, 0x0) r1 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r1, 0x29, 0xca, &(0x7f0000000000)={0x10, 0x0, 0x0, r2}, 0xc) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd4, &(0x7f0000000080)=0xd, 0x4) 30.288866909s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket(0x0, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0xc00}, &(0x7f0000000180)=0x8) 30.018155484s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xdf}]]}, 0x30}}, 0x0) 882.791103ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) 676.275698ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x6ee, 0x9, 0x1}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x40305829, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) 372.446998ms ago: executing program 0: socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)={0x14, r1, 0x6a98047402e98331}, 0x14}}, 0x0) socket$packet(0x11, 0x0, 0x300) recvmsg(r0, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) 283.107629ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_QOS_MAP(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) 0s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1e00000000300000000000000000000027000000222f00002500feff0000000095000000000064da9ba9c9bd1850f427cb6224958999a62096eec3a51c98748727c141208d32ec17872b1cb91eb8b3b6928c36e556403345c41faa029e7b14bcdc60f65957ff4363c5eee6608921d040872dab5c019543cb1d66c6226b2436e8da23043cd27384e98a9a8c1e35ffca5bd7f6a0a884a4bbd244b40bccdb927c67618ff90601a988db45a849f5f4dbf594ce86cf9f8ec2ecc4580d265ffb97cb3537408ac241f825c12bb4b8f1efcfd099ec9d88961c"], &(0x7f0000000000)='syzkaller\x00'}, 0x78) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000ec0)={0x114, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x00\x00\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f00000001c0)={0xffffffffffffffff, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r4, 0x801, 0x0, 0x0, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}]}, 0x1c}}, 0x0) close(r2) sendmsg$NFT_BATCH(r2, &(0x7f0000000400)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [], {0x14}}, 0x28}}, 0x48004) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000380)={&(0x7f0000000300)={0x64, 0x0, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1f}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x1}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x10000}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x4e}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x6}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x7fff}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x64}}, 0x4000000) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x268040, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000700)=@ipv6_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e21}}]}, 0x24}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000a40)=ANY=[@ANYBLOB="1800000000e30b00000000000000000095"], &(0x7f0000000340)='GPL\x00'}, 0x90) r7 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r7, &(0x7f00000000c0)={&(0x7f0000000200)=@tipc=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x80, 0x0, 0x0, &(0x7f0000000040)=[@mark={{0x14, 0x1, 0x24, 0x9}}], 0x18}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000000c0)="a0", 0x0}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x2, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x8}, 0x48) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmmsg(r8, &(0x7f0000000180), 0x400008a, 0x0) kernel console output (not intermixed with test programs): s=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 85.518790][ T5922] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 85.569939][ T29] audit: type=1804 audit(1718736290.239:6): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2627307339/syzkaller.UGZ0sQ/61/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 85.611495][ T29] audit: type=1804 audit(1718736290.249:7): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2627307339/syzkaller.UGZ0sQ/61/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 85.674057][ T29] audit: type=1804 audit(1718736290.259:8): pid=5920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2627307339/syzkaller.UGZ0sQ/61/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 85.679918][ T5920] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.439124][ T5956] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 86.490080][ T5956] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 86.500776][ T5956] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 86.515741][ T5956] bond1: (slave vcan1): making interface the new active one [ 86.525564][ T5956] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 86.579219][ T5960] __nla_validate_parse: 1 callbacks suppressed [ 86.579238][ T5960] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.712557][ T5960] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.718223][ T5970] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 86.730545][ T5970] netlink: 210876 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.745527][ T5963] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.765921][ T5963] bridge_slave_1: left allmulticast mode [ 86.801233][ T5963] bridge_slave_1: left promiscuous mode [ 86.817908][ T5963] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.847480][ T5963] bridge_slave_0: left allmulticast mode [ 86.873918][ T5963] bridge_slave_0: left promiscuous mode [ 86.886965][ T5963] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.969910][ T5976] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 87.322222][ T5991] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.334281][ T5991] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.363428][ T5991] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 87.714853][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.739082][ T6010] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.767273][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.979342][ T6009] syzkaller0: entered promiscuous mode [ 87.984904][ T6009] syzkaller0: entered allmulticast mode [ 88.000161][ T6010] tipc: Can't bind to reserved service type 0 [ 89.960276][ T6056] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 90.404757][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 90.435460][ T6082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.532753][ T6082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 90.629684][ T6082] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.118939][ T6120] bridge_slave_1: left allmulticast mode [ 91.124640][ T6120] bridge_slave_1: left promiscuous mode [ 91.157747][ T6120] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.199261][ T6120] bridge_slave_0: left allmulticast mode [ 91.204955][ T6120] bridge_slave_0: left promiscuous mode [ 91.241683][ T6120] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.411754][ T6136] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 91.729161][ T6149] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 91.961902][ T6155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 91.977045][ T6159] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 92.004555][ T5172] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 92.032143][ T5172] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 92.032244][ T6163] __nla_validate_parse: 10 callbacks suppressed [ 92.032257][ T6163] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.064664][ T6159] syzkaller0: entered promiscuous mode [ 92.074152][ T6159] syzkaller0: entered allmulticast mode [ 92.120630][ T6155] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.121828][ T2451] wlan1: authenticated [ 92.155986][ T2451] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 92.237486][ T2451] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 92.244720][ T6165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 92.257757][ T2451] wlan1: associated [ 92.369003][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 94.337589][ T6205] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 94.361823][ T6213] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.441191][ T6214] dummy0: entered promiscuous mode [ 94.455747][ T6214] dummy0: left promiscuous mode [ 94.614338][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 95.359486][ T6251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.470963][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 95.712890][ T6270] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.183470][ T5123] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 96.206657][ T6298] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.213309][ T5123] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 96.224442][ T5123] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 96.233514][ T5123] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 96.242553][ T5123] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 96.250624][ T5123] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 96.294596][ T6298] vlan2: entered promiscuous mode [ 96.315354][ T6298] vlan2: entered allmulticast mode [ 96.350135][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.400316][ T2455] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.444607][ T6297] lo speed is unknown, defaulting to 1000 [ 96.455044][ T6304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.481693][ T6307] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.537845][ T2455] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.561501][ T6309] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.661699][ T6304] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.683292][ T2455] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.847230][ T2455] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.981886][ T6334] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 97.042898][ T6334] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 97.181486][ T6342] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 97.842139][ T2455] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 97.856109][ T2455] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 97.868571][ T2455] bond0 (unregistering): Released all slaves [ 97.889723][ T2455] bond1 (unregistering): (slave vcan0): Releasing backup interface [ 97.903197][ T2455] bond1 (unregistering): Released all slaves [ 98.050091][ T6297] chnl_net:caif_netlink_parms(): no params data found [ 98.146035][ T2455] wlan1: deauthenticating from 08:02:11:00:00:00 by local choice (Reason: 3=DEAUTH_LEAVING) [ 98.344762][ T5123] Bluetooth: hci0: command tx timeout [ 98.360337][ T6378] bond0: (slave bond_slave_0): Releasing backup interface [ 98.437987][ T6390] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.572650][ T2455] mac80211_hwsim hwsim10 wlan0 (unregistering): left allmulticast mode [ 98.600807][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.652271][ T2455] team0: Port device macvlan1 removed [ 98.712455][ T6297] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.733644][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.750768][ T6297] bridge_slave_0: entered allmulticast mode [ 98.766879][ T6297] bridge_slave_0: entered promiscuous mode [ 98.767298][ T6401] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.784584][ T6392] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.865882][ T6297] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.890015][ T6297] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.922674][ T6394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.932789][ T6297] bridge_slave_1: entered allmulticast mode [ 98.956838][ T6297] bridge_slave_1: entered promiscuous mode [ 99.005934][ T6394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 99.201157][ T2455] hsr_slave_0: left promiscuous mode [ 99.218561][ T2455] hsr_slave_1: left promiscuous mode [ 99.234470][ T2455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.244564][ T2455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.263380][ T2455] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.286509][ T2455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.333023][ T2455] veth1_macvtap: left promiscuous mode [ 99.345759][ T2455] veth0_macvtap: left promiscuous mode [ 99.358314][ T2455] veth1_vlan: left promiscuous mode [ 99.364325][ T2455] veth0_vlan: left promiscuous mode [ 100.014697][ T2455] team0 (unregistering): Port device team_slave_1 removed [ 100.087621][ T2455] team0 (unregistering): Port device team_slave_0 removed [ 100.415619][ T5123] Bluetooth: hci0: command tx timeout [ 100.598158][ T6297] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.644435][ T6297] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.798961][ T6297] team0: Port device team_slave_0 added [ 100.829167][ T6297] team0: Port device team_slave_1 added [ 100.891231][ T6433] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.949786][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.972611][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.007550][ T6297] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.020519][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.041370][ T6297] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.098712][ T6297] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.139213][ T6297] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.271944][ T6297] hsr_slave_0: entered promiscuous mode [ 101.303163][ T6297] hsr_slave_1: entered promiscuous mode [ 101.322024][ T6297] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.331448][ T6297] Cannot create hsr debugfs directory [ 101.560687][ T6443] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.616298][ T5131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 101.628846][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 