last executing test programs: 2.023967791s ago: executing program 3: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000540)=[@rights={{0x10}}], 0x10}, 0x0) r3 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r3, &(0x7f0000000300)={0x28, 0x0, 0x0, @host}, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) getsockname$packet(r2, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5, 0xebe3}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x20, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}}}]}, 0x50}}, 0x0) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0xa, @remote={0xac, 0x1c}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty}}}], 0x20, 0x2000000}}], 0x1, 0x0) 1.732868459s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89f1, &(0x7f0000000900)={'ip6_vti0\x00', @random="0600002000"}) 1.564375112s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x18, &(0x7f0000000740)=ANY=[@ANYBLOB, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000b000000000000006d19e0fff0ffffff5a21fcff000000008510000002000000852000000100000018610000080000000000000002000000186900000b0000000000000000040000bf91000000000000b7020000010000008500000084000000b700000000000000950000000000"], &(0x7f00000004c0)='GPL\x00', 0x10000, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000500)={0x2, 0xd, 0xffffffff, 0x100}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000540)=[r0, r0], &(0x7f0000000580)=[{0x5, 0x4, 0x1, 0x8}], 0x10, 0xfffff000}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x14, &(0x7f0000000280)=ANY=[], &(0x7f0000000280)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x6}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000001e00431b000000000000000007000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00@\x00\x00\b\x00\n\x00', @ANYBLOB="fa"], 0x28}}, 0x0) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000440)='cq_drain_complete\x00'}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_group_source_req(r9, 0x0, 0x2e, &(0x7f0000000300)={0x0, {{0x2, 0x4e21, @empty}}, {{0x2, 0x100, @loopback}}}, 0x108) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r8, 0x0, r6, 0x0, 0x1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000640)={0xffffffffffffffff}) setsockopt$netlink_NETLINK_CAP_ACK(r5, 0x10e, 0xa, &(0x7f0000000480)=0x9, 0x4) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f00000014c0)={'macvtap0\x00', &(0x7f00000013c0)=@ethtool_drvinfo={0x3, "3768ca9bdb9072480b2f1c8f8182ce0898651461231fb740854b22a4379de586", "43a38879022a99b405a660e7cd1d15725e68a25c5152bd0bd227ffb8739f1cfc", "131c5b4bdb8af434447f3cb705650db1c0f8ddb541648cc0b1d318873f8c9a85", "f16051bbcb4dda20aea0d433f8c6f05bce62635e71c972c7929a58603233d497", "1cb283a6b524caa0cfd3fc2d99e7cad81b31b74f347dff63fa93236b8a8a2ccb"}}) vmsplice(r6, &(0x7f0000000940)=[{0x0}], 0x1, 0x0) tee(r5, r10, 0xaf5, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) getsockopt$inet6_mreq(r5, 0x29, 0x0, &(0x7f0000000380)={@mcast2}, &(0x7f00000003c0)=0x14) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, r12, 0x4d507000) write$binfmt_elf64(r7, &(0x7f0000003380)=ANY=[], 0x18c6) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r13 = socket$kcm(0x2, 0xa, 0x2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket(0x2b, 0x4, 0x0) splice(r3, &(0x7f0000000200)=0xa164, r8, &(0x7f0000000340)=0x3, 0x6fb28a3b, 0x6) 1.381517185s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_TTL={0x5}, @IFLA_IPTUN_ENCAP_LIMIT={0x5}]}}}]}, 0x44}, 0x1, 0xba01}, 0x0) 1.2898327s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) close(r0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x80000000, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r1}, &(0x7f0000000080), &(0x7f0000000200)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xd0}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r3, &(0x7f0000000000), 0x9) 1.196238129s ago: executing program 1: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r0, 0x0, 0xc, &(0x7f00000000c0)=0xffbf, 0x4) setsockopt$inet_int(r0, 0x0, 0xd, &(0x7f0000000000)=0x9, 0x4) getsockopt(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) 1.051682101s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r2, 0x8903, 0xfffffffffffffffe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r3, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)=@phonet={0x23, 0xaa, 0x8, 0x5}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="7448a5364234d8373718925f4cf6d81c8fd1d01ed863edaedbbe0505bbfb41d2566c84ef3808a8d22da8c8f3c64531ae40f40fe948ab36b472f1e0b41bcc5b12c286148230d1de8bf3690f9f6b6f0917f5ba3004b94b6566d451b900ad45b660118a704dd27eba3cf25e2baa0d49ed56ee61435c78968fec5fcae98cdaac7244655faf16f9891a5d8ad11c168fd77b4aebd1a349569670dbcd39b130", 0x9c}, {&(0x7f00000006c0)="214b0117418ff3f1dc5b4ffdb7d5127fdb974e9d5f8c052093be3bdd7efa05fbf19205bd254a4a9f743c7722224d34fb22e17eb0e7d066a21b511944f3c60ebc5d9a20f0b4425187309793ba1e1beea3657b322b0aab8defee2eadd81209f3575feeeff68f57052a8277a10e0e4077033c7db49f0915f6ad2c31a95ebb9f066628dfaa3fbde852547b469fea2cdce53f909fb65839167fddc2a4af35bfb0dc4398315f5816040a28aa", 0xa9}], 0x2, &(0x7f0000000780)=[@txtime={{0x18, 0x1, 0x3d, 0xd9}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x48}}, {{&(0x7f0000000800)=@hci={0x1f, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000880)="10d1c55bd55a4c5ea71d154cefbd03cddbb246098e85f7751f042ccc1c325982359b7ea9c16e23ca4e9bb4164a87b73c90db76e7ed0edeb3e66f1d5646808ee9be02de01b2d34a8851750d68403e297f5f3757c8270a440bfa2a776448e23d096851c53cf3f7566337d55c6e26930a086fe3ee9c7c8ef9b973ac144af8a0f40e07dbe6e21d5e4479fde8e331d8e75b2956abe98c88873a1d5b3d88581c5d92a47b4c328c5dba69048b3c90d35f3d6607df72180da13124f374755f4c0579cd083a7f4adb50e6dbd6ce40", 0xca}, {&(0x7f0000000080)="5cb31fce0ddcc9d4b0aaeb105365a537a474e1a53532f92057dcccaa3405b73e7c0766f1bd6e3c40fa31db50ed92743f26c2", 0x32}, {&(0x7f0000000a40)="5b6249da0b4d915394628ba148b8b948d96e2d030315526e6347fa30b213b7235d7cbd0077d8293ad187dfdfb86e05666d5c35b5d8326ab90bbd2e3f41e7404927db4dc26098b393b5d4b7580bff369080983ea53276325fbffabf2e9f6cdbd8cde6b487d52d97d4d7eaa9ad41ec2062dae0997ec87379c7add8b91165", 0x7d}], 0x3, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0xcf}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0xe8}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffb}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0xd8}}], 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000015c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x5b8, 0x0, 0x418, 0x348, 0x278, 0x418, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@dev, @loopback, [], [], 'pim6reg\x00', 'veth1_macvtap\x00'}, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @common=@dst={{0x48}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYRES32=r6, @ANYBLOB="9a"], 0x20}}, 0x0) 1.041299734s ago: executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r1, &(0x7f0000004380)={0xa, 0x4e24, 0xfffffc8d, @dev={0xfe, 0x80, '\x00', 0x27}, 0x10}, 0x1c) sendmmsg$inet(r0, &(0x7f0000002a00), 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0xc29, 0x0, 0x0, {0x0, 0x0, 0x8100, r3}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x5, @local}]}}}]}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001740)={'team0\x00', 0x0}) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) write$cgroup_type(r7, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000006c0)={'syztnl2\x00', &(0x7f0000000640)={'ip6_vti0\x00', 0x0, 0x2f, 0x0, 0x5, 0x7fffffff, 0x15, @loopback, @private2, 0x7, 0x7800, 0x3, 0xa99}}) sendmsg$nl_route_sched(r8, &(0x7f0000000780)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)=@getqdisc={0x3c, 0x26, 0x8, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, r9, {0x4, 0x2}, {0xfff2, 0xd}, {0x9, 0xa}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000002a80)={0x1a, 0xf, &(0x7f0000002840)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x3}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r7}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r7}}, @exit, @cb_func={0x18, 0x9, 0x4, 0x0, 0x3}]}, &(0x7f00000028c0)='syzkaller\x00', 0x0, 0x9a, &(0x7f0000002900)=""/154, 0x40f00, 0x69, '\x00', r9, 0x27, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f00000029c0)={0x5, 0x10, 0x80000001, 0xaa}, 0x10, 0x0, r7, 0x3, 0x0, &(0x7f0000002a40)=[{0x40, 0x4, 0xb, 0x9}, {0x2, 0x5, 0x5, 0x8}, {0x2, 0x5, 0xb, 0x5}], 0x10, 0x99d}, 0x90) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000000)="3900000013000b4700bb65e1c3e4ffff010000003d000000560000022500000019000a001000000007fd17e5ffff080004000000000000000a", 0x39}], 0x1) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000080)={0x0, 'virt_wifi0\x00', {0x300}, 0x3df}) r10 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r10, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$can_bcm(r10, &(0x7f0000000580)={&(0x7f0000000480)={0x1d, r11}, 0x10, &(0x7f0000000540)={&(0x7f00000004c0)={0x1, 0x0, 0x0, {0x0, 0xea60}, {0x0, 0xea60}, {}, 0x1, @can={{}, 0x80, 0x0, 0x4, 0x0, "e91a9bfc22bbc1aa"}}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'ip6_vti0\x00', &(0x7f0000000200)={'ip6tnl0\x00', r11, 0x4, 0x5, 0x19, 0xfffffffa, 0x1, @ipv4={'\x00', '\xff\xff', @private=0xa010101}, @loopback, 0x0, 0x700, 0x3f, 0x1}}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r8, 0x8983, &(0x7f0000000440)={0x0, 'batadv_slave_1\x00', {}, 0x176}) sendmsg$nl_route_sched(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000005c0), 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10004055) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r13 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendfile(r13, r12, 0x0, 0x21fd1ee9) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x13, &(0x7f0000000000)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xca, 0x0, 0x0, 0x0, 0x7fffffff}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x5}, @jmp={0x5, 0x0, 0x3, 0xa, 0x4, 0xfffffffffffffff8, 0x8}, @alu={0x4, 0x1, 0xd, 0x8, 0x9, 0xffffffffffffffff, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='syzkaller\x00', 0x3, 0x2, &(0x7f0000000280)=""/2, 0x41100, 0x8, '\x00', r11, 0x27, r12, 0x8, &(0x7f00000002c0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x3, 0x2, 0x80000000, 0x1}, 0x10, 0x0, 0xffffffffffffffff, 0x5, &(0x7f00000003c0)=[r5], &(0x7f0000000440)=[{0x4, 0x2, 0xc, 0x1}, {0x4, 0x4, 0xd, 0xa}, {0x2, 0x3, 0x8, 0xb}, {0x4, 0x2, 0x6, 0xc}, {0x2, 0x3, 0xf, 0xc}], 0x10, 0x4}, 0x90) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000045c0)={'team0\x00', 0x0}) sendmmsg$inet6(r0, &(0x7f0000005a00)=[{{&(0x7f0000000040)={0xa, 0x4e21, 0x8001, @mcast1, 0xff}, 0x1c, &(0x7f0000000480)=[{&(0x7f0000000080)="3802037f5d6797f5ab545ebc3cdc0175a19b1ff42c6d2fb185157dfd55446e7c477ec5f469ef403373cf9060d1b76fe29c4d23cf65c5de58296feae9967fa4a7c4bd2a3e9e17a3a8d374a9e58d4c94cb521c92d6dae5c9a4c1e40b22902f2a3d993c0d1e2788a3b609969950927811f0087fddb1981aebd9294594a66dcfd8aa9a51daac28d57e26fd27d72286cc866eb3b1ebaba74b594c54403ce979cc3fd0502b2eb0c7ae8c00230d00f7b7be26bb03fe547060a583c49c5cde769ad32141caec614795f0a4a484ba40ea", 0xcc}, {&(0x7f0000000180)="ed055c463f0341bcbd93b0c05dc2d1ba91b733060cee0d2af68ded77426820d6340d9e6051bc5b880050a54a3b2c2e1c557de73f62a54bd7f23cf3918e8e12aa3968882064f1252b5a81bf088d723defb3f9572124335733cfb16340dabdc06a553159156891467094182e6fe689fd4ef55d01abd0b8f247bad4f296e13b4b5e8368eabc6cddfd48fc96b8850fbe851d46106c4138b2b902bc175c1f1223c3568884a46db03b344759e433ed57216bf63569b3a42fda81626e8ca7dc592f580327e049f3ca86dcd793d1d4a5c985d19a14e6a973a794d803a43dbae2d9b0a0", 0xdf}, {&(0x7f0000000280)="ba6e346bb0b236d7c10903915f94d6807234c76ddb44a10e655a6e46643e8cd75c6fab90792ad546b4d35299b9159a430266a4", 0x33}, {&(0x7f00000002c0)="6d03edfd1b734d592f5f17bd482e3723709e3013dff2a1e91925a633bfef5f3dd1d0318fc5d4c1788f3f1cf5583f48e383614fab0d33376382e79a785d270942fd1aea3a05a8c9145f6b383dfac86eee8362df6134d94680494b0a5a357bacfb9e5ab8761b9b5d433386134a654f2760b3d0b1eef2c04e1896856b691ad475f3f450f474c2ecc0fbbfe12f616da6e16b87d29459755792409d064a98d79f7c68ba297593be0f904e92838d820af4b9da8bdd779173d9d3ffc7e40a8891e12a84aa077aba32151a9ced3079804d8d5d7cc48948dd7208dadebb3a40d895bd0f66bbcc70119c7ba2509c555e24cce159b56ee7a20c", 0xf4}, {&(0x7f00000003c0)="0fd9ddb20897800f9f28fd1dd7591f2028c84c2eae0def92e049ad40d676", 0x1e}, {0x0}, {&(0x7f0000000400)="8dc884f6ba38477d9e28ca9e195ced187a1693657323da2eaea72998f503427ca0638b49e3ed673ea23a4378132468df2eda7c9fe4c7d5adda48fdd6625acb9272452c07f2647b70d921ca55af7a8de8ac5b169003ad4b44a4f3a3", 0x5b}], 0x7, &(0x7f0000000500)=[@rthdr={{0x38, 0x29, 0x39, {0x33, 0x4, 0x2, 0x0, 0x0, [@loopback, @rand_addr=' \x01\x00']}}}, @dstopts_2292={{0x88, 0x29, 0x4, {0x5e, 0xd, '\x00', [@padn={0x1, 0x1, [0x0]}, @enc_lim={0x4, 0x1, 0x20}, @ra={0x5, 0x2, 0x2}, @generic={0x8, 0x5e, "86ab932e5e3bfd3c73af7e7458ccbe385668b2a177658e2a261a638d8a79b83360ac5a71b232078f1a9321a95b01365e636260a7f014ca04684aefb9c8330871d8ba50fa8dfe4e43c74115c3fc3c204146ef22d07c8f7458a270fda2e65d"}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x5}}, @dstopts_2292={{0xe0, 0x29, 0x4, {0x8, 0x18, '\x00', [@enc_lim={0x4, 0x1, 0x6}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x2, 0xb9, "2932efdd604c41846faa153140881ced8ed781da9eeb4cf40473b9331c11f4d3fd8ead676b45d213109351cac2abf6bc4b3092bae34fba73642b6202ac84b9146b3ec99f341b6b4b75ced57d7dd46ac764c147f2dd101eb53994ab7cec526f73b468ed6f1a9702f76482fce95fee5e2ab0143bdf2d55fd1c03b45d13fc4c47485db60b337c51512ed619af6b385fb3f77a00910cbede94ad635def44616c66191bd6cfdcd41bbb4bda821f770fd8507639b3f342dbbbdf5814"}]}}}], 0x1b8}}, {{&(0x7f00000006c0)={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xfe}, 0x1c, &(0x7f0000000900)=[{&(0x7f0000000700)="a636d60f20092bf9ab615db9f803aaeab7d5fc77c6a66488f20c63a062b8c066e1022261f5c6eb923d5f7f439b64bd801b231c5c7ace453b841922dd2418fcd44c505a0c9db05e8ca783cc03a39cb651f36b13f32557f9961953c2a5f1dcfe0b9922de7069daee47acd4b12e9c73e0a1d44e582dc82ce11a4bafd1bf99a8032c25fd02bd6704c493419b679826fbe91f2695e886d8d0cc9ef413a1db2c57aac4a7ec358d0bdfcd517281040e672fceed1e169cf7d743f3e0", 0xb8}, {&(0x7f00000007c0)="328464f4102c02fdaf2cc1acd234cf45d57efa96a6a0e96b83a356ee81a476fc4aaaf7d2d091bf5052ada70b452f50a532c58f02fe979155747ce8f3865f239da1a1b3a6291c9f35364902978aa50e02bd2cd84d191173f40e6689bbcc7011f088df12663774308e30d87301d63a2413f3baf5d96ac1e33880c558269383512983ace65377484e2b8e34341f40c8826766a4662ebfd088719c538cd32e0836f724a5139959375095cd2834c9b86c5c39b5dc0fe08e24203ae921bb3fb70ae1085a1fac7c67438e788a1da58c2d5bcf1e7bd4cae88c48138cd93e42a3afdf359fdb", 0xe1}, {&(0x7f00000008c0)="fa13fa937634403c12710724352cf71a55ba6437651fc5", 0x17}], 0x3, &(0x7f0000000940)=[@dstopts={{0x20, 0x29, 0x37, {0x2b, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}, @hopopts={{0x78, 0x29, 0x36, {0x84, 0xb, '\x00', [@padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x1, [0x0]}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @loopback}}, @calipso={0x7, 0x18, {0x1, 0x4, 0x0, 0x7fff, [0x5, 0x80000000]}}, @calipso={0x7, 0x20, {0x2, 0x6, 0x4, 0x101, [0x101, 0xff, 0x9]}}, @enc_lim={0x4, 0x1, 0x40}, @enc_lim={0x4, 0x1, 0x7}, @enc_lim={0x4, 0x1, 0x80}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hoplimit={{0x14, 0x29, 0x34, 0x5}}], 0xc8}}, {{&(0x7f0000000a40)={0xa, 0x4e22, 0x2000000, @dev={0xfe, 0x80, '\x00', 0x8}, 0x7}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f0000000a80)="f2454a3b9035491ed4f6a69892a57e867e9066efef284ffe502f34c85c748cbcbbc5cffc9b6e9d75c291468230b00d4d7c178925a3bedc2c978a60eaf25962e110467ead4394d19e34dca32029899dce4a32ab38437709ab0a6527eeb8cd2ed6556634ac15112b02b37899d4a0400e0d70f2bd1482a4510cb0a0ff", 0x7b}, {&(0x7f0000000b00)="a292c3bd1de277", 0x7}, {&(0x7f0000000b40)="07c67cb1cec3bbb2df5858822ed4691a0d7ffe9a76a43db1659a267807d6f158ffad65497b445bde47e2465abb89", 0x2e}, {&(0x7f0000000b80)="65e2d7c74e73903dadbac17e1b451c1808dac246f67428f5456428ef5a4317daa4ebae3121ccc4024d8406966a7928b3ffd83e17e92f607e0d5bc5ff150ca6b5e5dee8f49870b66542b0b58210e867c27625575b842a1a21004708676983632f48eab4ff1b604bf68f80eecf028e877381bd64a1d07563f7e0d8c3b791470736a6cac74788d7a0d1cd410dd189125475e5b6ee1f2779a3aa93aee552a9c2906fbd4e3f73b65dccd7802a", 0xaa}, {&(0x7f0000000c40)="1162e35bfbf516ed97e743b19fea8824f2b926d3b283f55c7fc51751fa18332e20b9503e188a7df093d0ed93dc99b7424197771b5256ef10666a9115f833d588ec642e081275ceb6e050236cbe5ba5fef0471263e4cb69", 0x57}], 0x5, &(0x7f0000000d40)=[@tclass={{0x14, 0x29, 0x43, 0x1}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x0, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x20}]}}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x0, 0x86, 0x0, [@ipv4={'\x00', '\xff\xff', @empty}, @loopback, @ipv4={'\x00', '\xff\xff', @loopback}]}}}, @tclass={{0x14, 0x29, 0x43, 0x9}}, @rthdr={{0x18, 0x29, 0x39, {0x5e, 0x0, 0x2, 0x9}}}, @hopopts_2292={{0x108, 0x29, 0x36, {0x6, 0x1d, '\x00', [@generic={0x7, 0xe9, "68a5fdb68ef33c66078ffcee44d5905a1eb145a0397471a7b5d7a33de35ad7b592427938d4b27cf3952623ce0f5febff88bc1f31198a1a5ecd5eaf9b91aa1e7944778df6b3e5af9e4f0e30e94496f73881afa36be8f5ce3f1b9cc896871555e0e4f23cdb5d3e7019f92e56629217245869a3a952ac13ae3b582599b54a6d56e33302a9fcdda1769ed7105bb843b0280be4dfd2a3176c40202d88e176741a3b7ce08ddfb19d3d4e3cabde34f7ca56f7cb42fc8d36b65719d46dd001a3c0ac37850c774e786ba8414a1b1d3215516e3c32c43bd08a3ff94403c2d4ae05d313bd3d5c7518758a71627d12"}]}}}, @rthdr_2292={{0x68, 0x29, 0x39, {0x2e, 0xa, 0x0, 0x7f, 0x0, [@private0, @local, @private2={0xfc, 0x2, '\x00', 0x1}, @mcast1, @private2]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x579399c8}}], 0x238}}, {{0x0, 0x0, &(0x7f0000001480)=[{&(0x7f0000000f80)="9d9c6102f9ee7de1ce0909d75e067c8659b9125d0f4ed6cde79d03e9b71c9e3e75501973da0464806f931311b52df239649a32ae3875f25f69ed52bdabc9c46b30fd35a89efff8df72ca54fc453e336bdd2c401c87b5c9e34f7cc528de06a13385d665cc9f2dd05b15349d6b0aa37bc91eaf4828e964d19efa9f47325d827c36c55193caef195033c25aaf323d5ab732c80e2d93bc411752c64b0db8d9e3d0e85642a2f8608a2777722f2de18b3d66c966c175793cd682536af9b922570bbe1d1c92fb45046c2520266aad4dc3e0a98a83a43705ff773357bea0586f43ae1a64abcabc30ca87", 0xe6}, {&(0x7f0000001080)="88222c89a16e333a60ef42a4650e27a88b06daff5c129cefb37d3b7f5a432265b8533de6c5f21b34db454c43261c6c238c284e69b04f1baf5c073d1f4aa6463c2469a8a847be689f2aa6f21436f0fa5559fbb80f6bbce676caa2c1ab27bac8efc40c03024b0238ddd8b20c4bdce252b6275c97757e12e6e7d0c2663f56c429cf4f048147101f2b4de3a4c37c3bbe7b7a8e7915f901576079bcfe5759d2a967953320f7d5c86b7104046c2f9286a06689a23fa16f19b7f5a2e2075bea1ed32f761eb4b1622c90e496919ac89215", 