last executing test programs: 1m6.694851823s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000feffffff0000000000000000851000000200000026000000ffffff859500007b00000000850000001300000095"], &(0x7f0000000040)='GPL\x00', 0x2, 0x92, &(0x7f0000000240)=""/146}, 0x90) 1m6.597931498s ago: executing program 4: recvmsg$unix(0xffffffffffffffff, &(0x7f0000001140)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r0, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) 1m6.522473374s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104d000000000007500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) 53.856665614s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104d000000000007500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) 43.498949438s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104d000000000007500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) 33.767798021s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x68, &(0x7f0000000000)={&(0x7f0000001940)=ANY=[@ANYBLOB="140f00001000010000000000e80000000000000a50000000120a09000000000000000000020000000900020073797a3100000000080004400000000f0900010073797a30000000000800034000000001"], 0x64}}, 0x0) 33.621795761s ago: executing program 3: bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f00000001c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0xffffffffffffff22) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) ioctl$TUNSETFILTEREBPF(r2, 0x800454e1, &(0x7f00000001c0)=r3) write$cgroup_devices(0xffffffffffffffff, &(0x7f0000000140)=ANY=[@ANYBLOB="1e0306003c5c980128876340860800702c1ffe80000000000000ffffa1dce408db9d13"], 0xffdd) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$CAN_RAW_FD_FRAMES(r4, 0x65, 0x5, &(0x7f0000000340), 0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f0000000000), 0x248800) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) r6 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r6, 0x10d, 0xcc, 0x0, &(0x7f0000000100)) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000080), 0xffffffffffffffff) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="000000000000000087080000000000007b8af8ff00000000bf0900000000000007020000f8ffffffb703000008000000b70400000000000085000000820000139500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x8, 0xff9, &(0x7f0000002300)=""/4089}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 32.277335005s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x2) syz_emit_ethernet(0xba, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080502a80b436c84bfd266ddcec8c21d12cce21ca36427414e1603b85dfdeaf6f95e09d3ff1028e84e686b1aabe25495d1cd344e7c1c98b7651a009706a8a44f14f9f61d7cf6ff89599c88b4b682ac5e87edc13fe4ddd576edb42e09ad530fb14b516634a51f67a68458344a45a3031d504e172c7bb5492d8685499a61e59cb650ac3152a75e1579670a48335b32b03df21f144435e197ede0667765ea3e082eb3080000001e19d1de"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x1200, 0x9, 0x1800, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000240)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000001bc5000000000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x44}}, 0x0) 31.487576164s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x9, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000540)="89000000120081ae08060cdc030000007f03e3f7000000206ee3ffca1b1f0060000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0095b837dc6cc01e32efaec8c3a6ec00172800014001030c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="680001000206010200000000000000000a000008050005000a00000005000500010000003c00078006000500060004404e240000060005404e2400001800018014000240fe8000000000000000000000000000aa05000100070000009b6e7cb467563b6be0f027a485efb0cf26e955d4c48345e023b23f6a74e369b393cb00"/138], 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x9, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000800000000000000feffffff08a39daaff03000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000100"], &(0x7f0000000200)='syzkaller\x00', 0x7, 0x2b, &(0x7f0000000240)=""/43, 0x40f00, 0x24, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0x1, 0xf97, 0x51fa}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000300)=[{0x1, 0x5, 0x800000f}, {0x2, 0x4, 0x6, 0x5}, {0x0, 0x1, 0x0, 0x8}, {0x0, 0x3, 0xb, 0x8}], 0x10, 0x8}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f00000002c0), 0x4) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) unshare(0x20040600) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$rose(r6, 0x104, 0x7, &(0x7f0000000040), 0x4) sendmsg$TIPC_NL_NODE_GET(r4, &(0x7f00000005c0)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000006c0)=ANY=[@ANYBLOB="b0000000031ccd80e925667f9e26533a4791e62e4194b288e4c5a0b4575c64ee2f01f799ce10bd5286d69e0bccdca068c34aa30911a310a12e0788e52576395c87b965025012151e1fafba6b1bf18cf7fa63cee3afa9847d77a34ac6985031f399cb28d08aff9f9369ed89ae78d3d1d0d2fae9406e63cec41c1b09cbc352e922994fcb4bb7cb61845230542666ca242394b7a9614eb7608445cbebcb717fbb85c3aaceccac84c62f0fe698f74276c6e02537e69798f5d249fdcc862dfb6bfda4cf709c6016c778a2c661a84927c749a691ff190c37fd6861011892999569268f2ace5a0537af072cd540d8ac2de28d42", @ANYRES16=0x0, @ANYBLOB="040029bd7000fddbdf250d0000006c0004801c000780080003000600000008000400ff00000008000200020000001c00078008000100050000000800010018000000080002002ddb00000900010073797a30000000002400078008000400ff7f000008000300faffffff08000100130000000800030019040000300007800c000400040000000000000008000200d7200d7c0c00030006000000000000000c0004000200000000000000"], 0xb0}, 0x1, 0x0, 0x0, 0x44044}, 0x80) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_channels={0x3c}}) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c0000001a00010000000000000000008180"], 