101.637180][ T5131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 101.655040][ T5131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 101.670625][ T5131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 101.678103][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 101.765158][ T6448] bond0: (slave bond_slave_0): Releasing backup interface [ 101.861579][ T6445] lo speed is unknown, defaulting to 1000 [ 101.904683][ T2896] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.936565][ T2896] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.996356][ T6453] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.089592][ T2896] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.109516][ T2896] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.211488][ T2896] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.231542][ T2896] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.315527][ T2451] tipc: Subscription rejected, illegal request [ 102.327093][ T6467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.383009][ T2896] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 102.414893][ T2896] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.440706][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.507744][ T5131] Bluetooth: hci0: command tx timeout [ 102.697481][ T6297] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 102.719211][ T2896] bridge_slave_1: left allmulticast mode [ 102.724913][ T2896] bridge_slave_1: left promiscuous mode [ 102.735012][ T2896] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.751643][ T2896] bridge_slave_0: left allmulticast mode [ 102.757526][ T2896] bridge_slave_0: left promiscuous mode [ 102.763301][ T2896] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.079526][ T2896] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.090360][ T2896] bond0 (unregistering): Released all slaves [ 103.103016][ T6297] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 103.123398][ T6445] chnl_net:caif_netlink_parms(): no params data found [ 103.134976][ T6297] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 103.213704][ T6297] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 103.403384][ T6445] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.411738][ T6445] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.419146][ T6445] bridge_slave_0: entered allmulticast mode [ 103.426747][ T6445] bridge_slave_0: entered promiscuous mode [ 103.434947][ T6506] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.446158][ T754] tipc: Subscription rejected, illegal request [ 103.555216][ T6445] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.562867][ T6445] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.571070][ T6445] bridge_slave_1: entered allmulticast mode [ 103.578587][ T6445] bridge_slave_1: entered promiscuous mode [ 103.671910][ T6445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.775508][ T5131] Bluetooth: hci4: command tx timeout [ 103.784621][ T2896] mac80211_hwsim hwsim8 wlan0 (unregistering): left allmulticast mode [ 103.806733][ T2896] team0: Port device macvlan2 removed [ 103.830659][ T6445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.921718][ T6445] team0: Port device team_slave_0 added [ 103.977844][ T6445] team0: Port device team_slave_1 added [ 104.138144][ T6445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.146506][ T6445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.172883][ T6445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.185839][ T6445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.192934][ T6445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.219667][ T6445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.260159][ T2896] hsr_slave_0: left promiscuous mode [ 104.262115][ T6531] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 104.273129][ T2896] hsr_slave_1: left promiscuous mode [ 104.283884][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.297805][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.314764][ T2896] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.322510][ T2896] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.358839][ T2896] veth1_macvtap: left promiscuous mode [ 104.364504][ T2896] veth0_macvtap: left promiscuous mode [ 104.371442][ T2896] veth1_vlan: left promiscuous mode [ 104.377051][ T2896] veth0_vlan: left promiscuous mode [ 104.414585][ T2455] tipc: Subscription rejected, illegal request [ 104.520141][ T6536] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 104.577265][ T5131] Bluetooth: hci0: command tx timeout [ 104.835166][ T2896] team0 (unregistering): Port device team_slave_1 removed [ 104.871366][ T2896] team0 (unregistering): Port device team_slave_0 removed [ 105.175611][ T6528] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.197088][ T6538] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.215857][ T6538] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.274628][ T6539] bond0: entered promiscuous mode [ 105.303195][ T6536] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 105.328342][ T6543] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.351683][ T6543] vlan2: entered promiscuous mode [ 105.367960][ T6543] vlan2: entered allmulticast mode [ 105.550946][ T6445] hsr_slave_0: entered promiscuous mode [ 105.580843][ T6445] hsr_slave_1: entered promiscuous mode [ 105.596328][ T6445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.615402][ T6445] Cannot create hsr debugfs directory [ 105.642237][ T6551] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 105.665797][ T6551] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.699726][ T6551] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.857153][ T5131] Bluetooth: hci4: command tx timeout [ 105.956829][ T6297] 8021q: adding VLAN 0 to HW filter on device bond0 [ 106.127995][ T2455] tipc: Subscription rejected, illegal request [ 106.166442][ T6297] 8021q: adding VLAN 0 to HW filter on device team0 [ 106.302960][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.310152][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 106.336183][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.343420][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 106.826785][ T6606] team0: Port device macvlan1 added [ 106.962270][ T6297] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.993056][ T6445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.053229][ T6445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.083189][ T6445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.111409][ T6621] syz-executor.1[6621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.111688][ T6621] syz-executor.1[6621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.147608][ T6445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.189838][ T6621] syz-executor.1[6621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.190064][ T6621] syz-executor.1[6621] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 107.296631][ T6630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.313122][ T6297] veth0_vlan: entered promiscuous mode [ 107.424025][ T6297] veth1_vlan: entered promiscuous mode [ 107.444875][ T6630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.548739][ T6630] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.552296][ T6297] veth0_macvtap: entered promiscuous mode [ 107.614005][ T6297] veth1_macvtap: entered promiscuous mode [ 107.652310][ T6445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.727744][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.741685][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.751920][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.769271][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.789843][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.800596][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.818542][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.844623][ T6445] 8021q: adding VLAN 0 to HW filter on device team0 [ 107.870193][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.910875][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.932335][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.945104][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.945533][ T5131] Bluetooth: hci4: command tx timeout [ 107.960914][ T6297] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.980471][ T6297] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 108.003224][ T6297] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 108.029311][ T5200] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.036537][ T5200] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.049747][ T6297] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.059930][ T6297] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.069067][ T6297] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.079846][ T6297] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.111655][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.119024][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.188440][ T6659] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 108.276643][ T6662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.434100][ T6662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.472780][ T2455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.497350][ T2455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.564061][ T6662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.612532][ T2455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.632760][ T2455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.709007][ T6445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.129485][ T6445] veth0_vlan: entered promiscuous mode [ 109.160710][ T6445] veth1_vlan: entered promiscuous mode [ 109.237078][ T6445] veth0_macvtap: entered promiscuous mode [ 109.256188][ T6445] veth1_macvtap: entered promiscuous mode [ 109.289096][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.303811][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.314345][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.327064][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.337168][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.352209][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.364616][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.385314][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.402770][ T6445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.432850][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.443933][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.472169][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.489797][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.502619][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.517894][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.532968][ T6445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.552026][ T6445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.564436][ T6445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.621498][ T6445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.635206][ T6445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.635593][ T6713] ieee802154 phy0 wpan0: encryption failed: -22 [ 109.673532][ T6445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 109.693498][ T6445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.015879][ T5131] Bluetooth: hci4: command tx timeout [ 110.175564][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.203663][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.282706][ T2896] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.303000][ T2896] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.321540][ T6736] lo speed is unknown, defaulting to 1000 [ 110.712960][ T6752] __nla_validate_parse: 2 callbacks suppressed [ 110.712980][ T6752] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.760665][ T6752] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 111.222787][ T6760] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 111.230215][ T6736] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.236761][ T6760] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.892604][ T6783] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 111.893222][ T6777] IPVS: stopping backup sync thread 6783 ... [ 111.927997][ T45] wlan1: authenticate with 28:ad:97:75:f9:04 (local address=08:02:11:00:00:01) [ 111.969580][ T45] wlan1: send auth to 28:ad:97:75:f9:04 (try 1/3) [ 112.009549][ T2464] wlan1: send auth to 28:ad:97:75:f9:04 (try 2/3) [ 112.027581][ T12] wlan1: send auth to 28:ad:97:75:f9:04 (try 3/3) [ 112.066530][ T12] wlan1: authentication with 28:ad:97:75:f9:04 timed out [ 112.195825][ T6791] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 112.231912][ T6791] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.295165][ T6794] lo speed is unknown, defaulting to 1000 [ 112.880574][ T6794] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.040959][ T6788] delete_channel: no stack [ 113.255724][ T6813] rdma_rxe: rxe_newlink: failed to add lo [ 113.639429][ T6830] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.664614][ T6830] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 113.694310][ T6832] lo speed is unknown, defaulting to 1000 [ 113.715584][ C1] syz_tun: tun_net_xmit 54 [ 113.755503][ C1] syz_tun: tun_net_xmit 54 [ 113.847838][ T6837] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.876972][ T6837] dummy0: entered promiscuous mode [ 114.060565][ T6846] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.432855][ T6852] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 114.461735][ T6852] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 114.617715][ T6834] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.708533][ T6861] syz0: rxe_newlink: already configured on lo [ 114.824561][ T6861] infiniband syz0: set active [ 114.952951][ T5170] lo speed is unknown, defaulting to 1000 [ 115.332974][ T6885] nbd: socks must be embedded in a SOCK_ITEM attr [ 115.558811][ T6887] lo speed is unknown, defaulting to 1000 [ 115.871240][ T6912] __nla_validate_parse: 3 callbacks suppressed [ 115.871279][ T6912] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.117006][ T6908] rdma_rxe: rxe_newlink: failed to add lo [ 116.356025][ T6928] rdma_rxe: rxe_newlink: failed to add lo [ 116.414197][ T6930] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.632376][ T6925] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 116.651451][ T6925] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.735586][ T6887] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.393569][ T6950] rdma_rxe: rxe_newlink: failed to add lo [ 117.658307][ T6937] delete_channel: no stack [ 117.662923][ T6937] delete_channel: no stack [ 117.954869][ T6975] macvlan1: entered promiscuous mode [ 117.977950][ T6975] macvlan1: entered allmulticast mode [ 117.997666][ T6975] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 118.019500][ T6975] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 118.030695][ T6980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.056197][ T6975] team0: Port device macvlan1 added [ 118.122118][ T6977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.322716][ T6987] rdma_rxe: rxe_newlink: failed to add lo [ 118.444978][ T7000] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.508352][ T6994] sit0: entered promiscuous mode [ 118.521173][ T6994] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 118.585399][ T6994] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.654408][ T7006] rdma_rxe: rxe_newlink: failed to add lo [ 118.707424][ T5200] syz_tun: tun_net_xmit 110 [ 118.922972][ T7022] team0: Port device macvlan2 added [ 119.409316][ T7049] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.453216][ T7043] sit0: entered promiscuous mode [ 119.459958][ T5172] syz_tun: tun_net_xmit 110 [ 119.497184][ T7043] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 119.535631][ T7043] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.870410][ T7072] mac80211_hwsim hwsim21 wlan0: entered promiscuous mode [ 119.910506][ T7075] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 119.936105][ T7072] team0: Port device macvlan2 added [ 120.030260][ T7071] lo speed is unknown, defaulting to 1000 [ 120.203514][ T7087] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.244944][ T7085] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 120.264683][ T7085] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.706460][ T7100] lo speed is unknown, defaulting to 1000 [ 121.372184][ T7100] __nla_validate_parse: 1 callbacks suppressed [ 121.372205][ T7100] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.877740][ T7120] team0: Port device macvlan3 added [ 122.192435][ T7145] rdma_rxe: rxe_newlink: failed to add lo [ 122.296942][ T5199] syz_tun: tun_net_xmit 110 [ 122.627642][ T7157] lo speed is unknown, defaulting to 1000 [ 122.709389][ T5199] syz_tun: tun_net_xmit 110 [ 123.004036][ T7171] macvlan1: entered promiscuous mode [ 123.015546][ T7171] macvlan1: entered allmulticast mode [ 123.465527][ T7187] rdma_rxe: rxe_newlink: failed to add lo [ 123.638459][ T7158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.655665][ T5170] syz_tun: tun_net_xmit 110 [ 123.813504][ T7195] rdma_rxe: rxe_newlink: failed to add lo [ 123.847831][ T5170] syz_tun: tun_net_xmit 110 [ 124.372378][ T5199] syz_tun: tun_net_xmit 110 [ 124.457589][ T7212] macvlan4: entered promiscuous mode [ 124.466194][ T7212] macvlan4: entered allmulticast mode [ 124.730274][ T7221] rdma_rxe: rxe_newlink: failed to add lo [ 125.420256][ T7240] syz0: rxe_newlink: already configured on lo [ 125.445942][ T7240] infiniband syz0: set active [ 125.516287][ T9] lo speed is unknown, defaulting to 1000 [ 125.551071][ T7244] macvlan3: entered promiscuous mode [ 125.570230][ T7244] macvlan3: entered allmulticast mode [ 125.690403][ T7246] lo speed is unknown, defaulting to 1000 [ 126.311775][ T7264] rdma_rxe: rxe_newlink: failed to add lo [ 126.566466][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.785607][ T7275] dummy0: entered promiscuous mode [ 126.790862][ T7275] macsec1: entered promiscuous mode [ 126.877883][ T7275] dummy0: left promiscuous mode [ 126.917419][ T7282] rdma_rxe: rxe_newlink: failed to add lo [ 127.036554][ T45] syz_tun: tun_net_xmit 110 [ 127.173251][ T7291] macvlan3: entered promiscuous mode [ 127.190885][ T7291] macvlan3: entered allmulticast mode [ 127.521953][ T7293] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 127.554031][ T7293] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.684588][ T7299] team0: Port device macvlan1 removed [ 127.703269][ T5172] syz_tun: tun_net_xmit 110 [ 127.860189][ T7303] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.078084][ T7305] hsr_slave_0: left promiscuous mode [ 128.100629][ T7305] hsr_slave_1: left promiscuous mode [ 128.353613][ T7323] sctp: [Deprecated]: syz-executor.0 (pid 7323) Use of int in maxseg socket option. [ 128.353613][ T7323] Use struct sctp_assoc_value instead [ 128.370623][ T7324] syz0: rxe_newlink: already configured on lo [ 128.386993][ T7324] infiniband syz0: set active [ 128.434845][ T5172] lo speed is unknown, defaulting to 1000 [ 128.881536][ T7338] rdma_rxe: rxe_newlink: failed to add lo [ 129.308353][ T7349] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.358728][ T7349] vlan2: entered promiscuous mode [ 129.374177][ T7349] vlan2: entered allmulticast mode [ 129.465504][ C1] syz_tun: tun_net_xmit 54 [ 129.717977][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 129.997395][ T7375] bond0: entered promiscuous mode [ 130.026408][ T7375] bond_slave_0: entered promiscuous mode [ 130.033747][ T7375] bond_slave_1: entered promiscuous mode [ 130.050967][ T7375] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 130.075088][ T7375] bond0: left promiscuous mode [ 130.093776][ T7375] bond_slave_0: left promiscuous mode [ 130.104741][ T7375] bond_slave_1: left promiscuous mode [ 130.195544][ C1] syz_tun: tun_net_xmit 54 [ 130.396507][ T7387] rdma_rxe: rxe_newlink: failed to add lo [ 130.471410][ T5172] syz_tun: tun_net_xmit 110 [ 130.744874][ T7390] hsr_slave_0: left promiscuous mode [ 130.788952][ T7390] hsr_slave_1: left promiscuous mode [ 131.125536][ T45] syz_tun: tun_net_xmit 110 [ 131.215593][ C1] syz_tun: tun_net_xmit 54 [ 131.694244][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.717814][ T7411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.741107][ T7411] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 131.767395][ T7412] syz_tun: tun_net_xmit 86 [ 131.777874][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.828212][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.894222][ T7412] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.133890][ T7417] rdma_rxe: rxe_newlink: failed to add lo [ 132.815524][ C0] syz_tun: tun_net_xmit 86 [ 133.234537][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.240969][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.357290][ T7426] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.856604][ C0] syz_tun: tun_net_xmit 86 [ 134.026268][ T7433] bond0: entered promiscuous mode [ 134.031380][ T7433] bond_slave_0: entered promiscuous mode [ 134.063328][ T7433] bond_slave_1: entered promiscuous mode [ 134.091508][ T7433] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.123534][ T7433] bond0: left promiscuous mode [ 134.170976][ T7433] bond_slave_0: left promiscuous mode [ 134.182735][ T7433] bond_slave_1: left promiscuous mode [ 135.131144][ T7446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.397197][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 135.484357][ T7456] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 135.647995][ T7461] rdma_rxe: rxe_newlink: failed to add lo [ 135.781231][ T7467] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.877934][ T7471] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.238162][ T7482] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.268764][ T7482] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 136.738731][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 136.883552][ T7498] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 136.894149][ T7498] __nla_validate_parse: 1 callbacks suppressed [ 136.894170][ T7498] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.389470][ T7507] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 137.404838][ T7507] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.464526][ T7512] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.497659][ T7510] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.513800][ T7510] bridge_slave_1: left allmulticast mode [ 137.519982][ T7510] bridge_slave_1: left promiscuous mode [ 137.531672][ T7510] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.543200][ T7510] bridge_slave_0: left allmulticast mode [ 137.549503][ T7510] bridge_slave_0: left promiscuous mode [ 137.555305][ T7510] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.793252][ T7519] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.866907][ T7518] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.930616][ T7517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 138.121202][ T7527] syz0: rxe_newlink: already configured on lo [ 138.131813][ T7524] infiniband syz0: set active [ 138.164565][ T5172] lo speed is unknown, defaulting to 1000 [ 138.732657][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 138.737470][ T7534] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.327444][ T7548] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.535524][ T7555] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.587183][ T7555] vlan2: entered promiscuous mode [ 139.592351][ T7555] vlan2: entered allmulticast mode [ 139.691748][ T7559] vcan0: Master is either lo or non-ether device [ 139.826659][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 139.899278][ T7570] syzkaller1: entered promiscuous mode [ 139.915623][ T7570] syzkaller1: entered allmulticast mode [ 140.210070][ T7585] ieee802154 phy0 wpan0: encryption failed: -90 [ 140.466280][ T7602] xt_l2tp: v2 tid > 0xffff: 150994944 [ 140.468171][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.609583][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 140.918050][ T7622] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.969349][ T7620] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 140.978003][ T7622] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 140.980351][ T7620] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.140415][ T7631] bond0: entered promiscuous mode [ 141.145775][ T7631] bond_slave_0: entered promiscuous mode [ 141.151879][ T7631] bond_slave_1: entered promiscuous mode [ 141.158589][ T7631] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 141.167485][ T7631] bond0: left promiscuous mode [ 141.172425][ T7631] bond_slave_0: left promiscuous mode [ 141.180622][ T7631] bond_slave_1: left promiscuous mode [ 141.382787][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 141.903152][ T7660] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 142.368565][ T7685] rdma_rxe: rxe_newlink: failed to add lo [ 142.416002][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 142.607837][ T7692] ieee802154 phy0 wpan0: encryption failed: -90 [ 142.816027][ T5131] Bluetooth: hci4: command tx timeout [ 143.165763][ T7699] __nla_validate_parse: 1 callbacks suppressed [ 143.165786][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.284337][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.337564][ T7699] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.380619][ T7700] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.669115][ T7705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.718657][ T7713] rdma_rxe: rxe_newlink: failed to add lo [ 144.961097][ T7715] rdma_rxe: rxe_newlink: failed to add lo [ 145.212214][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 145.582949][ T7733] rdma_rxe: rxe_newlink: failed to add lo [ 146.740415][ T7743] rdma_rxe: rxe_newlink: failed to add lo [ 146.936889][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 147.723031][ T7778] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 147.984712][ T7782] rdma_rxe: rxe_newlink: failed to add lo [ 148.036513][ T45] syz_tun: tun_net_xmit 110 [ 148.093773][ T7784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.290451][ T7792] rdma_rxe: rxe_newlink: failed to add lo [ 148.341234][ T7795] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 148.354367][ T7795] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.364380][ T45] syz_tun: tun_net_xmit 110 [ 148.543883][ T7801] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 148.649150][ T7804] lo speed is unknown, defaulting to 1000 [ 148.795740][ T45] syz_tun: tun_net_xmit 110 [ 149.180255][ T7818] rdma_rxe: rxe_newlink: failed to add lo [ 149.227997][ T9] syz_tun: tun_net_xmit 110 [ 149.390267][ T7804] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.417182][ T7822] rdma_rxe: rxe_newlink: failed to add lo [ 149.468562][ T5172] syz_tun: tun_net_xmit 110 [ 149.645463][ T7824] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.695816][ T5172] syz_tun: tun_net_xmit 110 [ 149.740817][ T7832] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.196455][ T7848] lo speed is unknown, defaulting to 1000 [ 150.726794][ T7857] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 150.734911][ T7857] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 