0xcd}, {&(0x7f0000001180)="55622f8b871b0840059885d4f51a337c75de99f4fa222b5e3cc084267ae0405ba24b3b2d747ee7d9bf4f163af642894e89e355fc7a64727d7f388d316d47425c53959a7b010d1774847c0d75b9b77d64da4f41ab8a9c0be0f27652ea852e57e0a214c8555b50647db1ee585192d247f5dbf08645609dbf32e03647c1e13364ff28a5912baeb9a78dbb695b925ff7bf67f191d6ee49cf059b304dee6ec01ed861c7149fdd3d31a0d43edaacfbc9beb05bc0ffba9ef2046ba0fa2ed1b51623acc6d338bc9de64f957c67577fc8e1", 0xcd}, {&(0x7f0000001840)="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", 0x1000}, {&(0x7f0000001280)="562f3265365880fbb0a2a6d72edc6d3c57c4cbb919b8b4843d26e3b51fd2598841caa14e01276341cfba38e66875a1eeb5a5047ff9ab4d2d0ef56323caeeb190c5373a2691b2ea616ecd8878d8c814171a613c71f761416be82fb495221754928f33bcecbd68aac4d64920b684f2d4f4b5a63557f6adbe86d40fcaa53eab5433bb4f2f0a10b0c34116cc8d8a04615270b8facbf871c5e25572a824b4463120b43ad61c89705c712d84596555a2ff18473c09d8bf19f33e3553bd264d4a58903fc2705036be6c90768eac80031828de2d568c93", 0xd3}, {&(0x7f0000001380)="e62664b2a81841d62fe19f50c7d89eb3562011b86eb1514b8ab36a7dbeac5f2c89b788f548d7a5cfa7b1cc7a66761b3bf2af55de40a4d09385e35b7f2d03f07cf7c6e036ee4169777547415fb997b44fa91c4c47f78616d1fd6afbd7715b7c2c33a58702c72c7ec9a8eb88908b40dfe781c4d880789e6fb488d806cfb9b2248ed325b8a0a688dabba3d9b54faa2f8a911e2604670e86fec8b642209ee3da69ec0f72b6bbcb301df0ef574f66de441636e06cbe5087f5eb2e8df6730c73b744c67b2a44e32c47531455010dd768ddcc29372980c561230d6de973878104fc054186bf3b35f820a23e", 0xe8}], 0x6, &(0x7f0000001500)=[@pktinfo={{0x24, 0x29, 0x32, {@private0, r3}}}, @hopopts_2292={{0x38, 0x29, 0x36, {0x0, 0x4, '\x00', [@enc_lim={0x4, 0x1, 0x10}, @generic={0x1f}, @jumbo={0xc2, 0x4, 0x1000}, @pad1, @ra={0x5, 0x2, 0x9}, @jumbo={0xc2, 0x4, 0xfc}, @jumbo={0xc2, 0x4, 0x7}, @generic={0x20}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x87, 0x2, '\x00', [@enc_lim={0x4, 0x1, 0xc9}, @calipso={0x7, 0x10, {0x3, 0x2, 0x4, 0x9, [0x8]}}]}}}], 0x90}}, {{&(0x7f00000015c0)={0xa, 0x4e23, 0x8, @loopback, 0x7}, 0x1c, &(0x7f0000001700)=[{&(0x7f0000001600)="8b230b030a03af706032a568276c7e24c4e7c91db4653ae25d795d2ef118e9e5912740d81ab5592376c13ec604e02c8ef54810189b848815100b5b306bea8f4f9347c91de42488016e689e5e1ee79b0bc444cc15ada42c3298422a89b16411038c716ad6916ae627217f2ddfcd976e96cc1eae74e8a1478c1634e64e1cb7a320a090291d802348895ae13333b7b927c9821c60e202f4784c7ba80c0eca054eb1135cf94a98356218579b19c8e7670512c5357b1346e52ad662d5a002522b7d1f0b5238619d0eccd36d224e5ca34421f781526f7a7734857413c7e6c2a62a11b1fcbaf721abfb87e92618d7d4", 0xec}], 0x1, &(0x7f0000003840)=ANY=[@ANYBLOB="1400000000000000290000003e000000823f0000000000001400000000000000290000003e000000050000000000000024000000000000002900000032000000fc000000000000000000000000000001", @ANYRES32=r4, @ANYBLOB="000000001400000000000000290000003e0000000700000000000000200000000000000029000000040000002b000000000000000401800000000000680000000000000029000000360000008f090000000000000401a107482dd4502ea17c53ec9ce89d9da2e24a52c8a0f426ffebad09f5ee9170293f38e16e17116a7087899c27377ae9e192766a8b4e3d30f5dbdc3172c230c50f54d7f64d9fdfcdf42471b1000000"], 0xf8}}, {{&(0x7f0000001780)={0xa, 0x4e21, 0xea6f, @remote, 0x5}, 0x1c, &(0x7f0000003c40)=[{&(0x7f00000017c0)="c0797b5d0022ef9540ab662efb8662a3c33527b7cb668ed20038eba5e9afb68aa641279ce63e8f", 0x27}, {&(0x7f0000003940)="b7fb9d48aa9524c2ffebdd33ef4aea209236e807fba875645335a089b3997b16cb94f9c21ffa7739ffb881ea8d0cb96616b3f1a710e3e02c974b0ac61c9267cd644262e6d817bfa751e9d7f30ddb2098bbdfa3e27cf0b9167ff32cb37c4d730e2fba330805c1", 0x66}, {&(0x7f00000039c0)="fd2af98a90566e619dd69ccf66b3653a7f9c4f734e2ca5faa1f453dd11ee6b7ee680d8280ba9a1ace6fac228d2998e", 0x2f}, {&(0x7f0000003a00)="2db9d65a8edea472c3cc906f9862a07281b85fbac1fb48d08d01107cf7fabb08bf680a41deabd85f0c5daa3a", 0x2c}, {&(0x7f0000003a40)="00004955fc779b2d735a1fd10087", 0xe}, {&(0x7f0000003a80)="ede6fcc48be4fd2f23c9dc514a2adf6f04ae61ff173dd01522a7e2d0a302be256132ac8174208ded75c6eb71f45edf4007df209ccbe6da4327a38bc9587ab913a6b50babcd2286ae3482a3b4832e5983529c1092c6ae00f71119bb143f2067be93afc387cdacfcddc70ae683e27fc2c829d26ecac86a730e3654fb651b4a950bcf745f4b9a10ef6517f643d77cbdaa05deaf364495b92a411c2f1d991f7c8aca4082b988847cf61acc0e192886e9577064a85965168b3f95d14d740033ec8d2b527437d8a4e770542454036c2a", 0xcd}, {&(0x7f0000003b80)="62529e5676a64b209e1a3298e9810f887be9f378d5fd36acc72d1544c9129eb601937051acd9f305345c8b4bb7514babe89ee7f7dec1eef5144e46d1eb3476f6bc7e562604c3c66c4735344dd9d3c606a77e9742928da75b6460d8d7ab7f3331e792f8bcd54c17da8c5593e0956610954e3938d8a5b63f8bad88cbd9e28a5cdacb9e2b4204d014b7485c431c2fe12f7b73e7ddbcf9f5a9865ab5ddf03bf6eccd4c66affb737395ac9452b028ab7f6501589c7fd481c408", 0xb7}], 0x7, &(0x7f0000003cc0)=[@hoplimit_2292={{0x14, 0x29, 0x8, 0x1}}, @hoplimit={{0x14, 0x29, 0x34, 0x7fffffff}}, @dontfrag={{0x14, 0x29, 0x3e, 0x40}}], 0x48}}, {{&(0x7f0000003d40)={0xa, 0x4e22, 0x3, @loopback}, 0x1c, &(0x7f0000004240)=[{&(0x7f0000003d80)="376d9e2bafee45c0d1f41d8cf70f27c959ed266ee80c1c521dc481382e95cf93838a53d0150d1aec1e5f9333afc6ad8530d954255f6532c8e7ab09130c4062d973d4d27b2ee07a7f49aeed294fbf164b4dcd46e3464af7ca9dd124d3f44788a4c4bcb11ee6e8d4f84360a4b092d9e405a9368a39d7a5ccaf794648bf0639593edb5e355d74dcd0d26787f399f1d4d667aeab23383790913fa36611dea435af", 0x9f}, {&(0x7f0000003e40)="99aa7e895246e35749c0c863b6270200388025ae8d460e51342ad5e7f4f9c90bcc2e3c8580f2fa1c4d", 0x29}, {&(0x7f0000003e80)="231c00600b7280c3a5868abf6de179394aba5c082f5f4496d1371d1ace7e07c52ba2647f2d790374f0d68436b0d0c909f2fb1021c4061b2be677ff9691241bd408cc9b1535a91132d1c4829a1deffac1d8913c68247b6a4d2866e72993f598792fdf83e9a24914ec8ad796243d4369f45b67b071f68343f884ae53b1ec8bcc94c4ded08ea0e195576764d6b9139583b4d6a18be39e9458467ee357c924990accec6f1518e00522531307d8fac3f64ee94f8b50c9d5a46b708f4ebe01c132b37e0f567488266372b9a6e2701d88860a4380af5ab3e080c38347e28b4f4fafc59c147162c73de8f04f", 0xe8}, {&(0x7f0000003f80)="d914c817ee677aed6f476eb47287610d15f8b3c2187a82a0256f2c06133100252b04e0f8b5be7034daed610660580b961f0ea71951de00fae7b5b82a1e785b94f8e66daa49cafcb71bc889bd20a4d10600a997ad8503e7a5977c79e40c67dd63cde3f7d317477c6248aa875a39de502a84f2ba6fce439c9af822f1f427b2308eb024ae54185700d87a4962b5bc183d35c9ddb56eb603851a9dd20e2a9a915cabc80a39c6ec33fb4c6eb94fcfda173858f4450aa5ab7e308fb25186a0", 0xbc}, {&(0x7f0000004040)="a8d902522eda606ffa68e9f5133c3f32666b2d72bdfc6f8065a4ef35099d3977f9c715ce721557822b47045444ed38ef915e47d846208fcd7da19726cbbb4de5b4af2243f74e40d82d13e624d0c548b7e76089a6a1fcf410b177a81f14812100a755d4feec1b5656e0d683e408d6e6998718c5f6b4ce1c6c1c581224f198a0fc72a7feb2ddc9c5b02a939234417d645bb3ddb9aed06071ccfdf09c", 0x9b}, {&(0x7f0000004100)="67b3233a2b7f7ea17fcdf271c5b8ff65fe61fab1cddce0f73348dc6eba2a4affc0681097656cf3ba899fa4c9576687c65fcf4a5c2f2b7480bbbc8005f44dd7a5929c73e699a7bf61b114", 0x4a}, {&(0x7f0000004180)="ee3a111191f33dec250dcfb9cf108118ca82a19f9ad276e43fcc7d3dba99b42dbbd4c9db80c53cce9bcc5ebae4589db1fee29e14d556a4ae976618631ff25c28322d8d4c8c29e652e16237f42710cb2899abab510ea8a4f4cb8d1dc21bb01b35ef6d4a9fa5afd9492d10e3bd55f10e190877e4cc20b1aa57d890f18844da861c1390a3cfe0026987877cfc72cbde0639f59dafb856b7109fcf39347e771ffcd8d6a739", 0xa3}], 0x7, &(0x7f00000042c0)=[@rthdr_2292={{0x48, 0x29, 0x39, {0x3a, 0x6, 0x1, 0x9, 0x0, [@private0, @private2, @private0={0xfc, 0x0, '\x00', 0x1}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x4}}], 0x60}}, {{&(0x7f0000004340)={0xa, 0x4e24, 0x9fa2, @loopback, 0x3d}, 0x1c, &(0x7f0000004580)=[{&(0x7f0000004380)}, {&(0x7f00000043c0)="31c9d9753e7d73d8498eb16d7b77999d1d7d462cc24857ab235887faa1ee755ed634bf3c554b1b17bb08720460f1c91ec530530e101ad7b2bba521e386f96931e9ea23b3245e925ea2ff67bafadb499f33591d4e6a9e7dbcc46a53ccbfeaf754332019ce96324096ca1bf874c3e4aa03eeaf99760b4d52cd02a2d66406e5477eb12b77087053b8bedb042c44b716338cdf1d14d4ff71ede9c9bb25b1c91bc9a81737fa9dd37e9d12e35b7ee2d69e4ab5ffe9e6f0c901fb19b722a492f41e30dc6e044f128fc969", 0xc7}, {&(0x7f00000044c0)="4d48cc6dec81be6e47cd92488cd7e36473d282bf53ca9d19da09ed4f04f67646a6a2b2cbec3d53f44594ae0a83c035eec1592c9f7dfe87d11c498382e517188ec3ffe95bd5d180e09a39e60a7a637437c6fcd52e9ad3c99cfce8ab8f3bc971dc58ecf803e8262bb315b6709d288ad1e55271c4c901618431240d97afbfa009222ce8435644c560155ea46fe0df", 0x8d}], 0x3, &(0x7f0000004600)=[@pktinfo={{0x24, 0x29, 0x32, {@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, r11}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r14}}}, @dstopts={{0x70, 0x29, 0x37, {0x45, 0xa, '\x00', [@generic={0x2, 0x4a, "7c168c4488ef303d0b483e880dd6fa4ef98d116b39942ba7c7d62f7602fcc4c0173315bf34817dd11dbf27aa14b14f28bb3fa98a2e5f2d9bedc49d7bbd6181cb68e8db7199371a7b3fd1"}, @jumbo={0xc2, 0x4, 0x4}, @pad1]}}}], 0xc0}}, {{0x0, 0x0, &(0x7f00000056c0)=[{&(0x7f00000046c0)="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", 0x1000}], 0x1, &(0x7f0000005700)=[@dstopts={{0x138, 0x29, 0x37, {0x3a, 0x23, '\x00', [@calipso={0x7, 0x58, {0x0, 0x14, 0x2, 0x7fff, [0x2, 0x8b, 0x68cd, 0x5, 0xfff, 0x39b1, 0x6, 0x80, 0x7fff, 0xd998]}}, @jumbo={0xc2, 0x4, 0x401}, @jumbo={0xc2, 0x4, 0x6}, @generic={0x47, 0x80, "1ddad20a87376ccc7e5ad0d6662f25f33bcd33e3cf28a7e5c2a226fa346933ea854da30976fbad4f1567493bb59d136da2ff2ba254604bda91605a7c616c85d7c5fed644d8878ecddf6169b110a9bb8b231bedf5dc5dd44dd59466d15eec63b78abff6e54421a384988aea5f8a649803046c670e9e3c5d089afbe4a13e7f2cc0"}, @generic={0x4}, @calipso={0x7, 0x30, {0x2, 0xa, 0x5, 0x3, [0x9, 0x2, 0x80000000000000, 0xb35, 0xdd]}}]}}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x401}}, @dstopts_2292={{0x188, 0x29, 0x4, {0x89, 0x2d, '\x00', [@generic={0x3, 0x4a, "e056f7b213c002b3bb7396594aa4fe8e81a8132e01b34985b29ba5fde3e70fabf495e75269d7580e4413cc179abd13ef6c8bb66882b4296d2a38fb7361305625446f7e393c87fcedae30"}, @generic={0x7f, 0xf7, "b7ae032de65458a4ff002c24af0f5dcd14bfb4efd245acaa77bbe628d95162ca44a136460ef61e970666408ee927c0f6e32aa88d8548827c9f3b1444900b57420e06f36b3f926984da0ebab1e7f4c37482322d48fcf11939eb49343a731e653e4363a8a3fbfc2b8f1901fab5cc151954bfedd936b878a7157c2ffff6fdfbf7104b880062c78cd603ee751ce6104e95adafe7c635c233d2d7ef915fdafa48db7da490cac4121d7de89303d18747a42349320e254934fef85ef7268f9310b113edff986b91c381b4b725b64e7f4e3050b608e9ea4c17185c98c4be157b2468a053ee854baf96d8d8fd68d47fd4e44652c8f08cb4342f5b27"}, @jumbo={0xc2, 0x4, 0x7}, @pad1, @ra={0x5, 0x2, 0x1ff}, @padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @private0}, @pad1]}}}], 0x2d8}}], 0x9, 0x4000) 979.472249ms ago: executing program 3: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)) readv(r0, &(0x7f0000000100)=[{&(0x7f0000000000)=""/1, 0x1}, {0x0}], 0x2) 921.521024ms ago: executing program 2: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'macsec0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_SPLIT_GSO={0x8, 0x11, 0xffffffff}, @TCA_CAKE_MEMORY={0x8}]}}]}, 0x44}}, 0x0) 877.84387ms ago: executing program 4: r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x5, [@fwd={0x3}]}, {0x0, [0x0, 0x0, 0x2e]}}, 0x0, 0x29}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={r0, 0xfffffffffffffe13, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0}}, 0x10) 811.791575ms ago: executing program 4: r0 = socket(0xa, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000300)=@broute={'broute\x00', 0x20, 0x2, 0x230, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200004c0], 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000110000000000000000000000000000feffffff01000000030000000000000081006e7230000000000000002000000000007465616d300000000000000000000000766c616e30000000000000010001000000000068307b746f5f7465616d000000aaaaaaaaaabb000000000000aaaaaaaaaabb0000000000000000d0000000d000000000010000766c616e0069df4e5100000000000000000000079ba31300000000000000000008000000000001010000000000010c00636f6e6e6c6162656c0000000000000000000000000000000000000020000000080000000000000000000000000000004e46515445554500000000000000000000000000000000000000000000000000080000000000000000000000000000040000000000000000000000004b5d0000000000000000000000000000000000000000000001000000ffffffff0000000000000000000000000004000000000000000000000000000000000000000000000000000001000000feffffff010000000b000000000000000000626f6e643000000000000000000000007465616d300000000000000000000000626f6e64300000000000006c73c387735cc18268315f746f5f62726964676500aaaaaaaaaabb000000000000ffffffffffff00000008000000007000000070000000a0000000434f4e4e5345434d41524b0000000000827900000000000000000000000000000800"/560]}, 0x2a8) 724.076755ms ago: executing program 4: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000013c0)=@bpf_lsm={0x1d, 0x26, &(0x7f00000010c0)=ANY=[@ANYBLOB="18000000030000000000000005000000950000000000000029800000010000000563c0fffcffffff180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000ffffff7f85000000060000001860000010000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000008000007b8af8ff00000000bfa20000000000000702"], 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r1, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) 691.02283ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x17}, @printk={@llu, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x7b}}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x44, &(0x7f0000000100)="0000000000000000000051229dc9", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 655.922624ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2a}, @printk={@lx, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000005c0)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="e0b9545dd30a3731677b2d0bfa91", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 649.865313ms ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r0}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x44, 0x0, 0x1, 0x0, 0x0, 0x0, {}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote={0xac, 0x3}}}}]}, @CTA_TUPLE_REPLY={0x18, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @dev}}}]}]}, 0x44}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='$\x00 \x00', @ANYRES16=r1, @ANYBLOB="01"], 0x24}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000002"], 0x24d8}], 0x1}, 0x0) 565.263815ms ago: executing program 0: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r1, 0x0, 0x80, 0x0) 520.525181ms ago: executing program 4: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGNPMODE(r0, 0xc008744c, &(0x7f00000001c0)={0x2b}) 511.507166ms ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) 485.72088ms ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000140)={0x1c}) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x408}) 420.487441ms ago: executing program 2: bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xd, 0x0, &(0x7f0000000000)="e02742e8680d85ff9782762f86", 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a3000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000002c0)=ANY=[], 0x90}}, 0x0) r1 = socket$packet(0x11, 0x0, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) unshare(0x22020400) r3 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r3, &(0x7f00000003c0)=[{0x0}], 0x1, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(0xffffffffffffffff) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000000580)=@newtaction={0x70, 0x30, 0x9, 0xfffffffd, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x8}, @TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x4}, {0xc, 0xa}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) 396.908011ms ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) close(r1) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r0}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r0}, &(0x7f0000000200), &(0x7f00000003c0)=r2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000140)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbf, &(0x7f00000009c0)=""/191, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x8}, 0x10, 0xffffffffffffffff}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) close(r3) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r5, 0x8923, &(0x7f0000000800)={'pim6reg1\x00', @link_local={0x1, 0x34}}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r6, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="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"]}, 0x1a8) r7 = socket(0x10, 0x80002, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r7) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x99}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_CLIENT(r7, &(0x7f0000000440)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0x94, r8, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x1, 0x4}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}]}, 0x94}, 0x1, 0x0, 0x0, 0x4000000}, 0x20000090) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@ipmr_getroute={0x0, 0x1a, 0x100, 0x70bd2a, 0x25dfdbfe, {0x80, 0x20, 0x50, 0xcd, 0xff, 0x0, 0xff, 0xb, 0x400}, ["", "", ""]}, 0x28}}, 0x0) 310.597788ms ago: executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x40}, {0x6}]}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3b, 0x4) sendto$packet(r1, &(0x7f00000000c0)="3f040e00f0e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152cfdf9435e3ffe46", 0x10b2, 0x0, &(0x7f0000000540)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 264.408025ms ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000500)=ANY=[], 0x0}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000080), 0xc) 231.689423ms ago: executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) 129.347168ms ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x7, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYRES64=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_FIOGETOWN(r2, 0x8903, 0xfffffffffffffffe) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmmsg$sock(r3, &(0x7f0000000bc0)=[{{&(0x7f00000001c0)=@phonet={0x23, 0xaa, 0x8, 0x5}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000340)="7448a5364234d8373718925f4cf6d81c8fd1d01ed863edaedbbe0505bbfb41d2566c84ef3808a8d22da8c8f3c64531ae40f40fe948ab36b472f1e0b41bcc5b12c286148230d1de8bf3690f9f6b6f0917f5ba3004b94b6566d451b900ad45b660118a704dd27eba3cf25e2baa0d49ed56ee61435c78968fec5fcae98cdaac7244655faf16f9891a5d8ad11c168fd77b4aebd1a349569670dbcd39b130", 0x9c}, {&(0x7f00000006c0)="214b0117418ff3f1dc5b4ffdb7d5127fdb974e9d5f8c052093be3bdd7efa05fbf19205bd254a4a9f743c7722224d34fb22e17eb0e7d066a21b511944f3c60ebc5d9a20f0b4425187309793ba1e1beea3657b322b0aab8defee2eadd81209f3575feeeff68f57052a8277a10e0e4077033c7db49f0915f6ad2c31a95ebb9f066628dfaa3fbde852547b469fea2cdce53f909fb65839167fddc2a4af35bfb0dc4398315f5816040a28aa", 0xa9}], 0x2, &(0x7f0000000780)=[@txtime={{0x18, 0x1, 0x3d, 0xd9}}, @mark={{0x14, 0x1, 0x24, 0x101}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}], 0x48}}, {{&(0x7f0000000800)=@hci={0x1f, 