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000380)={0x1f, 0x2, 0x4}, 0x19) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0xd) write$binfmt_misc(r9, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0xd) ioctl$PPPIOCSNPMODE(0xffffffffffffffff, 0x4008744b, &(0x7f0000000e80)={0x2b}) socket$inet_icmp_raw(0x2, 0x3, 0x1) 31.459350516s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x2) syz_emit_ethernet(0xba, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080502a80b436c84bfd266ddcec8c21d12cce21ca36427414e1603b85dfdeaf6f95e09d3ff1028e84e686b1aabe25495d1cd344e7c1c98b7651a009706a8a44f14f9f61d7cf6ff89599c88b4b682ac5e87edc13fe4ddd576edb42e09ad530fb14b516634a51f67a68458344a45a3031d504e172c7bb5492d8685499a61e59cb650ac3152a75e1579670a48335b32b03df21f144435e197ede0667765ea3e082eb3080000001e19d1de"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x1200, 0x9, 0x1800, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000001bc5000000000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) 31.445669813s ago: executing program 2: socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2801000000000000030800000116b7e3226afe9dd3f7957e9cf324facc"], 0x128}, 0x0) (async) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="2801000000000000030800000116b7e3226afe9dd3f7957e9cf324facc"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) (async) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@fwd={0x0, 0x0, 0x0, 0x4}]}}, 0x0, 0x26}, 0x20) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) (async) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305828, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040), 0x48) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r8, 0x8b22, &(0x7f0000000040)) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x4000) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r9, 0x84, 0x1e, &(0x7f00000007c0)=0x32, 0x4) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, &(0x7f0000000140)={@in={{0x2, 0x4e23, @remote}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) bind$inet6(r10, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r10, 0x0) (async) listen(r10, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000280000000000069078ac1414bbffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb0800450000280000000000069078ac1414bbffffffff00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r11, 0x0, 0x2, 0x0, 0x5b) socket$inet6(0xa, 0x2, 0x4552) (async) socket$inet6(0xa, 0x2, 0x4552) 31.315226933s ago: executing program 1: socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002000010000000000000000000a0000400000000312"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd000000000000000000000000000114000200fc"], 0x5c}}, 0x0) 31.26051529s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a64000000060a0b0400000000000000000200000038000480340001800900010068617368000000002400028008000140000000030800044000000003080003400000000408000240000000120900010073797a30000000000900020073797a3200000000140000001100010000000000000000000000000ab2ca9557073a4d6367f355"], 0x8c}}, 0x0) sendto$inet6(r0, &(0x7f0000000100)="cf", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x13}, 0x1c) r2 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r2, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(r2, 0x6, 0x3, &(0x7f00000000c0), 0x4) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRESDEC=r4, @ANYRES32=r3, @ANYRESOCT=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) sendmmsg(r5, &(0x7f0000004640)=[{{&(0x7f0000000040)=@nfc_llcp={0x27, 0x0, 0x0, 0x0, 0x0, 0x0, "81f3dd052c56f2d3a0ecd62537e586d62d74b0d40043b3299fce8b711a308e376d7f6dd7ecd302af24b4aa5c112b615e96294896b615f5bc92e7bbe6bf3b4e"}, 0x80, 0x0}}], 0x1, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x1d, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000a7080000000000007b8a20ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70500000800000085000000b6000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r7, @ANYBLOB="0000000000000000b70500000800000085000000c500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000080)='signal_generate\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020641c00000000002008007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000440)={&(0x7f0000000400)='signal_generate\x00', r10}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmmsg$inet(r2, &(0x7f0000007100)=[{{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000280)="ab", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000640)='&', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x4, 0x0) close(r2) setsockopt$inet6_int(r0, 0x29, 0x4d, 0x0, 0x0) 31.222971329s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) close(r1) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$alg(0x26, 0x5, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)) socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000040)="aa", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) syz_genetlink_get_family_id$tipc(&(0x7f0000000080), r3) sendto$inet6(r5, &(0x7f0000001240)='>', 0x1, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @local, 0x1}, 0x1c) shutdown(r5, 0x1) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000140)={0x4000000e}) epoll_ctl$EPOLL_CTL_MOD(r2, 0x3, r1, &(0x7f0000000180)={0x2000}) epoll_wait(r2, &(0x7f0000000100)=[{}], 0x1, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-ssse3\x00'}, 0x58) 31.18186736s ago: executing program 1: socket$inet_smc(0x2b, 0x1, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) (async, rerun: 32) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) r2 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) (async, rerun: 32) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000001440)=ANY=[], 0xc0) (rerun: 32) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) setsockopt$inet6_IPV6_RTHDR(r2, 0x29, 0x6, 0x0, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) (async) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x85, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x2e}}}}, &(0x7f00000003c0)=0x90) (async) r3 = openat$cgroup_int(r0, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000240)=ANY=[@ANYBLOB='1-', @ANYRESOCT, @ANYBLOB='E'], 0x31) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xc, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}]}, &(0x7f0000000000)='GPL\x00', 0x8}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0x40305839, 0x0) (async) sendmsg$ETHTOOL_MSG_FEATURES_GET(r4, &(0x7f0000000bc0)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000b80)={0x0, 0x124}}, 0x4004005) sendto$inet(r4, &(0x7f0000000200)="b179fa568af9459d74e00ac2ca428d6fb2d8295f5089bf81519bf10fdda498d7e59f993e9b8e6af4c72718c3bb3b199bc2640c1a8678f4d8cb41f72939e095d3f5bcd934907547091e60d457d07454e792934bd094a03c8df452fe4b0287c700ce500f0ffdc473ed2dc56f4bbd913cde5c1b", 0x72, 0x20040004, &(0x7f0000000140)={0x2, 0x4e20, @broadcast}, 0x10) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x0, 0x8, 0x80, 0x0, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xd}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000380)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffca8}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f00000009c0)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r8, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)=r9}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000007c0)={r8, &(0x7f0000000780)}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000001000000000000000000000085000000a000000018120000", @ANYRES32=r10, @ANYRESHEX=r6], &(0x7f0000000200)='GPL\x00', 0x0, 0xfffffef6, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (rerun: 64) 31.066156612s ago: executing program 1: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r0, 0x103, 0x7, 0x0, &(0x7f0000000280)) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r1, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x0) sendmsg$tipc(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x6, &(0x7f0000000580)=@framed={{}, [@btf_id, @jmp={0x5, 0x1, 0x8}]}, &(0x7f0000000440)='syzkaller\x00', 0x9, 0x15, &(0x7f0000000640)=""/21}, 0x90) setsockopt$TIPC_IMPORTANCE(r1, 0x10f, 0x7f, &(0x7f0000000380), 0x4) r3 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r3, &(0x7f0000000bc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@sndrcv={0x30, 0x84, 0x1, {0x0, 0x0, 0x207}}], 0x30}], 0x1, 0x0) r4 = socket(0x28, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCGSTAMP(r2, 0x8906, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002edf0286fe0100002020702500040000002020207b1af8ff00000000bfa100000000000007010000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), r4) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000004900), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000027c0)=ANY=[@ANYBLOB="e0050000", @ANYRES16=r6, @ANYBLOB="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", @ANYRES32=r8], 0x5e0}}, 0x0) getsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000940)={@multicast1, @initdev, 0x0}, &(0x7f0000000980)=0xc) sendmsg$TEAM_CMD_NOOP(r3, &(0x7f0000000a00)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000c00)={0x33c, 0x0, 0x8, 0x70bd26, 0x25dfdbfb, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x2}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}]}}, {{0x8}, {0x1e0, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xfff}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r9}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}]}, 0x33c}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000001100)={0x184, r5, 0x100, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_KEYS={0x168, 0x51, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPES={0x14, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}]}]}, {0x48, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DEFAULT_TYPES={0x10, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "f521ce204f6e26c1fc13b03590"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_SEQ={0x6, 0x4, "469a"}, @NL80211_KEY_MODE={0x5}]}, {0x44, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "6ac87a056f"}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d3be03d1e70c3ab700"}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}, @NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}]}, {0x3c, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP40={0x9, 0x1, "9052d99457"}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "ca1dd67da7"}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_SEQ={0x7, 0x4, "927684"}, @NL80211_KEY_IDX={0x5, 0x2, 0x2}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x8, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "28f91e09ee"}]}, {0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "8dacc6fad947181409a0893c2a"}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_CIPHER={0x8, 0x3, 0xfac01}]}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x40000d5}, 0x4008000) syz_emit_ethernet(0x5e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fce6ff00000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001840)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r11}, 0x10) connect$vsock_stream(r4, &(0x7f0000000300)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r4, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) 31.060401684s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061104d000000000007500000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x2f) 