Starting Load/Save RF Kill Switch Status... Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.139' (ECDSA) to the list of known hosts. 2021/10/18 14:39:30 fuzzer started 2021/10/18 14:39:30 dialing manager at 10.128.0.169:45165 2021/10/18 14:39:30 syscalls: 1698 2021/10/18 14:39:30 code coverage: enabled 2021/10/18 14:39:30 comparison tracing: enabled 2021/10/18 14:39:30 extra coverage: enabled 2021/10/18 14:39:30 setuid sandbox: enabled 2021/10/18 14:39:30 namespace sandbox: enabled 2021/10/18 14:39:30 Android sandbox: /sys/fs/selinux/policy does not exist 2021/10/18 14:39:30 fault injection: enabled 2021/10/18 14:39:30 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/10/18 14:39:30 net packet injection: enabled 2021/10/18 14:39:30 net device setup: enabled 2021/10/18 14:39:30 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/10/18 14:39:30 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/10/18 14:39:30 USB emulation: enabled 2021/10/18 14:39:30 hci packet injection: enabled 2021/10/18 14:39:30 wifi device emulation: enabled 2021/10/18 14:39:30 802.15.4 emulation: enabled 2021/10/18 14:39:30 fetching corpus: 0, signal 0/2000 (executing program) syzkaller login: [ 67.749295][ T6568] cgroup: Unknown subsys name 'net' [ 67.762318][ T6568] cgroup: Unknown subsys name 'rlimit' 2021/10/18 14:39:31 fetching corpus: 50, signal 38073/41631 (executing program) 2021/10/18 14:39:31 fetching corpus: 100, signal 50178/55309 (executing program) 2021/10/18 14:39:31 fetching corpus: 150, signal 61033/67644 (executing program) 2021/10/18 14:39:31 fetching corpus: 200, signal 71739/79672 (executing program) 2021/10/18 14:39:32 fetching corpus: 250, signal 77307/86654 (executing program) 2021/10/18 14:39:32 fetching corpus: 300, signal 82439/93117 (executing program) 2021/10/18 14:39:32 fetching corpus: 350, signal 87481/99501 (executing program) 2021/10/18 14:39:32 fetching corpus: 400, signal 91936/105252 (executing program) 2021/10/18 14:39:33 fetching corpus: 450, signal 96458/110976 (executing program) 2021/10/18 14:39:33 fetching corpus: 500, signal 99688/115449 (executing program) 2021/10/18 14:39:33 fetching corpus: 550, signal 103106/120022 (executing program) 2021/10/18 14:39:33 fetching corpus: 600, signal 105620/123754 (executing program) 2021/10/18 14:39:33 fetching corpus: 650, signal 109271/128541 (executing program) 2021/10/18 14:39:34 fetching corpus: 700, signal 111779/132202 (executing program) [ 71.148167][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.154839][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 2021/10/18 14:39:34 fetching corpus: 750, signal 114521/136053 (executing program) 2021/10/18 14:39:34 fetching corpus: 800, signal 116827/139451 (executing program) 2021/10/18 14:39:34 fetching corpus: 850, signal 121377/144888 (executing program) 2021/10/18 14:39:35 fetching corpus: 900, signal 123720/148249 (executing program) 2021/10/18 14:39:35 fetching corpus: 948, signal 126216/151710 (executing program) 2021/10/18 14:39:35 fetching corpus: 998, signal 127832/154381 (executing program) 2021/10/18 14:39:35 fetching corpus: 1048, signal 129955/157481 (executing program) 2021/10/18 14:39:36 fetching corpus: 1098, signal 131877/160341 (executing program) 2021/10/18 14:39:36 fetching corpus: 1148, signal 134102/163481 (executing program) 2021/10/18 14:39:36 fetching corpus: 1198, signal 136542/166757 (executing program) 2021/10/18 14:39:37 fetching corpus: 1248, signal 138241/169405 (executing program) 2021/10/18 14:39:37 fetching corpus: 1298, signal 139763/171869 (executing program) 2021/10/18 14:39:37 fetching corpus: 1348, signal 141653/174674 (executing program) 2021/10/18 14:39:37 fetching corpus: 1398, signal 143731/177633 (executing program) 2021/10/18 14:39:38 fetching corpus: 1448, signal 145622/180351 (executing program) 2021/10/18 14:39:38 fetching corpus: 1498, signal 147015/182621 (executing program) 2021/10/18 14:39:38 fetching corpus: 1548, signal 148593/185078 (executing program) 2021/10/18 14:39:38 fetching corpus: 1598, signal 150279/187575 (executing program) 2021/10/18 14:39:39 fetching corpus: 1648, signal 151840/189984 (executing program) 2021/10/18 14:39:39 fetching corpus: 1698, signal 153593/192506 (executing program) 2021/10/18 14:39:39 fetching corpus: 1748, signal 155896/195428 (executing program) 2021/10/18 14:39:39 fetching corpus: 1798, signal 157168/197514 (executing program) 2021/10/18 14:39:40 fetching corpus: 1848, signal 158598/199740 (executing program) 2021/10/18 14:39:40 fetching corpus: 1897, signal 160731/202453 (executing program) 2021/10/18 14:39:40 fetching corpus: 1947, signal 161799/204343 (executing program) 2021/10/18 14:39:41 fetching corpus: 1997, signal 163216/206471 (executing program) 2021/10/18 14:39:41 fetching corpus: 2047, signal 164752/208675 (executing program) 2021/10/18 14:39:41 fetching corpus: 2097, signal 165875/210539 (executing program) 2021/10/18 14:39:41 fetching corpus: 2147, signal 167078/212475 (executing program) 2021/10/18 14:39:42 fetching corpus: 2197, signal 168303/214416 (executing program) 2021/10/18 14:39:42 fetching corpus: 2247, signal 169867/216570 (executing program) 2021/10/18 14:39:42 fetching corpus: 2297, signal 171108/218524 (executing program) 2021/10/18 14:39:42 fetching corpus: 2346, signal 172182/220306 (executing program) 2021/10/18 14:39:42 fetching corpus: 2396, signal 173219/222088 (executing program) 2021/10/18 14:39:43 fetching corpus: 2446, signal 174369/223885 (executing program) 2021/10/18 14:39:43 fetching corpus: 2496, signal 175357/225549 (executing program) 2021/10/18 14:39:43 fetching corpus: 2546, signal 176388/227227 (executing program) 2021/10/18 14:39:43 fetching corpus: 2596, signal 177568/229004 (executing program) 2021/10/18 14:39:44 fetching corpus: 2646, signal 178840/230886 (executing program) 2021/10/18 14:39:44 fetching corpus: 2695, signal 179494/232305 (executing program) 2021/10/18 14:39:44 fetching corpus: 2745, signal 180523/233974 (executing program) 2021/10/18 14:39:44 fetching corpus: 2794, signal 181735/235731 (executing program) 2021/10/18 14:39:44 fetching corpus: 2844, signal 182820/237378 (executing program) 2021/10/18 14:39:45 fetching corpus: 2894, signal 184846/239679 (executing program) 2021/10/18 14:39:45 fetching corpus: 2944, signal 185774/241231 (executing program) 2021/10/18 14:39:45 fetching corpus: 2994, signal 186791/242883 (executing program) 2021/10/18 14:39:45 fetching corpus: 3044, signal 187697/244361 (executing program) 2021/10/18 14:39:45 fetching corpus: 3094, signal 188996/246124 (executing program) 2021/10/18 14:39:46 fetching corpus: 3142, signal 189911/247576 (executing program) 2021/10/18 14:39:46 fetching corpus: 3192, signal 190900/249089 (executing program) 2021/10/18 14:39:46 fetching corpus: 3242, signal 192006/250624 (executing program) 2021/10/18 14:39:47 fetching corpus: 3292, signal 192876/252022 (executing program) 2021/10/18 14:39:47 fetching corpus: 3342, signal 193687/253401 (executing program) 2021/10/18 14:39:47 fetching corpus: 3391, signal 194592/254783 (executing program) 2021/10/18 14:39:47 fetching corpus: 3441, signal 195456/256145 (executing program) 2021/10/18 14:39:48 fetching corpus: 3491, signal 196168/257439 (executing program) 2021/10/18 14:39:48 fetching corpus: 3541, signal 197003/258753 (executing program) 2021/10/18 14:39:48 fetching corpus: 3591, signal 197715/259988 (executing program) 2021/10/18 14:39:48 fetching corpus: 3641, signal 198286/261178 (executing program) 2021/10/18 14:39:48 fetching corpus: 3691, signal 199517/262719 (executing program) 2021/10/18 14:39:48 fetching corpus: 3741, signal 200366/264054 (executing program) 2021/10/18 14:39:49 fetching corpus: 3791, signal 201082/265328 (executing program) 2021/10/18 14:39:49 fetching corpus: 3841, signal 201904/266662 (executing program) 2021/10/18 14:39:49 fetching corpus: 3891, signal 202778/267981 (executing program) 2021/10/18 14:39:49 fetching corpus: 3941, signal 203696/269339 (executing program) 2021/10/18 14:39:50 fetching corpus: 3991, signal 204279/270529 (executing program) 2021/10/18 14:39:50 fetching corpus: 4040, signal 204945/271701 (executing program) 2021/10/18 14:39:50 fetching corpus: 4090, signal 205579/272852 (executing program) 2021/10/18 14:39:50 fetching corpus: 4139, signal 206186/273981 (executing program) 2021/10/18 14:39:51 fetching corpus: 4189, signal 206891/275143 (executing program) 2021/10/18 14:39:51 fetching corpus: 4239, signal 207535/276268 (executing program) 2021/10/18 14:39:51 fetching corpus: 4289, signal 208384/277505 (executing program) 2021/10/18 14:39:51 fetching corpus: 4339, signal 209048/278655 (executing program) 2021/10/18 14:39:51 fetching corpus: 4389, signal 209664/279721 (executing program) 2021/10/18 14:39:52 fetching corpus: 4438, signal 210488/280858 (executing program) 2021/10/18 14:39:52 fetching corpus: 4488, signal 211122/281933 (executing program) 2021/10/18 14:39:52 fetching corpus: 4538, signal 211835/283011 (executing program) 2021/10/18 14:39:52 fetching corpus: 4588, signal 212399/284080 (executing program) 2021/10/18 14:39:53 fetching corpus: 4638, signal 213118/285143 (executing program) 2021/10/18 14:39:53 fetching corpus: 4688, signal 213722/286170 (executing program) 2021/10/18 14:39:53 fetching corpus: 4738, signal 214203/287183 (executing program) 2021/10/18 14:39:53 fetching corpus: 4788, signal 214806/288255 (executing program) 2021/10/18 14:39:53 fetching corpus: 4838, signal 215144/289127 (executing program) 2021/10/18 14:39:54 fetching corpus: 4888, signal 215672/290162 (executing program) 2021/10/18 14:39:54 fetching corpus: 4938, signal 216189/291097 (executing program) 2021/10/18 14:39:54 fetching corpus: 4988, signal 216955/292115 (executing program) 2021/10/18 14:39:54 fetching corpus: 5038, signal 217670/293132 (executing program) 2021/10/18 14:39:54 fetching corpus: 5088, signal 218444/294184 (executing program) 2021/10/18 14:39:54 fetching corpus: 5138, signal 219197/295275 (executing program) 2021/10/18 14:39:55 fetching corpus: 5188, signal 219761/296231 (executing program) 2021/10/18 14:39:55 fetching corpus: 5238, signal 221341/297588 (executing program) 2021/10/18 14:39:55 fetching corpus: 5288, signal 221816/298509 (executing program) 2021/10/18 14:39:55 fetching corpus: 5337, signal 222298/299417 (executing program) 2021/10/18 14:39:56 fetching corpus: 5386, signal 222856/300336 (executing program) 2021/10/18 14:39:56 fetching corpus: 5436, signal 223471/301226 (executing program) 2021/10/18 14:39:56 fetching corpus: 5486, signal 224160/302232 (executing program) 2021/10/18 14:39:56 fetching corpus: 5536, signal 224576/303061 (executing program) 2021/10/18 14:39:56 fetching corpus: 5586, signal 225363/304005 (executing program) 2021/10/18 14:39:57 fetching corpus: 5636, signal 226282/305041 (executing program) 2021/10/18 14:39:57 fetching corpus: 5686, signal 226657/305818 (executing program) 2021/10/18 14:39:57 fetching corpus: 5736, signal 227300/306724 (executing program) 2021/10/18 14:39:57 fetching corpus: 5786, signal 227867/307625 (executing program) 2021/10/18 14:39:58 fetching corpus: 5836, signal 228295/308434 (executing program) 2021/10/18 14:39:58 fetching corpus: 5886, signal 228868/309275 (executing program) 2021/10/18 14:39:58 fetching corpus: 5936, signal 229344/310063 (executing program) 2021/10/18 14:39:58 fetching corpus: 5986, signal 229830/310878 (executing program) 2021/10/18 14:39:58 fetching corpus: 6036, signal 230360/311673 (executing program) 2021/10/18 14:39:59 fetching corpus: 6086, signal 230858/312520 (executing program) 2021/10/18 14:39:59 fetching corpus: 6136, signal 231421/313320 (executing program) 2021/10/18 14:39:59 fetching corpus: 6186, signal 232110/314154 (executing program) 2021/10/18 14:39:59 fetching corpus: 6236, signal 232725/314984 (executing program) 2021/10/18 14:40:00 fetching corpus: 6286, signal 233375/315822 (executing program) 2021/10/18 14:40:00 fetching corpus: 6336, signal 234064/316648 (executing program) 2021/10/18 14:40:00 fetching corpus: 6386, signal 234584/317427 (executing program) 2021/10/18 14:40:00 fetching corpus: 6436, signal 235007/318185 (executing program) 2021/10/18 14:40:00 fetching corpus: 6486, signal 235620/318947 (executing program) 2021/10/18 14:40:01 fetching corpus: 6536, signal 236117/319710 (executing program) 2021/10/18 14:40:01 fetching corpus: 6586, signal 236699/320503 (executing program) 2021/10/18 14:40:01 fetching corpus: 6636, signal 237152/321255 (executing program) 2021/10/18 14:40:01 fetching corpus: 6686, signal 237747/321994 (executing program) 2021/10/18 14:40:02 fetching corpus: 6736, signal 238353/322763 (executing program) 2021/10/18 14:40:02 fetching corpus: 6786, signal 238896/323472 (executing program) 2021/10/18 14:40:02 fetching corpus: 6836, signal 239484/324185 (executing program) 2021/10/18 14:40:03 fetching corpus: 6886, signal 240264/324974 (executing program) 2021/10/18 14:40:03 fetching corpus: 6936, signal 240960/325676 (executing program) 2021/10/18 14:40:03 fetching corpus: 6986, signal 241561/326359 (executing program) 2021/10/18 14:40:03 fetching corpus: 7036, signal 242018/327061 (executing program) 2021/10/18 14:40:03 fetching corpus: 7086, signal 242560/327754 (executing program) 2021/10/18 14:40:04 fetching corpus: 7136, signal 243286/328460 (executing program) 2021/10/18 14:40:04 fetching corpus: 7186, signal 243961/329170 (executing program) 2021/10/18 14:40:04 fetching corpus: 7236, signal 244320/329821 (executing program) 2021/10/18 14:40:04 fetching corpus: 7285, signal 244787/330460 (executing program) 2021/10/18 14:40:05 fetching corpus: 7335, signal 245375/331121 (executing program) 2021/10/18 14:40:05 fetching corpus: 7383, signal 245805/331757 (executing program) 2021/10/18 14:40:05 fetching corpus: 7432, signal 246376/332459 (executing program) 2021/10/18 14:40:05 fetching corpus: 7482, signal 247214/333139 (executing program) 2021/10/18 14:40:05 fetching corpus: 7532, signal 247687/333738 (executing program) 2021/10/18 14:40:06 fetching corpus: 7582, signal 248073/334317 (executing program) 2021/10/18 14:40:06 fetching corpus: 7632, signal 248546/334905 (executing program) 2021/10/18 14:40:06 fetching corpus: 7682, signal 249045/335500 (executing program) 2021/10/18 14:40:06 fetching corpus: 7732, signal 249406/336070 (executing program) 2021/10/18 14:40:07 fetching corpus: 7782, signal 249830/336675 (executing program) 2021/10/18 14:40:07 fetching corpus: 7830, signal 250189/337290 (executing program) 2021/10/18 14:40:07 fetching corpus: 7880, signal 250694/337871 (executing program) 2021/10/18 14:40:07 fetching corpus: 7930, signal 251335/338482 (executing program) 2021/10/18 14:40:08 fetching corpus: 7979, signal 251788/339090 (executing program) 2021/10/18 14:40:08 fetching corpus: 8027, signal 252276/339647 (executing program) 2021/10/18 14:40:08 fetching corpus: 8076, signal 252791/340245 (executing program) 2021/10/18 14:40:09 fetching corpus: 8125, signal 253333/340807 (executing program) 2021/10/18 14:40:09 fetching corpus: 8175, signal 253770/341355 (executing program) 2021/10/18 14:40:09 fetching corpus: 8224, signal 254289/341938 (executing program) 2021/10/18 14:40:09 fetching corpus: 8273, signal 254627/342453 (executing program) 2021/10/18 14:40:10 fetching corpus: 8322, signal 255175/343021 (executing program) 2021/10/18 14:40:10 fetching corpus: 8372, signal 255548/343539 (executing program) 2021/10/18 14:40:10 fetching corpus: 8422, signal 255969/344071 (executing program) 2021/10/18 14:40:10 fetching corpus: 8472, signal 256547/344606 (executing program) 2021/10/18 14:40:10 fetching corpus: 8522, signal 256973/345163 (executing program) 2021/10/18 14:40:11 fetching corpus: 8571, signal 257312/345556 (executing program) 2021/10/18 14:40:11 fetching corpus: 8621, signal 257705/345556 (executing program) 2021/10/18 14:40:11 fetching corpus: 8671, signal 258119/345560 (executing program) 2021/10/18 14:40:11 fetching corpus: 8721, signal 258740/345567 (executing program) 2021/10/18 14:40:12 fetching corpus: 8769, signal 259158/345567 (executing program) 2021/10/18 14:40:12 fetching corpus: 8818, signal 259903/345573 (executing program) 2021/10/18 14:40:12 fetching corpus: 8868, signal 260265/345580 (executing program) 2021/10/18 14:40:12 fetching corpus: 8917, signal 260787/345580 (executing program) 2021/10/18 14:40:13 fetching corpus: 8967, signal 261202/345580 (executing program) 2021/10/18 14:40:13 fetching corpus: 9016, signal 261606/345580 (executing program) 2021/10/18 14:40:13 fetching corpus: 9065, signal 261975/345580 (executing program) 2021/10/18 14:40:13 fetching corpus: 9115, signal 262397/345580 (executing program) 2021/10/18 14:40:14 fetching corpus: 9164, signal 262694/345587 (executing program) 2021/10/18 14:40:14 fetching corpus: 9214, signal 262986/345587 (executing program) 2021/10/18 14:40:14 fetching corpus: 9263, signal 263387/345587 (executing program) 2021/10/18 14:40:14 fetching corpus: 9312, signal 263881/345594 (executing program) 2021/10/18 14:40:15 fetching corpus: 9361, signal 264257/345594 (executing program) 2021/10/18 14:40:15 fetching corpus: 9411, signal 264721/345594 (executing program) 2021/10/18 14:40:15 fetching corpus: 9459, signal 265192/345594 (executing program) 2021/10/18 14:40:15 fetching corpus: 9509, signal 265590/345594 (executing program) 2021/10/18 14:40:16 fetching corpus: 9559, signal 266023/345594 (executing program) 2021/10/18 14:40:16 fetching corpus: 9609, signal 266492/345594 (executing program) 2021/10/18 14:40:16 fetching corpus: 9658, signal 266933/345598 (executing program) 2021/10/18 14:40:16 fetching corpus: 9707, signal 267457/345598 (executing program) 2021/10/18 14:40:16 fetching corpus: 9757, signal 267851/345598 (executing program) 2021/10/18 14:40:17 fetching corpus: 9807, signal 268304/345604 (executing program) 2021/10/18 14:40:17 fetching corpus: 9857, signal 268734/345606 (executing program) 2021/10/18 14:40:17 fetching corpus: 9907, signal 269132/345606 (executing program) 2021/10/18 14:40:17 fetching corpus: 9956, signal 269535/345625 (executing program) 2021/10/18 14:40:18 fetching corpus: 10004, signal 269905/345625 (executing program) 2021/10/18 14:40:18 fetching corpus: 10052, signal 270222/345625 (executing program) 2021/10/18 14:40:18 fetching corpus: 10101, signal 270767/345625 (executing program) 2021/10/18 14:40:19 fetching corpus: 10151, signal 271105/345626 (executing program) 2021/10/18 14:40:19 fetching corpus: 10201, signal 271541/345626 (executing program) 2021/10/18 14:40:19 fetching corpus: 10251, signal 271827/345626 (executing program) 2021/10/18 14:40:19 fetching corpus: 10301, signal 272073/345626 (executing program) 