last executing test programs: 4.171648638s ago: executing program 3: r0 = socket$l2tp6(0xa, 0x2, 0x73) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xa7ac60b316ee3c1d, 0x0) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x20) syz_emit_ethernet(0x8e, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaa1acd1f78800d86dd608a37f200587300fe8000000000000000000000000000bbfe8000000000000000000000000000aa00000000", @ANYRES8], 0x0) r1 = socket$rxrpc(0x21, 0x2, 0x2) bind$rxrpc(r1, &(0x7f0000000140)=@in4={0x21, 0x1, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) bind$rxrpc(r1, &(0x7f0000000240)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) ioctl$EXT4_IOC_CHECKPOINT(r1, 0x4004662b, &(0x7f0000000000)) socketpair(0x25, 0x5, 0x0, &(0x7f0000000640)) 3.999083017s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x9, 0x7fdf, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r0, &(0x7f0000000380), 0x20000000, 0x2}, 0x20) 3.88604117s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0x4}]}]}], {0x14, 0x10}}, 0xb8}}, 0x0) 3.728538914s ago: executing program 3: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00'}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) recvmmsg(r0, &(0x7f0000003080)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f00000017c0)=""/16, 0x10}], 0x1}}], 0x1, 0x0, 0x0) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x0) bind$x25(r1, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000010bc0), 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b35, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b35d25a806c8c6f94f90c24fc60040207000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) socket$key(0xf, 0x3, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@func={0x4, 0x0, 0x0, 0xc, 0x2}]}, {0x0, [0x2e, 0x30, 0x5f]}}, &(0x7f00000002c0)=""/25, 0x29, 0x19, 0x1, 0x8}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x15, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="18020000eae2ce8e000000000000000085000000410000009500000000000000e6923b33b10600000000000000beeea639e2b7f2c14e7f99b7ecf39c93069d27164b045baa56262b38e43704f9b69a7a628f93ee62718c1331b374a2452f29c71f8e3e27cb5734add259f2c4045905f8a45ac0bcf54572565c58b6bc51b84b04df5211835b93aa87b5b652adc617b8d2831beec0b5c4bb871cdd0350b6121829a7e3576e9a0a486e0a97a0613343c8de3bec27990cdeb3bc92c681f68983ad2c81ef5a875b67598e7066cfd5b9a146c7204013ceb14c8297cd19aac1000015e7526f1cf70961f9f3b48ca6de7b2fbc7a7f3e8f0d0924cb2f957bf60d51406d3a258af3d58e0380ae328a63434a74d406020076040044240835f3668a6896dbc8fcea250f4b0c297986b8acea238698844e0675d242a7d3acfd1ac46d85c8b23ad8279643d5e3e00a2d319873945b3d0aa8e9a54cbd1aa9eb90c55b295b9d6021217c70fc7cedba84dd598b53c8521f149b33cb95cae5df2ebf8b7103803aaaa8e7d68dcdfaa835bdb5a23bdbff8362d41a112604999304c1dff6f4f4f8b219b418e09cf2879ad957fd859564df6f6f54c4ea794102494e1d56e88c1439ea086b1acc9fbc26c315246741cb722188846b1175198f6fa467be03e9f5cff922a1c78bbb28bdf7816bb27db7e86d988213dffd7f012721f2ec81ace497eeca313214f1d8c89ec824b5907e3ab7ec1d387cffbdb4d79ccb3c2e29275da223f5fa52525145684e10798d3de43fa17513be7440bfccf3a4d0a237bf80bfd9acf1be2a56eecbbce4bc4708db94631a1b989dc6b146853fea8deab55df9eaf759ffd08ff483105220ebfbc53be6a85fc1b610ba3f0f02c0ce20dfd01c2802b90a0811548e3ecb8a7351cf218073aecf3b631837846b703e7772626376aa84290a8ba625f1088f7b5df46cf5ea8d28"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x1d, '\x00', 0x0, 0x0, r4}, 0x90) syz_emit_ethernet(0x46, &(0x7f00000000c0)=ANY=[@ANYBLOB="0380c20000000180c2000000080045437d45c1f5f1eef5019078ac1e0001ac1414aa0be09078120002282500eb00000000000000000000000000ac1e0001070022eb0a0ff500"], 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8927, &(0x7f0000000880)={'pim6reg0\x00'}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00'}) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, 0x0, 0x0) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)=@ipv4_newroute={0x2c, 0x1a, 0x1, 0x0, 0x0, {}, [@RTA_IIF={0x8, 0x3, r7}, @RTA_MARK={0x8, 0x10, 0x2}]}, 0x2c}}, 0x0) 3.680404836s ago: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r0, 0x29, 0x37, &(0x7f00000000c0)=ANY=[], 0x28) sendmsg$inet6(r0, &(0x7f0000000000)={&(0x7f0000000040)={0xa, 0x4e24, 0x0, @empty}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=[@pktinfo={{0x24, 0x29, 0x32, {@loopback}}}], 0x28}, 0x0) 3.592514181s ago: executing program 0: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @local}}) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000000)={'wlan1\x00', {0x2, 0x0, @empty}}) 3.461103034s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r0, &(0x7f0000000380)=ANY=[@ANYBLOB="8fedcb5d07081196f37538e486dd6372ce22667f2c00dbf6e97158b33d4fec877f1b6d76745b686158bbcfe8875afdef00010000000004"], 0x280) 1.730260611s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[], 0x32600) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1.668877466s ago: executing program 0: pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_misc(r1, &(0x7f0000000740)=ANY=[], 0xfffffc8f) readv(r0, &(0x7f0000001400)=[{&(0x7f0000001340)=""/158, 0x9e}], 0x1) splice(r0, 0x0, r2, 0x0, 0x600, 0x0) 1.487122964s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0x15) recvmmsg(r0, &(0x7f0000007e00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff0100000035000000560000022500000019000a00100000ad07fd17e5ffff080c38000000000000000a", 0x39}], 0xc) r1 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) setsockopt$inet6_group_source_req(r1, 0x29, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000180), 0x4) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x18, 0x1409, 0x400, 0x70bd28, 0x25dfdbfb, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x4000000) syz_init_net_socket$llc(0x1a, 0x0, 0x0) mmap(&(0x7f000010f000/0x4000)=nil, 0x4000, 0x6, 0x13, 0xffffffffffffffff, 0x800000) bind$can_j1939(r1, &(0x7f0000000040)={0x1d, r2, 0x1}, 0x18) sendmmsg$inet6(r1, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000001c0)}, {&(0x7f0000001480)='%', 0x1}], 0x2}}], 0x1, 0x0) mmap(&(0x7f0000019000/0x2000)=nil, 0x2000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$inet_sctp_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000280)={0x0, 0xfffffffe, 0x7, 0x5}, 0x10) sendmsg$rds(r4, &(0x7f0000001600)={&(0x7f0000000040)={0x2, 0x0, @private}, 0x10, 0x0}, 0x0) 1.32256503s ago: executing program 4: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r0, 0x0, 0x0, 0x4044811, 0x0, 0x0) 1.209826347s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="68000000000000000000000000000000140000000000000000000001440000803d00000028feb3a1d8e656b0590d68d0d76a4a4e38217c18b38cea3c9c700be24a30446c454baa6f0421a4707aa17d16574e0fbe63958c19b4f40b1e27000000b72abbc1e4fd55"], 0x68}], 0x1}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, 0x3a, 0xb, 0x0, 0x0, {0x3}, [@nested={0xfffffffffffffec1, 0x0, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='\r4\xd8\x02j,'}]}]}, 0x2c}}, 0x0) 1.144673954s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000d59f0000000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xd0, 0xd0, 0x5, [@enum={0xb, 0x6, 0x0, 0x6, 0x4, [{0x9, 0x20}, {0x2, 0x4}, {0x8, 0x1}, {0x0, 0x8}, {0x7, 0x1}, {0x3, 0x80}]}, @const={0x0, 0x0, 0x0, 0xa, 0x1}, @fwd={0x10}, @const={0xd, 0x0, 0x0, 0xa, 0x5}, @restrict={0x5, 0x0, 0x0, 0xb, 0x3}, @var={0xc, 0x0, 0x0, 0xe, 0x1, 0x1}, @int={0x1, 0x0, 0x0, 0x1, 0x0, 0x3a, 0x0, 0x6c, 0x5}, @ptr={0xc}, @enum={0xf, 0x4, 0x0, 0x6, 0x4, [{0x2, 0xbcb3}, {0xc, 0x1}, {0x3, 0x100}, {0x3, 0x9}]}, @fwd={0x10}]}, {0x0, [0x2e, 0x2e, 0x5f]}}, &(0x7f0000000040)=""/30, 0xed, 0x1e, 0x1, 0x1}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000140)={r4, 0x20, &(0x7f0000000100)={&(0x7f0000000340)=""/136, 0x88, 0x0, &(0x7f0000000400)=""/172, 0xac}}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x5, 0x1, 0x9, 0xae}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0xd, 0x2, 0x4, 0x4002, 0x85, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000200)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x1, 0x0, [{0x0, 0x1, 0x101}]}]}}, &(0x7f0000000300)=""/160, 0x32, 0xa0, 0x1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000640)={r4, 0x58, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x19}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000700)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x18, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xffffffb6}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x7, 0x1, 0xd, 0x4, 0xa, 0x6, 0x10}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000580)='syzkaller\x00', 0x9, 0x0, 0x0, 0xc0f00, 0xc, '\x00', r7, 0x0, r4, 0x8, &(0x7f0000000680)={0x9, 0x2}, 0x8, 0x10, &(0x7f00000006c0)={0x3, 0x2, 0x9}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000740)=[r8, r9], &(0x7f0000000780)=[{0x1, 0x1, 0xe, 0x2}, {0x1, 0x5, 0xa, 0x6}, {0x1, 0x5, 0xb, 0x2}, {0x1, 0x4, 0x2, 0x3}, {0x5, 0x4, 0xf, 0x9}, {0x0, 0x3, 0x6, 0xe}, {0x4, 0x1, 0x10, 0x3}], 0x10, 0x9}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xc, 0x29, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000000000006000000000400000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000001000000850000008200000018400000000000000000000000000000b7080000000000007b8af8ff00000000b7080000070000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="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", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b700000000000000852000000200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x101, 0x2, &(0x7f00000001c0)=""/2, 0x40f00, 0x28, '\x00', r7, 0x19, r2, 0x8, &(0x7f0000000480)={0x8, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x5, 0x2, 0x2, 0x200}, 0x10, 0x0, r1, 0xa, 0x0, &(0x7f0000000500)=[{0x0, 0x1, 0x9}, {0x2, 0x5, 0x4, 0x5}, {0x3, 0x3, 0xa, 