30.634184973s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x2) syz_emit_ethernet(0xba, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080502a80b436c84bfd266ddcec8c21d12cce21ca36427414e1603b85dfdeaf6f95e09d3ff1028e84e686b1aabe25495d1cd344e7c1c98b7651a009706a8a44f14f9f61d7cf6ff89599c88b4b682ac5e87edc13fe4ddd576edb42e09ad530fb14b516634a51f67a68458344a45a3031d504e172c7bb5492d8685499a61e59cb650ac3152a75e1579670a48335b32b03df21f144435e197ede0667765ea3e082eb3080000001e19d1de"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x1200, 0x9, 0x1800, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, 0x0, &(0x7f0000000240)) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000001bc5000000000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB], 0x44}}, 0x0) 30.403842423s ago: executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r0, 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x3c, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x12}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8, 0x5, r2}]}, 0x3c}}, 0x0) r3 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) writev(r1, &(0x7f0000000400), 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @generic={0x66, 0x0, 0x0, 0xfffc}, @initr0, @exit, @printk={@s, {0x3, 0x0, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) 30.324344974s ago: executing program 0: pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r1, &(0x7f00000002c0), 0x1c) sendmmsg(r1, &(0x7f0000000d40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) (async) splice(r1, 0x0, r0, 0x0, 0x1000, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) (async, rerun: 64) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), 0xffffffffffffffff) (async, rerun: 64) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000001c0)={'sit0\x00', &(0x7f0000000340)={'tunl0\x00', 0x0, 0x7800, 0x700, 0x80000001, 0x0, {{0x5, 0x4, 0x0, 0x9, 0x14, 0x64, 0x0, 0x7, 0x29, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) (async, rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) (rerun: 32) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x360, 0x130, 0x4c, 0x1a, 0x0, 0x2d, 0x290, 0x258, 0x258, 0x290, 0x258, 0x3, 0x0, {[{{@ipv6={@private2, @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x0, 0x0, 0xa}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x2}}}}, {{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@common=@ipv6header={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c0) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff810540010000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd000000100001000b080800418e01400b04fcff", 0x58}], 0x1) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) (async) setsockopt$inet6_int(r5, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) (async) sendmsg$inet6(r5, &(0x7f0000000000)={&(0x7f0000000080)={0xa, 0x4e22, 0x8080000, @mcast2}, 0x1c, 0x0}, 0x40014) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) r7 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r7, &(0x7f0000000a80)={&(0x7f00000009c0), 0x14, &(0x7f0000000a40)={0x0, 0x2}}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r8, &(0x7f00000bd000), 0x0, 0xc0488d0) (async) recvmsg$unix(r8, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) epoll_create1(0x0) 30.282783336s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) bind$inet6(r0, 0x0, 0x0) listen(r0, 0x2) syz_emit_ethernet(0xba, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c2000000080502a80b436c84bfd266ddcec8c21d12cce21ca36427414e1603b85dfdeaf6f95e09d3ff1028e84e686b1aabe25495d1cd344e7c1c98b7651a009706a8a44f14f9f61d7cf6ff89599c88b4b682ac5e87edc13fe4ddd576edb42e09ad530fb14b516634a51f67a68458344a45a3031d504e172c7bb5492d8685499a61e59cb650ac3152a75e1579670a48335b32b03df21f144435e197ede0667765ea3e082eb3080000001e19d1de"], 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x42, 0x40, 0x42}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000001a40), 0x1003, r1}, 0x38) bpf$MAP_GET_NEXT_KEY(0x15, 0x0, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x7, 0x1200, 0x9, 0x1800, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x1}, 0x48) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_sctp(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r3 = socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0xd, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000001bc5000000000000", @ANYRES32=0x0, @ANYBLOB="7fff000000000000140012800b0001006d616373656300000400028008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4, @ANYBLOB], 0x44}}, 0x0) 30.152549683s ago: executing program 0: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x5, &(0x7f0000000000)=0x4000000c, 0x4) 30.121335886s ago: executing program 1: socket$netlink(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_SET_MESH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f0000001b40)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000002000010000000000000000000a0000400000000312"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c0002801400030020fd000000000000000000000000000114000200fc"], 0x5c}}, 0x0) 30.054924741s ago: executing program 2: r0 = socket$inet6(0xa, 0x0, 0x3) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) unshare(0x6a040000) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x7, &(0x7f0000000180)=0x6, 0x4) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x18}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[], &(0x7f0000000440)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$key(0xf, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000002000000000000000061108000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r4, &(0x7f0000000380)={0x2, 