0x3}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000880)="10d1c55bd55a4c5ea71d154cefbd03cddbb246098e85f7751f042ccc1c325982359b7ea9c16e23ca4e9bb4164a87b73c90db76e7ed0edeb3e66f1d5646808ee9be02de01b2d34a8851750d68403e297f5f3757c8270a440bfa2a776448e23d096851c53cf3f7566337d55c6e26930a086fe3ee9c7c8ef9b973ac144af8a0f40e07dbe6e21d5e4479fde8e331d8e75b2956abe98c88873a1d5b3d88581c5d92a47b4c328c5dba69048b3c90d35f3d6607df72180da13124f374755f4c0579cd083a7f4adb50e6dbd6ce40", 0xca}, {&(0x7f0000000080)="5cb31fce0ddcc9d4b0aaeb105365a537a474e1a53532f92057dcccaa3405b73e7c0766f1bd6e3c40fa31db50ed92743f26c2", 0x32}, {&(0x7f0000000a40)="5b6249da0b4d915394628ba148b8b948d96e2d030315526e6347fa30b213b7235d7cbd0077d8293ad187dfdfb86e05666d5c35b5d8326ab90bbd2e3f41e7404927db4dc26098b393b5d4b7580bff369080983ea53276325fbffabf2e9f6cdbd8cde6b487d52d97d4d7eaa9ad41ec2062dae0997ec87379c7add8b91165", 0x7d}], 0x3, &(0x7f0000000ac0)=[@mark={{0x14, 0x1, 0x24, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0xcf}}, @mark={{0x14, 0x1, 0x24, 0x3}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x80000000}}, @mark={{0x14, 0x1, 0x24, 0xe8}}, @txtime={{0x18, 0x1, 0x3d, 0xfffffffffffffffb}}, @txtime={{0x18, 0x1, 0x3d, 0x8000}}, @mark={{0x14, 0x1, 0x24, 0x6}}], 0xd8}}], 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000015c0)=@mangle={'mangle\x00', 0x10, 0x6, 0x5b8, 0x0, 0x418, 0x348, 0x278, 0x418, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x4e8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28, 'HL\x00', 0x0, {0x3}}}, {{@ipv6={@dev, @loopback, [], [], 'pim6reg\x00', 'veth1_macvtap\x00'}, 0x0, 0x180, 0x1a8, 0x0, {}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, @common=@dst={{0x48}}]}, @HL={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x618) socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000300000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r9, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c090000560333"], 0x398}}, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="2000000010000100760100000475000000000000", @ANYRES32=r6, @ANYBLOB="9a"], 0x20}}, 0x0) 128.348383ms ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x7, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_lru_insertion\x00', r1}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000700)='mm_lru_insertion\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r4, &(0x7f0000000180), 0x2000) 90.578857ms ago: executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001780)=[{&(0x7f0000000100)=@in6={0xa, 0x0, 0x0, @private2}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000140)="86", 0x1}], 0x1}], 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f00000001c0), 0xfec8) recvmmsg(r2, &(0x7f0000001f40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001440)=""/198, 0xc6}], 0xc6}}], 0x2, 0x0, 0x0) 77.869191ms ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) write$binfmt_misc(r2, &(0x7f0000000280)=ANY=[], 0x8) 0s ago: executing program 2: write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0x10, &(0x7f0000000740)=@framed={{}, [@snprintf={{0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x8, 0xfe00}, {0x7, 0x0, 0x8}, {}, {0x5}, {0x7, 0x0, 0x2, 0x0}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x49}}]}, &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r2, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="7638300c000000000000e9000000", 0x0, 0xfffffff7, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) kernel console output (not intermixed with test programs): 100.873497][ T5684] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.447215][ T5710] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 101.680462][ T5722] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 101.747370][ T5725] sctp: [Deprecated]: syz-executor.1 (pid 5725) Use of int in max_burst socket option. [ 101.747370][ T5725] Use struct sctp_assoc_value instead [ 101.983939][ T5729] veth0_vlan: left promiscuous mode [ 102.133229][ T5742] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.143682][ T5723] delete_channel: no stack [ 102.592984][ T5759] syz-executor.1[5759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.593167][ T5759] syz-executor.1[5759] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 102.656598][ T5754] syz-executor.3 (5754) used greatest stack depth: 18704 bytes left [ 103.192409][ T5784] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.284365][ T5788] delete_channel: no stack [ 103.430685][ T5784] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 103.479598][ T5780] veth0_vlan: left promiscuous mode [ 103.876034][ T5793] sctp: [Deprecated]: syz-executor.2 (pid 5793) Use of int in max_burst socket option. [ 103.876034][ T5793] Use struct sctp_assoc_value instead [ 104.246108][ T5799] syzkaller0: entered promiscuous mode [ 104.263200][ T5799] syzkaller0: entered allmulticast mode [ 104.315868][ T5809] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.359159][ T5799] syzkaller0: create flow: hash 2053929624 index 1 [ 104.359704][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.382206][ T5803] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.418623][ T5815] netlink: 2300 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.444515][ T12] syzkaller0: tun_net_xmit 48 [ 104.470316][ T5818] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.651036][ T5798] syzkaller0: delete flow: hash 2053929624 index 1 [ 105.093376][ T5841] sctp: [Deprecated]: syz-executor.4 (pid 5841) Use of int in max_burst socket option. [ 105.093376][ T5841] Use struct sctp_assoc_value instead [ 106.953303][ T5871] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.729440][ T5906] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.167275][ T5929] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 108.861545][ T5946] syzkaller0: entered promiscuous mode [ 108.875225][ T5946] syzkaller0: entered allmulticast mode [ 109.060769][ T5959] trusted_key: syz-executor.2 sent an empty control message without MSG_MORE. [ 111.315943][ T6027] xt_TPROXY: Can be used only with -p tcp or -p udp [ 112.151817][ T5999] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.191627][ T6052] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 112.980546][ T6070] syzkaller0: entered promiscuous mode [ 112.989798][ T6070] syzkaller0: entered allmulticast mode [ 113.809739][ T6113] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 114.228699][ T6120] netlink: 616 bytes leftover after parsing attributes in process `syz-executor.4'. [ 115.242484][ T6128] syz-executor.4[6128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.242762][ T6128] syz-executor.4[6128] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 115.633431][ T6149] syz_tun: entered promiscuous mode [ 115.704153][ T6149] syz_tun: left promiscuous mode [ 115.929386][ T6154] syzkaller0: entered promiscuous mode [ 115.960480][ T6154] syzkaller0: entered allmulticast mode [ 117.541984][ T5114] Bluetooth: hci4: command 0x0405 tx timeout [ 118.269941][ T6192] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.307945][ T6193] bridge_slave_1: left allmulticast mode [ 118.348714][ T6193] bridge_slave_1: left promiscuous mode [ 118.367684][ T6193] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.410369][ T6193] bridge1: port 1(bridge_slave_1) entered blocking state [ 118.431117][ T6193] bridge1: port 1(bridge_slave_1) entered disabled state [ 118.461906][ T6193] bridge_slave_1: entered allmulticast mode [ 118.476563][ T6193] bridge_slave_1: entered promiscuous mode [ 118.719974][ T6212] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 118.935771][ T6223] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.185095][ T6224] syzkaller0: entered promiscuous mode [ 119.202262][ T6224] syzkaller0: entered allmulticast mode [ 119.622218][ T5114] Bluetooth: hci4: command 0x0405 tx timeout [ 121.229165][ T6237] syzkaller0: entered promiscuous mode [ 121.235006][ T6237] syzkaller0: entered allmulticast mode [ 121.352438][ T6280] Bluetooth: MGMT ver 1.22 [ 121.358057][ T6280] Bluetooth: hci3: unsupported parameter 64512 [ 121.364574][ T6280] Bluetooth: hci3: invalid len left 4, exp >= 133 [ 121.876638][ T6292] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 122.921439][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.199796][ T6313] Bluetooth: hci3: unsupported parameter 64512 [ 123.212303][ T6313] Bluetooth: hci3: invalid len left 4, exp >= 133 [ 123.355614][ T6320] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 123.383709][ T6318] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 123.423171][ T6318] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.607751][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.183405][ T6358] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 124.240032][ T6358] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.841669][ T6384] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.063271][ T6394] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 125.105031][ T6394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.161407][ T6384] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 125.232327][ T6389] EXT4-fs (sda1): Can't modify superblock whileperforming online resize [ 126.135033][ T6438] Cannot find set identified by id 0 to match [ 126.190674][ T29] audit: type=1804 audit(1717776021.154:4): pid=6437 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3027627984/syzkaller.6V4f7C/90/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 126.511509][ T6451] Bluetooth: MGMT ver 1.22 [ 126.632235][ T6455] veth0: entered promiscuous mode [ 126.667970][ T6455] macvlan2: entered allmulticast mode [ 126.684824][ T6455] veth0: entered allmulticast mode [ 126.721069][ T6455] veth0: left allmulticast mode [ 126.732512][ T6455] veth0: left promiscuous mode [ 127.067263][ T6467] syzkaller0: entered promiscuous mode [ 127.083325][ T6467] syzkaller0: entered allmulticast mode [ 127.134213][ T6471] veth1_macvtap: left promiscuous mode [ 127.161192][ T6471] macsec0: entered allmulticast mode [ 127.204815][ T6475] veth1_macvtap: entered promiscuous mode [ 127.241890][ T6475] veth1_macvtap: entered allmulticast mode [ 127.268424][ T6475] macsec0: left allmulticast mode [ 127.295654][ T6475] veth1_macvtap: left allmulticast mode [ 127.385079][ T6486] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.509516][ T6471] tun0: tun_chr_ioctl cmd 2147767506 [ 127.998660][ T6508] xt_CT: You must specify a L4 protocol and not use inversions on it [ 128.582845][ T5114] Bluetooth: hci0: command 0x0c1a tx timeout [ 128.590006][ T5121] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 129.427023][ T6511] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.448769][ T6520] veth1_macvtap: left promiscuous mode [ 129.466902][ T6520] macsec0: entered allmulticast mode [ 129.499741][ T6521] veth1_macvtap: entered promiscuous mode [ 129.560233][ T6521] veth1_macvtap: entered allmulticast mode [ 129.586117][ T6521] macsec0: left allmulticast mode [ 129.623980][ T6521] veth1_macvtap: left allmulticast mode [ 129.712035][ T6524] tun0: tun_chr_ioctl cmd 2147767506 [ 130.038099][ T6547] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.358706][ T6557] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.374006][ T6558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.584333][ T6565] veth0: entered promiscuous mode [ 130.602381][ T6565] macvlan2: entered allmulticast mode [ 130.624894][ T6565] veth0: entered allmulticast mode [ 130.676823][ T6565] veth0: left allmulticast mode [ 130.707046][ T6565] veth0: left promiscuous mode [ 131.066060][ T6585] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.475144][ T6600] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 131.596977][ T6609] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.773598][ T6615] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.120069][ T6629] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.304740][ T6635] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 132.452645][ T6641] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 132.479746][ T6641] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 132.765335][ T6651] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de [ 132.818382][ T6653] veth0: entered promiscuous mode [ 132.837637][ T6653] macvlan3: entered allmulticast mode [ 132.856305][ T6653] veth0: entered allmulticast mode [ 132.873444][ T6653] veth0: left allmulticast mode [ 132.891967][ T6653] veth0: left promiscuous mode [ 133.186394][ T6671] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 133.219350][ T6659] syzkaller0: entered promiscuous mode [ 133.247488][ T6659] syzkaller0: entered allmulticast mode [ 133.306995][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.322275][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.366545][ T6675] veth1_macvtap: left promiscuous mode [ 133.378470][ T6675] macsec0: entered allmulticast mode [ 133.423761][ T6676] veth1_macvtap: entered promiscuous mode [ 133.454344][ T29] audit: type=1800 audit(1717776028.424:5): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 133.475601][ T6676] veth1_macvtap: entered allmulticast mode [ 133.502102][ T6676] macsec0: left allmulticast mode [ 133.526461][ T29] audit: type=1804 audit(1717776028.434:6): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir41762394/syzkaller.411agh/107/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 133.528272][ T6676] veth1_macvtap: left allmulticast mode [ 133.551996][ T29] audit: type=1804 audit(1717776028.434:7): pid=6678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir41762394/syzkaller.411agh/107/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 133.617597][ T29] audit: type=1804 audit(1717776028.584:8): pid=6681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir41762394/syzkaller.411agh/107/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 134.055167][ T6693] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 135.297339][ T6676] tun0: tun_chr_ioctl cmd 2147767506 [ 135.401847][ T6699] __nla_validate_parse: 3 callbacks suppressed [ 135.401871][ T6699] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.696349][ T6711] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 135.705127][ T29] audit: type=1800 audit(1717776030.664:9): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1950 res=0 errno=0 [ 135.743404][ T6711] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 135.772987][ T6716] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.786671][ T29] audit: type=1804 audit(1717776030.704:10): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir41762394/syzkaller.411agh/111/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 135.796975][ T6716] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 135.830454][ T6716] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 135.853239][ T6716] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 135.872771][ T29] audit: type=1804 audit(1717776030.724:11): pid=6710 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir41762394/syzkaller.411agh/111/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 135.875533][ T6717] bridge3: port 1(gretap1) entered blocking state [ 135.911155][ T29] audit: type=1804 audit(1717776030.874:12): pid=6720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir41762394/syzkaller.411agh/111/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 135.932011][ T6716] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.945719][ T6717] bridge3: port 1(gretap1) entered disabled state [ 136.009604][ T6717] gretap1: entered allmulticast mode [ 136.017397][ T6717] gretap1: entered promiscuous mode [ 136.039107][ T6711] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 136.093166][ T6725] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.110918][ T6711] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 136.180416][ T6729] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 136.219907][ T6729] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.245008][ T4544] udevd[4544]: worker [5642] terminated by signal 33 (Unknown signal 33) [ 136.471299][ T6731] syzkaller0: entered promiscuous mode [ 136.487836][ T6731] syzkaller0: entered allmulticast mode [ 136.656394][ T6744] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.697097][ T6747] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 136.906589][ T6757] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.926868][ T6757] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.438758][ T29] audit: type=1804 audit(1717776032.404:13): pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1343023213/syzkaller.SqIHbn/159/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 137.473637][ T29] audit: type=1804 audit(1717776032.404:14): pid=6774 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1343023213/syzkaller.SqIHbn/159/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 138.481257][ T6760] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.491120][ T6760] validate_nla: 5 callbacks suppressed [ 138.491139][ T6760] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 138.513987][ T6760] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.523280][ T6760] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.532084][ T6760] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.541097][ T6760] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.557379][ T6760] vxlan1: entered promiscuous mode [ 138.769407][ T6787] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.816757][ T6787] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 138.829180][ T6787] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 138.844448][ T6787] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 138.947068][ T6786] vlan2: entered promiscuous mode [ 138.959729][ T6786] batadv0: entered promiscuous mode [ 138.965617][ T6786] vlan2: entered allmulticast mode [ 138.971133][ T6786] batadv0: entered allmulticast mode [ 138.990365][ T6786] batadv0: left allmulticast mode [ 138.997110][ T6786] batadv0: left promiscuous mode [ 139.550408][ T6813] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 139.579946][ T6813] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 139.600769][ T6813] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 139.874992][ T6822] vlan0: entered promiscuous mode [ 139.898451][ T6822] batadv0: entered promiscuous mode [ 139.912023][ T6822] vlan0: entered allmulticast mode [ 139.923029][ T6822] batadv0: entered allmulticast mode [ 139.954890][ T6822] batadv0: left allmulticast mode [ 139.968095][ T6822] batadv0: left promiscuous mode [ 140.390658][ T29] audit: type=1804 