2021/10/18 14:40:19 fetching corpus: 10351, signal 272571/345626 (executing program) 2021/10/18 14:40:20 fetching corpus: 10401, signal 272949/345629 (executing program) 2021/10/18 14:40:20 fetching corpus: 10450, signal 273459/345636 (executing program) 2021/10/18 14:40:20 fetching corpus: 10500, signal 273728/345643 (executing program) 2021/10/18 14:40:21 fetching corpus: 10550, signal 274110/345644 (executing program) 2021/10/18 14:40:21 fetching corpus: 10600, signal 274473/345644 (executing program) 2021/10/18 14:40:21 fetching corpus: 10650, signal 274790/345644 (executing program) 2021/10/18 14:40:21 fetching corpus: 10700, signal 275399/345644 (executing program) 2021/10/18 14:40:21 fetching corpus: 10750, signal 275713/345644 (executing program) 2021/10/18 14:40:22 fetching corpus: 10800, signal 276035/345644 (executing program) 2021/10/18 14:40:22 fetching corpus: 10848, signal 276318/345644 (executing program) 2021/10/18 14:40:22 fetching corpus: 10897, signal 276581/345649 (executing program) 2021/10/18 14:40:22 fetching corpus: 10946, signal 276880/345649 (executing program) 2021/10/18 14:40:22 fetching corpus: 10996, signal 277166/345649 (executing program) 2021/10/18 14:40:23 fetching corpus: 11045, signal 277623/345649 (executing program) 2021/10/18 14:40:23 fetching corpus: 11094, signal 277879/345663 (executing program) 2021/10/18 14:40:23 fetching corpus: 11142, signal 278209/345665 (executing program) 2021/10/18 14:40:23 fetching corpus: 11192, signal 278579/345668 (executing program) 2021/10/18 14:40:23 fetching corpus: 11242, signal 278949/345668 (executing program) 2021/10/18 14:40:24 fetching corpus: 11292, signal 279249/345668 (executing program) 2021/10/18 14:40:24 fetching corpus: 11342, signal 279622/345668 (executing program) 2021/10/18 14:40:24 fetching corpus: 11391, signal 279881/345668 (executing program) 2021/10/18 14:40:24 fetching corpus: 11441, signal 280232/345668 (executing program) 2021/10/18 14:40:25 fetching corpus: 11491, signal 280593/345668 (executing program) 2021/10/18 14:40:25 fetching corpus: 11539, signal 280925/345680 (executing program) 2021/10/18 14:40:25 fetching corpus: 11589, signal 281279/345680 (executing program) 2021/10/18 14:40:25 fetching corpus: 11638, signal 281680/345680 (executing program) 2021/10/18 14:40:26 fetching corpus: 11687, signal 282005/345694 (executing program) 2021/10/18 14:40:26 fetching corpus: 11737, signal 282267/345694 (executing program) 2021/10/18 14:40:26 fetching corpus: 11786, signal 282632/345701 (executing program) 2021/10/18 14:40:26 fetching corpus: 11836, signal 283012/345701 (executing program) 2021/10/18 14:40:27 fetching corpus: 11886, signal 283258/345701 (executing program) 2021/10/18 14:40:27 fetching corpus: 11933, signal 283540/345701 (executing program) 2021/10/18 14:40:27 fetching corpus: 11982, signal 283851/345705 (executing program) 2021/10/18 14:40:27 fetching corpus: 12032, signal 284089/345705 (executing program) 2021/10/18 14:40:27 fetching corpus: 12078, signal 284542/345706 (executing program) 2021/10/18 14:40:28 fetching corpus: 12128, signal 284867/345708 (executing program) 2021/10/18 14:40:28 fetching corpus: 12177, signal 285164/345708 (executing program) 2021/10/18 14:40:28 fetching corpus: 12226, signal 285552/345708 (executing program) 2021/10/18 14:40:28 fetching corpus: 12275, signal 285978/345708 (executing program) 2021/10/18 14:40:29 fetching corpus: 12323, signal 286241/345711 (executing program) 2021/10/18 14:40:29 fetching corpus: 12373, signal 286648/345711 (executing program) 2021/10/18 14:40:29 fetching corpus: 12423, signal 286892/345711 (executing program) 2021/10/18 14:40:29 fetching corpus: 12472, signal 287178/345711 (executing program) 2021/10/18 14:40:30 fetching corpus: 12522, signal 287537/345711 (executing program) 2021/10/18 14:40:30 fetching corpus: 12571, signal 287887/345717 (executing program) 2021/10/18 14:40:30 fetching corpus: 12620, signal 288205/345717 (executing program) 2021/10/18 14:40:30 fetching corpus: 12670, signal 288613/345717 (executing program) 2021/10/18 14:40:30 fetching corpus: 12720, signal 288917/345717 (executing program) 2021/10/18 14:40:31 fetching corpus: 12770, signal 289223/345717 (executing program) 2021/10/18 14:40:31 fetching corpus: 12819, signal 289574/345717 (executing program) 2021/10/18 14:40:31 fetching corpus: 12869, signal 289839/345726 (executing program) 2021/10/18 14:40:31 fetching corpus: 12919, signal 290227/345726 (executing program) 2021/10/18 14:40:31 fetching corpus: 12969, signal 290498/345726 (executing program) 2021/10/18 14:40:32 fetching corpus: 13019, signal 290884/345726 (executing program) 2021/10/18 14:40:32 fetching corpus: 13069, signal 291161/345726 (executing program) 2021/10/18 14:40:32 fetching corpus: 13118, signal 291458/345727 (executing program) 2021/10/18 14:40:32 fetching corpus: 13167, signal 291861/345728 (executing program) 2021/10/18 14:40:32 fetching corpus: 13217, signal 292136/345728 (executing program) 2021/10/18 14:40:33 fetching corpus: 13266, signal 292358/345729 (executing program) 2021/10/18 14:40:33 fetching corpus: 13316, signal 292646/345729 (executing program) 2021/10/18 14:40:33 fetching corpus: 13366, signal 292992/345736 (executing program) 2021/10/18 14:40:33 fetching corpus: 13415, signal 293266/345736 (executing program) 2021/10/18 14:40:33 fetching corpus: 13465, signal 293560/345736 (executing program) 2021/10/18 14:40:34 fetching corpus: 13513, signal 293821/345746 (executing program) 2021/10/18 14:40:34 fetching corpus: 13563, signal 294088/345752 (executing program) 2021/10/18 14:40:34 fetching corpus: 13610, signal 294397/345757 (executing program) 2021/10/18 14:40:34 fetching corpus: 13656, signal 294721/345757 (executing program) 2021/10/18 14:40:34 fetching corpus: 13706, signal 294992/345757 (executing program) 2021/10/18 14:40:35 fetching corpus: 13756, signal 295268/345763 (executing program) 2021/10/18 14:40:35 fetching corpus: 13806, signal 295509/345763 (executing program) 2021/10/18 14:40:35 fetching corpus: 13855, signal 295746/345763 (executing program) [ 132.582354][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.588762][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 2021/10/18 14:40:35 fetching corpus: 13903, signal 296013/345769 (executing program) 2021/10/18 14:40:35 fetching corpus: 13951, signal 296249/345776 (executing program) 2021/10/18 14:40:36 fetching corpus: 13999, signal 296508/345777 (executing program) 2021/10/18 14:40:36 fetching corpus: 14049, signal 296781/345787 (executing program) 2021/10/18 14:40:36 fetching corpus: 14099, signal 297092/345787 (executing program) 2021/10/18 14:40:36 fetching corpus: 14149, signal 297360/345788 (executing program) 2021/10/18 14:40:37 fetching corpus: 14199, signal 297593/345793 (executing program) 2021/10/18 14:40:37 fetching corpus: 14249, signal 297784/345804 (executing program) 2021/10/18 14:40:37 fetching corpus: 14299, signal 298020/345804 (executing program) 2021/10/18 14:40:37 fetching corpus: 14348, signal 298418/345804 (executing program) 2021/10/18 14:40:37 fetching corpus: 14398, signal 298677/345806 (executing program) 2021/10/18 14:40:37 fetching corpus: 14446, signal 298919/345806 (executing program) 2021/10/18 14:40:38 fetching corpus: 14496, signal 299172/345817 (executing program) 2021/10/18 14:40:38 fetching corpus: 14546, signal 299427/345817 (executing program) 2021/10/18 14:40:38 fetching corpus: 14595, signal 299734/345819 (executing program) 2021/10/18 14:40:38 fetching corpus: 14644, signal 299957/345819 (executing program) 2021/10/18 14:40:38 fetching corpus: 14694, signal 300273/345819 (executing program) 2021/10/18 14:40:38 fetching corpus: 14742, signal 300528/345819 (executing program) 2021/10/18 14:40:38 fetching corpus: 14792, signal 300751/345819 (executing program) 2021/10/18 14:40:39 fetching corpus: 14840, signal 301051/345819 (executing program) 2021/10/18 14:40:39 fetching corpus: 14888, signal 301360/345821 (executing program) 2021/10/18 14:40:39 fetching corpus: 14938, signal 301670/345824 (executing program) 2021/10/18 14:40:39 fetching corpus: 14987, signal 301916/345824 (executing program) 2021/10/18 14:40:39 fetching corpus: 15035, signal 302198/345824 (executing program) 2021/10/18 14:40:39 fetching corpus: 15085, signal 302525/345824 (executing program) 2021/10/18 14:40:39 fetching corpus: 15135, signal 302763/345826 (executing program) 2021/10/18 14:40:39 fetching corpus: 15184, signal 302935/345832 (executing program) 2021/10/18 14:40:40 fetching corpus: 15234, signal 303283/345832 (executing program) 2021/10/18 14:40:40 fetching corpus: 15283, signal 303557/345832 (executing program) 2021/10/18 14:40:40 fetching corpus: 15333, signal 303955/345834 (executing program) 2021/10/18 14:40:40 fetching corpus: 15382, signal 304224/345834 (executing program) 2021/10/18 14:40:40 fetching corpus: 15432, signal 304568/345834 (executing program) 2021/10/18 14:40:40 fetching corpus: 15482, signal 304814/345834 (executing program) 2021/10/18 14:40:40 fetching corpus: 15532, signal 305090/345834 (executing program) 2021/10/18 14:40:40 fetching corpus: 15582, signal 305291/345834 (executing program) 2021/10/18 14:40:41 fetching corpus: 15632, signal 305600/345834 (executing program) 2021/10/18 14:40:41 fetching corpus: 15682, signal 305825/345834 (executing program) 2021/10/18 14:40:41 fetching corpus: 15732, signal 306035/345834 (executing program) 2021/10/18 14:40:41 fetching corpus: 15779, signal 306254/345842 (executing program) 2021/10/18 14:40:41 fetching corpus: 15829, signal 306540/345846 (executing program) 2021/10/18 14:40:41 fetching corpus: 15879, signal 306840/345846 (executing program) 2021/10/18 14:40:41 fetching corpus: 15929, signal 307094/345846 (executing program) 2021/10/18 14:40:41 fetching corpus: 15979, signal 307379/345846 (executing program) 2021/10/18 14:40:42 fetching corpus: 16029, signal 307601/345846 (executing program) 2021/10/18 14:40:42 fetching corpus: 16079, signal 307882/345846 (executing program) 2021/10/18 14:40:42 fetching corpus: 16129, signal 308107/345846 (executing program) 2021/10/18 14:40:42 fetching corpus: 16178, signal 308326/345846 (executing program) 2021/10/18 14:40:42 fetching corpus: 16228, signal 308640/345846 (executing program) 2021/10/18 14:40:42 fetching corpus: 16277, signal 308997/345846 (executing program) 2021/10/18 14:40:42 fetching corpus: 16323, signal 309249/345847 (executing program) 2021/10/18 14:40:42 fetching corpus: 16373, signal 309493/345847 (executing program) 2021/10/18 14:40:43 fetching corpus: 16423, signal 309747/345852 (executing program) 2021/10/18 14:40:43 fetching corpus: 16473, signal 309991/345852 (executing program) 2021/10/18 14:40:43 fetching corpus: 16523, signal 310316/345852 (executing program) 2021/10/18 14:40:43 fetching corpus: 16573, signal 310579/345852 (executing program) 2021/10/18 14:40:43 fetching corpus: 16623, signal 310912/345852 (executing program) 2021/10/18 14:40:43 fetching corpus: 16673, signal 311268/345852 (executing program) 2021/10/18 14:40:43 fetching corpus: 16723, signal 311533/345852 (executing program) 2021/10/18 14:40:44 fetching corpus: 16773, signal 311793/345852 (executing program) 2021/10/18 14:40:44 fetching corpus: 16822, signal 312086/345865 (executing program) 2021/10/18 14:40:44 fetching corpus: 16872, signal 312250/345865 (executing program) 2021/10/18 14:40:44 fetching corpus: 16921, signal 312495/345865 (executing program) 2021/10/18 14:40:44 fetching corpus: 16971, signal 312734/345865 (executing program) 2021/10/18 14:40:44 fetching corpus: 17021, signal 312934/345865 (executing program) 2021/10/18 14:40:44 fetching corpus: 17071, signal 313125/345865 (executing program) 2021/10/18 14:40:44 fetching corpus: 17120, signal 313843/345865 (executing program) 2021/10/18 14:40:44 fetching corpus: 17169, signal 314091/345865 (executing program) 2021/10/18 14:40:45 fetching corpus: 17219, signal 314324/345865 (executing program) 2021/10/18 14:40:45 fetching corpus: 17269, signal 314660/345865 (executing program) 2021/10/18 14:40:45 fetching corpus: 17317, signal 314874/345865 (executing program) 2021/10/18 14:40:45 fetching corpus: 17365, signal 315128/345865 (executing program) 2021/10/18 14:40:45 fetching corpus: 17415, signal 315479/345865 (executing program) 2021/10/18 14:40:45 fetching corpus: 17464, signal 315707/345865 (executing program) 2021/10/18 14:40:45 fetching corpus: 17514, signal 315984/345877 (executing program) 2021/10/18 14:40:46 fetching corpus: 17560, signal 316142/345891 (executing program) 2021/10/18 14:40:46 fetching corpus: 17609, signal 316369/345891 (executing program) 2021/10/18 14:40:46 fetching corpus: 17659, signal 316574/345891 (executing program) 2021/10/18 14:40:46 fetching corpus: 17708, signal 316852/345891 (executing program) 2021/10/18 14:40:46 fetching corpus: 17758, signal 317162/345897 (executing program) 2021/10/18 14:40:46 fetching corpus: 17806, signal 317376/345897 (executing program) 2021/10/18 14:40:46 fetching corpus: 17855, signal 317585/345897 (executing program) 2021/10/18 14:40:46 fetching corpus: 17904, signal 317849/345897 (executing program) 2021/10/18 14:40:47 fetching corpus: 17952, signal 318076/345897 (executing program) 2021/10/18 14:40:47 fetching corpus: 18000, signal 318252/345900 (executing program) 2021/10/18 14:40:47 fetching corpus: 18050, signal 318484/345900 (executing program) 2021/10/18 14:40:47 fetching corpus: 18100, signal 318753/345901 (executing program) 2021/10/18 14:40:47 fetching corpus: 18150, signal 318912/345901 (executing program) 2021/10/18 14:40:47 fetching corpus: 18200, signal 319089/345901 (executing program) 2021/10/18 14:40:47 fetching corpus: 18250, signal 319349/345901 (executing program) 2021/10/18 14:40:47 fetching corpus: 18299, signal 319520/345901 (executing program) 2021/10/18 14:40:48 fetching corpus: 18347, signal 319782/345901 (executing program) 2021/10/18 14:40:48 fetching corpus: 18397, signal 319947/345901 (executing program) 2021/10/18 14:40:48 fetching corpus: 18446, signal 320255/345901 (executing program) 2021/10/18 14:40:48 fetching corpus: 18496, signal 320438/345903 (executing program) 2021/10/18 14:40:48 fetching corpus: 18545, signal 320638/345905 (executing program) 2021/10/18 14:40:48 fetching corpus: 18594, signal 320872/345905 (executing program) 2021/10/18 14:40:48 fetching corpus: 18643, signal 321058/345905 (executing program) 2021/10/18 14:40:48 fetching corpus: 18692, signal 321284/345905 (executing program) 2021/10/18 14:40:48 fetching corpus: 18741, signal 321510/345913 (executing program) 2021/10/18 14:40:49 fetching corpus: 18791, signal 321695/345917 (executing program) 2021/10/18 14:40:49 fetching corpus: 18839, signal 321952/345917 (executing program) 2021/10/18 14:40:49 fetching corpus: 18887, signal 322194/345917 (executing program) 2021/10/18 14:40:49 fetching corpus: 18936, signal 322472/345917 (executing program) 2021/10/18 14:40:49 fetching corpus: 18984, signal 322675/345917 (executing program) 2021/10/18 14:40:49 fetching corpus: 19034, signal 322863/345917 (executing program) 2021/10/18 14:40:49 fetching corpus: 19082, signal 323146/345917 (executing program) 2021/10/18 14:40:50 fetching corpus: 19132, signal 323423/345941 (executing program) 2021/10/18 14:40:50 fetching corpus: 19179, signal 323679/345952 (executing program) 2021/10/18 14:40:50 fetching corpus: 19229, signal 323955/345952 (executing program) 2021/10/18 14:40:50 fetching corpus: 19279, signal 324140/345952 (executing program) 2021/10/18 14:40:50 fetching corpus: 19327, signal 324329/345963 (executing program) 2021/10/18 14:40:50 fetching corpus: 19377, signal 324544/345963 (executing program) 2021/10/18 14:40:50 fetching corpus: 19427, signal 324767/345963 (executing program) 2021/10/18 14:40:50 fetching corpus: 19476, signal 324959/345963 (executing program) 2021/10/18 14:40:51 fetching corpus: 19526, signal 325136/345963 (executing program) 2021/10/18 14:40:51 fetching corpus: 19575, signal 325363/345967 (executing program) 2021/10/18 14:40:51 fetching corpus: 19624, signal 325560/345967 (executing program) 2021/10/18 14:40:51 fetching corpus: 19674, signal 325733/345967 (executing program) 2021/10/18 14:40:51 fetching corpus: 19723, signal 325954/345967 (executing program) 2021/10/18 14:40:51 fetching corpus: 19773, signal 326157/345967 (executing program) 2021/10/18 14:40:51 fetching corpus: 19822, signal 326333/345967 (executing program) 2021/10/18 14:40:51 fetching corpus: 19871, signal 326539/345967 (executing program) 2021/10/18 14:40:52 fetching corpus: 19919, signal 326776/345973 (executing program) 2021/10/18 14:40:52 fetching corpus: 19969, signal 326964/345973 (executing program) 2021/10/18 14:40:52 fetching corpus: 20016, signal 327195/345973 (executing program) 2021/10/18 14:40:52 fetching corpus: 20065, signal 327438/345973 (executing program) 2021/10/18 14:40:52 fetching corpus: 20114, signal 327656/345973 (executing program) 2021/10/18 14:40:52 fetching corpus: 20161, signal 327870/345973 (executing program) 2021/10/18 14:40:52 fetching corpus: 20210, signal 328052/345973 (executing program) 2021/10/18 14:40:52 fetching corpus: 20259, signal 328275/345973 (executing program) 2021/10/18 14:40:53 fetching corpus: 20309, signal 328486/345973 (executing program) 2021/10/18 14:40:53 fetching corpus: 20359, signal 328752/345973 (executing program) 2021/10/18 14:40:53 fetching corpus: 20409, signal 328948/345973 (executing program) 2021/10/18 14:40:53 fetching corpus: 20459, signal 329205/345973 (executing program) 2021/10/18 14:40:53 fetching corpus: 20508, signal 329373/345973 (executing program) 2021/10/18 14:40:53 fetching corpus: 20557, signal 329586/345973 (executing program) 2021/10/18 14:40:53 fetching corpus: 20607, signal 329832/345973 (executing program) 2021/10/18 14:40:54 fetching corpus: 20657, signal 330045/345973 (executing program) 2021/10/18 14:40:54 fetching corpus: 20707, signal 330206/345973 (executing program) 2021/10/18 14:40:54 fetching corpus: 20757, signal 330383/345973 (executing program) 2021/10/18 14:40:54 fetching corpus: 20806, signal 330561/345973 (executing program) 2021/10/18 14:40:54 fetching corpus: 20856, signal 330731/345973 (executing program) 2021/10/18 14:40:54 fetching corpus: 20905, signal 330934/345978 (executing program) 2021/10/18 14:40:54 fetching corpus: 20954, signal 331115/345978 (executing program) 2021/10/18 14:40:54 fetching corpus: 21004, signal 331269/345978 (executing program) 2021/10/18 14:40:54 fetching corpus: 21053, signal 331472/345989 (executing program) 2021/10/18 14:40:55 fetching corpus: 21102, signal 331669/345998 (executing program) 2021/10/18 14:40:55 fetching corpus: 21151, signal 