0x4e22, @loopback}, 0x10) syz_init_net_socket$x25(0x9, 0x5, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="2400000018000109000000000000000100ac141400"], 0x24}, 0x1, 0x0, 0x0, 0x20}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) socket$inet6(0xa, 0x3, 0x7) socket$packet(0x11, 0x2, 0x300) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000000), 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000300)=ANY=[@ANYRESHEX, @ANYRES32=r8, @ANYRESDEC], 0x24}, 0x1, 0x0, 0x0, 0x24004000}, 0x0) setsockopt$packet_drop_memb(r6, 0x107, 0x2, &(0x7f0000000040)={0x0, 0x1, 0x6, @link_local}, 0x10) sendmsg$sock(r2, &(0x7f0000000280)={&(0x7f0000000200)=@ax25={{0x3, @bcast, 0x3}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @default, @bcast]}, 0x80, 0x0}, 0x4008004) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) 30.039536445s ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_sctp(0x2, 0x1, 0x84) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, &(0x7f00000003c0), 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0xf0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.02954326s ago: executing program 0: socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000100)=@assoc_value, &(0x7f00000001c0)=0x8) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) r2 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r2, 0x101, 0x6, &(0x7f0000000dc0), 0x4) (async) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) bind$inet(r1, &(0x7f0000000000)={0x2, 0x4e23, @multicast2}, 0x10) sendto$inet(r1, 0x0, 0x0, 0x22048854, &(0x7f0000000200)={0x2, 0x4e23, @empty}, 0x10) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000440)={'erspan0\x00', 0x0, 0x80, 0x8, 0x2, 0x800, {{0xd, 0x4, 0x1, 0x4, 0x34, 0x64, 0x0, 0xff, 0x29, 0x0, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x17}, {[@noop, @end, @rr={0x7, 0x1b, 0x6b, [@rand_addr, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, @multicast1, @rand_addr=0x64010102, @multicast1]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={0xffffffffffffffff, 0x58, &(0x7f00000002c0)={0x0, 0x0}}, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000e00)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000009000058791860e61b98ae3e4a271a5a"], 0x20}}, 0x0) (async, rerun: 32) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000400)={'ip6_vti0\x00', 0x0}) (async, rerun: 32) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000980)=ANY=[@ANYBLOB="a00000894c92da4ab5de3c65c32c990bfaf9e89d96dbe9e424db", @ANYRES16, @ANYBLOB="00022bbd7000fcdbdf25090000003c00018008000300000000001400020076657468305f766972745f7769666900140002006970366772653000000000000000000008000300030000000c00018008000300000000001400018008000100", @ANYRES32=r4, @ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x841}, 0x20000000) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) (async) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r8, 0x0, 0xca, &(0x7f0000000180)={0x1, 0x1, 0x0, 0x2, @vifc_lcl_addr=@private, @empty}, 0x10) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) close(r9) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x268040, 0x0) unshare(0x24020400) bpf$BPF_MAP_CONST_STR_FREEZE(0x22, &(0x7f00000000c0)={r7}, 0x4) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000080), 0x4) (async) sendto$inet(r1, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 95.749208ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000001600)=@base={0x9, 0x4, 0x3, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000005c0)={{r0}, &(0x7f0000000b80), &(0x7f0000000600)}, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x40086602, &(0x7f0000000540)) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000100), 0x1001) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000ac0)='mm_page_free_batched\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r3, 0x4030582b, &(0x7f0000000280)={'lo\x00', @random="99d7286585a6"}) write$cgroup_pid(r2, &(0x7f0000000340), 0xfdef) 19.325339ms ago: executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xb00, &(0x7f0000000e00)=[{&(0x7f0000000a00)=""/242, 0xf2}, {&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000007c0)=""/179, 0xb3}, {&(0x7f0000000500)=""/207, 0xcf}, {&(0x7f0000000b00)=""/197, 0xc5}, {&(0x7f0000002340)=""/31, 0x1f}, {&(0x7f0000000c00)=""/130, 0x82}], 0x8}, 0x0) 7.111694ms ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x4}, 0x48) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x4}, 0x48) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) write$binfmt_script(r2, 0x0, 0xfffffe5d) (async) write$binfmt_script(r2, 0x0, 0xfffffe5d) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) r4 = socket(0x10, 0x4, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800e0001006970366772657461700000000c00028008000100", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x48}}, 0x0) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000180)={0x3, 0x4, 0x4, 0xa, 0x0, r0, 0x8001, '\x00', r3, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x48) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000200)={0x0, 0x3, 0x89df, 0x4}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl0\x00', &(0x7f0000000000)={'ip6_vti0\x00', r3, 0xecaab912098c9cf5, 0x0, 0x3, 0x7, 0x61, @empty, @ipv4={'\x00', '\xff\xff', @local}, 0x8, 0x20, 0x10000}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000060018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_sctp(0x2, 0x5, 0x84) (async) r6 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000500)={'syzkaller1\x00', {0x2, 0x0, @multicast2}}) (async) ioctl$sock_inet_SIOCSIFADDR(r6, 0x8916, &(0x7f0000000500)={'syzkaller1\x00', {0x2, 