150.821644][ T7860] rdma_rxe: rxe_newlink: failed to add lo [ 150.867856][ T5199] syz_tun: tun_net_xmit 110 [ 150.941565][ T7851] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.256319][ T7866] lo speed is unknown, defaulting to 1000 [ 151.465493][ T9] syz_tun: tun_net_xmit 110 [ 151.484780][ T7871] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.969891][ T7877] ip6gretap0: entered promiscuous mode [ 152.001600][ T7877] batadv_slave_0: entered promiscuous mode [ 152.062961][ T7877] ip6gretap0: left promiscuous mode [ 152.106077][ T7877] batadv_slave_0: left promiscuous mode [ 152.181389][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.383018][ T7892] rdma_rxe: rxe_newlink: failed to add lo [ 152.534369][ T7894] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 152.545187][ T7894] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.995003][ T7908] lo speed is unknown, defaulting to 1000 [ 153.075193][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 153.175688][ T5123] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.200978][ T5123] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.210055][ T5123] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.227530][ T5123] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.235286][ T5123] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.242641][ T5123] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 153.417864][ T7915] lo speed is unknown, defaulting to 1000 [ 153.765547][ T7927] syz0: rxe_newlink: already configured on lo [ 153.800059][ T7927] infiniband syz0: set active [ 153.864913][ T45] lo speed is unknown, defaulting to 1000 [ 153.903667][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.404325][ T7930] lo speed is unknown, defaulting to 1000 [ 154.516751][ T7915] chnl_net:caif_netlink_parms(): no params data found [ 154.797032][ T7950] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 154.807840][ T29] audit: type=1804 audit(1718736359.509:9): pid=7950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972323039343034383035362F73797A6B616C6C65722E6E72433875642F39332F6AA38258FB2EEC8051 dev="sda1" ino=1965 res=1 errno=0 [ 154.846444][ T7915] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.853614][ T7915] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.885636][ T7915] bridge_slave_0: entered allmulticast mode [ 154.913782][ T7915] bridge_slave_0: entered promiscuous mode [ 154.953156][ T7915] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.970811][ T7915] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.989082][ T7915] bridge_slave_1: entered allmulticast mode [ 154.997016][ T7915] bridge_slave_1: entered promiscuous mode [ 155.046507][ T7932] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.268053][ T7956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.300775][ T7915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.305804][ T5131] Bluetooth: hci5: command tx timeout [ 155.333791][ T7915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.345186][ T7953] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.348662][ T7956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.454053][ T7957] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 155.478361][ T7915] team0: Port device team_slave_0 added [ 155.528890][ T7915] team0: Port device team_slave_1 added [ 155.661748][ T7915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.695406][ T7915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.777349][ T7915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.790174][ T7915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.797278][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 155.797299][ T7915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.851768][ T7915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.970611][ T7915] hsr_slave_0: entered promiscuous mode [ 156.164857][ T7915] hsr_slave_1: entered promiscuous mode [ 156.178829][ T7915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.190733][ T7915] Cannot create hsr debugfs directory [ 156.204969][ T7966] ip6gretap0: entered promiscuous mode [ 156.214894][ T7966] batadv_slave_0: entered promiscuous mode [ 156.227054][ T7966] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 156.234724][ T7966] Cannot create hsr debugfs directory [ 156.252388][ T7966] ip6gretap0: left promiscuous mode [ 156.262108][ T7966] batadv_slave_0: left promiscuous mode [ 156.427488][ T7969] lo speed is unknown, defaulting to 1000 [ 156.910165][ T7915] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.001656][ T7972] lo speed is unknown, defaulting to 1000 [ 157.147966][ T7915] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.289042][ T7970] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.355518][ T7915] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.375428][ T5131] Bluetooth: hci5: command tx timeout [ 157.397505][ T7979] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.513907][ T7915] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 157.515905][ T7973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.023586][ T7915] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 158.097997][ T7915] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 158.123462][ T7915] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 158.181635][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 158.202991][ T7915] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 158.308439][ T7996] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 158.335466][ T7996] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.398153][ T7998] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.672894][ T7915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 158.753628][ T7915] 8021q: adding VLAN 0 to HW filter on device team0 [ 158.819032][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 158.826233][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 158.878569][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 158.885770][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.937940][ T8004] lo speed is unknown, defaulting to 1000 [ 159.034666][ T7915] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 159.082013][ T5123] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 159.102780][ T5123] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 159.111960][ T5123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 159.120834][ T5123] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 159.129693][ T5123] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 159.145898][ T5123] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 159.393384][ T7915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.456665][ T5131] Bluetooth: hci5: command tx timeout [ 159.537852][ T8011] lo speed is unknown, defaulting to 1000 [ 159.807576][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 159.955524][ T8004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.010488][ T7915] veth0_vlan: entered promiscuous mode [ 160.024125][ T7915] veth1_vlan: entered promiscuous mode [ 160.051881][ T8044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.190195][ T8046] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 160.198863][ T8046] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.309542][ T7915] veth0_macvtap: entered promiscuous mode [ 160.335180][ T7915] veth1_macvtap: entered promiscuous mode [ 160.528277][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.540071][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.551504][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.562155][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.572183][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.586355][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.597749][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.608319][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.619730][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.630213][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.641336][ T7915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 160.653582][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.664721][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.674795][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.685287][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.695126][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.706652][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.716512][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.726994][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.737232][ T7915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 160.747753][ T7915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.761301][ T7915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 160.780191][ T8011] chnl_net:caif_netlink_parms(): no params data found [ 160.804307][ T7915] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.816357][ T7915] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.825099][ T7915] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 160.843802][ T7915] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.001730][ T29] audit: type=1804 audit(1718736365.709:10): pid=8062 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972323039343034383035362F73797A6B616C6C65722E6E72433875642F3130312F6AA38258FB2EEC8051 dev="sda1" ino=1960 res=1 errno=0 [ 161.036102][ T8011] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.043456][ T8011] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.050991][ T8011] bridge_slave_0: entered allmulticast mode [ 161.060848][ T8011] bridge_slave_0: entered promiscuous mode [ 161.075675][ T8011] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.092527][ T8011] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.103258][ T8011] bridge_slave_1: entered allmulticast mode [ 161.110964][ T8011] bridge_slave_1: entered promiscuous mode [ 161.197089][ T8011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.215782][ T5131] Bluetooth: hci3: command tx timeout [ 161.234998][ T2896] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.237885][ T8011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 161.252471][ T2896] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.352727][ T8011] team0: Port device team_slave_0 added [ 161.389564][ T8011] team0: Port device team_slave_1 added [ 161.483350][ T2455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 161.491619][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.491636][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.515654][ T2455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 161.528795][ T8011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.545219][ T8011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.545954][ T5131] Bluetooth: hci5: command tx timeout [ 161.571257][ T8011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.600694][ T8011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.677786][ T8075] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 161.731113][ T8075] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.752812][ T8011] hsr_slave_0: entered promiscuous mode [ 161.761998][ T8011] hsr_slave_1: entered promiscuous mode [ 161.787063][ T8011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.796688][ T8011] Cannot create hsr debugfs directory [ 162.083340][ T8011] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.199038][ T8011] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.334930][ T8011] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.448840][ T8011] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.657382][ T8011] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 162.670406][ T8011] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 162.700543][ T8011] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 162.770235][ T8011] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 162.945779][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.957493][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 162.990455][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.020542][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.055119][ T8115] syz_tun: tun_net_xmit 86 [ 163.099563][ T8109] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.296405][ T5131] Bluetooth: hci3: command tx timeout [ 163.408310][ T8011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.478904][ T8011] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.508964][ T29] audit: type=1804 audit(1718736368.219:11): pid=8119 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2497365336/syzkaller.IpAS5Z/4/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 163.557093][ T5199] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.564263][ T5199] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.607030][ T8122] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 163.619550][ T5131] Bluetooth: hci5: command tx timeout [ 163.627520][ T5199] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.634662][ T5199] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.820418][ T8118] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.832398][ T8132] mac80211_hwsim hwsim2 wlan0: left allmulticast mode [ 163.936997][ T8132] team0: Port device macvlan1 removed [ 164.096830][ C0] syz_tun: tun_net_xmit 86 [ 164.181834][ T8135] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 164.210705][ T8135] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.232639][ T8011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.410103][ T8011] veth0_vlan: entered promiscuous mode [ 164.480617][ T8011] veth1_vlan: entered promiscuous mode [ 164.608996][ T8011] veth0_macvtap: entered promiscuous mode [ 164.630228][ T8011] veth1_macvtap: entered promiscuous mode [ 164.672547][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.695655][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.719828][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.741180][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.763266][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.785219][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.805604][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.855522][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.875320][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.895439][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.915411][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.935624][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 164.957232][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.987649][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.025451][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.047828][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.081174][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.111704][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.125271][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.135468][ C0] syz_tun: tun_net_xmit 86 [ 165.154239][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.175388][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.203042][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.235586][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.253076][ T8011] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.275049][ T8011] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.302992][ T8011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.343109][ T8011] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.363136][ T8011] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.374275][ T8011] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.385976][ T5131] Bluetooth: hci3: command tx timeout [ 165.393857][ T8011] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.657891][ T8149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.683130][ T8149] team0: Port device bond0 added [ 165.689525][ T8154] rdma_rxe: rxe_newlink: failed to add lo [ 165.907378][ T8149] team0: Port device team_slave_0 removed [ 165.932932][ T8149] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 165.968894][ T2455] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.005440][ T2455] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.019068][ T8155] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.129171][ T2455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.152813][ T2455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.399074][ T8165] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.507968][ T8165] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.566872][ T8165] bridge_slave_1: left allmulticast mode [ 166.572561][ T8165] bridge_slave_1: left promiscuous mode [ 166.605647][ T8165] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.651310][ T8165] bridge_slave_0: left allmulticast mode [ 166.678700][ T8165] bridge_slave_0: left promiscuous mode [ 166.692025][ T8165] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.852167][ T8173] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 167.456001][ T5131] Bluetooth: hci3: command tx timeout [ 167.549919][ T8188] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.561012][ T8188] team0: Port device bond0 added [ 167.634635][ T8188] team0: Port device team_slave_0 removed [ 167.654784][ T8188] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 167.708655][ T8188] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 167.743912][ T8193] rdma_rxe: rxe_newlink: failed to add lo [ 168.126052][ T8203] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.228949][ T8201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.287622][ T8210] macvlan2: entered promiscuous mode [ 168.292968][ T8210] macvlan2: entered allmulticast mode [ 168.315152][ T8210] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 168.334864][ T8210] mac80211_hwsim hwsim29 wlan0: entered allmulticast mode [ 168.369670][ T8212] unsupported nlmsg_type 40 [ 168.376828][ T8210] team0: Port device macvlan2 added [ 168.525791][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 169.238145][ T8244] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.283712][ T8242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.374430][ T8242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.471594][ T8245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 169.535667][ T5131] Bluetooth: hci3: command tx timeout [ 169.604979][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 170.126525][ T8280] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 170.203506][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.306899][ T8271] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 170.315037][ T8271] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.318155][ T8281] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.437525][ T8284] syz_tun: tun_net_xmit 86 [ 170.965304][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 171.455808][ C1] syz_tun: tun_net_xmit 86 [ 171.562964][ T8308] hsr0: entered promiscuous mode [ 171.588711][ T8308] hsr_slave_0: left promiscuous mode [ 171.606393][ T8308] hsr_slave_1: left promiscuous mode [ 171.687632][ T8308] hsr0 (unregistering): left promiscuous mode [ 171.905907][ T8312] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 172.099296][ T29] audit: type=1804 audit(1718736376.809:12): pid=8316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D74657374646972333336373732333037322F73797A6B616C6C65722E37466A3656612F31302F6AA38258FB2EEC8051 dev="sda1" ino=1970 res=1 errno=0 [ 172.323746][ T8318] __nla_validate_parse: 5 callbacks suppressed [ 172.323765][ T8318] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.495582][ C1] syz_tun: tun_net_xmit 86 [ 172.917938][ T8350] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 172.919492][ T8339] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 172.949267][ T8350] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.958029][ T8339] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.167349][ T29] audit: type=1804 audit(1718736377.869:13): pid=8355 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D74657374646972333336373732333037322F73797A6B616C6C65722E37466A3656612F31352F6AA38258FB2EEC8051 dev="sda1" ino=1953 res=1 errno=0 [ 173.606541][ T8366] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.740763][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 173.967024][ T8384] hsr0: entered promiscuous mode [ 174.091886][ T8384] hsr_slave_0: left promiscuous mode [ 174.114024][ T8384] hsr_slave_1: left promiscuous mode [ 174.168064][ T8384] hsr0 (unregistering): left promiscuous mode [ 174.342958][ T8392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.441235][ T8394] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.525705][ T8392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.816138][ T8412] syz0: rxe_newlink: already configured on lo [ 174.832991][ T8412] infiniband syz0: set active [ 174.919790][ T5126] lo speed is unknown, defaulting to 1000 [ 175.217230][ T8426] netlink: 752 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.241007][ T8429] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.275624][ T8429] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 175.866654][ T8442] syz_tun: tun_net_xmit 86 [ 175.883395][ T8442] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 176.126469][ T8456] rdma_rxe: rxe_newlink: failed to add lo [ 176.188967][ T5170] syz_tun: tun_net_xmit 110 [ 176.567276][ T8482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.596042][ T8482] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.605084][ T8481] rdma_rxe: rxe_newlink: failed to add lo [ 176.838105][ T8492] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.895467][ C1] syz_tun: tun_net_xmit 86 [ 177.004095][ T8501] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 177.059585][ T5170] syz_tun: tun_net_xmit 110 [ 177.367107][ T8509] rdma_rxe: rxe_newlink: failed to add lo [ 177.608814][ T8521] __nla_validate_parse: 1 callbacks suppressed [ 177.608835][ T8521] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.653151][ T8520] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 177.669957][ T8520] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.935560][ C1] syz_tun: tun_net_xmit 86 [ 178.021187][ T8530] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.266942][ T5126] syz_tun: tun_net_xmit 110 [ 178.526103][ T8555] rdma_rxe: rxe_newlink: failed to add lo [ 178.527158][ T5170] syz_tun: tun_net_xmit 110 [ 178.776758][ T8562] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.266707][ T8588] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.305955][ T8587] rdma_rxe: rxe_newlink: failed to add lo [ 179.314678][ T8588] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 179.942963][ T8605] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 180.036530][ T8605] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.186915][ T8630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.351873][ T8643] rdma_rxe: rxe_newlink: failed to add lo [ 180.679013][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 181.066067][ T8667] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 181.085550][ T8667] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 181.343567][ T8672] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.385601][ T5123] Bluetooth: hci1: command 0x0406 tx timeout [ 181.391780][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 181.784092][ T8687] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 181.791908][ T8687] IPv6: NLM_F_CREATE should be set when creating new route [ 181.799325][ T8687] IPv6: NLM_F_CREATE should be set when creating new route [ 182.057431][ T8702] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.279177][ T8698] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 182.966720][ T8718] __nla_validate_parse: 1 callbacks suppressed [ 182.966737][ T8718] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.576257][ T8733] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.627822][ T8733] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 183.811838][ T8735] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.814074][ T8737] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 183.845725][ T8737] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.254755][ T8745] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 184.276794][ T8745] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.577527][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 184.932690][ T8757] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.238535][ T8764] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.562967][ T8768] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.579831][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.613643][ T8774] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 185.758325][ T8780] macvlan1: entered promiscuous mode [ 185.777033][ T8780] macvlan1: entered allmulticast mode [ 185.796256][ T8780] team0: Port device macvlan1 added [ 186.018522][ T8784] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 186.061317][ T8784] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 186.140373][ T8793] batadv0: entered promiscuous mode [ 186.155019][ T8793] batadv0: left promiscuous mode [ 186.537037][ T8800] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 186.672842][ T8809] rdma_rxe: rxe_newlink: failed to add lo [ 187.057342][ T8823] rdma_rxe: rxe_newlink: failed to add lo [ 187.279572][ T8830] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 187.869000][ T8851] rdma_rxe: rxe_newlink: failed to add lo [ 188.167535][ T8860] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 188.196635][ T8860] __nla_validate_parse: 4 callbacks suppressed [ 188.196655][ T8860] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.365188][ T8868] hsr0: entered promiscuous mode [ 188.385321][ T8865] hsr_slave_0: left promiscuous mode [ 188.392214][ T8865] hsr_slave_1: left promiscuous mode [ 188.442666][ T8865] hsr0 (unregistering): left promiscuous mode [ 188.461103][ T8870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.536730][ T8870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.597343][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.608178][ T8872] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.631037][ T8870] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.852343][ T8881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.945188][ T8881] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.198614][ T8894] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.228564][ T8894] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 189.952666][ T8915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.982980][ T8915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.005726][ T8915] bridge_slave_1: left allmulticast mode [ 190.013232][ T8915] bridge_slave_1: left promiscuous mode [ 190.021350][ T8915] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.063001][ T8915] bridge_slave_0: left allmulticast mode [ 190.080194][ T8915] bridge_slave_0: left promiscuous mode [ 190.091150][ T8915] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.227235][ T8925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.336186][ T8925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.425144][ T8925] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.540430][ T8940] x_tables: duplicate underflow at hook 2 [ 190.680779][ T8946] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 