331897/345998 (executing program) 2021/10/18 14:40:55 fetching corpus: 21201, signal 332063/345998 (executing program) 2021/10/18 14:40:55 fetching corpus: 21251, signal 332243/345998 (executing program) 2021/10/18 14:40:55 fetching corpus: 21300, signal 332498/346000 (executing program) 2021/10/18 14:40:55 fetching corpus: 21350, signal 332630/346000 (executing program) 2021/10/18 14:40:55 fetching corpus: 21400, signal 332829/346000 (executing program) 2021/10/18 14:40:55 fetching corpus: 21449, signal 333052/346000 (executing program) 2021/10/18 14:40:55 fetching corpus: 21498, signal 333294/346002 (executing program) 2021/10/18 14:40:56 fetching corpus: 21548, signal 333509/346003 (executing program) 2021/10/18 14:40:56 fetching corpus: 21597, signal 333682/346003 (executing program) 2021/10/18 14:40:56 fetching corpus: 21646, signal 333884/346003 (executing program) 2021/10/18 14:40:56 fetching corpus: 21695, signal 334036/346023 (executing program) 2021/10/18 14:40:56 fetching corpus: 21744, signal 334227/346023 (executing program) 2021/10/18 14:40:56 fetching corpus: 21794, signal 334423/346023 (executing program) 2021/10/18 14:40:56 fetching corpus: 21842, signal 334604/346023 (executing program) 2021/10/18 14:40:57 fetching corpus: 21890, signal 334929/346024 (executing program) 2021/10/18 14:40:57 fetching corpus: 21937, signal 335173/346027 (executing program) 2021/10/18 14:40:57 fetching corpus: 21986, signal 335503/346029 (executing program) 2021/10/18 14:40:57 fetching corpus: 22034, signal 335755/346029 (executing program) 2021/10/18 14:40:57 fetching corpus: 22083, signal 336004/346036 (executing program) 2021/10/18 14:40:57 fetching corpus: 22133, signal 336169/346044 (executing program) 2021/10/18 14:40:58 fetching corpus: 22182, signal 336374/346044 (executing program) 2021/10/18 14:40:58 fetching corpus: 22232, signal 336543/346044 (executing program) 2021/10/18 14:40:58 fetching corpus: 22281, signal 336684/346044 (executing program) 2021/10/18 14:40:58 fetching corpus: 22329, signal 336868/346044 (executing program) 2021/10/18 14:40:58 fetching corpus: 22379, signal 337061/346044 (executing program) 2021/10/18 14:40:58 fetching corpus: 22429, signal 337253/346044 (executing program) 2021/10/18 14:40:58 fetching corpus: 22478, signal 337423/346047 (executing program) 2021/10/18 14:40:59 fetching corpus: 22526, signal 337627/346058 (executing program) 2021/10/18 14:40:59 fetching corpus: 22576, signal 337846/346058 (executing program) 2021/10/18 14:40:59 fetching corpus: 22625, signal 337990/346058 (executing program) 2021/10/18 14:40:59 fetching corpus: 22674, signal 338178/346058 (executing program) 2021/10/18 14:40:59 fetching corpus: 22723, signal 338335/346058 (executing program) 2021/10/18 14:40:59 fetching corpus: 22773, signal 338498/346058 (executing program) 2021/10/18 14:40:59 fetching corpus: 22823, signal 338677/346058 (executing program) 2021/10/18 14:40:59 fetching corpus: 22872, signal 338864/346058 (executing program) 2021/10/18 14:40:59 fetching corpus: 22921, signal 339057/346060 (executing program) 2021/10/18 14:41:00 fetching corpus: 22971, signal 339252/346060 (executing program) 2021/10/18 14:41:00 fetching corpus: 23020, signal 339439/346060 (executing program) 2021/10/18 14:41:00 fetching corpus: 23070, signal 339628/346060 (executing program) 2021/10/18 14:41:00 fetching corpus: 23119, signal 339773/346060 (executing program) 2021/10/18 14:41:00 fetching corpus: 23169, signal 339965/346060 (executing program) 2021/10/18 14:41:00 fetching corpus: 23219, signal 340135/346060 (executing program) 2021/10/18 14:41:00 fetching corpus: 23268, signal 340327/346062 (executing program) 2021/10/18 14:41:00 fetching corpus: 23318, signal 340501/346062 (executing program) 2021/10/18 14:41:00 fetching corpus: 23368, signal 340676/346062 (executing program) 2021/10/18 14:41:01 fetching corpus: 23417, signal 340856/346062 (executing program) 2021/10/18 14:41:01 fetching corpus: 23466, signal 341102/346069 (executing program) 2021/10/18 14:41:01 fetching corpus: 23515, signal 341358/346069 (executing program) 2021/10/18 14:41:01 fetching corpus: 23565, signal 341509/346069 (executing program) 2021/10/18 14:41:01 fetching corpus: 23615, signal 341710/346069 (executing program) 2021/10/18 14:41:01 fetching corpus: 23665, signal 341925/346069 (executing program) 2021/10/18 14:41:01 fetching corpus: 23714, signal 342142/346070 (executing program) 2021/10/18 14:41:01 fetching corpus: 23763, signal 342339/346071 (executing program) 2021/10/18 14:41:02 fetching corpus: 23810, signal 342549/346085 (executing program) 2021/10/18 14:41:02 fetching corpus: 23851, signal 342678/346085 (executing program) 2021/10/18 14:41:02 fetching corpus: 23851, signal 342678/346085 (executing program) 2021/10/18 14:41:03 starting 6 fuzzer processes 14:41:03 executing program 0: r0 = socket(0x10, 0x800000000000002, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000100)="1f0000000104ff00fd4354fec5e7834392466f000800010001f422dcffdf00", 0x1f) close(r0) 14:41:04 executing program 1: r0 = socket(0x1000000010, 0x80002, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@ipmr_getroute={0x1c, 0x1a, 0x1}, 0x1c}}, 0x0) 14:41:04 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002240)={0x11, 0x4, &(0x7f00000002c0)=@framed={{}, [@func]}, &(0x7f0000000240)='syzkaller\x00', 0x5, 0xc2, &(0x7f0000000340)=""/194, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:41:04 executing program 3: unshare(0x40000000) pipe(&(0x7f0000000000)) 14:41:04 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, {{0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, "ee95c3", 0x0, "a85c8b"}}}}}}, 0x0) 14:41:05 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000440), 0x4) [ 162.552887][ T6584] chnl_net:caif_netlink_parms(): no params data found [ 162.850838][ T6586] chnl_net:caif_netlink_parms(): no params data found [ 162.902424][ T6584] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.911468][ T6584] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.920091][ T6584] device bridge_slave_0 entered promiscuous mode [ 162.944526][ T6584] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.952272][ T6584] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.960785][ T6584] device bridge_slave_1 entered promiscuous mode [ 163.009651][ T6584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.034141][ T6584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.128533][ T6586] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.179971][ T6586] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.188051][ T6586] device bridge_slave_0 entered promiscuous mode [ 163.205066][ T6584] team0: Port device team_slave_0 added [ 163.233831][ T6586] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.241351][ T6586] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.250418][ T6586] device bridge_slave_1 entered promiscuous mode [ 163.277309][ T6584] team0: Port device team_slave_1 added [ 163.300875][ T6588] chnl_net:caif_netlink_parms(): no params data found [ 163.327555][ T6586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 163.384774][ T6586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 163.431048][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.438020][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.464898][ T6584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.502777][ T6586] team0: Port device team_slave_0 added [ 163.511195][ T6584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.518149][ T6584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.544437][ T6584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.567781][ T6586] team0: Port device team_slave_1 added [ 163.644968][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.654844][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.681858][ T6586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.697391][ T6586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.704442][ T6586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.730803][ T6586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.754268][ T6584] device hsr_slave_0 entered promiscuous mode [ 163.764464][ T6584] device hsr_slave_1 entered promiscuous mode [ 163.777744][ T6588] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.790000][ T6588] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.798059][ T6588] device bridge_slave_0 entered promiscuous mode [ 163.830952][ T6588] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.850091][ T6588] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.865446][ T6588] device bridge_slave_1 entered promiscuous mode [ 163.997329][ T6588] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.014167][ T6586] device hsr_slave_0 entered promiscuous mode [ 164.023234][ T6586] device hsr_slave_1 entered promiscuous mode [ 164.031540][ T6586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.040035][ T6586] Cannot create hsr debugfs directory [ 164.056956][ T6588] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.089960][ T2349] Bluetooth: hci0: command 0x0409 tx timeout [ 164.175448][ T6588] team0: Port device team_slave_0 added [ 164.191345][ T6588] team0: Port device team_slave_1 added [ 164.300614][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.324858][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.352233][ T6588] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.364292][ T5] Bluetooth: hci1: command 0x0409 tx timeout [ 164.397862][ T6588] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.405122][ T6588] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.433876][ T6588] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.473389][ T6604] chnl_net:caif_netlink_parms(): no params data found [ 164.589752][ T6588] device hsr_slave_0 entered promiscuous mode [ 164.596585][ T6588] device hsr_slave_1 entered promiscuous mode [ 164.607327][ T6588] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.615559][ T6588] Cannot create hsr debugfs directory [ 164.662730][ T5] Bluetooth: hci2: command 0x0409 tx timeout [ 164.700189][ T6772] chnl_net:caif_netlink_parms(): no params data found [ 164.847870][ T6604] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.858873][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.866587][ T6604] device bridge_slave_0 entered promiscuous mode [ 164.880349][ T6604] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.889117][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.897214][ T6604] device bridge_slave_1 entered promiscuous mode [ 164.991450][ T6772] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.998613][ T6772] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.007319][ T6772] device bridge_slave_0 entered promiscuous mode [ 165.018789][ T6772] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.025866][ T6772] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.034841][ T6772] device bridge_slave_1 entered promiscuous mode [ 165.059771][ T6604] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.083265][ T6584] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 165.099186][ T6604] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.136074][ T6584] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 165.159352][ T6772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 165.174246][ T6584] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 165.213557][ T2958] Bluetooth: hci4: command 0x0409 tx timeout [ 165.218324][ T6604] team0: Port device team_slave_0 added [ 165.227306][ T6772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 165.256273][ T6584] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 165.269510][ T6604] team0: Port device team_slave_1 added [ 165.275703][ T6586] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 165.304220][ T6772] team0: Port device team_slave_0 added [ 165.316814][ T6772] team0: Port device team_slave_1 added [ 165.334794][ T6586] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 165.405049][ T6586] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 165.423723][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.432159][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.459737][ T6772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.473340][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.480455][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.506546][ T6604] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.519861][ T6604] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.527333][ T6604] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.559079][ T6604] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.571103][ T6586] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 165.580948][ T6588] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 165.592105][ T6772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.599117][ T6772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.625763][ T6772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.672335][ T6588] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 165.707979][ T6604] device hsr_slave_0 entered promiscuous mode [ 165.715383][ T6604] device hsr_slave_1 entered promiscuous mode [ 165.723215][ T6604] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.731858][ T6604] Cannot create hsr debugfs directory [ 165.753993][ T6588] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 165.777930][ T6772] device hsr_slave_0 entered promiscuous mode [ 165.787648][ T6772] device hsr_slave_1 entered promiscuous mode [ 165.794455][ T6772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.803277][ T6772] Cannot create hsr debugfs directory [ 165.824216][ T6588] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 165.848923][ T25] Bluetooth: hci5: command 0x0409 tx timeout [ 166.134418][ T6584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.165350][ T6586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.174553][ T25] Bluetooth: hci0: command 0x041b tx timeout [ 166.211879][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.221367][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.233913][ T6586] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.248429][ T6584] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.271268][ T6604] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 166.292513][ T6588] 8021q: adding VLAN 0 to HW filter on device bond0 [ 166.304491][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.313463][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.324270][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.333880][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.343744][ T8000] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.351026][ T8000] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.360429][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.386380][ T6604] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 166.396359][ T6604] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.409063][ T20] Bluetooth: hci1: command 0x041b tx timeout [ 166.419718][ T6588] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.426797][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.438399][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.447624][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.454732][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.462619][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.471889][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.480897][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.490616][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.502173][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 166.510017][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 166.531274][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.540102][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.549176][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.558043][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.565661][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.573938][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.583655][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.592328][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.601559][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.610447][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.617524][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.625701][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.634690][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.643441][ T6604] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.683101][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.693098][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 166.702215][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 166.712540][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.719826][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.728143][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 166.730226][ T20] Bluetooth: hci2: command 0x041b tx timeout [ 166.738295][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 166.751611][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.758736][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.766234][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.775288][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.784567][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 166.803724][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 166.818825][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.827971][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.842943][ T6772] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 166.853316][ T6772] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 166.886032][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 166.894045][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 166.908128][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 166.917046][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 166.931093][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 166.940225][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 166.948569][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 166.958143][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 166.966864][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 166.975444][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 166.986404][ T6584] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.000571][ T6772] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 167.009928][ T6772] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 167.032662][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 