0xe}, {0x3, 0x3, 0x0, 0x1}, {0x1, 0x2, 0x8, 0x9}, {0x4, 0x2, 0x8, 0x4}, {0x1, 0x1, 0x1, 0x7}, {0x2, 0x2, 0xa}, {0x0, 0x2, 0x10, 0x1}, {0x2, 0x4, 0x5, 0x5}], 0x10, 0xffff}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x7, 0x10001, 0x8, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xc, &(0x7f0000000b00)=ANY=[@ANYBLOB="9800000000004400000000000000000018110000", @ANYRES32=r10, @ANYRESHEX=r2, @ANYRESDEC=r6, @ANYRES16=r4, @ANYRES64=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff}, 0x90) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r11, 0x400454da, &(0x7f0000000080)={'batadv0\x00'}) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x1}) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r13 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r13}, 0x10) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000140)=@base={0x6, 0x4, 0x8000, 0x5c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) close(r0) 1.136343365s ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[], 0x32600) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1.033950446s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='net_prio.prioidx\x00', 0x275a, 0x0) unshare(0x4020600) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) 923.097703ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 888.664294ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f00000002c0)=ANY=[], 0x32600) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 824.745662ms ago: executing program 1: unshare(0x4000400) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTACK(r0, 0x0, 0x0, 0x0, 0x0) 788.328214ms ago: executing program 4: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000f00)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90005"], 0x14}], 0x1}, 0x0) 759.180222ms ago: executing program 1: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcc9cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b2cdf41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e4d5b318e2ec0e0700897a74a0091ff110026e6d2ef831ab7ea0c34f17e3ad6ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0476619f28d99cd0aa7b73340cc2160a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e10d859e8327ef03fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9bb759b4eeb8cb000067d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6ea0180aabc18cae2ed4b4390af9a9ceafd07ed0030000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x42400) 748.533482ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000056000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="080002"], 0x28}}, 0x0) 730.214648ms ago: executing program 4: socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.sectors_recursive\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) socket(0x200000100000011, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) listen(r1, 0x4) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x4}, 0x8) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='i', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000280)=ANY=[@ANYRES32, @ANYRES32=r1], 0xc) 686.189241ms ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) sendto$inet(r0, &(0x7f0000000340)='\b', 0x1, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x0, 0x0, 0xfffffffffffffd25) 662.542528ms ago: executing program 1: syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$alg(0x26, 0x5, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000140)='sys_enter\x00', r1}, 0x10) select(0x40, &(0x7f0000000140), 0x0, &(0x7f0000000400)={0xca}, 0x0) 280.692419ms ago: executing program 2: mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000003e40)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x8, &(0x7f00000012c0)=ANY=[@ANYBLOB="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"], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x42400) 181.175438ms ago: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=@allocspi={0x10c, 0x16, 0x1, 0x0, 0x0, {{{@in=@multicast2, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {@in6=@private1, 0x0, 0x6c}, @in6=@private0}}, [@mark={0xc}, @XFRMA_IF_ID={0x8}]}, 0x10c}}, 0x0) 137.466697ms ago: executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="010027bd70000000180001000000080001000000000004000480080002000100000010000c800c000b8008000a00326c0000080108804400078008000600fe000000080005"], 0x140}}, 0x0) 75.586668ms ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x5c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'hash:ip,mac\x00'}]}, 0x5c}}, 0x0) 38.311613ms ago: executing program 2: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000001080)=[{&(0x7f0000000040)="a72d11a15c048c0a7d63aebc5cea1f81510ff6091475aeec600831aa9d3944e60bc2ad06a619c560aa0118b28f68f1eb14549d633b4b23f179fb680716faa43414787559be90843c35ab30acad8a6740140e00721abc2eb362f7bde53b3c992d3e28ccc20ec84fdc569947047f6c09a647ee8c0a747b951e66c068ccf1af93ee9e6f9528ff79e2f989383b05a690a6bec4634b867c9446c1c644b3010e8a3514c6328323b4bbdd602b8f0dace6aea70902c4ddd2a2f2810f1348b0d0df3c1e6a5938fcfdc87e7580c6be0c6a06eca62d6f787dd16add086a21391c4c707d8b61929d1252681b84c245e0efafe2e6e73ad86a3cf59235ab0eacbb414af92ec3cdac420a064a98e8cc18bdf63f8997f96436e0fe6f06fdbf47fff353b01a861babd4a38d126bfe3e29049e6cc883e6efae6e70ef9ed124b1b09887a58c991e223b6420dca5ae238027e91b17b1707dc5c0d5f59f0ca95614f1ea1d263c1ee54dfe31ae35eb3c8e3b931dff7920c57fbba89adf2e392c1ad719b90c7ade0d38ff9792934ef1fb12f51d8e2fad12486d5883d5b1a46696fad128c6805cfb25bc6487e1e407d6b266971b09d0d864a7a550284e24b6cdc9f4ae1081a638175dffef002c76ac5558d23e41edbe68f4b4950a13aa000326dae5a857603dc5a40d6c6618a98c7b6e1eebd325ea2c14601a25658965f40864fd015d9b2fff83ee5ed3212ebd9fa429f0140f633556ac07c0c08e67a1848c9942ecc47dd4ffede9a429e9e0472be7cdbcd117e621ddf745c00a814ffff0224634472577dc0b35a9c153409f1a2bddc193b20b4d244d9cbbd59816c46000c596865f58b4e640ed4a9ab6086cede697fb113560925498da83273e679e0e28b84961eb7b9c9b4fa916590965c76b48e5d453f27a821bd2bf0946ff2413ec30f7893d1f046e18f736c40ceda26dfc4a0a62f71a3606d3f72c0a858dfd7895e2572292e11af913c6b513a141d28e501ae7c49618d104aac9abb78466a636efb88120d0eef0a501558a5aa34784a9823f2802a0bcdf318f9b436b34b42a2a7cf513f80364ad9a699d2e23eb4f3a2bbce818bd20da61882b3dac699d05dc24f29b72471b712423ace6278c43df2be7a09e815517b86d8b3ce16af3d64a575958c5fd52aac53b391f3d2a67c24c6c13ec11428b61b80a6a58cbba1790a98d190a572070f63fc0b809669895ea9865c3066b06102f6f2c7171dc7f76e1931b3e4deb569ef9d07d5f86a848f50942e93c419c3a23489f14803b08182dfd48b8d4375be6b7f805a21209c05e5927693a8834c8d5a5acbd47ed8a30a8a741d1ad77639b56b3b90c0b2023fa334befd28b2e27cbcd94b0ce7437f88ce67a925cea6d6d7e5313de6d328b1124a8b9ef83fe39ca3da97d33c60b7fd4af67d3c8fccb595a27a5bffc71e5a5b2ec966828993b0c0f83cbc55f9a7fb66a4101d5c83b77885072b6e2b2ceebe32f635509698c05089b9ff1cb1959b211e114dadb224ef2d5e7a3c55b3ac00fcdc9018577603c6301e5d4341b3d7eeb2665349d448d28d5d108f576408cbe533a6adbba18ebb2d84bb9af81108506a2f50fb56d595579000747930449fdf4ed01715ec624a0cb73636a35b9136f10b79e3d7ded09008b92e92c64e26e6b6d17f18b", 0x499}], 0x1}, 0x0) r0 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r0, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005000000"], 0x310) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000040)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 0s ago: executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000180)={0x3, @default, r2}) r3 = socket$netlink(0x10, 0x3, 0x12) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r3, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0xdc, r4, 0x400, 0x70bd26, 0x25dfdbfc, {}, [@ETHTOOL_A_PAUSE_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}]}, @ETHTOOL_A_PAUSE_HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0xdb0fcd9855b40357}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}]}, @ETHTOOL_A_PAUSE_TX={0x5}, @ETHTOOL_A_PAUSE_AUTONEG={0x5, 0x2, 0x1}]}, 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x4000) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000003c0)=@bpq0, 0x10) r5 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x40) sendmsg$TIPC_CMD_SHOW_PORTS(r3, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x14) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r3, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x140c, 0x8, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x80) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000640)={0x1f, 0x0, 0x2}, 0x6) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netdev_private(r6, 0x89f7, &(0x7f0000000680)="ecfb3a4f3bfaf8c9fa9269373e269cbec35cc3eece26eca22ff5ee8d6b77ed2932486c7122fcb84ff20711a1970e841b149392929924a9657fe50e404525d02c7a90ae98d48de9b7f3bfe124a6f6f646bb913a5170fccdd765193f36aa53bb4b27273da54ac75af9e4339b5f735534b65959c499b6f9f7219a0072e42c80de9fa5f138bd0f699ffef59bb096613e2c94e158b8c6eb0f73682b2e5ab96f95dfa1d25c28246229e0367edd9401e85cfb477a1d3ae152fc474ce0814042ebc60b97ec81e6d2d9b50bdd7fcea957031f590a5a8c7f848775b8a602b41711a08f") r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r7, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r8, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r7) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000900)={0x1f, 0x2}, 0x6) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r10, &(0x7f0000000940)="16339586cabd14edb85ee054abb54bcc008513072d97b952c07829e60ce773bf33ee6711e0a536c1ec07ba7c4310c9a6d6fb421e25f3be299bd0bae011", 0x3d, 0x8000, 0x0, 0x0) r11 = socket$inet_sctp(0x2, 0x1, 0x84) r12 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r12, &(0x7f0000000980)={0x28, 0x0, 0x0, @hyper}, 0x10) setsockopt$inet_sctp_SCTP_HMAC_IDENT(r11, 0x84, 0x16, &(0x7f00000009c0)={0x1, [0x2]}, 0x6) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.106' (ED25519) to the list of known hosts. 