190.736409][ T8946] team0: Port device netdevsim0 added [ 190.757863][ T8945] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 190.782680][ T8946] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 190.822807][ T29] audit: type=1804 audit(1718736395.529:14): pid=8952 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name=2F726F6F742F73797A6B616C6C65722D74657374646972323439373336353333362F73797A6B616C6C65722E49704153355A2F35342F6AA38258FB2EEC8051 dev="sda1" ino=1951 res=1 errno=0 [ 190.979766][ T8962] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.004951][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.026519][ T8957] bridge_slave_1: left allmulticast mode [ 191.032219][ T8957] bridge_slave_1: left promiscuous mode [ 191.046613][ T8957] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.060690][ T8957] bridge_slave_0: left allmulticast mode [ 191.073202][ T8957] bridge_slave_0: left promiscuous mode [ 191.079102][ T8957] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.433953][ T8976] IPVS: Unknown mcast interface: hsr0 [ 191.477129][ T29] audit: type=1804 audit(1718736396.179:15): pid=8982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D74657374646972323039343034383035362F73797A6B616C6C65722E6E72433875642F3135362F6AA38258FB2EEC8051 dev="sda1" ino=1967 res=1 errno=0 [ 191.607029][ T8987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.714563][ T8987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.790787][ T8998] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 191.800961][ T8987] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.844348][ T9003] infiniband syz0: set active [ 191.875622][ T9000] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 191.902970][ T9000] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 191.926327][ T5126] lo speed is unknown, defaulting to 1000 [ 192.303469][ T29] audit: type=1804 audit(1718736397.009:16): pid=9018 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D74657374646972333336373732333037322F73797A6B616C6C65722E37466A3656612F35372F6AA38258FB2EEC8051 dev="sda1" ino=1970 res=1 errno=0 [ 192.829296][ T9040] batadv_slave_0: entered allmulticast mode [ 192.852770][ T9040] pim6reg: entered allmulticast mode [ 192.869168][ T9040] pim6reg: left allmulticast mode [ 192.877536][ T9040] batadv_slave_0: left allmulticast mode [ 193.068246][ T9050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.155741][ T9050] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.245200][ T9063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.296689][ T9057] pim6reg: entered allmulticast mode [ 193.351958][ T9064] pim6reg: left allmulticast mode [ 193.473434][ T9077] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 193.534716][ T9077] __nla_validate_parse: 3 callbacks suppressed [ 193.534737][ T9077] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.761953][ T9094] batadv_slave_0: entered allmulticast mode [ 193.828954][ T9094] pim6reg: entered allmulticast mode [ 193.877334][ T9099] pim6reg: left allmulticast mode [ 193.905621][ T9099] batadv_slave_0: left allmulticast mode [ 194.171611][ T9110] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 194.178902][ T9110] IPv6: NLM_F_CREATE should be set when creating new route [ 194.186171][ T9110] IPv6: NLM_F_CREATE should be set when creating new route [ 194.210081][ T9112] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.389821][ T9122] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 194.451392][ T9122] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.548298][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 194.598234][ T9128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.668606][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.675035][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.692091][ T9128] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.794574][ T9137] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.898833][ T9140] batadv_slave_0: entered allmulticast mode [ 194.934511][ T9140] pim6reg: entered allmulticast mode [ 194.963758][ T9140] pim6reg: left allmulticast mode [ 194.974653][ T9140] batadv_slave_0: left allmulticast mode [ 195.145844][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.449207][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 195.736410][ T9168] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.864373][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 195.969016][ T9180] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.010227][ T9188] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.047856][ T9191] rdma_rxe: rxe_newlink: failed to add lo [ 196.131502][ T5126] syz_tun: tun_net_xmit 110 [ 196.189312][ T9195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.196422][ T9197] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.215551][ T9186] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.238871][ T9197] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 196.253828][ T9192] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 196.295632][ T9195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.381224][ T9195] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.897104][ T5199] syz_tun: tun_net_xmit 110 [ 197.393340][ T9261] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 197.490572][ T9267] macvlan1: entered promiscuous mode [ 197.507728][ T9267] macvlan1: entered allmulticast mode [ 197.514055][ T9267] mac80211_hwsim hwsim31 wlan0: entered promiscuous mode [ 197.534497][ T9267] mac80211_hwsim hwsim31 wlan0: entered allmulticast mode [ 197.579961][ T9267] team0: Port device macvlan1 added [ 197.736506][ T9276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.865437][ T9276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.956040][ T9276] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.344544][ T9314] rdma_rxe: rxe_newlink: failed to add lo [ 198.390603][ T5170] syz_tun: tun_net_xmit 110 [ 198.450545][ T9316] batadv_slave_0: entered allmulticast mode [ 198.468127][ T9316] batadv_slave_0: left allmulticast mode [ 198.542175][ T9318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.581585][ T9320] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 198.594819][ T9320] __nla_validate_parse: 11 callbacks suppressed [ 198.594837][ T9320] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.630855][ T9325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.658192][ T9322] bridge_slave_0: entered promiscuous mode [ 198.674511][ T9322] bridge_slave_0: entered allmulticast mode [ 198.705539][ T9318] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.063528][ T9335] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 199.071879][ T9335] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.136617][ T5126] syz_tun: tun_net_xmit 110 [ 199.399262][ T9345] batadv_slave_0: entered allmulticast mode [ 199.428133][ T9345] batadv_slave_0: left allmulticast mode [ 199.486742][ T9347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.578060][ T9355] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.589937][ T9347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.621634][ T9358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.665027][ T9354] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.675221][ T9355] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.707941][ T9358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.807977][ T9358] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.366713][ T9391] batadv_slave_0: entered allmulticast mode [ 200.394165][ T9391] pim6reg: entered allmulticast mode [ 200.430331][ T9391] pim6reg: left allmulticast mode [ 200.450571][ T9391] batadv_slave_0: left allmulticast mode [ 200.526949][ T9397] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 200.540785][ T9397] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 200.858152][ T9415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.959456][ T9415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.045426][ T9415] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.390000][ T9437] batadv_slave_0: entered allmulticast mode [ 201.412877][ T9437] pim6reg: entered allmulticast mode [ 201.439092][ T9437] pim6reg: left allmulticast mode [ 201.444297][ T9437] batadv_slave_0: left allmulticast mode [ 201.514006][ T9439] rdma_rxe: rxe_newlink: failed to add lo [ 201.651636][ T9441] mac80211_hwsim hwsim31 wlan0: left allmulticast mode [ 201.684860][ T9441] mac80211_hwsim hwsim31 wlan0: left promiscuous mode [ 201.749942][ T9441] team0: Port device macvlan1 removed [ 201.761576][ T9446] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 201.781865][ T9446] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.810253][ T9449] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.925150][ T9447] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.002085][ T9457] dummy0: entered promiscuous mode [ 202.033259][ T9457] dummy0: left promiscuous mode [ 202.292043][ T9471] batadv_slave_0: entered allmulticast mode [ 202.316248][ T9471] pim6reg: entered allmulticast mode [ 202.338029][ T9471] pim6reg: left allmulticast mode [ 202.343205][ T9471] batadv_slave_0: left allmulticast mode [ 202.399357][ T9475] rdma_rxe: rxe_newlink: failed to add lo [ 202.778564][ T9488] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 202.818411][ T9488] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.869838][ T9495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.988641][ T9499] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.010482][ T9495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.113866][ T9495] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.315925][ T9508] syz0: rxe_newlink: already configured on lo [ 203.334380][ T9508] infiniband syz0: set active [ 203.374373][ T5172] lo speed is unknown, defaulting to 1000 [ 203.523190][ T9515] xt_l2tp: missing protocol rule (udp|l2tpip) [ 203.597853][ T9517] __nla_validate_parse: 1 callbacks suppressed [ 203.597871][ T9517] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.641435][ T9512] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 203.666353][ T9515] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.715546][ T9515] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.294808][ T9540] rdma_rxe: rxe_newlink: failed to add lo [ 204.642618][ T9558] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.681824][ T9558] vlan2: entered promiscuous mode [ 204.704588][ T9558] vlan2: entered allmulticast mode [ 204.967764][ T45] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 204.986375][ T45] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 205.110905][ T9582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.136772][ T2464] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 205.189085][ T9589] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.208649][ T9587] macvlan1: entered promiscuous mode [ 205.211781][ T9590] rdma_rxe: rxe_newlink: failed to add lo [ 205.224331][ T9587] macvlan1: entered allmulticast mode [ 205.233475][ T9587] team0: Port device macvlan1 added [ 205.272906][ T35] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 205.281272][ T9582] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 205.466899][ T2455] wlan1: authentication with 08:02:11:00:00:00 timed out [ 205.569497][ T9606] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 205.588882][ T9606] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.3'. [ 205.615826][ T9612] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 205.850661][ T9627] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 205.864580][ T9627] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.889234][ T9629] netlink: 4544 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.903338][ T9629] netlink: 4544 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.923175][ T9629] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.951234][ T9631] rdma_rxe: rxe_newlink: failed to add lo [ 206.407451][ T9654] netlink: 4544 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.499334][ T9656] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 206.509942][ T9656] CPU: 0 PID: 9656 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 206.520387][ T9656] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 206.530470][ T9656] Call Trace: [ 206.533767][ T9656] [ 206.536715][ T9656] dump_stack_lvl+0x241/0x360 [ 206.541448][ T9656] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.546660][ T9656] ? __pfx__printk+0x10/0x10 [ 206.551249][ T9656] ? sysfs_warn_dup+0x51/0xa0 [ 206.555919][ T9656] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 206.561298][ T9656] sysfs_warn_dup+0x8e/0xa0 [ 206.565802][ T9656] sysfs_do_create_link_sd+0xbe/0x110 [ 206.571204][ T9656] device_add_class_symlinks+0x1c5/0x250 [ 206.576863][ T9656] device_add+0x553/0xbf0 [ 206.581197][ T9656] wiphy_register+0x1d3f/0x2b30 [ 206.586062][ T9656] ? __pfx_wiphy_register+0x10/0x10 [ 206.591252][ T9656] ? minstrel_ht_alloc+0x72b/0x860 [ 206.596384][ T9656] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 206.602465][ T9656] ieee80211_register_hw+0x3098/0x3d80 [ 206.607933][ T9656] ? ieee80211_register_hw+0x1161/0x3d80 [ 206.613569][ T9656] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 206.619384][ T9656] ? __asan_memset+0x23/0x50 [ 206.623991][ T9656] ? __hrtimer_init+0x170/0x250 [ 206.628864][ T9656] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 206.634602][ T9656] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 206.640665][ T9656] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 206.647161][ T9656] ? kstrndup+0x5c/0xb0 [ 206.651321][ T9656] ? __asan_memcpy+0x40/0x70 [ 206.655917][ T9656] hwsim_new_radio_nl+0xe4c/0x21d0 [ 206.661051][ T9656] ? __pfx___nla_validate_parse+0x10/0x10 [ 