167.041939][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.051226][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 167.060272][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 167.069301][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 167.077921][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.086737][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.095331][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 167.104063][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 167.134811][ T6588] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.148179][ T6586] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 167.176449][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.184123][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.205481][ T6584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.235655][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.243809][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.280509][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 167.288096][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 167.289074][ T8087] Bluetooth: hci4: command 0x041b tx timeout [ 167.310718][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.319762][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.336794][ T6588] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.347818][ T6586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 167.377718][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.386055][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.396005][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.406246][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.417706][ T6604] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.443633][ T6584] device veth0_vlan entered promiscuous mode [ 167.476436][ T6772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 167.492897][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.504879][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.524151][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.533315][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.546878][ T6584] device veth1_vlan entered promiscuous mode [ 167.556048][ T6604] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.585202][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.593364][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 167.603524][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 167.616335][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 167.624859][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 167.632987][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.641859][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.651768][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 167.660001][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 167.678067][ T6772] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.690926][ T6586] device veth0_vlan entered promiscuous mode [ 167.708070][ T6586] device veth1_vlan entered promiscuous mode [ 167.715734][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 167.724542][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 167.733735][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.744858][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.753852][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.761004][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.768572][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.777202][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.786208][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.793399][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.801194][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 167.811760][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 167.826286][ T6588] device veth0_vlan entered promiscuous mode [ 167.865501][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 167.873938][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 167.883350][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 167.893668][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 167.902726][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 167.910105][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 167.917669][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 167.926626][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 167.929133][ T2349] Bluetooth: hci5: command 0x041b tx timeout [ 167.935640][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 167.951325][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 167.961057][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 167.970353][ T1052] bridge0: port 2(bridge_slave_1) entered blocking state [ 167.977549][ T1052] bridge0: port 2(bridge_slave_1) entered forwarding state [ 167.985981][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 167.995076][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.004236][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 168.014301][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.023476][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.034299][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 168.044495][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 168.052871][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 168.061550][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.074166][ T6588] device veth1_vlan entered promiscuous mode [ 168.112505][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 168.121063][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 168.129876][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.138403][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.147224][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.156274][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.164899][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 168.173902][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 168.185311][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 168.194144][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 168.203080][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 168.213956][ T6604] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.225520][ T6584] device veth0_macvtap entered promiscuous mode [ 168.245283][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.253606][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 168.262081][ T2349] Bluetooth: hci0: command 0x040f tx timeout [ 168.286458][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.294935][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.305016][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 168.314333][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 168.325149][ T6586] device veth0_macvtap entered promiscuous mode [ 168.340732][ T6584] device veth1_macvtap entered promiscuous mode [ 168.359208][ T8243] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.367099][ T8243] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.385293][ T8243] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 168.394309][ T8243] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 168.407773][ T6586] device veth1_macvtap entered promiscuous mode [ 168.430583][ T6772] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 168.468375][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.482479][ T6604] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.489272][ T25] Bluetooth: hci1: command 0x040f tx timeout [ 168.496476][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 168.505444][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.513642][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 168.521902][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.531010][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.553710][ T6586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.563056][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 168.575705][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.587449][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 168.608742][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 168.617532][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 168.626961][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.636185][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.645178][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 168.654532][ T2349] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 168.666746][ T6586] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.679947][ T6586] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.689374][ T6586] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.698088][ T6586] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.709705][ T6588] device veth0_macvtap entered promiscuous mode [ 168.717917][ T6584] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 168.729157][ T6584] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 168.743729][ T6584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 168.755845][ T6584] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.771265][ T6584] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.783708][ T6584] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.794760][ T6584] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 168.809183][ T2349] Bluetooth: hci2: command 0x040f tx timeout [ 168.821865][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 168.838436][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 168.869520][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 168.906847][ T6772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 168.940178][ T6588] device veth1_macvtap entered promiscuous mode [ 168.954348][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 168.962827][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 169.044496][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.055762][ T1264] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.122309][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.136004][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.164746][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 169.175285][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.187232][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.219225][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 169.227922][ T8244] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 169.252494][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.270572][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.280651][ T6588] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 169.293463][ T6588] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.320047][ T6588] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 169.377609][ T8087] Bluetooth: hci4: command 0x040f tx timeout [ 169.395602][ T6604] device veth0_vlan entered promiscuous mode [ 169.404249][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 169.421744][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 169.431312][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.440021][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.463476][ T6588] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.472981][ T6588] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.483205][ T6588] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.492029][ T6588] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.519506][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 169.521005][ T2578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.527331][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 169.546582][ T2578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.561319][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.579412][ T2578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.587640][ T2578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.587670][ T6604] device veth1_vlan entered promiscuous mode [ 169.643329][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 169.657098][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 169.666153][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 169.675434][ T8087] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 169.737257][ T2578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.778942][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 169.780262][ T2578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 169.787649][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 169.829769][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 169.845763][ T6772] device veth0_vlan entered promiscuous mode [ 169.871719][ T6604] device veth0_macvtap entered promiscuous mode [ 169.897335][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 169.906941][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 169.917060][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 169.925948][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 169.939590][ T6772] device veth1_vlan entered promiscuous mode [ 169.967016][ T6604] device veth1_macvtap entered promiscuous mode [ 169.975562][ T2578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 169.986417][ T2578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.001603][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 170.010770][ T8087] Bluetooth: hci5: command 0x040f tx timeout [ 170.019397][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 170.027214][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 170.041881][ T8309] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.074602][ T8309] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.085247][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.087418][ T8309] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.105566][ T8312] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 14:41:13 executing program 0: r0 = socket(0x10, 0x800000000000002, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000100)="1f0000000104ff00fd4354fec5e7834392466f000800010001f422dcffdf00", 0x1f) close(r0) [ 170.123503][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.145021][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.158640][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.206372][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.237487][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.251613][ T8318] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.257831][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 170.274166][ T8318] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.280911][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:41:13 executing program 0: r0 = socket(0x10, 0x800000000000002, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000100)="1f0000000104ff00fd4354fec5e7834392466f000800010001f422dcffdf00", 0x1f) close(r0) [ 170.304322][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.326399][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 170.328948][ T2958] Bluetooth: hci0: command 0x0419 tx timeout [ 170.373131][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 170.391941][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 170.415867][ T8323] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.417506][ T6772] device veth0_macvtap entered promiscuous mode [ 170.452402][ T8323] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. 14:41:13 executing program 1: r0 = socket(0x10, 0x800000000000002, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000100)="1f0000000104ff00fd4354fec5e7834392466f000800010001f422dcffdf00", 0x1f) close(r0) 14:41:13 executing program 0: r0 = socket(0x10, 0x800000000000002, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000100)="1f0000000104ff00fd4354fec5e7834392466f000800010001f422dcffdf00", 0x1f) close(r0) [ 170.494475][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.527819][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.568965][ T20] Bluetooth: hci1: command 0x0419 tx timeout [ 170.576992][ T8331] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.586437][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 170.593257][ T8331] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.612421][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! 