2024/05/31 01:59:12 fuzzer started 2024/05/31 01:59:12 dialing manager at 10.128.0.169:30018 [ 50.368444][ T5088] cgroup: Unknown subsys name 'net' [ 50.555091][ T5088] cgroup: Unknown subsys name 'rlimit' 2024/05/31 01:59:14 starting 5 executor processes [ 51.662471][ T5094] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 52.539955][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 52.548886][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 52.555478][ T5119] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 52.558090][ T5121] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 52.564106][ T5119] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 52.577643][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 52.580888][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 52.585383][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 52.594013][ T5121] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 52.599415][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 52.607110][ T5121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 52.614391][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 52.621302][ T5121] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 52.627903][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 52.634876][ T5121] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 52.641531][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 52.648435][ T5121] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 52.655363][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 52.664950][ T5121] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 52.669822][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 52.683922][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 52.692891][ T5119] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 52.700052][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 52.707934][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 52.708136][ T5121] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 52.716479][ T5119] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 52.734351][ T5121] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 52.742269][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 52.749753][ T5119] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 52.753935][ T5113] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 53.346827][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 53.375877][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 53.388078][ T5108] chnl_net:caif_netlink_parms(): no params data found [ 53.480313][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 53.503592][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 53.548572][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.556056][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.563206][ T5107] bridge_slave_0: entered allmulticast mode [ 53.570491][ T5107] bridge_slave_0: entered promiscuous mode [ 53.609404][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.618326][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.625932][ T5107] bridge_slave_1: entered allmulticast mode [ 53.632592][ T5107] bridge_slave_1: entered promiscuous mode [ 53.737916][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.747902][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.755307][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.762599][ T5115] bridge_slave_0: entered allmulticast mode [ 53.769628][ T5115] bridge_slave_0: entered promiscuous mode [ 53.779762][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.786988][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.794238][ T5115] bridge_slave_1: entered allmulticast mode [ 53.801397][ T5115] bridge_slave_1: entered promiscuous mode [ 53.823221][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.830371][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.837887][ T5112] bridge_slave_0: entered allmulticast mode [ 53.844816][ T5112] bridge_slave_0: entered promiscuous mode [ 53.852355][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.860505][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.868160][ T5112] bridge_slave_1: entered allmulticast mode [ 53.875917][ T5112] bridge_slave_1: entered promiscuous mode [ 53.884662][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.927004][ T5108] bridge0: port 1(bridge_slave_0) entered blocking state [ 53.934152][ T5108] bridge0: port 1(bridge_slave_0) entered disabled state [ 53.941397][ T5108] bridge_slave_0: entered allmulticast mode [ 53.948711][ T5108] bridge_slave_0: entered promiscuous mode [ 53.986431][ T5107] team0: Port device team_slave_0 added [ 53.995192][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.004474][ T5108] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.011568][ T5108] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.019586][ T5108] bridge_slave_1: entered allmulticast mode [ 54.027348][ T5108] bridge_slave_1: entered promiscuous mode [ 54.067973][ T5107] team0: Port device team_slave_1 added [ 54.085144][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.104564][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.111714][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.119235][ T5111] bridge_slave_0: entered allmulticast mode [ 54.126129][ T5111] bridge_slave_0: entered promiscuous mode [ 54.133859][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.140980][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.148251][ T5111] bridge_slave_1: entered allmulticast mode [ 54.155432][ T5111] bridge_slave_1: entered promiscuous mode [ 54.163690][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.207636][ T5108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.230634][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.256083][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.263029][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.289271][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.301687][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.308782][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.334788][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.361984][ T5115] team0: Port device team_slave_0 added [ 54.370502][ T5108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.402665][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.430028][ T5115] team0: Port device team_slave_1 added [ 54.460636][ T5108] team0: Port device team_slave_0 added [ 54.469207][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.491704][ T5112] team0: Port device team_slave_0 added [ 54.501189][ T5112] team0: Port device team_slave_1 added [ 54.523386][ T5108] team0: Port device team_slave_1 added [ 54.579326][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.587005][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.613149][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.636847][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.643867][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.669799][ T5108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.684748][ T5111] team0: Port device team_slave_0 added [ 54.697090][ T5107] hsr_slave_0: entered promiscuous mode [ 54.704137][ T5107] hsr_slave_1: entered promiscuous mode [ 54.724752][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.731700][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.744475][ T5117] Bluetooth: hci1: command tx timeout [ 54.762736][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.774914][ T5108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.781852][ T5108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.808352][ T5108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.823927][ T5117] Bluetooth: hci0: command tx timeout [ 54.824291][ T5113] Bluetooth: hci4: command tx timeout [ 54.829488][ T5121] Bluetooth: hci2: command tx timeout [ 54.840611][ T5116] Bluetooth: hci3: command tx timeout [ 54.841413][ T5111] team0: Port device team_slave_1 added [ 54.864930][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 54.871876][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.897988][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 54.910984][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 54.918024][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 54.944100][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.017514][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.024692][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.051160][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.124215][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.131199][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.157398][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.185356][ T5112] hsr_slave_0: entered promiscuous mode [ 55.192150][ T5112] hsr_slave_1: entered promiscuous mode [ 55.198770][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.206967][ T5112] Cannot create hsr debugfs directory [ 55.217380][ T5115] hsr_slave_0: entered promiscuous mode [ 55.223528][ T5115] hsr_slave_1: entered promiscuous mode [ 55.230410][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.238289][ T5115] Cannot create hsr debugfs directory [ 55.247849][ T5108] hsr_slave_0: entered promiscuous mode [ 55.254886][ T5108] hsr_slave_1: entered promiscuous mode [ 55.260865][ T5108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.268436][ T5108] Cannot create hsr debugfs directory [ 55.326253][ T5111] hsr_slave_0: entered promiscuous mode [ 55.332504][ T5111] hsr_slave_1: entered promiscuous mode [ 55.341395][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.348997][ T5111] Cannot create hsr debugfs directory [ 55.776637][ T5107] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 55.810471][ T5107] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 55.820852][ T5107] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 55.839866][ T5107] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 55.885769][ T5108] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 55.896889][ T5108] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 55.921867][ T5108] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.932973][ T5108] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.027732][ T5115] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.047010][ T5115] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 56.059228][ T5115] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 56.070168][ T5115] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 56.150078][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.177616][ T5112] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.199558][ T5112] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.217472][ T5112] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.231053][ T5112] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.271943][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.312169][ T5108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.331099][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.338309][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.352331][ T5111] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.380200][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.387541][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.397248][ T5111] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.409874][ T5111] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.421145][ T5111] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.497933][ T5108] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.536595][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.543810][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.570634][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.577741][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.662186][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.752090][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.788873][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.796027][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.830911][ T5121] Bluetooth: hci1: command tx timeout [ 56.846704][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.853844][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.902126][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 56.909261][ T5121] Bluetooth: hci0: command tx timeout [ 56.909316][ T5121] Bluetooth: hci4: command tx timeout [ 56.921824][ T5121] Bluetooth: hci2: command tx timeout [ 56.921826][ T5116] Bluetooth: hci3: command tx timeout [ 56.996372][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.010802][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.031843][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.097960][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.126172][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.133273][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.152694][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.160028][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.200078][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.207265][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.252935][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.260141][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.302564][ T5112] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 57.313258][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.368377][ T5108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.380976][ T5107] veth0_vlan: entered promiscuous mode [ 57.439457][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.468213][ T5107] veth1_vlan: entered promiscuous mode [ 57.570414][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.603159][ T5115] veth0_vlan: entered promiscuous mode [ 57.643446][ T5115] veth1_vlan: entered promiscuous mode [ 57.686284][ T5107] veth0_macvtap: entered promiscuous mode [ 57.697497][ T5107] veth1_macvtap: entered promiscuous mode [ 57.725650][ T5108] veth0_vlan: entered promiscuous mode [ 57.777728][ T5108] veth1_vlan: entered promiscuous mode [ 57.803367][ T5112] veth0_vlan: entered promiscuous mode [ 57.821677][ T5115] veth0_macvtap: entered promiscuous mode [ 57.831602][ T5115] veth1_macvtap: entered promiscuous mode [ 57.851735][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.865733][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.898584][ T5107] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.907692][ T5107] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.917044][ T5107] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.925862][ T5107] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.938527][ T5112] veth1_vlan: entered promiscuous mode [ 57.958869][ T5108] veth0_macvtap: entered promiscuous mode [ 57.970385][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.008855][ T5108] veth1_macvtap: entered promiscuous mode [ 58.019805][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.032065][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.045455][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.086597][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.099886][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.119461][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.146801][ T5115] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.156873][ T5115] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.167066][ T5115] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.175914][ T5115] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.188779][ T5112] veth0_macvtap: entered promiscuous mode [ 58.212841][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.229842][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.240369][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.250884][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.261892][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.291419][ T5112] veth1_macvtap: entered promiscuous mode [ 58.306513][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.321409][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.339863][ T5108] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.352917][ T5108] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.365253][ T5108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.395730][ T5108] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.406123][ T5108] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.415070][ T5108] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.427385][ T5108] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.443172][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.454496][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.464907][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.475811][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.486115][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.497920][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.509258][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.521336][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.532654][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.542518][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.553093][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.562935][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.573362][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.585413][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.595028][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.603154][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.628234][ T5112] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.637509][ T5112] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.647324][ T5112] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.656236][ T5112] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.730073][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.739134][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.759148][ T5111] veth0_vlan: entered promiscuous mode [ 58.777929][ T5111] veth1_vlan: entered promiscuous mode [ 58.843994][ T5190] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.867391][ T5190] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.904450][ T5116] Bluetooth: hci1: command tx timeout [ 58.970603][ T5159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.980621][ T5111] veth0_macvtap: entered promiscuous mode [ 58.987855][ T5116] Bluetooth: hci3: command tx timeout [ 58.993339][ T5159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.000891][ T5116] Bluetooth: hci2: command tx timeout [ 59.000926][ T5121] Bluetooth: hci4: command tx timeout [ 59.006402][ T5117] Bluetooth: hci0: command tx timeout [ 59.048149][ T5159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.065715][ T5159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.082903][ T5111] veth1_macvtap: entered promiscuous mode [ 59.146638][ T5172] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.164096][ T5172] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.192545][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.204338][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.214487][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.229568][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.242741][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.254802][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.265654][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.276350][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.303657][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.397901][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.426376][ T5205] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.438969][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.448953][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.463339][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.463639][ T5205] xt_CT: You must specify a L4 protocol and not use inversions on it [ 59.475237][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.494597][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.505678][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.516463][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.529051][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.547829][ T786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.559478][ T786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.615162][ T1474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.633824][ T1474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.657438][ T5111] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.697514][ T5111] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.719764][ T5111] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.739104][ T5111] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.833657][ T5207] syzkaller0: entered promiscuous mode [ 59.840557][ T5207] syzkaller0: entered allmulticast mode [ 60.115467][ T5116] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.124241][ T5116] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.132212][ T5116] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.143088][ T5116] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.156800][ T5116] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.167389][ T5116] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.970132][ T5215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 60.983897][ T5121] Bluetooth: hci1: command tx timeout [ 61.064508][ T5121] Bluetooth: hci4: command tx timeout [ 61.065052][ T5116] Bluetooth: hci2: command tx timeout [ 61.069916][ T5117] Bluetooth: hci0: command tx timeout [ 61.168587][ T5224] syz-executor.0[5224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.168872][ T5224] syz-executor.0[5224] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 61.210657][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.346677][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.512012][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.598293][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.619027][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.693384][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.809156][ T1474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.817200][ T1474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.013025][ T5241] syzkaller0: entered promiscuous mode [ 62.019026][ T5241] syzkaller0: entered allmulticast mode [ 62.263870][ T5116] Bluetooth: hci3: command tx timeout [ 63.631832][ T5216] chnl_net:caif_netlink_parms(): no params data found [ 63.705432][ T51] bridge_slave_1: left allmulticast mode [ 63.716828][ T51] bridge_slave_1: left promiscuous mode [ 63.741823][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.825447][ T51] bridge_slave_0: left allmulticast mode [ 63.831122][ T51] bridge_slave_0: left promiscuous mode [ 63.846201][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.344873][ T5116] Bluetooth: hci3: command tx timeout [ 64.646701][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 64.701715][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 64.727575][ T51] bond0 (unregistering): Released all slaves [ 65.169666][ T5350] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 65.360468][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.377139][ T5216] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.386884][ T5216] bridge_slave_0: entered allmulticast mode [ 65.395600][ T5216] bridge_slave_0: entered promiscuous mode [ 65.497425][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.520670][ T5216] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.529852][ T5216] bridge_slave_1: entered allmulticast mode [ 65.545405][ T5216] bridge_slave_1: entered promiscuous mode [ 65.794961][ T5216] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.896629][ T5216] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.081091][ T51] hsr_slave_0: left promiscuous mode [ 66.110939][ T51] hsr_slave_1: left promiscuous mode [ 66.152413][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.171123][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.197422][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.233826][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.323420][ T51] veth1_macvtap: left promiscuous mode [ 66.329779][ T5393] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 66.349716][ T51] veth0_macvtap: left promiscuous mode [ 66.377435][ T51] veth1_vlan: left promiscuous mode [ 66.384425][ T5393] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 66.401478][ T51] veth0_vlan: left promiscuous mode [ 66.431391][ T5116] Bluetooth: hci3: command tx timeout [ 66.523359][ T5397] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.061749][ T51] team0 (unregistering): Port device team_slave_1 removed [ 67.092647][ T51] team0 (unregistering): Port device team_slave_0 removed [ 67.439138][ T5216] team0: Port device team_slave_0 added [ 67.457136][ T5410] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.560922][ T5216] team0: Port device team_slave_1 added [ 67.769358][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.782620][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.836769][ T5216] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.907536][ T5216] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.918683][ T5216] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.979407][ T5216] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 68.087299][ T5439] Bluetooth: MGMT ver 1.22 [ 68.114339][ T5439] Bluetooth: hci3: invalid length 0, exp 2 for type 20 [ 68.245996][ T5216] hsr_slave_0: entered promiscuous mode [ 68.274224][ T5216] hsr_slave_1: entered promiscuous mode [ 68.321411][ T5444] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.337690][ T5216] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.352200][ T5216] Cannot create hsr debugfs directory [ 68.503959][ T5116] Bluetooth: hci3: command tx timeout [ 68.676671][ T5466] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.700495][ T5466] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 68.730711][ T5466] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.739772][ T5466] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.749191][ T5466] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.758181][ T5466] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.165790][ T5488] xt_bpf: check failed: parse error [ 70.249769][ T5530] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 70.308028][ T5530] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 70.532517][ T5216] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 70.586009][ T5216] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 70.609313][ T5539] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 70.686885][ T5216] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 70.730091][ T5216] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 70.935788][ T29] audit: type=1804 audit(1717120773.730:2): pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2378314894/syzkaller.nOHpwB/27/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 71.069996][ T5216] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.185603][ T5216] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.238014][ T5567] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 71.289213][ T5567] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.335328][ T5567] bridge0: port 3(syz_tun) entered blocking state [ 71.341961][ T5567] bridge0: port 3(syz_tun) entered disabled state [ 71.364813][ T5567] syz_tun: entered allmulticast mode [ 71.384569][ T5567] syz_tun: entered promiscuous mode [ 71.410411][ T5567] bridge0: port 3(syz_tun) entered blocking state [ 71.417140][ T5567] bridge0: port 3(syz_tun) entered forwarding state [ 71.511096][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.518567][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.600503][ T1474] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.607682][ T1474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.634630][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.641231][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.846263][ T5216] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 71.900696][ T5216] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.958301][ T5600] ip6t_srh: unknown srh invflags 4000 [ 72.342662][ T5619] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 72.586480][ T5216] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.793134][ T5216] veth0_vlan: entered promiscuous mode [ 72.867821][ T5216] veth1_vlan: entered promiscuous mode [ 73.004506][ T5641] team_slave_0: entered promiscuous mode [ 73.010389][ T5641] team_slave_1: entered promiscuous mode [ 73.024710][ T5641] macvlan2: entered allmulticast mode [ 73.032438][ T5641] team0: entered allmulticast mode [ 73.038321][ T5641] team_slave_0: entered allmulticast mode [ 73.048676][ T5641] team_slave_1: entered allmulticast mode [ 73.060708][ T5641] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 73.167308][ T5216] veth0_macvtap: entered promiscuous mode [ 73.225804][ T5216] veth1_macvtap: entered promiscuous mode [ 73.313784][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.350517][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.398625][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.443844][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.463741][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.510952][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.545897][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.586317][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.609442][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.661186][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.705361][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.747367][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.802098][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.835905][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.860400][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.876654][ T5216] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.900958][ T5216] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.967341][ T5216] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.051743][ T5216] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.124916][ T5216] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.133644][ T5216] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.188031][ T5216] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.689993][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.727246][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.847174][ T2803] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.871919][ T2803] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.007775][ T5727] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 75.128752][ T5730] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 75.584145][ T5758] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 75.632232][ T5758] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 75.718574][ T5764] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.3'. [ 75.832584][ T5767] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 75.933324][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.945886][ T5769] bond0: entered allmulticast mode [ 75.956186][ T5769] bond_slave_0: entered allmulticast mode [ 75.968287][ T5769] bond_slave_1: entered allmulticast mode [ 75.975897][ T5769] bond_slave_0: entered promiscuous mode [ 75.981754][ T5769] bond_slave_1: entered promiscuous mode [ 75.988995][ T5769] team0: Port device bond0 added [ 76.011413][ T5777] team_slave_0: left allmulticast mode [ 76.041073][ T5777] team_slave_0: left promiscuous mode [ 76.094692][ T5777] team0: Port device team_slave_0 removed [ 76.110476][ T5777] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 76.206731][ T5769] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 76.295565][ T5791] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 76.724296][ T5813] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 76.757644][ T9] cfg80211: failed to load regulatory.db [ 76.760659][ T5813] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 76.790563][ T5813] netlink: 183252 bytes leftover after parsing attributes in process `syz-executor.2'. [ 76.883462][ T5818] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.079467][ T5825] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 77.131843][ T5825] veth1_macvtap: left promiscuous mode [ 77.140144][ T5825] macsec0: entered allmulticast mode [ 77.154892][ T5832] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 77.186829][ T5834] veth1_macvtap: entered promiscuous mode [ 77.204336][ T5834] veth1_macvtap: entered allmulticast mode [ 77.230161][ T29] audit: type=1804 audit(1717120780.020:3): pid=5832 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2865264768/syzkaller.1cALJv/51/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 77.634057][ T5850] warning: `syz-executor.3' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 77.722818][ T5857] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.958921][ T5869] TCP: tcp_parse_options: Illegal window scaling value 150 > 14 received [ 77.981667][ T5870] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 77.993490][ T29] audit: type=1804 audit(1717120780.780:4): pid=5870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2865264768/syzkaller.1cALJv/53/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 78.088618][ T5869] veth1_macvtap: left promiscuous mode [ 78.114385][ T5869] macsec0: entered allmulticast mode [ 78.171072][ T5878] veth1_macvtap: entered promiscuous mode [ 78.213623][ T5878] veth1_macvtap: entered allmulticast mode [ 78.302050][ T5869] syz-executor.2 (5869) used greatest stack depth: 18960 bytes left [ 78.464952][ T5895] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 78.953828][ T5919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.077562][ T5960] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.619478][ T5990] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 80.668550][ T5986] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 81.968891][ T6037] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 82.274211][ T6042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 82.482668][ T6052] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 82.525772][ T6052] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 82.627733][ T6056] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 82.682672][ T6052] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 82.719114][ T6061] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.729191][ T6052] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 82.755182][ T6052] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 82.851162][ T6052] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 83.326050][ T6090] Cannot find add_set index 0 as target [ 83.533497][ T6097] pim6reg: entered allmulticast mode [ 83.550182][ T6102] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 83.563399][ T6097] pim6reg: left allmulticast mode [ 83.573157][ T6101] Bluetooth: MGMT ver 1.22 [ 83.701806][ T6106] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.728595][ T6106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.072578][ T6155] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.090970][ T6155] netlink: 1528 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.288695][ T6162] tls_set_device_offload_rx: netdev not found [ 85.298376][ T6165] Bluetooth: hci3: invalid length 0, exp 2 for type 21 [ 85.512569][ T6173] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147221507 (only 8 groups) [ 85.874381][ T6187] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE. [ 87.464172][ T6236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 87.704074][ T5116] Bluetooth: hci0: command tx timeout [ 87.911203][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 87.937630][ T6259] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147221507 (only 8 groups) [ 88.186035][ T6267] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.311260][ T6270] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 88.632574][ T6275] team_slave_1: left promiscuous mode [ 88.640694][ T6275] bond_slave_0: left promiscuous mode [ 88.646412][ T6275] bond_slave_1: left promiscuous mode [ 89.100421][ T6297] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.411753][ T6308] sctp: [Deprecated]: syz-executor.4 (pid 6308) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.411753][ T6308] Use struct sctp_sack_info instead [ 89.526062][ T6315] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 89.601118][ T6315] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 89.863338][ T6330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.176119][ T29] audit: type=1800 audit(1717120792.970:5): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1954 res=0 errno=0 [ 90.232512][ T29] audit: type=1804 audit(1717120793.010:6): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3168831880/syzkaller.5Vyh95/105/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 90.258243][ T29] audit: type=1804 audit(1717120793.010:7): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3168831880/syzkaller.5Vyh95/105/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 90.517186][ T6353] tap0: tun_chr_ioctl cmd 2147767511 [ 90.840399][ T6355] syzkaller0: entered promiscuous mode [ 90.858408][ T6355] syzkaller0: entered allmulticast mode [ 91.311203][ T6368] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.606075][ T5121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 91.617609][ T5121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 91.630934][ T5121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 91.654512][ T5121] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 91.670061][ T5121] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 91.677892][ T5121] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 92.716493][ T6381] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 92.758893][ T6388] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 93.019716][ T6408] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.062328][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.256426][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.402995][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.555708][ T6432] syzkaller0: entered promiscuous mode [ 93.561393][ T6432] syzkaller0: entered allmulticast mode [ 93.606143][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.704056][ T5121] Bluetooth: hci5: command tx timeout [ 95.025474][ T6457] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 