206.666776][ T9656] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 206.672432][ T9656] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 206.678762][ T9656] genl_rcv_msg+0xb14/0xec0 [ 206.683256][ T9656] ? mark_lock+0x9a/0x350 [ 206.687581][ T9656] ? __pfx_genl_rcv_msg+0x10/0x10 [ 206.692613][ T9656] ? __pfx_lock_acquire+0x10/0x10 [ 206.697626][ T9656] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 206.703162][ T9656] ? __pfx___might_resched+0x10/0x10 [ 206.708465][ T9656] netlink_rcv_skb+0x1e3/0x430 [ 206.713253][ T9656] ? __pfx_genl_rcv_msg+0x10/0x10 [ 206.718286][ T9656] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 206.723593][ T9656] ? __netlink_deliver_tap+0x77e/0x7c0 [ 206.729069][ T9656] genl_rcv+0x28/0x40 [ 206.733044][ T9656] netlink_unicast+0x7ea/0x980 [ 206.737815][ T9656] ? __pfx_netlink_unicast+0x10/0x10 [ 206.743093][ T9656] ? __virt_addr_valid+0x183/0x520 [ 206.748206][ T9656] ? __check_object_size+0x49c/0x900 [ 206.753477][ T9656] ? bpf_lsm_netlink_send+0x9/0x10 [ 206.758592][ T9656] netlink_sendmsg+0x8db/0xcb0 [ 206.763363][ T9656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.768650][ T9656] ? __import_iovec+0x536/0x820 [ 206.773499][ T9656] ? aa_sock_msg_perm+0x91/0x160 [ 206.778446][ T9656] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 206.783722][ T9656] ? security_socket_sendmsg+0x87/0xb0 [ 206.789205][ T9656] ? __pfx_netlink_sendmsg+0x10/0x10 [ 206.794482][ T9656] __sock_sendmsg+0x221/0x270 [ 206.799157][ T9656] ____sys_sendmsg+0x525/0x7d0 [ 206.803918][ T9656] ? __pfx_____sys_sendmsg+0x10/0x10 [ 206.809207][ T9656] __sys_sendmsg+0x2b0/0x3a0 [ 206.813789][ T9656] ? __pfx___sys_sendmsg+0x10/0x10 [ 206.818905][ T9656] ? bpf_raw_tracepoint_open+0x1d6/0x240 [ 206.824555][ T9656] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 206.830888][ T9656] ? do_syscall_64+0x100/0x230 [ 206.835659][ T9656] ? do_syscall_64+0xb6/0x230 [ 206.840370][ T9656] do_syscall_64+0xf3/0x230 [ 206.844971][ T9656] ? clear_bhb_loop+0x35/0x90 [ 206.849739][ T9656] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.855655][ T9656] RIP: 0033:0x7f3f0607cf29 [ 206.860087][ T9656] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 206.879691][ T9656] RSP: 002b:00007f3f05bff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 206.888115][ T9656] RAX: ffffffffffffffda RBX: 00007f3f061b3f80 RCX: 00007f3f0607cf29 [ 206.896077][ T9656] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 206.904038][ T9656] RBP: 00007f3f060ec074 R08: 0000000000000000 R09: 0000000000000000 [ 206.911998][ T9656] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 206.919960][ T9656] R13: 000000000000000b R14: 00007f3f061b3f80 R15: 00007ffedc875de8 [ 206.927939][ T9656] [ 207.132123][ T9670] vlan2: entered promiscuous mode [ 207.150048][ T9670] vlan2: entered allmulticast mode [ 207.872589][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 208.529466][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 208.929910][ T9780] __nla_validate_parse: 12 callbacks suppressed [ 208.929929][ T9780] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.017838][ T9778] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.079304][ T29] audit: type=1804 audit(1718736413.789:17): pid=9791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3367723072/syzkaller.7Fj6Va/121/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 209.123342][ T9795] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 209.175577][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 209.210306][ T9802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.293737][ T9802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.295692][ T5199] syz_tun: tun_net_xmit 110 [ 209.391232][ T9802] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.497651][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 209.572222][ T9809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.661209][ T9822] tipc: Started in network mode [ 209.674173][ T9822] tipc: Node identity fe8000000000000000000000000000bb, cluster identity 4711 [ 209.692353][ T9822] tipc: Enabling of bearer rejected, failed to enable media [ 209.716898][ T9825] rdma_rxe: rxe_newlink: failed to add lo [ 209.768240][ T5126] syz_tun: tun_net_xmit 110 [ 209.937930][ T9832] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.011698][ T9829] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.141342][ T29] audit: type=1804 audit(1718736414.849:18): pid=9844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3367723072/syzkaller.7Fj6Va/125/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 210.184990][ T9847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.273900][ T9853] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.308615][ T9853] vlan2: entered promiscuous mode [ 210.338950][ T9853] vlan2: entered allmulticast mode [ 210.352794][ T9847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.450317][ T9847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.497365][ T9858] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 210.520637][ T9858] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.595891][ T9860] rdma_rxe: rxe_newlink: failed to add lo [ 210.641533][ T9864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.656942][ T5126] syz_tun: tun_net_xmit 110 [ 210.724428][ T9871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.794274][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 210.824656][ T9877] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.826836][ T9864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.877159][ T9876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 211.040582][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 211.149078][ T9893] No such timeout policy "syz0" [ 211.239890][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 211.704263][ T9913] pim6reg: entered allmulticast mode [ 211.758766][ T9916] pim6reg: left allmulticast mode [ 211.896300][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 211.905310][ T9922] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 212.115720][ T9932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.230772][ T9932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.312502][ T9932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.466877][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 212.712160][ T9962] pim6reg: entered allmulticast mode [ 212.724748][ T9962] pim6reg: left allmulticast mode [ 212.787607][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 213.070592][ T9970] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 213.092427][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 213.220911][ T9986] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 213.411831][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 213.593776][T10008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.648606][T10008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.649111][ T5199] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 213.675787][ T5199] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 213.700741][T10008] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 213.785376][ T2896] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 213.905540][ T11] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 214.026535][ T2896] wlan1: authentication with 08:02:11:00:00:00 timed out [ 214.277867][T10018] __nla_validate_parse: 11 callbacks suppressed [ 214.277893][T10018] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.346000][T10018] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 214.385596][T10018] CPU: 1 PID: 10018 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 214.396139][T10018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 214.406207][T10018] Call Trace: [ 214.409502][T10018] [ 214.412445][T10018] dump_stack_lvl+0x241/0x360 [ 214.417149][T10018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 214.422377][T10018] ? __pfx__printk+0x10/0x10 [ 214.426987][T10018] ? sysfs_warn_dup+0x51/0xa0 [ 214.431686][T10018] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 214.437133][T10018] sysfs_warn_dup+0x8e/0xa0 [ 214.441669][T10018] sysfs_do_create_link_sd+0xbe/0x110 [ 214.447067][T10018] device_add_class_symlinks+0x1c5/0x250 [ 214.452727][T10018] device_add+0x553/0xbf0 [ 214.457090][T10018] wiphy_register+0x1d3f/0x2b30 [ 214.461994][T10018] ? __pfx_wiphy_register+0x10/0x10 [ 214.467222][T10018] ? minstrel_ht_alloc+0x72b/0x860 [ 214.472380][T10018] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 214.478484][T10018] ieee80211_register_hw+0x3098/0x3d80 [ 214.483990][T10018] ? ieee80211_register_hw+0x1161/0x3d80 [ 214.489660][T10018] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 214.495505][T10018] ? __asan_memset+0x23/0x50 [ 214.500121][T10018] ? __hrtimer_init+0x170/0x250 [ 214.505000][T10018] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 214.510765][T10018] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 214.516848][T10018] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 214.523282][T10018] ? kstrndup+0x5c/0xb0 [ 214.527452][T10018] ? __asan_memcpy+0x40/0x70 [ 214.532060][T10018] hwsim_new_radio_nl+0xe4c/0x21d0 [ 214.537208][T10018] ? __pfx___nla_validate_parse+0x10/0x10 [ 214.542951][T10018] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 214.548556][T10018] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 214.554909][T10018] genl_rcv_msg+0xb14/0xec0 [ 214.559428][T10018] ? mark_lock+0x9a/0x350 [ 214.563793][T10018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.568883][T10018] ? __pfx_lock_acquire+0x10/0x10 [ 214.573921][T10018] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 214.579491][T10018] ? __pfx___might_resched+0x10/0x10 [ 214.584815][T10018] netlink_rcv_skb+0x1e3/0x430 [ 214.589612][T10018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 214.594660][T10018] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 214.599987][T10018] ? __netlink_deliver_tap+0x77e/0x7c0 [ 214.605489][T10018] genl_rcv+0x28/0x40 [ 214.609483][T10018] netlink_unicast+0x7ea/0x980 [ 214.614288][T10018] ? __pfx_netlink_unicast+0x10/0x10 [ 214.619590][T10018] ? __virt_addr_valid+0x183/0x520 [ 214.624815][T10018] ? __check_object_size+0x49c/0x900 [ 214.630121][T10018] ? bpf_lsm_netlink_send+0x9/0x10 [ 214.635259][T10018] netlink_sendmsg+0x8db/0xcb0 [ 214.640066][T10018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.645380][T10018] ? __import_iovec+0x536/0x820 [ 214.650251][T10018] ? aa_sock_msg_perm+0x91/0x160 [ 214.655217][T10018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 214.660522][T10018] ? security_socket_sendmsg+0x87/0xb0 [ 214.666012][T10018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 214.671319][T10018] __sock_sendmsg+0x221/0x270 [ 214.676026][T10018] ____sys_sendmsg+0x525/0x7d0 [ 214.680823][T10018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 214.686152][T10018] __sys_sendmsg+0x2b0/0x3a0 [ 214.690771][T10018] ? __pfx___sys_sendmsg+0x10/0x10 [ 214.695923][T10018] ? bpf_raw_tracepoint_open+0x1d6/0x240 [ 214.701615][T10018] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 214.707963][T10018] ? do_syscall_64+0x100/0x230 [ 214.712748][T10018] ? do_syscall_64+0xb6/0x230 [ 214.717621][T10018] do_syscall_64+0xf3/0x230 [ 214.722145][T10018] ? clear_bhb_loop+0x35/0x90 [ 214.726853][T10018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 214.732768][T10018] RIP: 0033:0x7f3f0607cf29 [ 214.737197][T10018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 214.756819][T10018] RSP: 002b:00007f3f05bff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 214.765254][T10018] RAX: ffffffffffffffda RBX: 00007f3f061b3f80 RCX: 00007f3f0607cf29 [ 214.773243][T10018] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 214.781232][T10018] RBP: 00007f3f060ec074 R08: 0000000000000000 R09: 0000000000000000 [ 214.789217][T10018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 214.797201][T10018] R13: 000000000000000b R14: 00007f3f061b3f80 R15: 00007ffedc875de8 [ 214.805207][T10018] [ 214.817539][T10032] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.018715][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 215.090138][T10041] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 215.132663][T10043] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 215.196181][T10047] rdma_rxe: rxe_newlink: failed to add lo [ 215.474049][T10058] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.730580][T10072] EXT4-fs warning (device sda1): verify_group_input:159: Reserved blocks too high (45225) [ 215.825769][T10080] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.935155][T10077] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 216.289200][T10097] rdma_rxe: rxe_newlink: failed to add lo [ 216.505921][ T5126] page_pool_release_retry() stalled pool shutdown: id 39, 1 inflight 60 sec [ 216.621578][T10110] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.163456][T10132] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 217.195494][T10132] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.414398][T10139] rdma_rxe: rxe_newlink: failed to add lo [ 217.466466][ T5172] syz_tun: tun_net_xmit 110 [ 217.733801][T10145] EXT4-fs warning (device sda1): verify_group_input:159: Reserved blocks too high (45225) [ 217.751353][T10147] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.804755][T10147] vlan2: entered promiscuous mode [ 217.831815][T10147] vlan2: entered allmulticast mode [ 218.055749][ T1794] syz_tun: tun_net_xmit 110 [ 218.072315][T10152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.104233][ T1794] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 218.151834][ T1794] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 218.196556][T10152] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.248174][T10156] lo