14:41:13 executing program 1: r0 = socket(0x10, 0x800000000000002, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000100)="1f0000000104ff00fd4354fec5e7834392466f000800010001f422dcffdf00", 0x1f) close(r0) 14:41:13 executing program 0: syz_genetlink_get_family_id$nbd(&(0x7f0000001140), 0xffffffffffffffff) [ 170.654915][ T6604] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 14:41:13 executing program 1: r0 = socket(0x10, 0x800000000000002, 0xc) write(r0, &(0x7f0000000040)="1f0000000104ff00fd4354c007110000f3e9000008000100010423dcffdf00", 0x1f) write(r0, &(0x7f0000000100)="1f0000000104ff00fd4354fec5e7834392466f000800010001f422dcffdf00", 0x1f) close(r0) [ 170.721458][ T6604] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.760086][ T6604] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.768285][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 170.793834][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 170.815580][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 170.835711][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 170.857873][ T6772] device veth1_macvtap entered promiscuous mode [ 170.891914][ T20] Bluetooth: hci2: command 0x0419 tx timeout 14:41:13 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000000)=""/89, 0x1000000, 0x1000}, 0x1c) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x2f) [ 170.905117][ T6604] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.939019][ T6604] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.992145][ T6604] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.025817][ T6604] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.059996][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 171.081751][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 171.148732][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.156848][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.178029][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.199136][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.210592][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.228628][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.266539][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.277439][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.287503][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 171.298545][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.311338][ T6772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.325302][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.337155][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.347833][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.361050][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.371578][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.382121][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.392444][ T6772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 171.403160][ T6772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.414181][ T6772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.422533][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 171.431541][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 171.441083][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 171.449400][ T8087] Bluetooth: hci4: command 0x0419 tx timeout [ 171.456753][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 171.465430][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 171.486809][ T6772] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.496358][ T6772] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.519488][ T6772] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.528219][ T6772] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 14:41:14 executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x28, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x28}}, 0x0) [ 171.722475][ T2578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.750551][ T2578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.795597][ T8351] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.897302][ T1169] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.906128][ T2578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.917117][ T2578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.926171][ T1169] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.965625][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 171.979305][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.044485][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 172.057283][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.074971][ T2958] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 172.105424][ T8393] dccp_invalid_packet: P.CsCov 9 exceeds packet length 16 [ 172.109722][ T2958] Bluetooth: hci5: command 0x0419 tx timeout [ 172.123064][ T8393] dccp_invalid_packet: P.CsCov 9 exceeds packet length 16 [ 189.125943][ T8415] chnl_net:caif_netlink_parms(): no params data found [ 189.206261][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.214231][ T8415] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.222802][ T8415] device bridge_slave_0 entered promiscuous mode [ 189.231915][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.240316][ T8415] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.248042][ T8415] device bridge_slave_1 entered promiscuous mode [ 189.275789][ T8415] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.291566][ T8415] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.323669][ T8415] team0: Port device team_slave_0 added [ 189.332271][ T8415] team0: Port device team_slave_1 added [ 189.359259][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.366251][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.396186][ T8415] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 189.409447][ T8415] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 189.416438][ T8415] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.443096][ T8415] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 189.489538][ T8415] device hsr_slave_0 entered promiscuous mode [ 189.496194][ T8415] device hsr_slave_1 entered promiscuous mode [ 189.506450][ T8415] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 189.516288][ T8415] Cannot create hsr debugfs directory [ 189.653418][ T8415] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 189.666427][ T8415] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 189.678758][ T8415] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 189.689277][ T8415] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 189.717683][ T8415] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.725017][ T8415] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.733248][ T8415] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.740546][ T8415] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.797804][ T8415] 8021q: adding VLAN 0 to HW filter on device bond0 [ 189.812207][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 189.821118][ T20] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.829329][ T20] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.837671][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 189.853432][ T8415] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.865751][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 189.874958][ T8233] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.882125][ T8233] bridge0: port 1(bridge_slave_0) entered forwarding state [ 189.893940][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 189.903188][ T8233] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.910457][ T8233] bridge0: port 2(bridge_slave_1) entered forwarding state [ 189.931016][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 189.945387][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 189.959226][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 189.979866][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 189.989824][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 190.002558][ T8415] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 190.026725][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 190.034674][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 190.049488][ T8415] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.073948][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 190.103386][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 190.112652][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 190.121400][ T8000] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 190.135036][ T8415] device veth0_vlan entered promiscuous mode [ 190.149806][ T8415] device veth1_vlan entered promiscuous mode [ 190.173476][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 190.184615][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 190.197367][ T8415] device veth0_macvtap entered promiscuous mode [ 190.212849][ T8415] device veth1_macvtap entered promiscuous mode [ 190.231064][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.241963][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.252470][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.263376][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.276255][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.287797][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.300532][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.311590][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.322355][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 190.333879][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.345918][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.354864][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 190.364061][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 190.372798][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 190.382464][ T8233] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 190.396747][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.407970][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.418679][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.432806][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.443087][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.453671][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.464244][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.475957][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.486434][ T8415] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 190.499624][ T8415] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.511630][ T8415] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.522498][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 190.532588][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 190.545519][ T8415] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.555069][ T8415] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.564253][ T8415] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.574197][ T8415] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.668523][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.676578][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.712863][ T1169] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 190.726392][ T1169] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.732168][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 190.754711][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:41:33 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000000)=""/89, 0x1000000, 0x1000}, 0x1c) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x2f) 14:41:33 executing program 1: pselect6(0x40, &(0x7f0000000000), &(0x7f0000000040)={0x4}, 0x0, 0x0, 0x0) 14:41:33 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @dev}, 0x10) 14:41:33 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, {{0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, "ee95c3", 0x0, "a85c8b"}}}}}}, 0x0) 14:41:33 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) 14:41:33 executing program 5: close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0x42, 0x4, 0x280, 0xffffffff, 0x0, 0x150, 0x150, 0xffffffff, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 190.968749][ T8233] Bluetooth: hci3: command 0x0409 tx timeout [ 191.060775][ T8812] device team0 entered promiscuous mode [ 191.067999][ T8811] ipt_REJECT: TCP_RESET invalid for non-tcp [ 191.074692][ T8814] dccp_invalid_packet: P.CsCov 9 exceeds packet length 16 [ 191.082200][ T8812] device team_slave_0 entered promiscuous mode [ 191.093018][ T8817] ipt_REJECT: TCP_RESET invalid for non-tcp [ 191.106809][ T8812] device team_slave_1 entered promiscuous mode 14:41:34 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, {{0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, "ee95c3", 0x0, "a85c8b"}}}}}}, 0x0) 14:41:34 executing program 1: syz_emit_ethernet(0xee, &(0x7f0000000080)={@local, @dev, @val={@void}, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e7102f", 0xb4, 0x6, 0x0, @remote, @ipv4={'\x00', '\xff\xff', @multicast2}, {[@srh={0x0, 0x8, 0x4, 0x4, 0x7f, 0x40, 0x0, [@loopback, @remote, @mcast1, @private1]}, @hopopts={0x3b, 0x8, '\x00', [@calipso={0x7, 0x40, {0x0, 0xe, 0x8, 0x0, [0x2, 0x672, 0x0, 0xff, 0x0, 0x2, 0x3]}}]}], {{0x4e24, 0x4e24, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0x10, 0xfff7, 0x0, 0x8, {[@eol, @generic={0x22, 0x6, "f0bf83e5"}]}}}}}}}}, 0x0) 14:41:34 executing program 5: close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0x42, 0x4, 0x280, 0xffffffff, 0x0, 0x150, 0x150, 0xffffffff, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) [ 191.224528][ T8807] device team0 left promiscuous mode [ 191.239493][ T8807] device team_slave_0 left promiscuous mode 14:41:34 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) [ 191.285832][ T8807] device team_slave_1 left promiscuous mode [ 191.335825][ T8827] dccp_invalid_packet: P.CsCov 9 exceeds packet length 16 [ 191.358665][ T8828] ipt_REJECT: TCP_RESET invalid for non-tcp 14:41:34 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000000)=""/89, 0x1000000, 0x1000}, 0x1c) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x2f) [ 191.389309][ T8812] device team0 entered promiscuous mode [ 191.395067][ T8812] device team_slave_0 entered promiscuous mode 14:41:34 executing program 1: bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) [ 191.430430][ T8812] device team_slave_1 entered promiscuous mode [ 191.460379][ T8812] device team0 left promiscuous mode 14:41:34 executing program 5: close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0x42, 0x4, 0x280, 0xffffffff, 0x0, 0x150, 0x150, 0xffffffff, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 14:41:34 executing program 4: syz_emit_ethernet(0x32, &(0x7f0000000300)={@local, @remote, @void, {@ipv4={0x800, @dccp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x21, 0x0, @rand_addr, @multicast1}, {{0x0, 0x0, 0x4, 0x9, 0x0, 0x0, 0x0, 0x2, 0x0, "ee95c3", 0x0, "a85c8b"}}}}}}, 0x0) [ 191.485230][ T8812] device team_slave_0 left promiscuous mode [ 191.519317][ T8812] device team_slave_1 left promiscuous mode 14:41:34 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @dev}, 0x10) 14:41:34 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) [ 191.607055][ T8839] ipt_REJECT: TCP_RESET invalid for non-tcp [ 191.640902][ T8840] dccp_invalid_packet: P.CsCov 9 exceeds packet length 16 14:41:34 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x9) recvmmsg(r0, &(0x7f0000002b40)=[{{0x0, 0x40003, 0x0, 0x0, 0x0, 0x40000000}}], 0x4000000000003be, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000008c40)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000002b80)=[@assoc={0x18}], 0x18}], 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x4a, &(0x7f0000000480)=0x87, 0x4) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0xfc00) sendto$inet6(r0, &(0x7f0000000040)="afd551ec", 0x4, 0x0, 0x0, 0x0) 14:41:34 executing program 5: close(0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000100)) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0x42, 0x4, 0x280, 0xffffffff, 0x0, 0x150, 0x150, 0xffffffff, 0xffffffff, 0x1e8, 0x1e8, 0x1e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}, {{@uncond, 0x0, 0x90, 0xb8, 0x0, {}, [@common=@socket0={{0x20}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2e0) 14:41:34 executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000000)='veth0_vlan\x00', 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x8}}}}}, 0x0) [ 191.834813][ T8846] device team0 entered promiscuous mode [ 191.841612][ T8849] ipt_REJECT: TCP_RESET invalid for non-tcp [ 191.860410][ T8846] device team_slave_0 entered promiscuous mode 14:41:34 executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000733000)={0x5, 0x5, 0x1007, 0x9}, 0x3c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00004f9fe4)={0xc, 0x4, 0x4, 0x1, 0x0, r0}, 0x3c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x0, 0x0}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000000)={r1, &(0x7f00000001c0), &(0x7f0000000080)}, 0x20) close(r0) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000001c0)={r1, &(0x7f0000000040)}, 0x10) 14:41:34 executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f0000000240)={&(0x7f0000000000)=""/89, 0x1000000, 0x1000}, 0x1c) getsockopt$XDP_STATISTICS(r0, 0x11b, 0x7, &(0x7f0000000100), &(0x7f0000000140)=0x2f) [ 191.890672][ T8846] device team_slave_1 entered promiscuous mode 14:41:34 executing program 5: openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x3bbfdef8555f809d, 0x0) [ 191.924711][ T8854] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 191.952084][ T8843] device team0 left promiscuous mode [ 191.965883][ T8843] device team_slave_0 left promiscuous mode [ 191.999815][ T8843] device team_slave_1 left promiscuous mode 14:41:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f0000000000)=@rc, 0x80) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000280)) 14:41:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @dev}, 0x10) 14:41:35 executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @local}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000c80)=ANY=[@ANYBLOB="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"/1870], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$kcm(0x29, 0x2, 0x0) recvmmsg(r2, &(0x7f0000004c40)=[{{0x0, 0x0, 0x0}}], 0x500, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendmmsg(r2, &(0x7f00000014c0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000a00)="99", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000c40)=[{&(0x7f0000000bc0)="9b", 0x100000}], 0x1}}], 0x240, 0x240) 14:41:35 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_netfilter(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000002940)={&(0x7f0000000000)={0x14, 0x0, 0x8, 0x801}, 0x14}}, 0x0) [ 192.272792][ T8867] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 192.289644][ T8870] device team0 entered promiscuous mode [ 192.305140][ T8870] device team_slave_0 entered promiscuous mode [ 192.340771][ T8870] device team_slave_1 entered promiscuous mode [ 192.383788][ T8866] device team0 left promiscuous mode 14:41:35 executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000c00)=@nat={'nat\x00', 0x8, 0x5, 0x4f0, 0x1e0, 0x2d0, 0xffffffff, 0x2d0, 0x2d0, 0x420, 0x420, 0xffffffff, 0x420, 0x420, 0x5, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @REDIRECT={0x48, 'REDIRECT\x00', 0x0, {0x1, @ipv6=@mcast1, @ipv4=@dev}}}, {{@ipv6={@empty, @private0, [], [], 'team_slave_0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv6=@mcast2, @ipv4=@multicast2, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv4=@private, @ipv6=@ipv4={'\x00', '\xff\xff', @loopback}, @port, @icmp_id}}}, {{@uncond, 0x0, 0x108, 0x150, 0x0, {}, [@common=@srh={{0x30}}, @common=@frag={{0x30}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv6=@private1, @ipv4=@remote, @port, @gre_key}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) 14:41:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f0000000000)=@rc, 0x80) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000280)) [ 192.406778][ T8866] device team_slave_0 left promiscuous mode [ 192.457722][ T8866] device team_slave_1 left promiscuous mode 14:41:35 executing program 1: r0 = socket$inet6_sctp(0xa, 0x10000000005, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000001c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}], 0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f000095dff8)=ANY=[@ANYBLOB="c4864432", @ANYRES32=0x0], &(0x7f000095dffc)=0x8) r2 = socket(0xa, 0x1, 0x0) close(r2) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000040)={r1}, &(0x7f0000000140)=0x8) sendmmsg$inet_sctp(r2, &(0x7f0000000080)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="300000000000000084000000010000000000000004"], 0x30}], 0x1, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(r2, 0x84, 0x14, &(0x7f0000000100)={r5}, 0x8) 14:41:35 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 14:41:35 executing program 3: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="80", 0x1}], 0x1, &(0x7f0000002200)=ANY=[], 0x11e8}, 0x44000) 14:41:35 executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000180)={r1, 0x1, 0x6, @dev}, 0x10) 14:41:35 executing program 0: unshare(0x6c060000) bind(0xffffffffffffffff, 0x0, 0x0) unshare(0x60000000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept(0xffffffffffffffff, &(0x7f0000000280)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, &(0x7f0000000300)=0x80) r1 = socket(0x10, 0x3, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000005400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=ANY=[@ANYBLOB="4001000024000b0f00e400000000f10febca0746", @ANYRES32=r3, @ANYBLOB="00000000ffffffff000000f6090001006e6574656d00000010010200ca000000b00e"], 0x140}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000200)={&(0x7f0000000600)=ANY=[@ANYRES32, @ANYBLOB, @ANYRESHEX, @ANYRES32, @ANYBLOB="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"], 0x4fc}, 0x1, 0x0, 0x0, 0x894}, 0x98c1) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @multicast1}, 0x10) setsockopt$sock_int(r0, 0x1, 0x12, &(0x7f0000000040)=0x80000001, 0x4) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(0xffffffffffffffff, 0x89fa, &(0x7f0000000180)={'ip6tnl0\x00', &(0x7f0000000100)={'sit0\x00', 0x0, 0x2f, 0x20, 0x7, 0x6, 0x20, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x0, 0x40, 0x3, 0x8}}) sendto$inet(r0, 0x0, 0x0, 0x20020080, &(0x7f0000000080)={0x2, 0x4e20}, 0x10) splice(0xffffffffffffffff, &(0x7f0000000340)=0x10000, 0xffffffffffffffff, 0x0, 0x2, 0xce5e9197a5dece4d) sendto$inet(r0, &(0x7f0000000580)="8f", 0x20000581, 0x400c040, 0x0, 0x0) 14:41:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f0000000000)=@rc, 0x80) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000280)) [ 192.817619][ T8891] device team0 entered promiscuous mode [ 192.845740][ T8891] device team_slave_0 entered promiscuous mode 14:41:35 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000200000005002f000000000008a3"], 0x24}}, 0x0) [ 192.893116][ T26] audit: type=1804 audit(1634568095.883:2): pid=8890 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir781645674/syzkaller.sFs1wt/7/cgroup.controllers" dev="sda1" ino=13938 res=1 errno=0 [ 192.931070][ T8891] device team_slave_1 entered promiscuous mode 14:41:35 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) connect(r0, &(0x7f0000000000)=@rc, 0x80) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000280)) [ 192.959544][ T8886] device team0 left promiscuous mode [ 192.964869][ T8886] device team_slave_0 left promiscuous mode [ 192.995389][ T8886] device team_slave_1 left promiscuous mode [ 193.012079][ T8900] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 193.045115][ T8898] __nla_validate_parse: 6 callbacks suppressed [ 193.045133][ T8898] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.058349][ T20] Bluetooth: hci3: command 0x041b tx timeout [ 193.133892][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.222041][ T8912] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. 