0x0, @multicast2}}) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 0s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000edff0000000000000000850000000f00000018010000646c012500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000800000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r2}, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x40305839, &(0x7f0000000540)={'\x00', @random="7e142bb2420b"}) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000640)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000280)="c829fefd2ea808104557d5423ecb5d29ff1cf51b9d213ab2d854b240eab94272b802a5eb67d75da09905614190a311054417f4d9878e5d301147033da319e2faf91819d48a4a7664c2a7f787822ca1d9", 0x50}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r4, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) listen(r4, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18020000000000000000000003000000180100002020702500000000002020207b2af8ff00000000bda107000000000007010000f8ffffffb702000008000000b70300000000000085000000054c34001801000020646c250000000000202020c31af8ffe1000000bda100000000000007010000f8ffffffb702000008000000b70300000000000085000000050000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket(0x11, 0xa, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r5, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @loopback, @mcast2={0xff, 0x5}, 0x0, 0x0, 0x0, 0xfffffffc}}) kernel console output (not intermixed with test programs): netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 115.336876][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.352696][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 115.373153][ T6644] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 115.436287][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 115.444152][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.461766][ T6677] vlan1: entered promiscuous mode [ 117.532342][ T6677] vlan1 (unregistering): left promiscuous mode [ 117.644502][ T6681] bond_slave_0: entered promiscuous mode [ 117.650270][ T6681] bond_slave_1: entered promiscuous mode [ 117.679820][ T6681] macsec1: entered promiscuous mode [ 117.694879][ T6681] bond0: entered promiscuous mode [ 117.713238][ T6681] macsec1: entered allmulticast mode [ 117.722621][ T6681] bond0: entered allmulticast mode [ 117.733610][ T6681] bond_slave_0: entered allmulticast mode [ 117.748698][ T6681] bond_slave_1: entered allmulticast mode [ 117.780592][ T6681] bond0: left allmulticast mode [ 117.785807][ T6681] bond_slave_0: left allmulticast mode [ 117.791285][ T6681] bond_slave_1: left allmulticast mode [ 117.796928][ T6681] bond0: left promiscuous mode [ 117.802057][ T6681] bond_slave_0: left promiscuous mode [ 117.807544][ T6681] bond_slave_1: left promiscuous mode [ 117.844291][ T6688] team_slave_0: entered promiscuous mode [ 117.850574][ T6688] team_slave_1: entered promiscuous mode [ 117.863709][ T6688] vlan2: entered promiscuous mode [ 117.869169][ T6688] team0: entered promiscuous mode [ 117.877037][ T6688] vlan2: entered allmulticast mode [ 117.885487][ T6688] team0: entered allmulticast mode [ 117.890985][ T6688] team_slave_0: entered allmulticast mode [ 117.897711][ T6688] team_slave_1: entered allmulticast mode [ 117.906374][ T6688] team0: left allmulticast mode [ 117.911392][ T6688] team_slave_0: left allmulticast mode [ 117.917425][ T6688] team_slave_1: left allmulticast mode [ 117.923019][ T6688] team0: left promiscuous mode [ 117.929265][ T6688] team_slave_0: left promiscuous mode [ 117.934798][ T6688] team_slave_1: left promiscuous mode [ 117.975059][ T6689] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.995061][ T6689] bond0: left allmulticast mode [ 118.008308][ T6689] bond_slave_1: left allmulticast mode [ 118.024088][ T6689] bond0: left promiscuous mode [ 118.043052][ T6689] bond_slave_1: left promiscuous mode [ 118.061891][ T6689] bridge0: port 3(bond0) entered disabled state [ 118.074388][ T6689] bridge_slave_1: left allmulticast mode [ 118.103809][ T6689] bridge_slave_1: left promiscuous mode [ 118.113758][ T6689] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.126170][ T6689] bridge_slave_0: left allmulticast mode [ 118.131849][ T6689] bridge_slave_0: left promiscuous mode [ 118.138146][ T6689] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.927678][ T6710] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.970633][ T6709] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 119.033726][ T6712] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.923774][ T6736] bond_slave_1: entered promiscuous mode [ 119.964899][ T6736] macsec1: entered promiscuous mode [ 119.973375][ T6736] bond0: entered promiscuous mode [ 119.992845][ T6736] macsec1: entered allmulticast mode [ 120.004528][ T6736] bond0: entered allmulticast mode [ 120.011090][ T6736] bond_slave_1: entered allmulticast mode [ 120.122947][ T6736] bond0: left allmulticast mode [ 120.129381][ T6736] bond_slave_1: left allmulticast mode [ 120.135580][ T6736] bond0: left promiscuous mode [ 120.141636][ T6736] bond_slave_1: left promiscuous mode [ 120.399610][ T6753] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.409185][ T6753] bridge_slave_1: left allmulticast mode [ 120.415037][ T6753] bridge_slave_1: left promiscuous mode [ 120.420883][ T6753] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.429951][ T6753] bridge_slave_0: left allmulticast mode [ 120.442089][ T6753] bridge_slave_0: left promiscuous mode [ 120.448274][ T6753] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.656171][ T6758] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.667734][ T6757] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.295063][ T6791] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 