audit(1717776035.314:15): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1343023213/syzkaller.SqIHbn/168/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 140.484281][ T29] audit: type=1804 audit(1717776035.324:16): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1343023213/syzkaller.SqIHbn/168/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 140.538095][ T6848] __nla_validate_parse: 8 callbacks suppressed [ 140.538117][ T6848] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.830607][ T29] audit: type=1800 audit(1717776035.794:17): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1948 res=0 errno=0 [ 140.903053][ T29] audit: type=1804 audit(1717776035.804:18): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3027627984/syzkaller.6V4f7C/127/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 141.039369][ T29] audit: type=1804 audit(1717776035.814:19): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3027627984/syzkaller.6V4f7C/127/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 141.130317][ T29] audit: type=1804 audit(1717776035.914:20): pid=6859 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3027627984/syzkaller.6V4f7C/127/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 141.684157][ T29] audit: type=1800 audit(1717776036.654:21): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 141.772863][ T29] audit: type=1804 audit(1717776036.684:22): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1343023213/syzkaller.SqIHbn/174/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 141.899900][ T29] audit: type=1804 audit(1717776036.684:23): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1343023213/syzkaller.SqIHbn/174/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 141.976444][ T29] audit: type=1804 audit(1717776036.824:24): pid=6890 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1343023213/syzkaller.SqIHbn/174/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 143.768354][ T6977] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 144.424385][ T6998] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.450869][ T6997] tap0: tun_chr_ioctl cmd 1074025677 [ 144.462125][ T6997] tap0: linktype set to 823 [ 144.532465][ T7000] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 144.540962][ T7000] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 144.602383][ T7000] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.330011][ T7031] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.576985][ T7044] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.682073][ T29] kauditd_printk_skb: 4 callbacks suppressed [ 145.682094][ T29] audit: type=1800 audit(1717776040.654:29): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 145.738181][ T29] audit: type=1804 audit(1717776040.654:30): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1343023213/syzkaller.SqIHbn/190/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 145.766765][ T29] audit: type=1804 audit(1717776040.654:31): pid=7049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1343023213/syzkaller.SqIHbn/190/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 145.802980][ T29] audit: type=1804 audit(1717776040.774:32): pid=7056 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1343023213/syzkaller.SqIHbn/190/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 146.029171][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.458885][ T7084] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.517343][ T7085] tap0: tun_chr_ioctl cmd 1074025677 [ 146.552139][ T7085] tap0: linktype set to 823 [ 146.599982][ T7089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.016209][ T7112] pim6reg1: entered allmulticast mode [ 147.073273][ T7112] pim6reg1: entered promiscuous mode [ 147.287268][ T7126] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.542518][ T7137] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.570483][ T7137] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.577056][ T7142] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.102548][ T7163] pim6reg1: entered allmulticast mode [ 148.164272][ T7163] pim6reg1: entered promiscuous mode [ 149.043965][ T7217] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.094766][ T7217] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.104195][ T7217] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.113463][ T7217] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.123190][ T7217] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 149.138297][ T7217] vxlan0: entered promiscuous mode [ 149.652033][ T7233] syzkaller1: entered promiscuous mode [ 149.677122][ T7233] syzkaller1: entered allmulticast mode [ 150.300890][ T7258] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 150.469099][ T7263] syzkaller1: entered promiscuous mode [ 150.478972][ T7263] syzkaller1: entered allmulticast mode [ 151.189546][ T7308] __nla_validate_parse: 1 callbacks suppressed [ 151.189569][ T7308] netlink: 204152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 151.193994][ T7305] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 151.243692][ T7309] syzkaller1: entered promiscuous mode [ 151.259738][ T7309] syzkaller1: entered allmulticast mode [ 151.436183][ T29] audit: type=1804 audit(1717776046.404:33): pid=7315 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3027627984/syzkaller.6V4f7C/159/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 151.483952][ T5149] IPVS: starting estimator thread 0... [ 151.602744][ T7320] IPVS: using max 17 ests per chain, 40800 per kthread [ 152.214598][ T29] audit: type=1804 audit(1717776047.184:34): pid=7358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3027627984/syzkaller.6V4f7C/163/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 152.449852][ T7375] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 152.842972][ T29] audit: type=1804 audit(1717776047.814:35): pid=7395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir145414955/syzkaller.KNyNnU/195/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 152.906477][ T5149] IPVS: starting estimator thread 0... [ 153.012013][ T7397] IPVS: using max 16 ests per chain, 38400 per kthread [ 153.211734][ T29] audit: type=1804 audit(1717776048.174:36): pid=7406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir145414955/syzkaller.KNyNnU/196/memory.events" dev="sda1" ino=1946 res=1 errno=0 [ 153.610185][ T5114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 153.621302][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 153.634352][ T5114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 153.654017][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 153.668877][ T5114] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 153.676820][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 153.759156][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 153.801530][ T51] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.985409][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.012924][ T51] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.245207][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.283468][ T51] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.403265][ T51] bond0: (slave netdevsim0): Releasing backup interface [ 154.449069][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 154.468842][ T51] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.706414][ T7417] chnl_net:caif_netlink_parms(): no params data found [ 154.802826][ T7469] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 155.107234][ T7417] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.130780][ T7417] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.151405][ T7417] bridge_slave_0: entered allmulticast mode [ 155.170154][ T7417] bridge_slave_0: entered promiscuous mode [ 155.187509][ T7417] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.201435][ T7417] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.211554][ T7417] bridge_slave_1: entered allmulticast mode [ 155.230695][ T7417] bridge_slave_1: entered promiscuous mode [ 155.412633][ T51] bridge_slave_1: left allmulticast mode [ 155.422518][ T51] bridge_slave_1: left promiscuous mode [ 155.453541][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.496512][ T51] bridge_slave_0: left allmulticast mode [ 155.514725][ T51] bridge_slave_0: left promiscuous mode [ 155.529779][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.704050][ T5114] Bluetooth: hci4: command tx timeout [ 156.080607][ T7525] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 156.373749][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.397536][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.411046][ T51] bond0 (unregistering): Released all slaves [ 156.464317][ T7509] tap0: tun_chr_ioctl cmd 1074025673 [ 156.585096][ T7417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 156.636960][ T7417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 156.830397][ T7417] team0: Port device team_slave_0 added [ 156.899785][ T7417] team0: Port device team_slave_1 added [ 156.907337][ T7549] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 157.176538][ T29] audit: type=1804 audit(1717776052.144:37): pid=7563 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir145414955/syzkaller.KNyNnU/213/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 157.264018][ T7565] bridge1: entered promiscuous mode [ 157.284745][ T7417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.300123][ T7417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.361923][ T7417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.394421][ T7417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.422298][ T7417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.474405][ T7417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 157.566262][ T51] hsr_slave_0: left promiscuous mode [ 157.580587][ T51] hsr_slave_1: left promiscuous mode [ 157.612185][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.628155][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.653566][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.674285][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.747157][ T51] veth1_macvtap: left promiscuous mode [ 157.756655][ T51] veth0_macvtap: left promiscuous mode [ 157.764318][ T51] veth1_vlan: left promiscuous mode [ 157.770140][ T51] veth0_vlan: left promiscuous mode [ 157.783033][ T5114] Bluetooth: hci4: command tx timeout [ 158.903583][ T51] team0 (unregistering): Port device team_slave_1 removed [ 158.967031][ T51] team0 (unregistering): Port device team_slave_0 removed [ 159.598590][ T7417] hsr_slave_0: entered promiscuous mode [ 159.636744][ T7417] hsr_slave_1: entered promiscuous mode [ 159.673719][ T7417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 159.681346][ T7417] Cannot create hsr debugfs directory [ 159.862012][ T5114] Bluetooth: hci4: command tx timeout [ 159.878661][ T7619] bridge1: entered promiscuous mode [ 160.116221][ T7631] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.885589][ T7417] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 160.916604][ T7417] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 160.944653][ T7417] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 160.971197][ T7417] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 161.137843][ T7687] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.308233][ T7417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.378934][ T7417] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.485322][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.492558][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.513920][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.521163][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.570367][ T7706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.655499][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.943386][ T5114] Bluetooth: hci4: command tx timeout [ 161.957973][ T7726] tipc: Failed to obtain node identity [ 161.978675][ T7726] tipc: Enabling of bearer rejected, failed to enable media [ 162.136366][ T7417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.277335][ T7417] veth0_vlan: entered promiscuous mode [ 162.314884][ T7417] veth1_vlan: entered promiscuous mode [ 162.363787][ T7741] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.383485][ T7417] veth0_macvtap: entered promiscuous mode [ 162.400450][ T7417] veth1_macvtap: entered promiscuous mode [ 162.456783][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.475490][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.488664][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.507585][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.528728][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.553112][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.576364][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.604639][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.633301][ T7417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.692329][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.721769][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.731434][ T7754] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 162.740410][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.761051][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.774032][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.794086][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.814050][ T7417] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.829292][ T7417] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.845171][ T7417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 162.873530][ T7755] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.969788][ T7417] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 162.999238][ T7417] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.025646][ T7417] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.046741][ T7417] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.066772][ T7766] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.331265][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.361207][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.481514][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.513179][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.582490][ T7787] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.955924][ T7806] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.258306][ T7828] tipc: Started in network mode [ 164.285245][ T7828] tipc: Node identity , cluster identity 4711 [ 164.296235][ T7828] tipc: Failed to obtain node identity [ 164.313481][ T7828] tipc: Enabling of bearer rejected, failed to enable media [ 164.360729][ T7822] bond_slave_0: entered promiscuous mode [ 164.366813][ T7822] bond_slave_1: entered promiscuous mode [ 164.390319][ T7822] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 164.423676][ T7822] bond_slave_0: left promiscuous mode [ 164.429260][ T7822] bond_slave_1: left promiscuous mode [ 165.052036][ T7843] nicvf0: tun_chr_ioctl cmd 1074025677 [ 165.099836][ T7843] nicvf0: linktype set to 821 [ 165.591900][ T7873] tipc: Started in network mode [ 165.601408][ T7873] tipc: Node identity , cluster identity 4711 [ 165.623096][ T7873] tipc: Failed to obtain node identity [ 165.633010][ T7873] tipc: Enabling of bearer rejected, failed to enable media [ 165.679197][ T7879] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 165.686237][ T7879] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.201404][ T7964] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.276164][ T7961] tipc: Started in network mode [ 167.285222][ T7961] tipc: Node identity , cluster identity 4711 [ 167.291360][ T7961] tipc: Failed to obtain node identity [ 167.297288][ T7961] tipc: Enabling of bearer rejected, failed to enable media [ 167.996344][ T8000] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.816105][ T8043] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.186464][ T8060] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 169.208681][ T8060] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.647611][ T8087] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.678308][ T8089] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.939005][ T8096] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.044551][ T8102] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.372594][ T8117] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.592099][ T8128] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 170.838496][ T8138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.797219][ T8182] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 171.943078][ T8185] vlan0: entered promiscuous mode [ 171.948604][ T8185] macvtap0: entered promiscuous mode [ 171.963670][ T8185] vlan0: entered allmulticast mode [ 171.968861][ T8185] macvtap0: entered allmulticast mode [ 172.002283][ T8185] veth0_macvtap: entered allmulticast mode [ 172.025773][ T8185] macvtap0: left allmulticast mode [ 172.039656][ T8185] veth0_macvtap: left allmulticast mode [ 172.045863][ T8185] macvtap0: left promiscuous mode [ 172.112571][ T8191] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 172.159186][ T8191] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.186350][ T8191] bond0: (slave team0): Enslaving as an active interface with an up link [ 172.579787][ T8211] IPVS: fo: TCP [::]:0 - no destination available [ 173.123516][ T8238] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 174.103406][ T8278] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.639832][ T8339] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 176.363926][ T8364] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 178.387040][ T8461] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 179.765055][ T8497] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 180.899365][ T8539] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 181.509928][ T8565] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 181.812815][ T8590] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 182.139257][ T8609] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.200835][ T8609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.684227][ T8640] sctp: [Deprecated]: syz-executor.0 (pid 8640) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.684227][ T8640] Use struct sctp_sack_info instead [ 182.756038][ T8644] netlink: 332 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.775208][ T29] audit: type=1804 