14:41:36 executing program 3: syz_emit_ethernet(0x1e8, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6621be1901b200fffe880000000000000000000000000001fe8000000000000000000000000000aa2c"], 0x0) 14:41:36 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5}]}}}]}, 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x1}]}}}]}, 0x44}}, 0x0) 14:41:36 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001680)=ANY=[@ANYBLOB="200000001200190d", @ANYBLOB="fc505d61c768c2f780"], 0x20}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x800448d2, 0x0) recvmsg(r0, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) 14:41:36 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 193.681833][ T8898] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.726558][ T26] audit: type=1804 audit(1634568096.713:3): pid=8959 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir781645674/syzkaller.sFs1wt/8/cgroup.controllers" dev="sda1" ino=13921 res=1 errno=0 14:41:36 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}}, 0x0) 14:41:36 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 14:41:36 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 14:41:36 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1a}}, 0x10) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x34) sendmmsg(r0, &(0x7f0000007fc0), 0x4000000000001a8, 0x0) 14:41:36 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000000)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x30, r3, 0xb01, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendfile(r2, r1, 0x0, 0x10000000a) [ 194.010143][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.016470][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 14:41:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) [ 194.060943][ T26] audit: type=1804 audit(1634568097.053:4): pid=8972 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir996381916/syzkaller.2i3XYW/11/cgroup.controllers" dev="sda1" ino=13943 res=1 errno=0 14:41:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}}, 0x0) [ 194.241118][ T26] audit: type=1804 audit(1634568097.103:5): pid=8979 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir417001516/syzkaller.5Tdmpo/9/cgroup.controllers" dev="sda1" ino=13948 res=1 errno=0 [ 194.460978][ T26] audit: type=1804 audit(1634568097.163:6): pid=8971 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir310898040/syzkaller.p8RYFB/10/cgroup.controllers" dev="sda1" ino=13944 res=1 errno=0 14:41:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}}, 0x0) 14:41:37 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000000)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x30, r3, 0xb01, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendfile(r2, r1, 0x0, 0x10000000a) 14:41:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4fd0d325a436f8ffa953a0f397"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]]}, 0x64}}, 0x0) [ 194.632001][ T26] audit: type=1804 audit(1634568097.493:7): pid=8982 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir781645674/syzkaller.sFs1wt/9/cgroup.controllers" dev="sda1" ino=13947 res=1 errno=0 14:41:37 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 14:41:37 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 14:41:37 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x34}}, 0x0) 14:41:37 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4fd0d325a436f8ffa953a0f397"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]]}, 0x64}}, 0x0) [ 194.828756][ T26] audit: type=1804 audit(1634568097.793:8): pid=8995 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir996381916/syzkaller.2i3XYW/12/cgroup.controllers" dev="sda1" ino=13943 res=1 errno=0 14:41:37 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 14:41:38 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, 0x0, 0x0) 14:41:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4fd0d325a436f8ffa953a0f397"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]]}, 0x64}}, 0x0) [ 195.111441][ T26] audit: type=1804 audit(1634568098.103:9): pid=9002 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir417001516/syzkaller.5Tdmpo/10/cgroup.controllers" dev="sda1" ino=13948 res=1 errno=0 [ 195.138263][ T20] Bluetooth: hci3: command 0x040f tx timeout 14:41:38 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000000)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x30, r3, 0xb01, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendfile(r2, r1, 0x0, 0x10000000a) [ 195.242119][ T26] audit: type=1804 audit(1634568098.133:10): pid=9001 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir310898040/syzkaller.p8RYFB/11/cgroup.controllers" dev="sda1" ino=13944 res=1 errno=0 14:41:38 executing program 1: epoll_create1(0x47227592f554ce05) 14:41:38 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)={0x64, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}], @NL80211_ATTR_SSID={0x4}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_MAC={0xa}, @key_params=[@NL80211_ATTR_KEY={0x28, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "4fd0d325a436f8ffa953a0f397"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]]}, 0x64}}, 0x0) [ 195.493105][ T26] audit: type=1804 audit(1634568098.343:11): pid=9009 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir781645674/syzkaller.sFs1wt/10/cgroup.controllers" dev="sda1" ino=13951 res=1 errno=0 14:41:38 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 14:41:38 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)={0x54, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x40, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'nq\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}]}, 0x54}}, 0x0) sendfile(r2, r1, 0x0, 0x100000001) 14:41:38 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=@newpolicy={0xb8, 0x13, 0x1, 0x0, 0x0, {{@in=@private, @in=@remote, 0x0, 0x0, 0x300, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}}}, 0xb8}}, 0x0) 14:41:38 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0x9c, &(0x7f00000002c0)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x806, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 14:41:39 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f00000028c0)={0x0, 0x0, 0x0}, 0x0) 14:41:39 executing program 1: r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000001780)={'ip6tnl0\x00', &(0x7f0000001700)={'syztnl0\x00', 0x0, 0x29, 0x0, 0x0, 0x0, 0x0, @private1, @local}}) 14:41:39 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000440)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100000a, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getpeername(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast1}}}, &(0x7f0000000000)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000022c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)={0x30, r3, 0xb01, 0x0, 0x0, {{}, {@val={0x8}, @val={0x8}, @val={0xc}}}}, 0x30}}, 0x0) socketpair$tipc(0x1e, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r4, 0x8912, 0x400308) sendfile(r2, r1, 0x0, 0x10000000a) 14:41:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000008a3e0ae3165da2d3b11cf2506545922bd13ae0248889b9e92f76c38155cbed788a6a88afa24a7bf63f97ab5646b4603fac9b46a36b164e152ecf4170506fe35b238432583dcc4e58718861356862166da264cf36f6baeaa098715076ef0ddccf13778a6b984ba2104b2e94736394a6c39db1bbcbe678d0de96e6096d4e6518bd50e1c7ddac2a15728c13735f3ccd0a5e7104b556ad29f15003a5cdf9e9e4f300d9271554f07798e2659255ae4ae1f5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 14:41:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0x9c, &(0x7f00000002c0)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x806, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 14:41:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) [ 196.429089][ T9044] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:41:39 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000f000000100001006e657464657673696d0000000f0002006e657464657673696d30000008000b0004"], 0x44}}, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000000080211000001"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000002) 14:41:39 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x4c00000000000000}, 0x0) 14:41:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) [ 196.714220][ T9044] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:41:39 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0x9c, &(0x7f00000002c0)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x806, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) [ 196.830274][ T9066] team0: Device ipvlan1 failed to register rx_handler 14:41:39 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000008a3e0ae3165da2d3b11cf2506545922bd13ae0248889b9e92f76c38155cbed788a6a88afa24a7bf63f97ab5646b4603fac9b46a36b164e152ecf4170506fe35b238432583dcc4e58718861356862166da264cf36f6baeaa098715076ef0ddccf13778a6b984ba2104b2e94736394a6c39db1bbcbe678d0de96e6096d4e6518bd50e1c7ddac2a15728c13735f3ccd0a5e7104b556ad29f15003a5cdf9e9e4f300d9271554f07798e2659255ae4ae1f5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 14:41:39 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) [ 197.086890][ T9073] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:41:40 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) read(r0, &(0x7f0000000300)=""/67, 0x43) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r2, r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 14:41:40 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x8, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1ff}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0x5, 0x0, 0x0, 0xfffffffffffffffe}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) socket$packet(0x11, 0x2, 0x300) socket$inet_tcp(0x2, 0x1, 0x0) socket$packet(0x11, 0x2, 0x300) socket$alg(0x26, 0x5, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000000)='GPL\x00', 0x1, 0x9c, &(0x7f00000002c0)=""/156, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000100)='mm_page_free_batched\x00', r1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) sendto$packet(r0, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0x11, 0x806, r3, 0x1, 0x0, 0x6, @link_local}, 0x14) 14:41:40 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8}]}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}]}, 0x58}}, 0x0) [ 197.218761][ T2958] Bluetooth: hci3: command 0x0419 tx timeout [ 197.279802][ T9073] team0: Port device team_slave_0 removed [ 197.297300][ T9073] bond0: (slave team_slave_0): Enslaving as an active interface with an up link [ 197.373955][ T9066] syz-executor.4 (9066) used greatest stack depth: 21656 bytes left 14:41:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x4c00000000000000}, 0x0) 14:41:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="2e00000038000511d25a803f3b00000d0324fc60100035400c0002000200000037153e370a000180afc7c7ea2500", 0x2e}], 0x1}, 0x0) 14:41:40 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000008a3e0ae3165da2d3b11cf2506545922bd13ae0248889b9e92f76c38155cbed788a6a88afa24a7bf63f97ab5646b4603fac9b46a36b164e152ecf4170506fe35b238432583dcc4e58718861356862166da264cf36f6baeaa098715076ef0ddccf13778a6b984ba2104b2e94736394a6c39db1bbcbe678d0de96e6096d4e6518bd50e1c7ddac2a15728c13735f3ccd0a5e7104b556ad29f15003a5cdf9e9e4f300d9271554f07798e2659255ae4ae1f5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) [ 197.672045][ T9096] team0: Device ipvlan1 failed to register rx_handler [ 197.697657][ T9098] netlink: 'syz-executor.1': attribute type 2 has an invalid length. 14:41:40 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000f000000100001006e657464657673696d0000000f0002006e657464657673696d30000008000b0004"], 0x44}}, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000000080211000001"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000002) 14:41:40 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) read(r0, &(0x7f0000000300)=""/67, 0x43) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r2, r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 14:41:40 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) read(r0, &(0x7f0000000300)=""/67, 0x43) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r2, r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 14:41:40 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="2e00000038000511d25a803f3b00000d0324fc60100035400c0002000200000037153e370a000180afc7c7ea2500", 0x2e}], 0x1}, 0x0) [ 197.821418][ T9101] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:41:40 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x4c00000000000000}, 0x0) [ 198.023702][ T9116] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 198.132251][ T9122] team0: Device ipvlan1 failed to register rx_handler [ 198.234681][ T26] kauditd_printk_skb: 6 callbacks suppressed [ 198.234697][ T26] audit: type=1804 audit(1634568101.223:18): pid=9109 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir417001516/syzkaller.5Tdmpo/13/cgroup.controllers" dev="sda1" ino=13958 res=1 errno=0 14:41:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="2e00000038000511d25a803f3b00000d0324fc60100035400c0002000200000037153e370a000180afc7c7ea2500", 0x2e}], 0x1}, 0x0) 14:41:41 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x3c}, 0x1, 0x4c00000000000000}, 0x0) 14:41:41 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010008546000000000000ff0100000000", @ANYRES32=r2, @ANYBLOB="01000000002200001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000500)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0x14) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x3d2}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000012c0)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x20e05}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x825, 0x0, 0x0, {0x53, 0x0, 0x0, r9}, [@IFLA_PROTO_DOWN={0x8, 0xa, 0xf}]}, 0x28}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000008a3e0ae3165da2d3b11cf2506545922bd13ae0248889b9e92f76c38155cbed788a6a88afa24a7bf63f97ab5646b4603fac9b46a36b164e152ecf4170506fe35b238432583dcc4e58718861356862166da264cf36f6baeaa098715076ef0ddccf13778a6b984ba2104b2e94736394a6c39db1bbcbe678d0de96e6096d4e6518bd50e1c7ddac2a15728c13735f3ccd0a5e7104b556ad29f15003a5cdf9e9e4f300d9271554f07798e2659255ae4ae1f5"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x4c}}, 0x0) 14:41:41 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) read(r0, &(0x7f0000000300)=""/67, 0x43) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r2, r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 198.592368][ T9129] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 198.629698][ T9130] team0: Device ipvlan1 failed to register rx_handler 14:41:41 executing program 1: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000800)="2e00000038000511d25a803f3b00000d0324fc60100035400c0002000200000037153e370a000180afc7c7ea2500", 0x2e}], 0x1}, 0x0) 14:41:41 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) read(r0, &(0x7f0000000300)=""/67, 0x43) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r2, r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) [ 198.872792][ T9138] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 198.895090][ T9131] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:41:41 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000f000000100001006e657464657673696d0000000f0002006e657464657673696d30000008000b0004"], 0x44}}, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000000080211000001"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000002) 14:41:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000f000000100001006e657464657673696d0000000f0002006e657464657673696d30000008000b0004"], 0x44}}, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000000080211000001"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000002) 14:41:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) read(r0, &(0x7f0000000300)=""/67, 0x43) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r2, r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 14:41:42 executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) read(r0, &(0x7f0000000300)=""/67, 0x43) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r2, r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 14:41:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32, @ANYBLOB="0080000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03"], 0x1ec}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r4, @ANYBLOB="04"], 0x1ec}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[], 0x1ec}}, 0x0) [ 199.405413][ T26] audit: type=1804 audit(1634568102.393:19): pid=9149 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir491729653/syzkaller.GBDvG5/25/cgroup.controllers" dev="sda1" ino=13947 res=1 errno=0 [ 199.434651][ T9161] HTB: quantum of class 80038004 is big. Consider r2q change. [ 199.502135][ T9161] HTB: quantum of class 80038004 is big. Consider r2q change. [ 199.586247][ T26] audit: type=1804 audit(1634568102.423:20): pid=9159 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir417001516/syzkaller.5Tdmpo/14/cgroup.controllers" dev="sda1" ino=13961 res=1 errno=0 14:41:42 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) read(r0, &(0x7f0000000300)=""/67, 0x43) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r2, r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 14:41:42 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32, @ANYBLOB="0080000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03"], 0x1ec}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r4, @ANYBLOB="04"], 0x1ec}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[], 0x1ec}}, 0x0) 14:41:42 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) read(r0, &(0x7f0000000300)=""/67, 0x43) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r2, r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 14:41:42 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000f000000100001006e657464657673696d0000000f0002006e657464657673696d30000008000b0004"], 0x44}}, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000000080211000001"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000002) 14:41:42 executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x15, &(0x7f0000000c00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 200.021860][ T9176] HTB: quantum of class 80058004 is big. Consider r2q change. [ 200.051938][ T9176] HTB: quantum of class 80058004 is big. Consider r2q change. 