95.037623][ T6457] veth0_macvtap: left promiscuous mode [ 95.187498][ T6476] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 95.199727][ T6483] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 95.240666][ T6376] chnl_net:caif_netlink_parms(): no params data found [ 95.280340][ T29] audit: type=1800 audit(1717120798.070:8): pid=6485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1946 res=0 errno=0 [ 95.350208][ T29] audit: type=1804 audit(1717120798.130:9): pid=6485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir214826857/syzkaller.AanW3B/108/memory.events" dev="sda1" ino=1946 res=1 errno=0 [ 95.448431][ T29] audit: type=1804 audit(1717120798.140:10): pid=6485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir214826857/syzkaller.AanW3B/108/memory.events" dev="sda1" ino=1946 res=1 errno=0 [ 95.452403][ T51] bridge_slave_1: left allmulticast mode [ 95.479984][ T51] bridge_slave_1: left promiscuous mode [ 95.486266][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.533255][ T51] bridge_slave_0: left allmulticast mode [ 95.560497][ T51] bridge_slave_0: left promiscuous mode [ 95.575970][ T6498] Driver unsupported XDP return value 0 on prog (id 172) dev N/A, expect packet loss! [ 95.596624][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.784410][ T5121] Bluetooth: hci5: command tx timeout [ 96.142922][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.164469][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.187478][ T51] bond0 (unregistering): Released all slaves [ 96.208589][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.674229][ T6518] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 96.696872][ T6518] veth0_macvtap: left promiscuous mode [ 96.749413][ T6376] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.768278][ T6376] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.785798][ T6376] bridge_slave_0: entered allmulticast mode [ 96.793452][ T6376] bridge_slave_0: entered promiscuous mode [ 96.841701][ T6526] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 96.923447][ T6540] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 96.980185][ T6540] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 96.998816][ T6376] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.040976][ T6376] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.063109][ T6376] bridge_slave_1: entered allmulticast mode [ 97.104187][ T6376] bridge_slave_1: entered promiscuous mode [ 97.294821][ T51] hsr_slave_0: left promiscuous mode [ 97.302305][ T51] hsr_slave_1: left promiscuous mode [ 97.327366][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.353170][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.373473][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.383296][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.458794][ T51] veth1_macvtap: left allmulticast mode [ 97.480010][ T51] veth1_macvtap: left promiscuous mode [ 97.496277][ T51] veth0_macvtap: left promiscuous mode [ 97.516188][ T51] veth1_vlan: left promiscuous mode [ 97.528036][ T51] veth0_vlan: left promiscuous mode [ 97.873995][ T5121] Bluetooth: hci5: command tx timeout [ 98.273251][ T51] team0 (unregistering): Port device team_slave_1 removed [ 98.362159][ T51] team0 (unregistering): Port device team_slave_0 removed [ 98.722541][ T6376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.751976][ T6581] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.767614][ T6581] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.777243][ T6581] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 98.786328][ T6581] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 98.816205][ T6376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.935697][ T6376] team0: Port device team_slave_0 added [ 98.966251][ T6376] team0: Port device team_slave_1 added [ 99.104511][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.120944][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.162371][ T6376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.199286][ T6376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.208380][ T6376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.243044][ T6376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.296919][ T29] audit: type=1804 audit(1717120802.090:11): pid=6632 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir214826857/syzkaller.AanW3B/117/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 99.415003][ T6376] hsr_slave_0: entered promiscuous mode [ 99.422059][ T6376] hsr_slave_1: entered promiscuous mode [ 99.436889][ T6376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 99.444705][ T6376] Cannot create hsr debugfs directory [ 99.527133][ T6648] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 99.627471][ T6653] vlan2: entered allmulticast mode [ 99.943950][ T5121] Bluetooth: hci5: command tx timeout [ 100.062289][ T6677] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.360475][ T6376] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 100.391622][ T6376] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 100.423357][ T6376] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 100.449133][ T6376] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 100.524635][ T6696] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.715419][ T6708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.741261][ T6376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.787785][ T6376] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.828226][ T6709] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.850616][ T6713] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.870426][ T6709] ip6gretap0: entered promiscuous mode [ 100.896282][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.903408][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 100.975323][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.982512][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.088061][ T6376] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 101.170575][ T29] audit: type=1804 audit(1717120803.960:12): pid=6721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2378314894/syzkaller.nOHpwB/119/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 101.542542][ T6376] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.574003][ T6738] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 101.667455][ T6376] veth0_vlan: entered promiscuous mode [ 101.728102][ T6376] veth1_vlan: entered promiscuous mode [ 101.819766][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.846728][ T6744] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 101.870749][ T6744] ip6gretap0: entered promiscuous mode [ 101.878144][ T6747] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.902405][ T6376] veth0_macvtap: entered promiscuous mode [ 101.922811][ T6749] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.966455][ T6376] veth1_macvtap: entered promiscuous mode [ 102.016511][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.045805][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.077104][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.107585][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.150559][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.164368][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.180630][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.216823][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.229796][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.242540][ T6758] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 102.252795][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.267144][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.284061][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.304752][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.315640][ T6376] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.326121][ T6376] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.346002][ T6376] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.383181][ T6754] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.392255][ T6754] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.401140][ T6754] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.409912][ T6754] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.424811][ T6754] vxlan0: entered promiscuous mode [ 102.429967][ T6754] vxlan0: entered allmulticast mode [ 102.445266][ T6762] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.506101][ T6376] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.529797][ T6376] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.541403][ T6376] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.556074][ T6376] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.576537][ T6766] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.586700][ T6764] Zero length message leads to an empty skb [ 102.619051][ T6770] netlink: 'syz-executor.2': attribute type 63 has an invalid length. [ 102.840878][ T546] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.871848][ T546] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.979938][ T6779] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.992413][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.016679][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.028327][ T6789] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.344576][ T6801] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.452547][ T6803] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.739920][ T6822] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 104.021462][ T6831] ip6gretap0: entered promiscuous mode [ 104.467986][ T6855] Bluetooth: MGMT ver 1.22 [ 104.843875][ T6882] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 105.288400][ T6913] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 105.868769][ T6947] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 105.993639][ T6955] dummy0: entered promiscuous mode [ 106.010900][ T6955] dummy0: left promiscuous mode [ 106.480876][ T6986] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 106.633628][ T6996] dummy0: entered promiscuous mode [ 106.647843][ T6996] dummy0: left promiscuous mode [ 106.741698][ T7004] __nla_validate_parse: 10 callbacks suppressed [ 106.741717][ T7004] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.051589][ T7024] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 107.171967][ T7033] dummy0: entered promiscuous mode [ 107.182387][ T7033] dummy0: left promiscuous mode [ 107.644818][ T7059] tap0: tun_chr_ioctl cmd 1074025677 [ 107.650279][ T7059] tap0: linktype set to 0 [ 107.893572][ T7064] Bluetooth: MGMT ver 1.22 [ 108.062105][ T7071] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 108.087059][ T7071] netem: change failed [ 109.267197][ T7140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.535618][ T7156] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 109.706730][ T7167] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 109.732463][ T7167] netlink: 9388 bytes leftover after parsing attributes in process `syz-executor.4'. [ 109.767276][ T7171] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 109.802231][ T7172] batadv_slave_0: entered allmulticast mode [ 109.901545][ T7168] pim6reg: entered allmulticast mode [ 109.967357][ T7168] batadv_slave_0: left allmulticast mode [ 109.990818][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.051464][ T7162] pim6reg: left allmulticast mode [ 110.894223][ T7235] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 110.911993][ T7235] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 110.962645][ T7238] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 110.978865][ T7238] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 111.167896][ T7253] xt_CT: You must specify a L4 protocol and not use inversions on it [ 111.596917][ T7276] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.342392][ T7323] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 112.567854][ T7341] netlink: 212424 bytes leftover after parsing attributes in process `syz-executor.3'. [ 114.657372][ T7402] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 114.673666][ T7402] netlink: 9388 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.890213][ T7412] IPVS: length: 96 != 8 [ 116.031476][ T7455] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.041104][ T7455] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.259072][ T7460] ------------[ cut here ]------------ [ 116.264973][ T7460] refcount_t: decrement hit 0; leaking memory. [ 116.272389][ T7460] WARNING: CPU: 0 PID: 7460 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 116.281894][ T7460] Modules linked in: [ 116.285871][ T7460] CPU: 0 PID: 7460 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-12143-g030fae30f059 #0 [ 116.295990][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 116.306458][ T7460] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 116.312558][ T7460] Code: b2 00 00 00 e8 27 15 e7 fc 5b 5d c3 cc cc cc cc e8 1b 15 e7 fc c6 05 ba b5 e8 0a 01 90 48 c7 c7 a0 90 1f 8c e8 97 45 a9 fc 90 <0f> 0b 90 90 eb d9 e8 fb 14 e7 fc c6 05 97 b5 e8 0a 01 90 48 c7 c7 [ 116.332365][ T7460] RSP: 0018:ffffc90002fc7c48 EFLAGS: 00010246 [ 116.338826][ T7460] RAX: b817dafebcdd7900 RBX: ffff88802bc50664 RCX: ffff888020eb0000 [ 116.347163][ T7460] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 2024/05/31 02:00:19 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 116.355616][ T7460] RBP: 0000000000000004 R08: ffffffff815847a2 R09: 1ffff1101728519a [ 116.363847][ T7460] R10: dffffc0000000000 R11: ffffed101728519b R12: ffff88802bc50620 [ 116.372126][ T7460] R13: 0000000000000000 R14: ffff88802bc50664 R15: dffffc0000000000 [ 116.380184][ T7460] FS: 0000555590c66480(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 116.389192][ T7460] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 116.395835][ T7460] CR2: 0000001b32e42000 CR3: 00000000294ce000 CR4: 00000000003506f0 [ 116.404222][ T7460] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 116.412207][ T7460] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 116.420232][ T7460] Call Trace: [ 116.423522][ T7460] [ 116.427323][ T7460] ? __warn+0x163/0x4e0 [ 116.431506][ T7460] ? refcount_warn_saturate+0xfa/0x1d0 [ 116.437288][ T7460] ? report_bug+0x2b3/0x500 [ 116.441829][ T7460] ? refcount_warn_saturate+0xfa/0x1d0 [ 116.447411][ T7460] ? handle_bug+0x3e/0x70 [ 116.451766][ T7460] ? exc_invalid_op+0x1a/0x50 [ 116.456524][ T7460] ? asm_exc_invalid_op+0x1a/0x20 [ 116.461571][ T7460] ? __warn_printk+0x292/0x360 [ 116.466441][ T7460] ? refcount_warn_saturate+0xfa/0x1d0 [ 116.471920][ T7460] ? refcount_warn_saturate+0xf9/0x1d0 [ 116.477435][ T7460] ref_tracker_free+0x6af/0x7e0 [ 116.482303][ T7460] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 116.488254][ T7460] ? __pfx_ref_tracker_free+0x10/0x10 [ 116.493667][ T7460] ? ax25_destroy_socket+0x549/0x5b0 [ 116.499038][ T7460] ax25_release+0x368/0x950 [ 116.504017][ T7460] sock_close+0xbc/0x240 [ 116.508281][ T7460] ? __pfx_sock_close+0x10/0x10 [ 116.513146][ T7460] __fput+0x406/0x8b0 [ 116.517243][ T7460] __x64_sys_close+0x7f/0x110 [ 116.521937][ T7460] do_syscall_64+0xf3/0x230 [ 116.526511][ T7460] ? clear_bhb_loop+0x35/0x90 [ 116.531207][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.537146][ T7460] RIP: 0033:0x7f83a027bdda [ 116.541584][ T7460] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 116.561279][ T7460] RSP: 002b:00007fff85edd610 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 116.569831][ T7460] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f83a027bdda [ 116.577891][ T7460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 116.585943][ T7460] RBP: 00007f83a03b59a0 R08: 0000001b33420000 R09: 7fffffffffffffff [ 116.593980][ T7460] R10: 00000000000000ac R11: 0000000000000293 R12: 000000000001c8ee [ 116.601962][ T7460] R13: 00007f83a03b407c R14: 0000000000000032 R15: 00007f83a03b59a0 [ 116.610373][ T7460] [ 116.613410][ T7460] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 116.620702][ T7460] CPU: 0 PID: 7460 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-12143-g030fae30f059 #0 [ 116.630693][ T7460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 116.640746][ T7460] Call Trace: [ 116.644015][ T7460] [ 116.646937][ T7460] dump_stack_lvl+0x241/0x360 [ 116.651611][ T7460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 116.656800][ T7460] ? __pfx__printk+0x10/0x10 [ 116.661392][ T7460] ? vscnprintf+0x5d/0x90 [ 116.665717][ T7460] panic+0x349/0x860 [ 116.669613][ T7460] ? __warn+0x172/0x4e0 [ 116.673763][ T7460] ? __pfx_panic+0x10/0x10 [ 116.678187][ T7460] __warn+0x346/0x4e0 [ 116.682162][ T7460] ? refcount_warn_saturate+0xfa/0x1d0 [ 116.687618][ T7460] report_bug+0x2b3/0x500 [ 116.691942][ T7460] ? refcount_warn_saturate+0xfa/0x1d0 [ 116.697396][ T7460] handle_bug+0x3e/0x70 [ 116.701540][ T7460] exc_invalid_op+0x1a/0x50 [ 116.706040][ T7460] asm_exc_invalid_op+0x1a/0x20 [ 116.710890][ T7460] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 116.716953][ T7460] Code: b2 00 00 00 e8 27 15 e7 fc 5b 5d c3 cc cc cc cc e8 1b 15 e7 fc c6 05 ba b5 e8 0a 01 90 48 c7 c7 a0 90 1f 8c e8 97 45 a9 fc 90 <0f> 0b 90 90 eb d9 e8 fb 14 e7 fc c6 05 97 b5 e8 0a 01 90 48 c7 c7 [ 116.736564][ T7460] RSP: 0018:ffffc90002fc7c48 EFLAGS: 00010246 [ 116.742632][ T7460] RAX: b817dafebcdd7900 RBX: ffff88802bc50664 RCX: ffff888020eb0000 [ 116.750601][ T7460] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 116.758568][ T7460] RBP: 0000000000000004 R08: ffffffff815847a2 R09: 1ffff1101728519a [ 116.766535][ T7460] R10: dffffc0000000000 R11: ffffed101728519b R12: ffff88802bc50620 [ 116.774501][ T7460] R13: 0000000000000000 R14: ffff88802bc50664 R15: dffffc0000000000 [ 116.782472][ T7460] ? __warn_printk+0x292/0x360 [ 116.787242][ T7460] ? refcount_warn_saturate+0xf9/0x1d0 [ 116.792695][ T7460] ref_tracker_free+0x6af/0x7e0 [ 116.797550][ T7460] ? __pfx_skb_queue_purge_reason+0x10/0x10 [ 116.803439][ T7460] ? __pfx_ref_tracker_free+0x10/0x10 [ 116.808816][ T7460] ? ax25_destroy_socket+0x549/0x5b0 [ 116.814102][ T7460] ax25_release+0x368/0x950 [ 116.818607][ T7460] sock_close+0xbc/0x240 [ 116.822843][ T7460] ? __pfx_sock_close+0x10/0x10 [ 116.827686][ T7460] __fput+0x406/0x8b0 [ 116.831673][ T7460] __x64_sys_close+0x7f/0x110 [ 116.836343][ T7460] do_syscall_64+0xf3/0x230 [ 116.840835][ T7460] ? clear_bhb_loop+0x35/0x90 [ 116.845503][ T7460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 116.851387][ T7460] RIP: 0033:0x7f83a027bdda [ 116.855795][ T7460] Code: 48 3d 00 f0 ff ff 77 48 c3 0f 1f 80 00 00 00 00 48 83 ec 18 89 7c 24 0c e8 03 7f 02 00 8b 7c 24 0c 89 c2 b8 03 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 36 89 d7 89 44 24 0c e8 63 7f 02 00 8b 44 24 [ 116.875391][ T7460] RSP: 002b:00007fff85edd610 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 116.883803][ T7460] RAX: ffffffffffffffda RBX: 0000000000000006 RCX: 00007f83a027bdda [ 116.891770][ T7460] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000005 [ 116.899730][ T7460] RBP: 00007f83a03b59a0 R08: 0000001b33420000 R09: 7fffffffffffffff [ 116.907689][ T7460] R10: 00000000000000ac R11: 0000000000000293 R12: 000000000001c8ee [ 116.915657][ T7460] R13: 00007f83a03b407c R14: 0000000000000032 R15: 00007f83a03b59a0 [ 116.923633][ T7460] [ 116.926863][ T7460] Kernel Offset: disabled [ 116.931228][ T7460] Rebooting in 86400 seconds..