audit(1717776077.744:38): pid=8638 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4035418848/syzkaller.bio0KP/65/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 182.782296][ T8644] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 182.843647][ T29] audit: type=1804 audit(1717776077.794:39): pid=8631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4035418848/syzkaller.bio0KP/65/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 182.879199][ T8644] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.921844][ T8644] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.508229][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.539492][ T8682] sctp: [Deprecated]: syz-executor.1 (pid 8682) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.539492][ T8682] Use struct sctp_sack_info instead [ 184.227725][ T8722] ip6gre1: entered allmulticast mode [ 185.088630][ T8754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.132909][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.249945][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 185.259415][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 185.270392][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 185.297573][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 185.314370][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 185.325180][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 185.461395][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.479256][ T8772] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.487332][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.518096][ T8766] ip6gre2: entered allmulticast mode [ 185.665553][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.707275][ T8776] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 185.810117][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.866775][ T8776] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 185.994860][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.546558][ T12] bridge_slave_0: left allmulticast mode [ 186.556025][ T12] bridge_slave_0: left promiscuous mode [ 186.562124][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.584020][ T12] bridge_slave_1: left allmulticast mode [ 186.589736][ T12] bridge_slave_1: left promiscuous mode [ 186.596831][ T12] bridge1: port 1(bridge_slave_1) entered disabled state [ 187.382194][ T5121] Bluetooth: hci2: command tx timeout [ 187.497160][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.512331][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.526319][ T12] bond0 (unregistering): Released all slaves [ 187.565115][ T8822] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 187.598549][ T8826] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 187.739203][ T8844] __nla_validate_parse: 4 callbacks suppressed [ 187.739225][ T8844] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.904152][ T8762] chnl_net:caif_netlink_parms(): no params data found [ 188.200990][ T12] hsr_slave_0: left promiscuous mode [ 188.221242][ T12] hsr_slave_1: left promiscuous mode [ 188.297015][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.314924][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.352802][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.360297][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.413834][ T8876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 188.445478][ T12] veth1_macvtap: left promiscuous mode [ 188.451538][ T12] veth0_macvtap: left promiscuous mode [ 188.467388][ T12] veth1_vlan: left promiscuous mode [ 188.802343][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.220399][ T12] team0 (unregistering): Port device team_slave_1 removed [ 189.266722][ T12] team0 (unregistering): Port device team_slave_0 removed [ 189.466330][ T5121] Bluetooth: hci2: command tx timeout [ 189.948174][ T8899] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.983191][ T8899] tipc: Started in network mode [ 189.988168][ T8899] tipc: Node identity cgroup.pn, cluster identity 8 [ 190.096289][ T8762] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.124665][ T8762] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.140266][ T8762] bridge_slave_0: entered allmulticast mode [ 190.156482][ T8762] bridge_slave_0: entered promiscuous mode [ 190.185895][ T8762] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.214171][ T8762] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.235764][ T8762] bridge_slave_1: entered allmulticast mode [ 190.252381][ T8762] bridge_slave_1: entered promiscuous mode [ 190.441237][ T8762] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.467672][ T8926] xt_bpf: check failed: parse error [ 190.476071][ T8762] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.600280][ T8762] team0: Port device team_slave_0 added [ 190.625572][ T8762] team0: Port device team_slave_1 added [ 190.639299][ T12] IPVS: stop unused estimator thread 0... [ 190.790807][ T8934] syzkaller0: entered promiscuous mode [ 190.796637][ T8934] syzkaller0: entered allmulticast mode [ 190.870541][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.881420][ T8938] tipc: Cannot configure node identity twice [ 190.889302][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.896889][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.936482][ T8762] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.554456][ T5121] Bluetooth: hci2: command tx timeout [ 192.670057][ T8762] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 192.678127][ T8762] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.704729][ T8762] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 192.857529][ T8762] hsr_slave_0: entered promiscuous mode [ 192.901394][ T8762] hsr_slave_1: entered promiscuous mode [ 192.914304][ T8762] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 192.936443][ T8762] Cannot create hsr debugfs directory [ 192.994712][ T8963] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.007235][ T29] audit: type=1804 audit(1717776087.984:40): pid=8963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir145414955/syzkaller.KNyNnU/333/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 193.408533][ T29] audit: type=1804 audit(1717776088.374:41): pid=8979 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4035418848/syzkaller.bio0KP/98/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 193.415903][ T8979] syz-executor.3[8979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.464477][ T8979] syz-executor.3[8979] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.622121][ T5121] Bluetooth: hci2: command tx timeout [ 193.797511][ T8994] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.826531][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.842103][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.886047][ T8996] tipc: Started in network mode [ 193.890984][ T8996] tipc: Node identity 62, cluster identity 7 [ 193.913458][ T8996] tipc: Node number set to 98 [ 193.919647][ T8996] tipc: Cannot configure node identity twice [ 194.033105][ T9002] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.046633][ T9002] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 194.055136][ T9002] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 194.067844][ T8762] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.088896][ T8762] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.145860][ T8762] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.188126][ T8762] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.211716][ T29] audit: type=1804 audit(1717776089.174:42): pid=9008 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2183872985/syzkaller.GDCbXA/334/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 194.253922][ T9008] syz-executor.1[9008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.254091][ T9008] syz-executor.1[9008] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.545245][ T8762] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.600689][ T9021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.661231][ T9025] tipc: Started in network mode [ 194.675069][ T9025] tipc: Node identity 62, cluster identity 7 [ 194.681210][ T9025] tipc: Node number set to 98 [ 194.687788][ T9025] tipc: Cannot configure node identity twice [ 194.715756][ T8762] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.765700][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.765719][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.772912][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.806662][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.813948][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.888853][ T9030] bridge0: port 3(geneve1) entered blocking state [ 194.941967][ T9030] bridge0: port 3(geneve1) entered disabled state [ 194.948711][ T9030] geneve1: entered allmulticast mode [ 194.970263][ T9030] geneve1: entered promiscuous mode [ 194.985182][ T9030] bridge0: port 3(geneve1) entered blocking state [ 194.993124][ T9030] bridge0: port 3(geneve1) entered forwarding state [ 195.019025][ T9035] geneve2: entered allmulticast mode [ 195.053396][ T9037] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.110243][ T29] audit: type=1804 audit(1717776090.074:43): pid=9042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1343023213/syzkaller.SqIHbn/375/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 195.209091][ T9045] smc: net device ip6tnl0 applied user defined pnetid SYZ2 [ 195.403448][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 195.522329][ T9058] team_slave_1: invalid flags given to default FDB implementation [ 195.758588][ T8762] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 195.849261][ T29] audit: type=1804 audit(1717776090.814:44): pid=9074 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1343023213/syzkaller.SqIHbn/379/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 196.052782][ T9085] team_slave_1: invalid flags given to default FDB implementation [ 196.436736][ T8762] veth0_vlan: entered promiscuous mode [ 196.475455][ T8762] veth1_vlan: entered promiscuous mode [ 196.554771][ T8762] veth0_macvtap: entered promiscuous mode [ 196.577227][ T8762] veth1_macvtap: entered promiscuous mode [ 196.627887][ T8762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.640668][ T8762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.675809][ T8762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.698506][ T8762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.715284][ T8762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.727284][ T8762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.750626][ T8762] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.788155][ T8762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.810051][ T8762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.822691][ T8762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.833665][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 196.833686][ T5117] Bluetooth: hci3: command 0x0406 tx timeout [ 196.839696][ T53] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.854350][ T8762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.866989][ T8762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.893323][ T8762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.921814][ T8762] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.934574][ T8762] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.955813][ T8762] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.045635][ T8762] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.076536][ T8762] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.088287][ T8762] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.102546][ T8762] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.201107][ T9121] team0: Port device team_slave_0 removed [ 197.486780][ T1097] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.519897][ T1097] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.570231][ T9143] bridge0: port 3(geneve1) entered blocking state [ 197.583015][ T9143] bridge0: port 3(geneve1) entered disabled state [ 197.590089][ T9143] geneve1: entered allmulticast mode [ 197.611062][ T9143] geneve1: entered promiscuous mode [ 197.636407][ T9143] bridge0: port 3(geneve1) entered blocking state [ 197.643093][ T9143] bridge0: port 3(geneve1) entered forwarding state [ 197.700839][ T9143] geneve2: entered allmulticast mode [ 197.715783][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.750291][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.776935][ T9152] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 197.841943][ T9155] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 197.850100][ T9155] netlink: 636 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.927605][ T9162] x_tables: unsorted entry at hook 2 [ 198.555228][ T9198] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 198.592234][ T9200] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.870819][ T9220] bridge0: port 3(geneve1) entered blocking state [ 198.879222][ T9220] bridge0: port 3(geneve1) entered disabled state [ 198.891448][ T9220] geneve1: entered allmulticast mode [ 198.914475][ T9220] geneve1: entered promiscuous mode [ 198.936715][ T9220] bridge0: port 3(geneve1) entered blocking state [ 198.943397][ T9220] bridge0: port 3(geneve1) entered forwarding state [ 198.958475][ T9225] IPv6: addrconf: prefix option has invalid lifetime [ 199.044379][ T9220] geneve2: entered allmulticast mode [ 199.150074][ T9232] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.179398][ T9236] x_tables: unsorted entry at hook 2 [ 199.191262][ T9232] IPVS: Unknown mcast interface: [ 199.404117][ T9242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.781624][ T9264] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 199.896125][ T9265] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 199.948931][ T9272] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 199.969521][ T9272] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 199.986163][ T9274] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 200.031628][ T9274] netlink: 24859 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.084819][ T9264] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 200.122938][ T9264] bond2 (unregistering): Released all slaves [ 200.365171][ T9292] IPv6: addrconf: prefix option has invalid lifetime [ 200.400546][ T9283] team0: Port device team_slave_0 removed [ 200.538366][ T9302] x_tables: unsorted entry at hook 2 [ 200.652213][ T9308] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 200.693859][ T9308] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 200.718511][ T9307] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 200.731964][ T9307] netlink: 24859 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.714885][ T9370] IPv6: addrconf: prefix option has invalid lifetime [ 201.848347][ T9378] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.193849][ T9393] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.293117][ T9383] IPVS: Unknown mcast interface: [ 202.578557][ T9407] sctp: [Deprecated]: syz-executor.0 (pid 9407) Use of struct sctp_assoc_value in delayed_ack socket option. [ 202.578557][ T9407] Use struct sctp_sack_info instead [ 202.949434][ T29] audit: type=1804 audit(1717776097.914:45): pid=9425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir145414955/syzkaller.KNyNnU/375/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 203.174419][ T9439] sctp: [Deprecated]: syz-executor.2 (pid 9439) Use of struct sctp_assoc_value in delayed_ack socket option. [ 203.174419][ T9439] Use struct sctp_sack_info instead [ 203.684115][ T29] audit: type=1804 audit(1717776098.654:46): pid=9464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2183872985/syzkaller.GDCbXA/381/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 204.361422][ T9499] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 204.424506][ T9494] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.748642][ T9563] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 205.842310][ T9570] bond1: (slave bridge2): Enslaving as a backup interface with an up link [ 206.014608][ T9563] bridge0: port 4(bond1) entered blocking state [ 206.041204][ T9563] bridge0: port 4(bond1) entered disabled state [ 206.054455][ T9563] bond1: entered allmulticast mode [ 206.072032][ T9563] bridge2: entered allmulticast mode [ 206.081494][ T9563] bond1: entered promiscuous mode [ 206.103825][ T9563] bridge2: entered promiscuous mode [ 206.206441][ T9586] pimreg: entered allmulticast mode [ 206.526197][ T9600] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 206.848517][ T9617] pimreg: entered allmulticast mode [ 207.529333][ T9654] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.122021][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.134390][ T9679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.333261][ T9688] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.344284][ T9688] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 208.610282][ T9690] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 208.932439][ T9703] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.035383][ T9703] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.155445][ T9703] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 209.401083][ T9707] pimreg24: entered allmulticast mode [ 210.590650][ T9738] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.647888][ T9738] pim6reg: entered allmulticast mode [ 210.671511][ T9738] vxcan1: entered allmulticast mode [ 210.687918][ T9738] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.831007][ T9736] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 211.253166][ T9761] netlink: 'syz-executor.4': attribute type 22 has an invalid length. [ 211.663993][ T9784] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 212.288858][ T9809] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.325052][ T9809] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.364469][ T9809] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 213.119675][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.130195][ T9850] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.143494][ T9850] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 213.835086][ T9876] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.289662][ T9896] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.710748][ T9903] syzkaller0: entered promiscuous mode [ 220.739672][ T9903] syzkaller0: entered allmulticast mode [ 221.299376][ T9940] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 221.310604][ T9940] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 221.319354][ T9940] __nla_validate_parse: 1 callbacks suppressed [ 221.319371][ T9940] netlink: 9196 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.335572][ T9940] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 221.344000][ T9940] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.998760][ T9925] macvlan2: entered promiscuous mode [ 223.006082][ T9925] vlan1: entered promiscuous mode [ 223.019943][ T9925] team0: Port device macvlan2 added [ 223.745689][ T9977] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.086600][ T9995] tipc: Started in network mode [ 224.105657][ T9995] tipc: Node identity fec0ffff00000000000000000000001, cluster identity 4711 [ 224.139863][ T9995] tipc: Enabling of bearer rejected, failed to enable media [ 224.634958][T10015] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.815218][T10024] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 224.919084][T10028] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.972539][T10034] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.079531][T10035] delete_channel: no stack [ 225.616931][T10062] delete_channel: no stack [ 225.618158][T10061] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 225.636355][T10061] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.857881][T10071] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 225.902015][T10071] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.141988][T10085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.949376][T10102] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 227.117134][T10102] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.234378][T10121] syzkaller0: entered promiscuous mode [ 228.256006][T10121] syzkaller0: entered allmulticast mode [ 228.318277][T10135] tipc: Enabling of bearer rejected, failed to enable media [ 228.561946][T10140] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.588661][T10143] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.120948][ T29] audit: type=1804 audit(1717776124.084:47): pid=10160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir145414955/syzkaller.KNyNnU/433/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 229.373206][T10163] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.537139][T10146] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.557225][T10146] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.584567][T10163] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 230.748618][T10167] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.769303][T10173] tipc: Enabling of bearer rejected, failed to enable media [ 231.795681][T10209] syzkaller0: entered promiscuous mode [ 231.811612][T10209] syzkaller0: entered allmulticast mode [ 231.830333][T10221] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 232.068927][T10231] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.187609][T10269] sctp: [Deprecated]: syz-executor.1 (pid 10269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 234.187609][T10269] Use struct sctp_sack_info instead [ 234.257564][T10273] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.342896][T10276] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.654661][T10295] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.654688][T10296] IPv6: NLM_F_CREATE should be specified when creating new route [ 234.682962][T10295] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 236.128733][T10374] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 236.149407][T10373] sctp: [Deprecated]: syz-executor.3 (pid 10373) Use of struct sctp_assoc_value in delayed_ack socket option. [ 236.149407][T10373] Use struct sctp_sack_info instead [ 236.167523][T10374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 236.426324][T10389] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.448076][T10389] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.713238][T10404] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 236.721416][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.866656][T10413] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.304047][T10435] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.479523][T10442] sctp: [Deprecated]: syz-executor.4 (pid 10442) Use of struct sctp_assoc_value in delayed_ack socket option. [ 237.479523][T10442] Use struct sctp_sack_info instead [ 237.724470][T10457] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 237.756869][T10457] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 237.801522][T10466] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 237.880904][T10461] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.973396][T10463] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 238.002074][T10463] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.650898][T10501] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 238.695091][T10501] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 239.199551][T10519] geneve3: entered promiscuous mode [ 239.210606][T10519] geneve3: entered allmulticast mode [ 239.508817][T10535] syz-executor.1 (10535) used greatest stack depth: 18192 bytes left [ 239.675602][T10539] Bluetooth: hci3: unsupported parameter 8192 [ 239.689467][T10539] Bluetooth: hci3: unsupported parameter 8192 [ 239.766448][T10547] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 240.165706][T10566] __nla_validate_parse: 1 callbacks suppressed [ 240.165728][T10566] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.401395][T10583] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.502544][T10585] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.552225][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.553119][T10585] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.574690][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.895773][T10612] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 241.327257][T10630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 241.724872][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.741777][T10656] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.771776][T10656] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.898794][ T29] audit: type=1800 audit(1717776136.864:48): pid=10662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1943 res=0 errno=0 [ 242.364708][T10685] tipc: Failed to remove unknown binding: 66,1,1/98:1730626344/1730626346 [ 242.402070][T10685] tipc: Failed to remove unknown binding: 66,1,1/98:1730626344/1730626346 [ 242.635116][T10700] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 243.297693][T10737] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 244.408668][ T29] audit: type=1804 audit(1717776139.374:49): pid=10791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir146715583/syzkaller.MA2wWS/127/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 244.493702][T10795] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 244.543982][T10797] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 245.329420][T10826] __nla_validate_parse: 5 callbacks suppressed [ 245.329451][T10826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.663341][T10833] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.828659][T10842] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.873590][T10842] netem: invalid attributes len -24 [ 245.903318][T10842] netem: change failed [ 246.200918][T10862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 246.365429][T10869] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.429635][T10873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.564417][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.602679][T10884] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.638293][T10884] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 246.678104][T10884] 0ªX¹¦Dö»: entered allmulticast mode [ 246.715378][T10888] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.253515][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 247.299468][T10923] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 247.352129][T10929] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 247.454275][T10923] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 247.496274][T10923] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 247.524089][T10923] bond2: (slave vcan1): making interface the new active one [ 247.541344][T10923] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 247.562558][ T5163] IPVS: starting estimator thread 0... [ 247.662387][T10939] IPVS: using max 17 ests per chain, 40800 per kthread [ 247.985930][T10957] vlan0: entered promiscuous mode [ 247.997017][T10957] vlan0: entered allmulticast mode [ 248.285840][T10975] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 248.367836][T10979] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 248.412470][T10979] 0ªX¹¦Dö»: entered allmulticast mode [ 248.467956][T10981] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 248.507713][T10981] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 248.567688][T10981] bond1: (slave vcan1): making interface the new active one [ 248.583576][T10981] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 248.644390][T10993] netem: incorrect ge model size [ 248.664085][T10993] netem: change failed [ 248.966676][T11013] netem: invalid attributes len -24 [ 248.980359][T11013] netem: change failed [ 249.078600][T11017] 1ªX¹¦Dö»: renamed from 00ªX¹¦Dö» (while UP) [ 249.254797][T11024] netem: incorrect ge model size [ 249.290633][T11024] netem: change failed [ 249.749827][T11047] macvtap1: entered promiscuous mode [ 249.785076][T11047] vlan0: entered promiscuous mode [ 250.124756][T11063] team0: Port device team_slave_0 removed [ 250.153094][T11063] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 250.395464][T11070] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 250.435774][T11070] __nla_validate_parse: 8 callbacks suppressed [ 250.435797][T11070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.256940][T11096] team0: Port device team_slave_0 removed [ 252.272826][T11096] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 252.594849][T11125] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 252.619517][T11125] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.194833][T11160] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 253.204818][T11160] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.693062][T11185] vlan0: entered promiscuous mode [ 254.833885][T11232] macsec1: entered promiscuous mode [ 254.852917][T11232] vlan0: entered promiscuous mode [ 254.915046][T11232] vlan0: left promiscuous mode [ 255.307062][T11253] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 255.591016][T11249] syzkaller0: entered promiscuous mode [ 255.610298][T11249] syzkaller0: entered allmulticast mode [ 256.146448][T11286] xt_time: unknown flags 0x4 [ 256.186024][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 258.506024][T11301] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 259.376284][T11336] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 259.690328][T11363] syz-executor.3[11363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.692096][T11363] syz-executor.3[11363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.737369][T11363] syz-executor.3[11363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 259.785666][T11363] syz-executor.3[11363] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 260.433932][ T5121] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 260.462260][ T5121] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 260.474980][ T5121] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 260.497703][ T5121] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 260.514259][ T5121] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 260.522337][ T5121] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 260.654744][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.672890][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.704107][T11399] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.718250][ T29] audit: type=1800 audit(1717776155.694:50): pid=11398 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="@" dev="sda1" ino=1940 res=0 errno=0 [ 260.946082][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 260.968696][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.136125][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.172909][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.322758][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 261.340584][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 261.362581][ T29] audit: type=1800 audit(1717776156.334:51): pid=11429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="@" dev="sda1" ino=1962 res=0 errno=0 [ 261.498242][T11427] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 261.929259][T11386] chnl_net:caif_netlink_parms(): no params data found [ 262.116606][T11459] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 262.206969][ T12] bridge_slave_1: left allmulticast mode [ 262.236257][ T12] bridge_slave_1: left promiscuous mode [ 262.243373][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.254977][ T12] bridge_slave_0: left allmulticast mode [ 262.266486][ T12] bridge_slave_0: left promiscuous mode [ 262.288938][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.593055][ T5114] Bluetooth: hci1: command tx timeout [ 263.232594][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.414960][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 263.427363][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 263.457092][ T12] bond0 (unregistering): (slave team0): Releasing backup interface [ 263.471436][ T12] bond0 (unregistering): Released all slaves [ 263.519857][T11478] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.691793][T11499] netlink: 57 bytes leftover after parsing attributes in process `syz-executor.4'. [ 263.751123][ T12] tipc: Left network mode [ 263.765037][T11386] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.797597][T11386] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.832162][T11386] bridge_slave_0: entered allmulticast mode [ 263.847944][T11386] bridge_slave_0: entered promiscuous mode [ 263.872284][T11386] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.881083][T11386] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.911826][T11386] bridge_slave_1: entered allmulticast mode [ 263.932791][T11386] bridge_slave_1: entered promiscuous mode [ 264.105838][T11386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 264.184929][T11386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 264.397734][T11386] team0: Port device team_slave_0 added [ 264.429133][T11386] team0: Port device team_slave_1 added [ 264.445755][T11531] syz-executor.4[11531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.446100][T11531] syz-executor.4[11531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.503518][T11531] syz-executor.4[11531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.517790][T11531] syz-executor.4[11531] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 264.661932][ T5121] Bluetooth: hci1: command tx timeout [ 264.765453][ T12] hsr_slave_0: left promiscuous mode [ 264.777051][ T12] hsr_slave_1: left promiscuous mode [ 264.818848][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 264.849781][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 264.867237][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 264.879228][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 264.921050][ T12] veth1_macvtap: left promiscuous mode [ 264.932043][T11548] netlink: 276 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.950613][ T12] veth0_macvtap: left promiscuous mode [ 264.962320][ T12] veth1_vlan: left promiscuous mode [ 265.005013][T11545] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 265.024737][T11545] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.233233][ T12] pim6reg (unregistering): left allmulticast mode [ 265.815362][ T12] team0 (unregistering): Port device team_slave_1 removed [ 265.878832][ T12] team0 (unregistering): Port device team_slave_0 removed [ 266.167536][T11560] syz-executor.1[11560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.167730][T11560] syz-executor.1[11560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.206696][T11560] syz-executor.1[11560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.232189][T11560] syz-executor.1[11560] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 266.259236][ T12] vxcan1 (unregistering): left allmulticast mode [ 266.491488][T11386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.511828][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.559701][T11386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.579632][T11539] lo speed is unknown, defaulting to 1000 [ 266.579640][T11542] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.714822][T11386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.732287][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.761932][ T5121] Bluetooth: hci1: command 0x040f tx timeout [ 266.788503][T11386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.045137][T11539] lo speed is unknown, defaulting to 1000 [ 267.097501][T11386] hsr_slave_0: entered promiscuous mode [ 267.142446][T11386] hsr_slave_1: entered promiscuous mode [ 267.186787][T11539] lo speed is unknown, defaulting to 1000 [ 267.416386][T11583] veth4: entered allmulticast mode [ 267.861249][ T12] IPVS: stop unused estimator thread 0... [ 267.924474][T11539] infiniband syz0: set active [ 267.944386][T11539] infiniband syz0: added lo [ 267.966772][ T25] lo speed is unknown, defaulting to 1000 [ 267.976636][T11591] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 267.981093][T11539] syz0: rxe_create_cq: returned err = -12 [ 268.010592][T11591] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 268.016556][T11539] infiniband syz0: Couldn't create ib_mad CQ [ 268.046249][T11539] infiniband syz0: Couldn't open port 1 [ 268.176495][T11539] RDS/IB: syz0: added [ 268.190361][T11539] smc: adding ib device syz0 with port count 1 [ 268.205370][T11539] smc: ib device syz0 port 1 has pnetid [ 268.241797][ T25] lo speed is unknown, defaulting to 1000 [ 268.259602][T11539] lo speed is unknown, defaulting to 1000 [ 268.394752][T11601] xt_hashlimit: overflow, try lower: 2647300743266041856/8 [ 268.459020][T11603] IPv6: addrconf: prefix option has invalid lifetime [ 268.465832][T11603] IPv6: addrconf: prefix option