speed is unknown, defaulting to 1000 [ 218.295627][ T2464] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 218.315090][T10158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.906763][T10170] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 218.945483][T10170] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 219.005202][T10175] rdma_rxe: rxe_newlink: failed to add lo [ 219.066504][T10179] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 219.217117][ T2464] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 219.357382][ T2455] wlan1: authentication with 08:02:11:00:00:00 timed out [ 219.634843][T10195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.658826][T10194] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 220.022090][T10209] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.067087][T10210] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 220.105704][T10210] bond0: entered promiscuous mode [ 220.110838][T10210] bond_slave_0: entered promiscuous mode [ 220.122424][T10213] rdma_rxe: rxe_newlink: failed to add lo [ 220.135541][T10210] bond_slave_1: entered promiscuous mode [ 220.197798][T10207] bond0: left promiscuous mode [ 220.213181][T10207] bond_slave_0: left promiscuous mode [ 220.228076][T10207] bond_slave_1: left promiscuous mode [ 220.456570][ T29] audit: type=1804 audit(1718736425.169:19): pid=10220 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2497365336/syzkaller.IpAS5Z/158/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 220.679414][T10232] batadv_slave_0: entered allmulticast mode [ 220.718348][T10232] pim6reg: entered allmulticast mode [ 220.776381][T10232] pim6reg: left allmulticast mode [ 220.785839][T10232] batadv_slave_0: left allmulticast mode [ 220.839445][T10236] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 220.855429][T10236] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.992688][T10240] dccp_close: ABORT with 32 bytes unread [ 221.142992][T10245] sctp: [Deprecated]: syz-executor.4 (pid 10245) Use of struct sctp_assoc_value in delayed_ack socket option. [ 221.142992][T10245] Use struct sctp_sack_info instead [ 221.162017][T10249] atomic_op ffff88802f76d998 conn xmit_atomic 0000000000000000 [ 222.335645][ T5123] Bluetooth: hci0: command 0x0406 tx timeout [ 251.925456][ T5123] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 251.940784][ T5123] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 251.955930][ T5123] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 251.975834][ T5123] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 251.985656][ T5123] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 251.995464][ T5123] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 252.238805][ T5131] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 252.275504][ T5131] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 252.283690][ T5131] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 252.292750][ T5131] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 252.301500][ T5131] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 252.318681][ T5118] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 252.326590][ T5118] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 252.346812][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 252.369565][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 252.377998][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 252.386595][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 252.393995][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 252.414351][ T5118] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 252.424241][ T5118] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 252.435645][ T5118] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 252.444630][ T5118] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 252.455932][ T5118] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 252.463428][ T5118] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 252.762452][ T5131] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 252.771842][ T5131] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 252.780565][ T5131] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 252.790375][ T5131] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 252.798781][ T5131] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 252.807513][ T5131] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 254.095450][ T5118] Bluetooth: hci6: command tx timeout [ 254.416354][ T5118] Bluetooth: hci7: command tx timeout [ 254.497372][ T5118] Bluetooth: hci9: command tx timeout [ 254.497398][ T5131] Bluetooth: hci8: command tx timeout [ 254.895815][ T5118] Bluetooth: hci10: command tx timeout [ 256.106741][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.113117][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.175714][ T5118] Bluetooth: hci6: command tx timeout [ 256.495465][ T5118] Bluetooth: hci7: command tx timeout [ 256.580636][ T5118] Bluetooth: hci8: command tx timeout [ 256.580651][ T5131] Bluetooth: hci9: command tx timeout [ 256.975544][ T5118] Bluetooth: hci10: command tx timeout [ 258.255846][ T5118] Bluetooth: hci6: command tx timeout [ 258.575465][ T5118] Bluetooth: hci7: command tx timeout [ 258.661288][ T5118] Bluetooth: hci9: command tx timeout [ 258.661304][ T5131] Bluetooth: hci8: command tx timeout [ 259.065773][ T5118] Bluetooth: hci10: command tx timeout [ 260.335845][ T5118] Bluetooth: hci6: command tx timeout [ 260.655360][ T5118] Bluetooth: hci7: command tx timeout [ 260.736328][ T5131] Bluetooth: hci9: command tx timeout [ 260.741886][ T5118] Bluetooth: hci8: command tx timeout [ 261.135391][ T5118] Bluetooth: hci10: command tx timeout [ 273.535732][ T5131] Bluetooth: hci4: command 0x0406 tx timeout [ 278.661871][ T5131] Bluetooth: hci5: command 0x0406 tx timeout [ 314.495481][ T5131] Bluetooth: hci3: command 0x0406 tx timeout [ 317.399570][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 317.410107][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 317.418338][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 317.448685][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 317.460018][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 317.468572][ T5123] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 317.478433][ T5123] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 317.488626][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 317.505616][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 317.520950][ T5123] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 317.542248][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.548682][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.565665][ T5123] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 317.573436][ T5123] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 317.660597][ T5123] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 317.672088][ T5123] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 317.680312][ T5123] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 317.689451][ T5123] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 317.708091][ T5123] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 317.716200][ T5123] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 317.777724][ T5123] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 317.796381][ T5123] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 317.804353][ T5123] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 317.818871][ T5123] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 317.826863][ T5123] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 317.834851][ T5123] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 317.929525][ T5123] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 317.939559][ T5123] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 317.955758][ T5123] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 317.964386][ T5123] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 317.972602][ T5123] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 317.985386][ T5123] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 319.615557][ T5131] Bluetooth: hci11: command tx timeout [ 319.705496][ T5131] Bluetooth: hci12: command tx timeout [ 319.785484][ T5131] Bluetooth: hci13: command tx timeout [ 319.935458][ T5131] Bluetooth: hci14: command tx timeout [ 320.015436][ T5131] Bluetooth: hci15: command tx timeout [ 321.695395][ T5131] Bluetooth: hci11: command tx timeout [ 321.775887][ T5131] Bluetooth: hci12: command tx timeout [ 321.855594][ T5131] Bluetooth: hci13: command tx timeout [ 322.015668][ T5131] Bluetooth: hci14: command tx timeout [ 322.095514][ T5131] Bluetooth: hci15: command tx timeout [ 323.775413][ T5131] Bluetooth: hci11: command tx timeout [ 323.858632][ T5131] Bluetooth: hci12: command tx timeout [ 323.938237][ T5131] Bluetooth: hci13: command tx timeout [ 324.096603][ T5131] Bluetooth: hci14: command tx timeout [ 324.176648][ T5131] Bluetooth: hci15: command tx timeout [ 325.855480][ T5131] Bluetooth: hci11: command tx timeout [ 325.935364][ T5131] Bluetooth: hci12: command tx timeout [ 326.025291][ T5131] Bluetooth: hci13: command tx timeout [ 326.175477][ T5131] Bluetooth: hci14: command tx timeout [ 326.265297][ T5131] Bluetooth: hci15: command tx timeout [ 375.940766][T10334] Bluetooth: hci8: command 0x0406 tx timeout [ 376.015575][ T5123] Bluetooth: hci6: command 0x0406 tx timeout [ 376.025547][T10331] Bluetooth: hci10: command 0x0406 tx timeout [ 376.026177][ T5123] Bluetooth: hci9: command 0x0406 tx timeout [ 376.031703][T10331] Bluetooth: hci7: command 0x0406 tx timeout [ 378.981069][ T1245] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.003831][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 382.498622][ T5123] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 382.510314][ T5123] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 382.519189][ T5123] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 382.527490][ T5123] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 382.536461][ T5123] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 382.543989][ T5123] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 382.566390][ T5123] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 382.590516][T10331] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 382.606983][T10331] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 382.615226][T10331] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 382.625463][T10331] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 382.633374][T10331] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 382.686023][T10331] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 382.698393][T10331] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 382.710633][T10331] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 382.722133][T10331] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 382.746201][T10331] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 382.766581][T10331] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 382.815548][ T30] INFO: task kworker/u8:14:2896 blocked for more than 143 seconds. [ 382.823586][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 382.841460][ T5131] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 382.850873][ T5131] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 2024/06/18 18:49:47 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 382.859626][ T5131] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 382.904604][ T5118] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 382.913973][ T5123] Bluetooth: hci20: unexpected cc 0x0c03 length: 249 > 1 [ 382.922013][ T5118] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 382.930879][ T5118] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 382.938143][ T5123] Bluetooth: hci20: unexpected cc 0x1003 length: 249 > 9 [ 382.951543][ T5123] Bluetooth: hci20: unexpected cc 0x1001 length: 249 > 9 [ 382.976472][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 382.985176][ T30] task:kworker/u8:14 state:D stack:20752 pid:2896 tgid:2896 ppid:2 flags:0x00004000 [ 382.995618][ T5118] Bluetooth: hci20: unexpected cc 0x0c23 length: 249 > 4 [ 383.023520][ T5118] Bluetooth: hci20: unexpected cc 0x0c25 length: 249 > 3 [ 383.030916][ T30] Workqueue: ipv6_addrconf addrconf_verify_work [ 383.031114][ T5118] Bluetooth: hci20: unexpected cc 0x0c38 length: 249 > 2 [ 383.053201][ T30] Call Trace: [ 383.085373][ T30] [ 383.088351][ T30] __schedule+0x17e8/0x4a20 [ 383.092892][ T30] ? __pfx___schedule+0x10/0x10 [ 383.122983][ T30] ? __pfx_lock_release+0x10/0x10 [ 383.128135][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 383.133611][ T30] ? kthread_data+0x52/0xd0 [ 383.173344][ T30] ? schedule+0x90/0x320 [ 383.187370][ T30] ? wq_worker_sleeping+0x66/0x240 [ 383.192533][ T30] ? schedule+0x90/0x320 [ 383.213039][ T30] schedule+0x14b/0x320 [ 383.225491][ T30] schedule_preempt_disabled+0x13/0x30 [ 383.230990][ T30] __mutex_lock+0x6a4/0xd70 [ 383.245448][ T30] ? __mutex_lock+0x527/0xd70 [ 383.250167][ T30] ? addrconf_verify_work+0x19/0x30 [ 383.265420][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 383.270493][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 383.295809][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 383.302204][ T30] ? process_scheduled_works+0x945/0x1830 [ 383.315312][ T30] addrconf_verify_work+0x19/0x30 [ 383.320384][ T30] process_scheduled_works+0xa2c/0x1830 [ 383.336544][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 383.342577][ T30] ? assign_work+0x364/0x3d0 [ 383.365358][ T30] worker_thread+0x86d/0xd70 [ 383.371057][ T30] ? __kthread_parkme+0x169/0x1d0 [ 383.385336][