14:41:43 executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000001040)='htcp\x00', 0x5) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x60, &(0x7f0000000140)={&(0x7f0000000700)=@newlink={0x3c, 0x10, 0x413, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f0000000000), 0xb1d000) sendto$inet6(r0, &(0x7f0000000080)='N', 0xfffffdef, 0x0, 0x0, 0xe001900) 14:41:43 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000f000000100001006e657464657673696d0000000f0002006e657464657673696d30000008000b0004"], 0x44}}, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000000080211000001"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000002) 14:41:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32, @ANYBLOB="0080000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03"], 0x1ec}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r4, @ANYBLOB="04"], 0x1ec}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[], 0x1ec}}, 0x0) [ 200.390538][ T9188] HTB: quantum of class 80068004 is big. Consider r2q change. 14:41:43 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000083c0000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000003f040000000000002d400500000000004704000001ed00007b130000000000001d440000000000007a0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d2f5869074d6ebdfd1f5e69048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a106f6443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc022928eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384b6239def11732e5c08f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd394a7ddd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819da8aa7749f3187e9efb00000000e0884160b765b07ec9ba0203627f0223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c7a90f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e6468f412f2b5ae14340824e72a78fb078c6aa4726c769c9e36128b32484babacda2b09e0e9347168c2db0e964a46dc3d504aef00"/1647], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) [ 200.438290][ T26] audit: type=1804 audit(1634568103.433:21): pid=9182 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir417001516/syzkaller.5Tdmpo/15/cgroup.controllers" dev="sda1" ino=13984 res=1 errno=0 [ 200.498016][ T9194] HTB: quantum of class 80068004 is big. Consider r2q change. [ 200.515458][ T9193] team0: Device ipvlan1 failed to register rx_handler [ 200.567767][ T26] audit: type=1804 audit(1634568103.533:22): pid=9192 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir491729653/syzkaller.GBDvG5/26/cgroup.controllers" dev="sda1" ino=13969 res=1 errno=0 14:41:43 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x11, 0x800000003, 0x0) bind(r1, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r1, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000140)=0x14) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="480000002400e577a885ddb05cc582f24186cf0d", @ANYRES32=r2, @ANYBLOB="00000000ffffffff0000000008000100687462001c0002001800020003"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32, @ANYBLOB="0080000000800000f2ff00000800010075333200c0010200bc01010004000200b40105510004d72000000807000000ff03"], 0x1ec}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x800000003, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000340)=0x14) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[@ANYBLOB="ec0100002800270d00"/20, @ANYRES32=r4, @ANYBLOB="04"], 0x1ec}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000008c0)=ANY=[], 0x1ec}}, 0x0) 14:41:43 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000083c0000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000003f040000000000002d400500000000004704000001ed00007b130000000000001d440000000000007a0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d2f5869074d6ebdfd1f5e69048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a106f6443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc022928eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384b6239def11732e5c08f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd394a7ddd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819da8aa7749f3187e9efb00000000e0884160b765b07ec9ba0203627f0223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c7a90f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e6468f412f2b5ae14340824e72a78fb078c6aa4726c769c9e36128b32484babacda2b09e0e9347168c2db0e964a46dc3d504aef00"/1647], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 14:41:44 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$DEVLINK_CMD_SB_POOL_GET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000f000000100001006e657464657673696d0000000f0002006e657464657673696d30000008000b0004"], 0x44}}, 0x0) write$binfmt_script(r0, &(0x7f0000000200)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000000000)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003b10000008000300", @ANYRES32=r3, @ANYBLOB="25003300d0000000080211000000080211000001"], 0x44}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r5, r1, 0x0, 0x100000002) 14:41:44 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) close(r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) read(r0, &(0x7f0000000300)=""/67, 0x43) sendfile(r0, r3, 0x0, 0x8000000000005) sendfile(r2, r2, 0x0, 0x0) sendfile(r0, r1, 0x0, 0x10000000000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, 0x0, 0x208e24b) 14:41:44 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/1647], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 14:41:44 executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000083c0000bfa30000000000000703000020feffff720af0fff8ffffff71a4f0ff000000003f040000000000002d400500000000004704000001ed00007b130000000000001d440000000000007a0a00fe000000007303000000000000b5000000000000009500000000000000023bc065b7a379d17cf9333379fc9e94af69912435f1a864a710aad58db6a6c3692e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c5181554a090f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829b847400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af8612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d2f5869074d6ebdfd1f5e69048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03fb8a63e089679216da18ec0ae564162a27afea62d84f3a106f6443d64364f50000e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc286463a2b1e992894269f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b98fb6853ab39e415140200000020cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d710b651f898ba749e40bc6980fe78683ac5c0c31030699ddd71063be9261b2e1aab1675b34a22048516d6aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe0e669e5e20100005353193f82ade69d0540059fe6c7fe7cd8697502c7596566d6740300da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc022928eaeb883418f562ae00003ea96d10f172c0374d6eed82641687f3b3a70bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24c87afce829ba0f85da6d8a8f18ea40ab959f6074ab2a4009b9e5f07ab5138aa6e3d37fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0cbe02b6e4114f244a9bf93f04beb72f0861f7580e69db384b6239def11732e5c08f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a9b702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b728fe26e37037f27feeb741680f6f2f9a6a8346962a350845ffa0d829e4f79ad906943408e6df3adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91114a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a9037d2283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b1dba94a6ea80c33ead5722c3293986e02c8e0a6dda1eca493f14795bd394a7ddd068826fe8df15efaaeea831555877f958a19e499666a38d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a8784d0899ed888141e2fae6691d1aee1da02ba516467df3e7d1daac19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819da8aa7749f3187e9efb00000000e0884160b765b07ec9ba0203627f0223c81e48d6d3b6e5b50d45248efe43a409773e3ed01cd663f3aaab9e1c7a90f43b64bb54e5b30be3399e3dd1eb1cfd1935a323023fe5792879833c7eb356b95cfb135045b1d8f7da2fa5bfedef411d0791523a9e6468f412f2b5ae14340824e72a78fb078c6aa4726c769c9e36128b32484babacda2b09e0e9347168c2db0e964a46dc3d504aef00"/1647], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) 14:41:44 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r2, @ANYBLOB="28002d800a00a4f486b705d3368c00cb5f00000001010101010100000a00000001010101010100000600"], 0x4c}}, 0x0) [ 201.440880][ T26] audit: type=1804 audit(1634568104.433:23): pid=9209 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir491729653/syzkaller.GBDvG5/27/cgroup.controllers" dev="sda1" ino=13967 res=1 errno=0 14:41:44 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x58, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) [ 255.453749][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.460033][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 288.240102][ T20] Bluetooth: hci2: command 0x0406 tx timeout [ 288.240138][ T8000] Bluetooth: hci1: command 0x0406 tx timeout [ 288.248262][ T20] Bluetooth: hci0: command 0x0406 tx timeout [ 288.260652][ T8000] Bluetooth: hci4: command 0x0406 tx timeout [ 288.266497][ T20] Bluetooth: hci5: command 0x0406 tx timeout [ 313.838396][ T8244] Bluetooth: hci3: command 0x0406 tx timeout [ 316.880634][ T1358] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.887052][ T1358] ieee802154 phy1 wpan1: encryption failed: -22 [ 353.996456][ T27] INFO: task kworker/u4:1:10 blocked for more than 143 seconds. [ 354.004118][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 354.012409][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.024990][ T27] task:kworker/u4:1 state:D stack:25744 pid: 10 ppid: 2 flags:0x00004000 [ 354.036710][ T27] Workqueue: netns cleanup_net [ 354.041604][ T27] Call Trace: [ 354.044895][ T27] __schedule+0xb44/0x5960 [ 354.054623][ T27] ? find_held_lock+0x2d/0x110 [ 354.061629][ T27] ? __mutex_lock+0x9c2/0x12f0 [ 354.068743][ T27] ? io_schedule_timeout+0x140/0x140 [ 354.074077][ T27] schedule+0xd3/0x270 [ 354.080180][ T27] schedule_preempt_disabled+0xf/0x20 [ 354.085598][ T27] __mutex_lock+0xa34/0x12f0 [ 354.092582][ T27] ? ip_fib_net_exit+0x1b/0x2b0 [ 354.103549][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 354.115129][ T27] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 354.129885][ T27] ? sockfs_dname+0x80/0x80 [ 354.134518][ T27] ? iput.part.0+0x539/0x850 [ 354.139640][ T27] ip_fib_net_exit+0x1b/0x2b0 [ 354.144355][ T27] ? ip_fib_net_exit+0x2b0/0x2b0 [ 354.149544][ T27] ops_exit_list+0xb0/0x160 [ 354.154069][ T27] cleanup_net+0x4ea/0xb00 [ 354.162203][ T27] ? unregister_pernet_device+0x70/0x70 [ 354.168464][ T27] process_one_work+0x9bf/0x16b0 [ 354.173492][ T27] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 354.179391][ T27] ? rwlock_bug.part.0+0x90/0x90 [ 354.184349][ T27] ? _raw_spin_lock_irq+0x41/0x50 [ 354.189851][ T27] worker_thread+0x658/0x11f0 [ 354.195027][ T27] ? process_one_work+0x16b0/0x16b0 [ 354.200690][ T27] kthread+0x3e5/0x4d0 [ 354.204848][ T27] ? set_kthread_struct+0x130/0x130 [ 354.210700][ T27] ret_from_fork+0x1f/0x30 [ 354.215324][ T27] INFO: task syz-executor.2:9186 blocked for more than 143 seconds. [ 354.223952][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 354.230140][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.239030][ T27] task:syz-executor.2 state:D stack:27840 pid: 9186 ppid: 6588 flags:0x00000004 [ 354.248445][ T27] Call Trace: [ 354.251740][ T27] __schedule+0xb44/0x5960 [ 354.256175][ T27] ? find_held_lock+0x2d/0x110 [ 354.260999][ T27] ? __mutex_lock+0x9c0/0x12f0 [ 354.265923][ T27] ? io_schedule_timeout+0x140/0x140 [ 354.271537][ T27] schedule+0xd3/0x270 [ 354.275634][ T27] schedule_preempt_disabled+0xf/0x20 [ 354.281117][ T27] __mutex_lock+0xa34/0x12f0 [ 354.285722][ T27] ? ip6mr_sk_done+0xe9/0x370 [ 354.290645][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 354.296546][ T27] ip6mr_sk_done+0xe9/0x370 [ 354.301074][ T27] rawv6_close+0x58/0x80 [ 354.305366][ T27] inet_release+0x12e/0x280 [ 354.310041][ T27] inet6_release+0x4c/0x70 [ 354.314540][ T27] __sock_release+0xcd/0x280 [ 354.320821][ T27] sock_close+0x18/0x20 [ 354.325341][ T27] __fput+0x288/0x9f0 [ 354.329623][ T27] ? __sock_release+0x280/0x280 [ 354.334607][ T27] task_work_run+0xdd/0x1a0 [ 354.339245][ T27] exit_to_user_mode_prepare+0x27e/0x290 [ 354.344950][ T27] syscall_exit_to_user_mode+0x19/0x60 [ 354.350631][ T27] do_syscall_64+0x42/0xb0 [ 354.355072][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 354.361144][ T27] RIP: 0033:0x7f378111867b [ 354.366331][ T27] RSP: 002b:00007ffe7a7a1e40 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 354.374761][ T27] RAX: 0000000000000000 RBX: 0000000000000007 RCX: 00007f378111867b [ 354.383017][ T27] RDX: 0000001b2f74ded4 RSI: ffffffff8765652e RDI: 0000000000000006 [ 354.391139][ T27] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b2f737d1c [ 354.399516][ T27] R10: 0000000000001f2f R11: 0000000000000293 R12: 00007f3781269b60 [ 354.407626][ T27] R13: 00007f3781269b60 R14: 00007f3781268f60 R15: 0000000000030eb0 [ 354.415711][ T27] ? ipv6_conntrack_local+0xe/0x20 [ 354.421160][ T27] INFO: task syz-executor.5:9205 blocked for more than 143 seconds. [ 354.432393][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 354.438489][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.447327][ T27] task:syz-executor.5 state:D stack:28272 pid: 9205 ppid: 6772 flags:0x00000004 [ 354.456732][ T27] Call Trace: [ 354.460031][ T27] __schedule+0xb44/0x5960 [ 354.464489][ T27] ? find_held_lock+0x2d/0x110 [ 354.469356][ T27] ? __mutex_lock+0x9c0/0x12f0 [ 354.474130][ T27] ? io_schedule_timeout+0x140/0x140 [ 354.480074][ T27] schedule+0xd3/0x270 [ 354.484175][ T27] schedule_preempt_disabled+0xf/0x20 [ 354.489802][ T27] __mutex_lock+0xa34/0x12f0 [ 354.494428][ T27] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 354.499816][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 354.505387][ T27] ? rtnetlink_rcv_msg+0x388/0xb80 [ 354.510619][ T27] rtnetlink_rcv_msg+0x3be/0xb80 [ 354.515619][ T27] ? rtnl_newlink+0xa0/0xa0 [ 354.520314][ T27] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 354.525647][ T27] netlink_rcv_skb+0x153/0x420 [ 354.531016][ T27] ? rtnl_newlink+0xa0/0xa0 [ 354.535626][ T27] ? netlink_ack+0xa60/0xa60 [ 354.542054][ T27] ? netlink_deliver_tap+0x1a2/0xc30 [ 354.547589][ T27] ? netlink_deliver_tap+0x1b1/0xc30 [ 354.552909][ T27] netlink_unicast+0x533/0x7d0 [ 354.561303][ T27] ? netlink_attachskb+0x880/0x880 [ 354.567016][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 354.573292][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 354.580103][ T27] ? __phys_addr_symbol+0x2c/0x70 [ 354.585208][ T27] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 354.591481][ T27] ? __check_object_size+0x16e/0x3f0 [ 354.597515][ T27] netlink_sendmsg+0x86d/0xda0 [ 354.602330][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 354.607883][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 354.614142][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 354.619623][ T27] sock_sendmsg+0xcf/0x120 [ 354.624071][ T27] ____sys_sendmsg+0x6e8/0x810 [ 354.629653][ T27] ? kernel_sendmsg+0x50/0x50 [ 354.634358][ T27] ? do_recvmmsg+0x6d0/0x6d0 [ 354.640031][ T27] ? lock_chain_count+0x20/0x20 [ 354.644916][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 354.652346][ T27] ___sys_sendmsg+0xf3/0x170 [ 354.657350][ T27] ? sendmsg_copy_msghdr+0x160/0x160 [ 354.662665][ T27] ? __fget_files+0x21b/0x3e0 [ 354.668026][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 354.673016][ T27] ? __fget_files+0x23d/0x3e0 [ 354.678171][ T27] ? __fget_light+0xea/0x280 [ 354.682785][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 354.689589][ T27] __sys_sendmsg+0xe5/0x1b0 [ 354.694114][ T27] ? __sys_sendmsg_sock+0x30/0x30 [ 354.699679][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 354.705599][ T27] do_syscall_64+0x35/0xb0 [ 354.710523][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 354.717048][ T27] RIP: 0033:0x7feed2705a39 [ 354.721478][ T27] RSP: 002b:00007feecfc5a188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.730405][ T27] RAX: ffffffffffffffda RBX: 00007feed2809020 RCX: 00007feed2705a39 [ 354.739281][ T27] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000005 [ 354.747752][ T27] RBP: 00007feed275fc5f R08: 0000000000000000 R09: 0000000000000000 [ 354.755732][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.764325][ T27] R13: 00007ffc8a393b1f R14: 00007feecfc5a300 