has invalid lifetime [ 268.526534][T11386] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 268.563774][T11386] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 268.602999][T11386] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 268.629101][T11386] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 268.765698][T11539] lo speed is unknown, defaulting to 1000 [ 268.821837][ T5114] Bluetooth: hci1: command 0x040f tx timeout [ 268.832451][T11613] veth2: entered allmulticast mode [ 268.927485][T11617] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 269.095272][T11386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.165041][T11386] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.190624][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.197910][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.257608][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.264882][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.341535][T11539] lo speed is unknown, defaulting to 1000 [ 269.367333][ T29] audit: type=1804 audit(1717776164.324:52): pid=11628 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir1343023213/syzkaller.SqIHbn/602/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 269.630369][T11638] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 269.684738][T11638] Êü: entered promiscuous mode [ 269.883312][T11386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 269.950224][T11539] lo speed is unknown, defaulting to 1000 [ 270.017879][T11386] veth0_vlan: entered promiscuous mode [ 270.058307][T11386] veth1_vlan: entered promiscuous mode [ 270.144618][T11386] veth0_macvtap: entered promiscuous mode [ 270.169794][T11386] veth1_macvtap: entered promiscuous mode [ 270.254065][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.285999][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.308732][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.319527][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.345488][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.356368][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.376917][T11653] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 270.414376][T11386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 270.422924][T11653] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.468979][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.507229][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.532503][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.554110][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.567889][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.601913][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.617691][T11386] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 270.639694][T11386] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.680673][T11386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 270.715460][T11539] lo speed is unknown, defaulting to 1000 [ 270.755953][T11386] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.794962][T11386] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 270.912016][ T5114] Bluetooth: hci1: command 0x040f tx timeout [ 270.914211][T11386] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.051843][T11386] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.086962][T11671] netlink: 44378 bytes leftover after parsing attributes in process `syz-executor.0'. [ 271.358922][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.402176][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.510483][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.530882][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.608109][T11725] netlink: 204 bytes leftover after parsing attributes in process `syz-executor.4'. [ 272.689059][T11730] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 273.039279][T11748] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 273.048705][T11745] Bluetooth: hci3: invalid length 0, exp 2 for type 17 [ 274.595932][T11791] ipvlan2: entered promiscuous mode [ 274.634747][T11791] ipvlan2: entered allmulticast mode [ 274.681847][T11791] bridge0: entered allmulticast mode [ 274.913936][T11799] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 275.003975][T11799] Êü: entered promiscuous mode [ 275.200364][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.236662][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 275.247012][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 275.286762][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 275.314304][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 275.324255][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 275.334323][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 275.494760][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.571860][T11822] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.581159][T11822] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.715833][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.895541][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.929494][T11810] lo speed is unknown, defaulting to 1000 [ 276.186647][ T12] bridge_slave_1: left allmulticast mode [ 276.221777][ T12] bridge_slave_1: left promiscuous mode [ 276.227741][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.254507][ T12] bridge_slave_0: left allmulticast mode [ 276.260344][ T12] bridge_slave_0: left promiscuous mode [ 276.282134][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.995036][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.007715][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.019646][ T12] bond0 (unregistering): Released all slaves [ 277.036102][T11859] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 277.057802][T11859] tc_dump_action: action bad kind [ 277.392913][ T5114] Bluetooth: hci2: command tx timeout [ 277.676151][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 277.702764][T11886] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 277.989829][T11810] chnl_net:caif_netlink_parms(): no params data found [ 278.163954][ T12] hsr_slave_0: left promiscuous mode [ 278.186612][ T12] hsr_slave_1: left promiscuous mode [ 278.221992][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.239471][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.251123][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.282200][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.332615][ T12] vlan0: left promiscuous mode [ 278.338123][ T12] veth1_macvtap: left promiscuous mode [ 278.348827][ T12] veth0_macvtap: left promiscuous mode [ 278.362314][ T12] veth1_vlan: left promiscuous mode [ 278.367723][ T12] veth0_vlan: left promiscuous mode [ 278.747163][ T5114] Bluetooth: hci4: command 0x0406 tx timeout [ 278.750474][T11923] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.772883][T11923] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 278.788186][ T12] pimreg (unregistering): left allmulticast mode [ 279.462207][ T5121] Bluetooth: hci2: command tx timeout [ 279.634168][ T12] team0 (unregistering): Port device team_slave_1 removed [ 280.352983][T11904] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:aa) already exists on: batadv_slave_0 [ 280.380781][T11904] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 280.393569][T11904] syz_tun: entered promiscuous mode [ 280.418918][T11904] syz_tun: left promiscuous mode [ 280.649003][T11955] team0: Port device team_slave_1 removed [ 280.925442][T11972] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 280.935864][T11810] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.963011][T11810] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.975521][T11810] bridge_slave_0: entered allmulticast mode [ 281.013662][T11810] bridge_slave_0: entered promiscuous mode [ 281.030554][T11980] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.036067][T11970] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.077827][T11810] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.111496][T11810] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.135115][T11810] bridge_slave_1: entered allmulticast mode [ 281.155654][T11810] bridge_slave_1: entered promiscuous mode [ 281.243998][T11990] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.254759][T11990] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 281.330060][T11810] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.363307][T11810] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.492902][T11810] team0: Port device team_slave_0 added [ 281.527014][T11810] team0: Port device team_slave_1 added [ 281.543404][ T5121] Bluetooth: hci2: command tx timeout [ 281.656952][T11810] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 281.674962][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.716870][T11810] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 281.759063][T11810] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 281.776722][T11810] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 281.810853][T11810] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.926514][T12011] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.990618][T11810] hsr_slave_0: entered promiscuous mode [ 282.013432][T11810] hsr_slave_1: entered promiscuous mode [ 282.025280][T11810] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.025642][T12016] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 282.041945][T11810] Cannot create hsr debugfs directory [ 282.085881][T12016] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 282.694193][T12042] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 282.860889][T11810] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 282.927237][T11810] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 282.976211][T11810] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 283.043708][T11810] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 283.103192][T12052] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 283.547352][T11810] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.622902][ T5121] Bluetooth: hci2: command tx timeout [ 283.636716][T11810] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.674776][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.682022][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.759874][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 283.772727][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 283.789475][ T5114] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 283.805857][ T5114] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 283.817508][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.824840][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.832963][ T5114] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 283.844535][ T5114] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 283.907980][T12064] lo speed is unknown, defaulting to 1000 [ 284.035722][T12076] sit0: entered promiscuous mode [ 284.081373][T12076] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 284.133986][T12076] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 284.638093][T11810] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.876252][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.022338][T12117] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 285.034763][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.062307][T12117] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 285.244842][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.423082][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.475038][T12064] chnl_net:caif_netlink_parms(): no params data found [ 285.942323][ T5121] Bluetooth: hci0: command tx timeout [ 285.972357][T12064] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.980890][T12143] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 285.983642][T12064] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.997597][T12064] bridge_slave_0: entered allmulticast mode [ 286.005408][T12064] bridge_slave_0: entered promiscuous mode [ 286.009641][T12143] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.040267][T12143] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 286.048870][T12143] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.064644][T12064] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.085311][T12064] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.094131][T12064] bridge_slave_1: entered allmulticast mode [ 286.105250][T12064] bridge_slave_1: entered promiscuous mode [ 286.130385][ T51] bond1: left allmulticast mode [ 286.138627][ T51] bridge2: left allmulticast mode [ 286.149496][ T51] bond1: left promiscuous mode [ 286.154946][ T51] bridge2: left promiscuous mode [ 286.160523][ T51] bridge0: port 4(bond1) entered disabled state [ 286.184065][ T51] geneve1: left allmulticast mode [ 286.196701][ T51] geneve1: left promiscuous mode [ 286.207865][ T51] bridge0: port 3(geneve1) entered disabled state [ 286.228979][ T51] bridge_slave_1: left allmulticast mode [ 286.239031][ T51] bridge_slave_1: left promiscuous mode [ 286.245137][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.263366][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.504700][ T51] smc: removing net device ip6tnl0 with user defined pnetid SYZ2 [ 286.544095][T12160] Bluetooth: MGMT ver 1.22 [ 286.854511][ T51] bond1 (unregistering): (slave bridge2): Releasing backup interface [ 287.101866][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.115003][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.127722][ T51] bond0 (unregistering): Released all slaves [ 287.145342][ T51] bond1 (unregistering): Released all slaves [ 287.160405][T11810] veth0_vlan: entered promiscuous mode [ 287.255780][T12165] netlink: 'syz-executor.3': attribute type 64 has an invalid length. [ 287.275011][T12165] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 287.346492][T12064] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.372766][ T51] tipc: Left network mode [ 287.392936][T12064] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.440145][T11810] veth1_vlan: entered promiscuous mode [ 287.636978][T12064] team0: Port device team_slave_0 added [ 287.647726][T12064] team0: Port device team_slave_1 added [ 287.734373][T12064] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.741382][T12064] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.782168][T12064] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.902505][T12064] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.910130][T12064] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.976258][T12064] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.022242][ T5121] Bluetooth: hci0: command tx timeout [ 288.366644][T12064] hsr_slave_0: entered promiscuous mode [ 288.395092][T12064] hsr_slave_1: entered promiscuous mode [ 288.409900][T12064] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 288.432453][T12064] Cannot create hsr debugfs directory [ 288.469593][T11810] veth0_macvtap: entered promiscuous mode [ 288.521076][ T51] hsr_slave_0: left promiscuous mode [ 288.544593][ T51] hsr_slave_1: left promiscuous mode [ 288.556998][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.576313][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.592399][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.601090][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.638259][ T51] vlan1: left promiscuous mode [ 288.643963][ T51] veth1_macvtap: left promiscuous mode [ 288.649940][ T51] veth0_macvtap: left promiscuous mode [ 288.656162][ T51] veth1_vlan: left promiscuous mode [ 288.661984][ T51] veth0_vlan: left promiscuous mode [ 288.952223][ T51] team0 (unregistering): Port device macvlan2 removed [ 288.980026][ T51] pimreg24 (unregistering): left allmulticast mode [ 288.992858][T12208] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 289.001020][T12208] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 289.616923][ T51] team0 (unregistering): Port device team_slave_1 removed [ 290.075454][T11810] veth1_macvtap: entered promiscuous mode [ 290.087948][T12205] tipc: Enabling of bearer rejected, failed to enable media [ 290.102395][ T5121] Bluetooth: hci0: command tx timeout [ 290.314551][T12214] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 290.380332][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.415763][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.435736][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.468049][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.498120][T11810] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 290.528609][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.550428][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.564235][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.588697][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.598742][T11810] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 290.609345][T11810] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.621523][T11810] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 290.663573][T11810] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.686509][T11810] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.699455][T11810] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 290.710602][T11810] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.113536][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.142251][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.210629][T12252] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 291.288358][ T51] IPVS: stop unused estimator thread 0... [ 291.304675][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.329567][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.705221][T12064] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 291.753980][T12064] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 291.788686][T12064] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 291.860794][T12064] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 292.182261][ T5121] Bluetooth: hci0: command tx timeout [ 292.242460][T12064] 8021q: adding VLAN 0 to HW filter on device bond0 [ 292.349921][T12064] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.406518][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.413802][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 292.486744][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.493979][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 292.618172][T12064] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 292.797033][T12312] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 292.876041][T12318] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 292.909438][T12318] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.165687][T12064] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.321199][T12336] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 293.392694][T12336] infiniband syz0: set down [ 293.454516][T12064] veth0_vlan: entered promiscuous mode [ 293.493824][ T45] lo speed is unknown, defaulting to 1000 [ 293.512979][T12064] veth1_vlan: entered promiscuous mode [ 293.534063][ T45] lo speed is unknown, defaulting to 1000 [ 293.610862][T12351] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.655156][T12064] veth0_macvtap: entered promiscuous mode [ 293.686401][T12064] veth1_macvtap: entered promiscuous mode [ 293.710638][T12353] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 293.785338][T12064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.820977][T12064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.840852][T12064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.867821][T12064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.886804][T12064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 293.907290][T12064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.912677][T12364] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.949396][T12064] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.989442][T12064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.004773][ T29] audit: type=1800 audit(1717776188.954:53): pid=12364 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1948 res=0 errno=0 [ 294.025229][T12064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.051307][T12064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.069604][T12064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.111429][T12064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.146287][T12064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.168246][T12064] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 294.192452][T12064] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 294.215757][T12064] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.282640][T12064] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.338222][T12064] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.368211][T12064] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.377558][T12064] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.826521][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.842622][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.933933][T12399] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 294.954606][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.981177][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.189365][ T29] audit: type=1804 audit(1717776190.154:54): pid=12410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3786461940/syzkaller.3uXo9v/60/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 295.324102][T12419] pim6reg1: entered promiscuous mode [ 295.335168][T12419] pim6reg1: entered allmulticast mode [ 295.571063][T12434] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 296.045266][T12451] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 296.124396][T12459] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 296.246278][T12459] team0: Device veth1_vlan failed to register rx_handler [ 296.470140][T12469] pim6reg1: entered promiscuous mode [ 296.479650][T12469] pim6reg1: entered allmulticast mode [ 296.800804][T12459] syz-executor.2 (12459) used greatest stack depth: 18032 bytes left [ 296.938747][T12499] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 297.282894][T12513] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 297.372069][T12513] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 297.388587][T12513] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 297.650379][T12531] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 298.198387][T12555] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 298.237703][T12556] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 298.262814][T12556] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 298.301587][T12558] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 298.888295][T12589] x_tables: unsorted entry at hook 2 [ 299.215830][T12600] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 299.265126][T12606] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 299.445328][T12609] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 299.488336][T12609] team0: Device veth1_vlan failed to register rx_handler [ 299.521026][T12611] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 300.210074][T12631] sch_tbf: burst 0 is lower than device ipvlan0 mtu (1514) ! [ 300.537186][T12649] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 300.638057][T12649] bond2: entered promiscuous mode [ 300.741594][T12657] bridge1: entered promiscuous mode [ 300.751202][T12657] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 300.832332][T12663] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 300.857548][T12663] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 300.877491][T12663] bridge1: left promiscuous mode [ 300.899360][T12663] bond2 (unregistering): Released all slaves [ 301.092468][T12672] sch_tbf: burst 0 is lower than device ipvlan0 mtu (1514) ! [ 301.365458][T12692] x_tables: unsorted entry at hook 2 [ 302.082916][T12718] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.173005][T12726] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 302.197064][T12727] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.231211][T12727] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.250920][T12726] team0: Device veth1_vlan failed to register rx_handler [ 302.281849][T12727] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 302.290354][T12727] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 302.365692][T12727] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.3'. [ 303.028052][T12762] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.051814][T12762] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 303.083180][T12762] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 303.350194][T12769] macvtap0: entered promiscuous mode [ 303.393174][T12769] macvtap0: left promiscuous mode [ 304.270779][T12831] atomic_op ffff88805e087198 conn xmit_atomic 0000000000000000 [ 304.598767][T12849] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 304.659405][T12849] __nla_validate_parse: 3 callbacks suppressed [ 304.659427][T12849] netlink: 103528 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.289830][T12889] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.447017][T12889] bond1: entered promiscuous mode [ 305.584935][T12898] bridge1: entered promiscuous mode [ 305.590623][T12898] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 305.645632][T12900] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 305.669980][T12902] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.712754][T12902] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 305.725047][T12902] bridge1: left promiscuous mode [ 305.743485][T12902] bond1 (unregistering): Released all slaves [ 305.786956][T12903] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 305.831524][T12903] team0: Device veth1_macvtap failed to register rx_handler [ 305.843000][T12914] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 305.889050][T12914] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.924640][T12914] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 305.934729][T12914] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.403552][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.471403][T12942] netlink: 103528 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.720545][T12949] team0: Device veth1_macvtap failed to register rx_handler [ 306.775819][T12951] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 306.982673][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.051952][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.101862][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.128940][T12977] netlink: 103528 bytes leftover after parsing attributes in process `syz-executor.4'. [ 307.134008][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.164521][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.176623][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.191693][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.219072][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.241928][T12958] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 307.265906][T12958] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 307.355600][T12984] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.260226][T13031] validate_nla: 4 callbacks suppressed [ 308.260248][T13031] netlink: 'syz-executor.3': attribute type 14 has an invalid length. [ 308.301984][T13031] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 308.669788][T13051] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 308.697314][T13051] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 308.721050][T13051] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 309.172406][T13079] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 309.195330][T13079] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 309.233962][T13079] team0: Device veth1_macvtap failed to register rx_handler [ 309.372144][T13086] ip6tnl4: entered promiscuous mode [ 309.391907][T13086] ip6tnl4: entered allmulticast mode [ 309.417412][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.430886][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.444814][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.475036][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.508418][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.543011][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.573020][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.596601][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.606828][T13079] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.620540][T13079] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.779587][T13100] __nla_validate_parse: 3 callbacks suppressed [ 309.779610][T13100] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 310.010865][T13117] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 310.024479][T13117] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 310.047713][T13117] netlink: 9328 bytes leftover after parsing attributes in process `syz-executor.2'. [ 310.075192][T13117] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 310.287134][T13128] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 310.320605][T13130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 310.367554][T13128] team0: Device veth1_macvtap failed to register rx_handler [ 310.742114][T13149] netlink: 9328 bytes leftover after parsing attributes in process `syz-executor.2'. [ 310.959980][T13161] Â: renamed from pim6reg1 [ 311.014235][T13161] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 311.186870][T13169] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 311.253242][ C0] ------------[ cut here ]------------ [ 311.258861][ C0] WARNING: CPU: 0 PID: 16 at net/mac80211/rx.c:5372 ieee80211_rx_list+0x2a05/0x3780 [ 311.268378][ C0] Modules linked in: [ 311.272443][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.10.0-rc2-syzkaller-00228-gc44711b78608 #0 [ 311.282516][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 311.292691][ C0] RIP: 0010:ieee80211_rx_list+0x2a05/0x3780 [ 311.298705][ C0] Code: 90 e9 23 da ff ff e8 ea cc 98 f6 e9 19 da ff ff e8 e0 cc 98 f6 e9 0f da ff ff e8 d6 cc 98 f6 e9 05 da ff ff e8 cc cc 98 f6 90 <0f> 0b 90 e9 f7 d9 ff ff e8 be cc 98 f6 31 c0 48 89 44 24 60 e9 e5 [ 311.318502][ C0] RSP: 0018:ffffc900001577e0 EFLAGS: 00010246 [ 311.324677][ C0] RAX: ffffffff8afd59b4 RBX: 0000000000000000 RCX: ffff88801728da00 [ 311.332752][ C0] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.340773][ C0] RBP: ffffc90000157a30 R08: ffffffff8afd31f2 R09: 1ffffffff25f56b0 2024/06/07 16:03:26 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 311.348848][ C0] R10: dffffc0000000000 R11: fffffbfff25f56b1 R12: dffffc0000000000 [ 311.356925][ C0] R13: ffff88805e9bb140 R14: ffff88807fef8e20 R15: ffff88807fefb0a8 [ 311.364991][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 311.374020][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 311.380649][ C0] CR2: 00007fa2a28e56c6 CR3: 0000000062ac6000 CR4: 00000000003506f0 [ 311.388813][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 311.396886][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 311.404944][ C0] Call Trace: [ 311.408254][ C0] [ 311.411212][ C0] ? __warn+0x163/0x4e0 [ 311.415463][ C0] ? ieee80211_rx_list+0x2a05/0x3780 [ 311.420798][ C0] ? report_bug+0x2b3/0x500 [ 311.425390][ C0] ? ieee80211_rx_list+0x2a05/0x3780 [ 311.430729][ C0] ? handle_bug+0x3e/0x70 [ 311.435156][ C0] ? exc_invalid_op+0x1a/0x50 [ 311.439889][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 311.445023][ C0] ? ieee80211_rx_list+0x242/0x3780 [ 311.450271][ C0] ? ieee80211_rx_list+0x2a04/0x3780 [ 311.455673][ C0] ? ieee80211_rx_list+0x2a05/0x3780 [ 311.461101][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 311.466243][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 311.471804][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 311.476924][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 311.483193][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 311.489589][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 311.494722][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 311.499709][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 311.506144][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 311.511780][ C0] ? skb_dequeue+0x113/0x150 [ 311.516443][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 311.522563][ C0] tasklet_action_common+0x321/0x4d0 [ 311.527900][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 311.533815][ C0] ? workqueue_softirq_action+0xca/0x140 [ 311.539517][ C0] handle_softirqs+0x2c4/0x970 [ 311.544391][ C0] ? run_ksoftirqd+0xca/0x130 [ 311.549131][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 311.554530][ C0] run_ksoftirqd+0xca/0x130 [ 311.559085][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 311.564296][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 311.570085][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 311.575296][ C0] smpboot_thread_fn+0x544/0xa30 [ 311.580283][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 311.585412][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 311.590931][ C0] kthread+0x2f0/0x390 [ 311.595098][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 311.600613][ C0] ? __pfx_kthread+0x10/0x10 [ 311.605874][ C0] ret_from_fork+0x4b/0x80 [ 311.610348][ C0] ? __pfx_kthread+0x10/0x10 [ 311.615042][ C0] ret_from_fork_asm+0x1a/0x30 [ 311.619877][ C0] [ 311.622980][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 311.630311][ C0] CPU: 0 PID: 16 Comm: ksoftirqd/0 Not tainted 6.10.0-rc2-syzkaller-00228-gc44711b78608 #0 [ 311.640381][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 311.650484][ C0] Call Trace: [ 311.653819][ C0] [ 311.656958][ C0] dump_stack_lvl+0x241/0x360 [ 311.661689][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 311.666932][ C0] ? __pfx__printk+0x10/0x10 [ 311.671580][ C0] ? vscnprintf+0x5d/0x90 [ 311.675964][ C0] panic+0x349/0x860 [ 311.679918][ C0] ? __warn+0x172/0x4e0 [ 311.684138][ C0] ? __pfx_panic+0x10/0x10 [ 311.688634][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 311.693615][ C0] __warn+0x346/0x4e0 [ 311.697625][ C0] ? ieee80211_rx_list+0x2a05/0x3780 [ 311.702947][ C0] report_bug+0x2b3/0x500 [ 311.707290][ C0] ? ieee80211_rx_list+0x2a05/0x3780 [ 311.712612][ C0] handle_bug+0x3e/0x70 [ 311.716784][ C0] exc_invalid_op+0x1a/0x50 [ 311.721300][ C0] asm_exc_invalid_op+0x1a/0x20 [ 311.726190][ C0] RIP: 0010:ieee80211_rx_list+0x2a05/0x3780 [ 311.732101][ C0] Code: 90 e9 23 da ff ff e8 ea cc 98 f6 e9 19 da ff ff e8 e0 cc 98 f6 e9 0f da ff ff e8 d6 cc 98 f6 e9 05 da ff ff e8 cc cc 98 f6 90 <0f> 0b 90 e9 f7 d9 ff ff e8 be cc 98 f6 31 c0 48 89 44 24 60 e9 e5 [ 311.751721][ C0] RSP: 0018:ffffc900001577e0 EFLAGS: 00010246 [ 311.757800][ C0] RAX: ffffffff8afd59b4 RBX: 0000000000000000 RCX: ffff88801728da00 [ 311.765785][ C0] RDX: 0000000080000100 RSI: 0000000000000000 RDI: 0000000000000000 [ 311.773865][ C0] RBP: ffffc90000157a30 R08: ffffffff8afd31f2 R09: 1ffffffff25f56b0 [ 311.781848][ C0] R10: dffffc0000000000 R11: fffffbfff25f56b1 R12: dffffc0000000000 [ 311.789846][ C0] R13: ffff88805e9bb140 R14: ffff88807fef8e20 R15: ffff88807fefb0a8 [ 311.797953][ C0] ? ieee80211_rx_list+0x242/0x3780 [ 311.803203][ C0] ? ieee80211_rx_list+0x2a04/0x3780 [ 311.808516][ C0] ? __lock_acquire+0x1346/0x1fd0 [ 311.813564][ C0] ? __pfx_ieee80211_rx_list+0x10/0x10 [ 311.819044][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 311.824087][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 311.830076][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 311.836428][ C0] ? ieee80211_rx_napi+0xd6/0x3c0 [ 311.841467][ C0] ieee80211_rx_napi+0x18a/0x3c0 [ 311.846417][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 311.852767][ C0] ? __pfx_ieee80211_rx_napi+0x10/0x10 [ 311.858241][ C0] ? skb_dequeue+0x113/0x150 [ 311.862847][ C0] ieee80211_handle_queued_frames+0xe7/0x1e0 [ 311.868843][ C0] tasklet_action_common+0x321/0x4d0 [ 311.874150][ C0] ? __pfx_tasklet_action_common+0x10/0x10 [ 311.879969][ C0] ? workqueue_softirq_action+0xca/0x140 [ 311.885616][ C0] handle_softirqs+0x2c4/0x970 [ 311.890418][ C0] ? run_ksoftirqd+0xca/0x130 [ 311.895140][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 311.900442][ C0] run_ksoftirqd+0xca/0x130 [ 311.904953][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 311.910072][ C0] ? __pfx_ksoftirqd_should_run+0x10/0x10 [ 311.915809][ C0] ? __pfx_run_ksoftirqd+0x10/0x10 [ 311.920925][ C0] smpboot_thread_fn+0x544/0xa30 [ 311.925868][ C0] ? smpboot_thread_fn+0x4e/0xa30 [ 311.930922][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 311.936388][ C0] kthread+0x2f0/0x390 [ 311.940473][ C0] ? __pfx_smpboot_thread_fn+0x10/0x10 [ 311.945940][ C0] ? __pfx_kthread+0x10/0x10 [ 311.950538][ C0] ret_from_fork+0x4b/0x80 [ 311.954962][ C0] ? __pfx_kthread+0x10/0x10 [ 311.959556][ C0] ret_from_fork_asm+0x1a/0x30 [ 311.964341][ C0] [ 311.967630][ C0] Kernel Offset: disabled [ 311.972000][ C0] Rebooting in 86400 seconds..