R15: 0000000000022000 [ 354.772784][ T27] INFO: task syz-executor.5:9206 blocked for more than 144 seconds. [ 354.781289][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 354.787829][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 354.797087][ T27] task:syz-executor.5 state:D stack:28272 pid: 9206 ppid: 6772 flags:0x00000004 [ 354.806728][ T27] Call Trace: [ 354.810028][ T27] __schedule+0xb44/0x5960 [ 354.814455][ T27] ? find_held_lock+0x2d/0x110 [ 354.819914][ T27] ? __mutex_lock+0x9c0/0x12f0 [ 354.824700][ T27] ? io_schedule_timeout+0x140/0x140 [ 354.830537][ T27] schedule+0xd3/0x270 [ 354.834988][ T27] schedule_preempt_disabled+0xf/0x20 [ 354.840912][ T27] __mutex_lock+0xa34/0x12f0 [ 354.845576][ T27] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 354.851109][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 354.857174][ T27] ? rtnetlink_rcv_msg+0x388/0xb80 [ 354.862314][ T27] rtnetlink_rcv_msg+0x3be/0xb80 [ 354.869004][ T27] ? rtnl_newlink+0xa0/0xa0 [ 354.873534][ T27] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 354.879527][ T27] netlink_rcv_skb+0x153/0x420 [ 354.884777][ T27] ? rtnl_newlink+0xa0/0xa0 [ 354.889893][ T27] ? netlink_ack+0xa60/0xa60 [ 354.894505][ T27] ? netlink_deliver_tap+0x1a2/0xc30 [ 354.900328][ T27] ? netlink_deliver_tap+0x1b1/0xc30 [ 354.905667][ T27] netlink_unicast+0x533/0x7d0 [ 354.910854][ T27] ? netlink_attachskb+0x880/0x880 [ 354.915981][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 354.922743][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 354.929414][ T27] ? __phys_addr_symbol+0x2c/0x70 [ 354.934464][ T27] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 354.941179][ T27] ? __check_object_size+0x16e/0x3f0 [ 354.946872][ T27] netlink_sendmsg+0x86d/0xda0 [ 354.951669][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 354.957146][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 354.963410][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 354.968765][ T27] sock_sendmsg+0xcf/0x120 [ 354.973202][ T27] ____sys_sendmsg+0x6e8/0x810 [ 354.979484][ T27] ? kernel_sendmsg+0x50/0x50 [ 354.984228][ T27] ? do_recvmmsg+0x6d0/0x6d0 [ 354.989315][ T27] ? lock_chain_count+0x20/0x20 [ 354.994214][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 355.000766][ T27] ___sys_sendmsg+0xf3/0x170 [ 355.005371][ T27] ? sendmsg_copy_msghdr+0x160/0x160 [ 355.011183][ T27] ? __fget_files+0x21b/0x3e0 [ 355.015966][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 355.021396][ T27] ? __fget_files+0x23d/0x3e0 [ 355.026096][ T27] ? __fget_light+0xea/0x280 [ 355.031324][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 355.038614][ T27] __sys_sendmsg+0xe5/0x1b0 [ 355.043149][ T27] ? __sys_sendmsg_sock+0x30/0x30 [ 355.048659][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 355.054690][ T27] do_syscall_64+0x35/0xb0 [ 355.059824][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 355.065744][ T27] RIP: 0033:0x7feed2705a39 [ 355.070696][ T27] RSP: 002b:00007feecfc39188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.079298][ T27] RAX: ffffffffffffffda RBX: 00007feed28090e0 RCX: 00007feed2705a39 [ 355.088012][ T27] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000007 [ 355.096132][ T27] RBP: 00007feed275fc5f R08: 0000000000000000 R09: 0000000000000000 [ 355.106035][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.114762][ T27] R13: 00007ffc8a393b1f R14: 00007feecfc39300 R15: 0000000000022000 [ 355.124102][ T27] INFO: task syz-executor.1:9209 blocked for more than 144 seconds. [ 355.132867][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 355.142270][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.152589][ T27] task:syz-executor.1 state:D stack:24448 pid: 9209 ppid: 6586 flags:0x00004004 [ 355.163198][ T27] Call Trace: [ 355.167546][ T27] __schedule+0xb44/0x5960 [ 355.172038][ T27] ? find_held_lock+0x2d/0x110 [ 355.178177][ T27] ? __mutex_lock+0x9c2/0x12f0 [ 355.182963][ T27] ? io_schedule_timeout+0x140/0x140 [ 355.190039][ T27] schedule+0xd3/0x270 [ 355.194129][ T27] schedule_preempt_disabled+0xf/0x20 [ 355.201098][ T27] __mutex_lock+0xa34/0x12f0 [ 355.205893][ T27] ? nl80211_pre_doit+0x23/0x620 [ 355.212690][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 355.219161][ T27] ? __nla_parse+0x3d/0x50 [ 355.223653][ T27] ? nl80211_set_qos_map+0x800/0x800 [ 355.230000][ T27] nl80211_pre_doit+0x23/0x620 [ 355.234796][ T27] ? nl80211_set_qos_map+0x800/0x800 [ 355.241156][ T27] genl_family_rcv_msg_doit+0x1ee/0x320 [ 355.248409][ T27] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 355.255836][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 355.262994][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 355.269820][ T27] ? ns_capable+0xd9/0x100 [ 355.274346][ T27] genl_rcv_msg+0x328/0x580 [ 355.281161][ T27] ? genl_get_cmd+0x480/0x480 [ 355.286017][ T27] ? nl80211_set_wiphy+0x2c20/0x2c20 [ 355.292232][ T27] ? lock_release+0x720/0x720 [ 355.298018][ T27] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 355.303327][ T27] netlink_rcv_skb+0x153/0x420 [ 355.310179][ T27] ? genl_get_cmd+0x480/0x480 [ 355.314886][ T27] ? netlink_ack+0xa60/0xa60 [ 355.320791][ T27] ? netlink_deliver_tap+0x1b1/0xc30 [ 355.326112][ T27] genl_rcv+0x24/0x40 [ 355.331803][ T27] netlink_unicast+0x533/0x7d0 [ 355.336667][ T27] ? netlink_attachskb+0x880/0x880 [ 355.341808][ T27] ? __virt_addr_valid+0x5d/0x2d0 [ 355.347433][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 355.353716][ T27] ? __phys_addr_symbol+0x2c/0x70 [ 355.358855][ T27] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 355.364594][ T27] ? __check_object_size+0x16e/0x3f0 [ 355.370288][ T27] netlink_sendmsg+0x86d/0xda0 [ 355.375082][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 355.380117][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 355.386715][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 355.391760][ T27] sock_sendmsg+0xcf/0x120 [ 355.396310][ T27] sock_no_sendpage+0xf3/0x130 [ 355.401087][ T27] ? sock_no_shutdown+0x10/0x10 [ 355.406612][ T27] ? kasan_quarantine_put+0xf5/0x210 [ 355.411993][ T27] kernel_sendpage.part.0+0x1a0/0x340 [ 355.417478][ T27] sock_sendpage+0xe5/0x140 [ 355.422833][ T27] ? __sock_recv_ts_and_drops+0x430/0x430 [ 355.428834][ T27] pipe_to_sendpage+0x2ad/0x380 [ 355.433771][ T27] ? propagate_umount+0x19f0/0x19f0 [ 355.440465][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 355.446925][ T27] ? splice_from_pipe_next.part.0+0x167/0x520 [ 355.453541][ T27] __splice_from_pipe+0x43e/0x8a0 [ 355.458860][ T27] ? propagate_umount+0x19f0/0x19f0 [ 355.464081][ T27] generic_splice_sendpage+0xd4/0x140 [ 355.469630][ T27] ? __do_sys_vmsplice+0x9e0/0x9e0 [ 355.474760][ T27] ? security_file_permission+0xab/0xd0 [ 355.480510][ T27] ? __do_sys_vmsplice+0x9e0/0x9e0 [ 355.485641][ T27] direct_splice_actor+0x110/0x180 [ 355.490978][ T27] splice_direct_to_actor+0x34b/0x8c0 [ 355.496446][ T27] ? generic_file_splice_read+0x6d0/0x6d0 [ 355.502186][ T27] ? do_splice_to+0x250/0x250 [ 355.507040][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 355.513299][ T27] ? security_file_permission+0xab/0xd0 [ 355.519012][ T27] do_splice_direct+0x1b3/0x280 [ 355.523995][ T27] ? splice_direct_to_actor+0x8c0/0x8c0 [ 355.530903][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 355.538332][ T27] ? security_file_permission+0xab/0xd0 [ 355.543903][ T27] do_sendfile+0xae9/0x1240 [ 355.549755][ T27] ? do_pwritev+0x270/0x270 [ 355.554844][ T27] ? __context_tracking_exit+0xb8/0xe0 [ 355.561238][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 355.566094][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 355.571155][ T27] __x64_sys_sendfile64+0x1cc/0x210 [ 355.576744][ T27] ? __ia32_sys_sendfile+0x220/0x220 [ 355.582059][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 355.588189][ T27] do_syscall_64+0x35/0xb0 [ 355.592795][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 355.606221][ T27] RIP: 0033:0x7f5d4e230a39 [ 355.611637][ T27] RSP: 002b:00007f5d4b7a6188 EFLAGS: 00000246 ORIG_RAX: 0000000000000028 [ 355.620250][ T27] RAX: ffffffffffffffda RBX: 00007f5d4e333f60 RCX: 00007f5d4e230a39 [ 355.628299][ T27] RDX: 0000000000000000 RSI: 0000000000000004 RDI: 0000000000000006 [ 355.636460][ T27] RBP: 00007f5d4e28ac5f R08: 0000000000000000 R09: 0000000000000000 [ 355.644446][ T27] R10: 0000000100000002 R11: 0000000000000246 R12: 0000000000000000 [ 355.652902][ T27] R13: 00007ffeee9eb71f R14: 00007f5d4b7a6300 R15: 0000000000022000 [ 355.662741][ T27] INFO: task syz-executor.3:9218 blocked for more than 145 seconds. [ 355.670990][ T27] Not tainted 5.15.0-rc5-syzkaller #0 [ 355.677127][ T27] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 355.685800][ T27] task:syz-executor.3 state:D stack:27568 pid: 9218 ppid: 8415 flags:0x00000004 [ 355.695859][ T27] Call Trace: [ 355.699352][ T27] __schedule+0xb44/0x5960 [ 355.703802][ T27] ? find_held_lock+0x2d/0x110 [ 355.709372][ T27] ? __mutex_lock+0x9c0/0x12f0 [ 355.714171][ T27] ? io_schedule_timeout+0x140/0x140 [ 355.720759][ T27] schedule+0xd3/0x270 [ 355.724852][ T27] schedule_preempt_disabled+0xf/0x20 [ 355.730601][ T27] __mutex_lock+0xa34/0x12f0 [ 355.735225][ T27] ? nl80211_pre_doit+0x23/0x620 [ 355.740974][ T27] ? mutex_lock_io_nested+0x1150/0x1150 [ 355.747333][ T27] ? __nla_parse+0x3d/0x50 [ 355.751764][ T27] ? nl80211_set_qos_map+0x800/0x800 [ 355.758616][ T27] nl80211_pre_doit+0x23/0x620 [ 355.763415][ T27] ? nl80211_set_qos_map+0x800/0x800 [ 355.770515][ T27] genl_family_rcv_msg_doit+0x1ee/0x320 [ 355.776094][ T27] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 355.784692][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 355.791471][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 355.800659][ T27] ? ns_capable+0xd9/0x100 [ 355.805192][ T27] genl_rcv_msg+0x328/0x580 [ 355.811151][ T27] ? genl_get_cmd+0x480/0x480 [ 355.815855][ T27] ? nl80211_send_scan_start+0x170/0x170 [ 355.822730][ T27] ? lock_release+0x720/0x720 [ 355.829821][ T27] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 355.835133][ T27] netlink_rcv_skb+0x153/0x420 [ 355.841413][ T27] ? genl_get_cmd+0x480/0x480 [ 355.847013][ T27] ? netlink_ack+0xa60/0xa60 [ 355.851725][ T27] ? netlink_deliver_tap+0x1b1/0xc30 [ 355.858684][ T27] genl_rcv+0x24/0x40 [ 355.862695][ T27] netlink_unicast+0x533/0x7d0 [ 355.869024][ T27] ? netlink_attachskb+0x880/0x880 [ 355.874187][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 355.881009][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 355.887624][ T27] ? __phys_addr_symbol+0x2c/0x70 [ 355.892698][ T27] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 355.898901][ T27] ? __check_object_size+0x16e/0x3f0 [ 355.904218][ T27] netlink_sendmsg+0x86d/0xda0 [ 355.909727][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 355.914694][ T27] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 355.921612][ T27] ? netlink_unicast+0x7d0/0x7d0 [ 355.928671][ T27] sock_sendmsg+0xcf/0x120 [ 355.933121][ T27] ____sys_sendmsg+0x6e8/0x810 [ 355.940012][ T27] ? kernel_sendmsg+0x50/0x50 [ 355.944726][ T27] ? do_recvmmsg+0x6d0/0x6d0 [ 355.949608][ T27] ? lock_chain_count+0x20/0x20 [ 355.954628][ T27] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 355.961406][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 355.966624][ T27] ___sys_sendmsg+0xf3/0x170 [ 355.971236][ T27] ? sendmsg_copy_msghdr+0x160/0x160 [ 355.976636][ T27] ? __fget_files+0x21b/0x3e0 [ 355.981326][ T27] ? lock_downgrade+0x6e0/0x6e0 [ 355.986478][ T27] ? __fget_files+0x23d/0x3e0 [ 355.991175][ T27] ? __fget_light+0xea/0x280 [ 355.995778][ T27] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 356.002374][ T27] __sys_sendmsg+0xe5/0x1b0 [ 356.007223][ T27] ? __sys_sendmsg_sock+0x30/0x30 [ 356.013357][ T27] ? syscall_enter_from_user_mode+0x21/0x70 [ 356.019364][ T27] do_syscall_64+0x35/0xb0 [ 356.023789][ T27] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 356.029861][ T27] RIP: 0033:0x7fcce18c0a39 [ 356.034293][ T27] RSP: 002b:00007fccdee36188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.043750][ T27] RAX: ffffffffffffffda RBX: 00007fcce19c3f60 RCX: 00007fcce18c0a39 [ 356.056284][ T27] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 356.065042][ T27] RBP: 00007fcce191ac5f R08: 0000000000000000 R09: 0000000000000000 [ 356.073127][ T27] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.081380][ T27] R13: 00007ffc1fd052af R14: 00007fccdee36300 R15: 0000000000022000 [ 356.089539][ T27] [ 356.089539][ T27] Showing all locks held in the system: [ 356.099289][ T27] 4 locks held by kworker/u4:1/10: [ 356.104409][ T27] #0: ffff888140193138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 356.115009][ T27] #1: ffffc90000cf7db0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 356.125108][ T27] #2: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9b/0xb00 [ 356.136292][ T27] #3: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: ip_fib_net_exit+0x1b/0x2b0 [ 356.145491][ T27] 1 lock held by khungtaskd/27: [ 356.151822][ T27] #0: ffffffff8b981ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 356.163758][ T27] 3 locks held by kworker/u4:4/1169: [ 356.169936][ T27] 3 locks held by kworker/1:2/2349: [ 356.175161][ T27] #0: ffff888010c65d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 356.187109][ T27] #1: ffffc9000a4dfdb0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 356.197801][ T27] #2: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x83/0xe10 [ 356.207750][ T27] 3 locks held by kworker/1:3/2958: [ 356.212951][ T27] #0: ffff8881479ffd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 356.224013][ T27] #1: ffffc9000207fdb0 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 356.234441][ T27] #2: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 356.244517][ T27] 1 lock held by in:imklog/6257: [ 356.249617][ T27] 2 locks held by syz-executor.2/9186: [ 356.255076][ T27] #0: ffff888028d6ee10 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: __sock_release+0x86/0x280 [ 356.269474][ T27] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: ip6mr_sk_done+0xe9/0x370 [ 356.278620][ T27] 1 lock held by syz-executor.5/9203: [ 356.284079][ T27] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 356.293826][ T27] 1 lock held by syz-executor.5/9205: [ 356.299598][ T27] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 356.309134][ T27] 1 lock held by syz-executor.5/9206: [ 356.314508][ T27] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 356.324095][ T27] 2 locks held by syz-executor.1/9209: [ 356.329954][ T27] #0: ffffffff8d17b2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 356.338340][ T27] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x23/0x620 [ 356.347734][ T27] 2 locks held by syz-executor.3/9218: [ 356.353196][ T27] #0: ffffffff8d17b2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 356.361925][ T27] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x23/0x620 [ 356.372528][ T27] [ 356.374859][ T27] ============================================= [ 356.374859][ T27] [ 356.384688][ T27] NMI backtrace for cpu 0 [ 356.389028][ T27] CPU: 0 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 356.397173][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.407228][ T27] Call Trace: [ 356.410545][ T27] dump_stack_lvl+0xcd/0x134 [ 356.415189][ T27] nmi_cpu_backtrace.cold+0x47/0x144 [ 356.420463][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 356.425704][ T27] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 356.431825][ T27] watchdog+0xc1d/0xf50 [ 356.436007][ T27] ? reset_hung_task_detector+0x30/0x30 [ 356.441712][ T27] kthread+0x3e5/0x4d0 [ 356.445769][ T27] ? set_kthread_struct+0x130/0x130 [ 356.450953][ T27] ret_from_fork+0x1f/0x30 [ 356.455873][ T27] Sending NMI from CPU 0 to CPUs 1: [ 356.461119][ C1] NMI backtrace for cpu 1 [ 356.461128][ C1] CPU: 1 PID: 158 Comm: kworker/u4:3 Not tainted 5.15.0-rc5-syzkaller #0 [ 356.461149][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.461166][ C1] Workqueue: bat_events batadv_nc_worker [ 356.461248][ C1] RIP: 0010:lock_release+0xc3/0x720 [ 356.461272][ C1] Code: ad 6e 8d e8 0f 24 62 00 48 0f a3 1d 17 75 12 0c 0f 82 60 04 00 00 48 c7 c3 0c e1 6e 8d 48 b8 00 00 00 00 00 fc ff df 48 89 da <48> c1 ea 03 0f b6 14 02 48 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 [ 356.461290][ C1] RSP: 0018:ffffc90001fdfbc8 EFLAGS: 00000286 [ 356.461304][ C1] RAX: dffffc0000000000 RBX: ffffffff8d6ee10c RCX: 0000000000000001 [ 356.461318][ C1] RDX: ffffffff8d6ee10c RSI: 0000000000000001 RDI: 0000000000000000 [ 356.461329][ C1] RBP: 1ffff920003fbf7b R08: 0000000000000000 R09: ffff8880b9d32a0b [ 356.461342][ C1] R10: ffffed10173a6541 R11: 0000000000000000 R12: ffffffff8b981ee0 [ 356.461354][ C1] R13: 0000000000000000 R14: dffffc0000000000 R15: 000000000000039a [ 356.461367][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 356.461386][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 356.461399][ C1] CR2: 00007f1d34bf7000 CR3: 000000006fc3d000 CR4: 00000000003506e0 [ 356.461412][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 356.461423][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 356.461435][ C1] Call Trace: [ 356.461441][ C1] ? batadv_nc_worker+0x849/0xfa0 [ 356.461462][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 356.461487][ C1] batadv_nc_worker+0x86b/0xfa0 [ 356.461512][ C1] process_one_work+0x9bf/0x16b0 [ 356.461534][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 356.461554][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 356.461574][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 356.461601][ C1] worker_thread+0x658/0x11f0 [ 356.461623][ C1] ? process_one_work+0x16b0/0x16b0 [ 356.461642][ C1] kthread+0x3e5/0x4d0 [ 356.461662][ C1] ? set_kthread_struct+0x130/0x130 [ 356.461686][ C1] ret_from_fork+0x1f/0x30 [ 356.463552][ T27] Kernel panic - not syncing: hung_task: blocked tasks [ 356.670246][ T27] CPU: 1 PID: 27 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 356.678389][ T27] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 356.688444][ T27] Call Trace: [ 356.691714][ T27] dump_stack_lvl+0xcd/0x134 [ 356.696306][ T27] panic+0x2b0/0x6dd [ 356.700356][ T27] ? __warn_printk+0xf3/0xf3 [ 356.704944][ T27] ? lapic_can_unplug_cpu+0x80/0x80 [ 356.710140][ T27] ? preempt_schedule_thunk+0x16/0x18 [ 356.715511][ T27] ? nmi_trigger_cpumask_backtrace+0x191/0x220 [ 356.721661][ T27] ? watchdog.cold+0x130/0x158 [ 356.726452][ T27] watchdog.cold+0x141/0x158 [ 356.731045][ T27] ? reset_hung_task_detector+0x30/0x30 [ 356.736595][ T27] kthread+0x3e5/0x4d0 [ 356.740691][ T27] ? set_kthread_struct+0x130/0x130 [ 356.745892][ T27] ret_from_fork+0x1f/0x30 [ 356.750759][ T27] Kernel Offset: disabled [ 356.755085][ T27] Rebooting in 86400 seconds..