121.298704][ T6786] vlan1: entered promiscuous mode [ 121.331037][ T6788] bond_slave_1: entered promiscuous mode [ 121.349661][ T6788] macsec1: entered promiscuous mode [ 121.361505][ T6788] bond0: entered promiscuous mode [ 121.369988][ T6788] macsec1: entered allmulticast mode [ 121.379149][ T6788] bond0: entered allmulticast mode [ 121.389545][ T6788] bond_slave_1: entered allmulticast mode [ 121.397923][ T6788] bond0: left allmulticast mode [ 121.402895][ T6788] bond_slave_1: left allmulticast mode [ 121.408580][ T6788] bond0: left promiscuous mode [ 121.413608][ T6788] bond_slave_1: left promiscuous mode [ 121.498855][ T6786] vlan1 (unregistering): left promiscuous mode [ 121.508113][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.518035][ T6795] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.522363][ T6799] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.309416][ T6842] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 122.380454][ T6846] bond_slave_1: entered promiscuous mode [ 122.387346][ T6846] macsec1: entered promiscuous mode [ 122.392566][ T6846] bond0: entered promiscuous mode [ 122.400224][ T6846] macsec1: entered allmulticast mode [ 122.405687][ T6846] bond0: entered allmulticast mode [ 122.410805][ T6846] bond_slave_1: entered allmulticast mode [ 122.420185][ T6846] bond0: left allmulticast mode [ 122.425128][ T6846] bond_slave_1: left allmulticast mode [ 122.430619][ T6846] bond0: left promiscuous mode [ 122.437636][ T6846] bond_slave_1: left promiscuous mode [ 123.087812][ T6876] bond_slave_1: entered promiscuous mode [ 123.095135][ T6876] macsec1: entered promiscuous mode [ 123.105058][ T6876] bond0: entered promiscuous mode [ 123.110485][ T6876] macsec1: entered allmulticast mode [ 123.121277][ T6876] bond0: entered allmulticast mode [ 123.127282][ T6876] bond_slave_1: entered allmulticast mode [ 123.139183][ T6876] bond0: left allmulticast mode [ 123.144246][ T6876] bond_slave_1: left allmulticast mode [ 123.154010][ T6876] bond0: left promiscuous mode [ 123.160708][ T6876] bond_slave_1: left promiscuous mode [ 124.001213][ T6930] "syz-executor.2" (6930) uses obsolete ecb(arc4) skcipher [ 124.095439][ T6931] bond_slave_0: entered promiscuous mode [ 124.101234][ T6931] bond_slave_1: entered promiscuous mode [ 124.123764][ T6931] macsec1: entered promiscuous mode [ 124.137492][ T6931] bond0: entered promiscuous mode [ 124.144334][ T6933] x_tables: duplicate entry at hook 3 [ 124.152698][ T6931] macsec1: entered allmulticast mode [ 124.178646][ T6931] bond0: entered allmulticast mode [ 124.194196][ T6931] bond_slave_0: entered allmulticast mode [ 124.206481][ T6931] bond_slave_1: entered allmulticast mode [ 124.231067][ T6931] bond0: left allmulticast mode [ 124.238623][ T6931] bond_slave_0: left allmulticast mode [ 124.249953][ T6931] bond_slave_1: left allmulticast mode [ 124.263948][ T6931] bond0: left promiscuous mode [ 124.275416][ T6931] bond_slave_0: left promiscuous mode [ 124.280977][ T6931] bond_slave_1: left promiscuous mode [ 124.368878][ T6948] xt_TPROXY: Can be used only with -p tcp or -p udp [ 124.696248][ T6966] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 124.888264][ T6974] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 124.969227][ T6974] wlan1: mtu greater than device maximum [ 125.420810][ T6995] bond_slave_1: entered promiscuous mode [ 125.451691][ T6995] macsec1: entered promiscuous mode [ 125.467584][ T6995] bond0: entered promiscuous mode [ 125.473110][ T6995] macsec1: entered allmulticast mode [ 125.484137][ T6995] bond0: entered allmulticast mode [ 125.489431][ T6995] bond_slave_1: entered allmulticast mode [ 125.508960][ T6995] bond0: left allmulticast mode [ 125.513860][ T6995] bond_slave_1: left allmulticast mode [ 125.523768][ T6995] bond0: left promiscuous mode [ 125.529159][ T6995] bond_slave_1: left promiscuous mode [ 125.563762][ T6994] bond_slave_0: entered promiscuous mode [ 125.570441][ T6994] bond_slave_1: entered promiscuous mode [ 125.577950][ T6994] macsec1: entered promiscuous mode [ 125.583192][ T6994] bond0: entered promiscuous mode [ 125.593350][ T6994] macsec1: entered allmulticast mode [ 125.602889][ T6994] bond0: entered allmulticast mode [ 125.614811][ T6994] bond_slave_0: entered allmulticast mode [ 125.620579][ T6994] bond_slave_1: entered allmulticast mode [ 125.631440][ T6994] bond0: left allmulticast mode [ 125.636495][ T6994] bond_slave_0: left allmulticast mode [ 125.642084][ T6994] bond_slave_1: left allmulticast mode [ 125.647858][ T6994] bond0: left promiscuous mode [ 125.653223][ T6994] bond_slave_0: left promiscuous mode [ 125.658709][ T6994] bond_slave_1: left promiscuous mode [ 126.482748][ T7051] bond_slave_1: entered promiscuous mode [ 126.490945][ T7051] macsec1: entered promiscuous mode [ 126.496526][ T7051] bond0: entered promiscuous mode [ 126.502111][ T7051] macsec1: entered allmulticast mode [ 126.503234][ T7054] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.507735][ T7051] bond0: entered allmulticast mode [ 126.507755][ T7051] bond_slave_1: entered allmulticast mode [ 126.528892][ T7051] bond0: left allmulticast mode [ 126.533941][ T7051] bond_slave_1: left allmulticast mode [ 126.539890][ T7051] bond0: left promiscuous mode [ 126.545104][ T7051] bond_slave_1: left promiscuous mode [ 126.676062][ T7060] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.690699][ T7060] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 126.724139][ T7060] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 126.737490][ T7060] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 126.745700][ T7057] bond_slave_0: entered promiscuous mode [ 126.751439][ T7057] bond_slave_1: entered promiscuous mode [ 126.759664][ T7057] macsec1: entered promiscuous mode [ 126.764999][ T7057] bond0: entered promiscuous mode [ 126.770777][ T7057] macsec1: entered allmulticast mode [ 126.777690][ T7057] bond0: entered allmulticast mode [ 126.783511][ T7057] bond_slave_0: entered allmulticast mode [ 126.789380][ T7057] bond_slave_1: entered allmulticast mode [ 126.809973][ T7057] bond0: left allmulticast mode [ 126.818091][ T7057] bond_slave_0: left allmulticast mode [ 126.823637][ T7057] bond_slave_1: left allmulticast mode [ 126.832594][ T7057] bond0: left promiscuous mode [ 126.841043][ T7057] bond_slave_0: left promiscuous mode [ 126.846557][ T7057] bond_slave_1: left promiscuous mode [ 126.989046][ T7068] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.113760][ T7076] A link change request failed with some changes committed already. Interface bond_slave_1 may have been left with an inconsistent configuration, please check. [ 127.805475][ T7110] bond_slave_1: entered promiscuous mode [ 127.828204][ T7110] macsec1: entered promiscuous mode [ 127.834036][ T7110] bond0: entered promiscuous mode [ 127.852188][ T7110] macsec1: entered allmulticast mode [ 127.878628][ T7110] bond0: entered allmulticast mode [ 127.934407][ T7110] bond_slave_1: entered allmulticast mode [ 127.983346][ T7110] bond0: left allmulticast mode [ 127.993243][ T7110] bond_slave_1: left allmulticast mode [ 128.013079][ T7110] bond0: left promiscuous mode [ 128.023029][ T7110] bond_slave_1: left promiscuous mode [ 128.073958][ T7121] veth0_vlan: entered allmulticast mode [ 128.121250][ T7115] veth0_vlan: left promiscuous mode [ 128.136907][ T7115] veth0_vlan: entered promiscuous mode [ 128.945915][ T7181] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.971253][ T7180] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [FSRP.]L3 index 0 [ 128.975341][ T7181] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 129.335453][ T7196] veth0_vlan: entered allmulticast mode [ 129.423924][ T7196] veth0_vlan: left promiscuous mode [ 129.434358][ T7196] veth0_vlan: entered promiscuous mode [ 129.622897][ T7215] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.810681][ T7222] bond_slave_1: entered promiscuous mode [ 129.816514][ T7222] macsec1: entered promiscuous mode [ 129.821746][ T7222] bond0: entered promiscuous mode [ 129.828199][ T7222] macsec1: entered allmulticast mode [ 129.833926][ T7222] bond0: entered allmulticast mode [ 129.839613][ T7222] bond_slave_1: entered allmulticast mode [ 129.858325][ T7222] bond0: left allmulticast mode [ 129.863247][ T7222] bond_slave_1: left allmulticast mode [ 129.882017][ T7222] bond0: left promiscuous mode [ 129.887252][ T7222] bond_slave_1: left promiscuous mode [ 130.107942][ T29] audit: type=1800 audit(1718624766.291:4): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 130.151000][ T29] audit: type=1804 audit(1718624766.301:5): pid=7232 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4180393365/syzkaller.X8uZX3/28/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 130.213885][ T29] audit: type=1804 audit(1718624766.301:6): pid=7233 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4180393365/syzkaller.X8uZX3/28/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 130.229128][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.299509][ T29] audit: type=1804 audit(1718624766.301:7): pid=7230 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir4180393365/syzkaller.X8uZX3/28/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 130.500307][ T7256] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.542776][ T7261] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.573974][ T7261] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 130.793846][ T7272] bond_slave_0: entered promiscuous mode [ 130.799616][ T7272] bond_slave_1: entered promiscuous mode [ 130.805895][ T7272] macsec2: entered promiscuous mode [ 130.812241][ T7272] bond0: entered promiscuous mode [ 130.818599][ T7272] macsec2: entered allmulticast mode [ 130.824160][ T7272] bond0: entered allmulticast mode [ 130.830655][ T7272] bond_slave_0: entered allmulticast mode [ 130.838257][ T7272] bond_slave_1: entered allmulticast mode [ 130.850389][ T7272] bond0: left allmulticast mode [ 130.855372][ T7272] bond_slave_0: left allmulticast mode [ 130.868210][ T7272] bond_slave_1: left allmulticast mode [ 130.873814][ T7272] bond0: left promiscuous mode [ 130.896492][ T7272] bond_slave_0: left promiscuous mode [ 130.902051][ T7272] bond_slave_1: left promiscuous mode [ 131.123083][ T7286] veth0_vlan: left promiscuous mode [ 131.142072][ T7286] veth0_vlan: entered promiscuous mode [ 131.511623][ T7310] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 131.527728][ T7309] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 131.587204][ T7312] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.601283][ T7312] debugfs: Directory 'ü!ô' with parent 'ieee80211' already present! [ 131.974238][ T7321] bond_slave_0: entered promiscuous mode [ 131.979979][ T7321] bond_slave_1: entered promiscuous mode [ 131.989355][ T7321] macsec1: entered promiscuous mode [ 131.994582][ T7321] bond0: entered promiscuous mode [ 132.015693][ T7321] macsec1: entered allmulticast mode [ 132.022643][ T7321] bond0: entered allmulticast mode [ 132.031264][ T7321] bond_slave_0: entered allmulticast mode [ 132.039591][ T7321] bond_slave_1: entered allmulticast mode [ 132.048260][ T7321] bond0: left allmulticast mode [ 132.058672][ T7321] bond_slave_0: left allmulticast mode [ 132.064228][ T7321] bond_slave_1: left allmulticast mode [ 132.070340][ T7321] bond0: left promiscuous mode [ 132.085288][ T7321] bond_slave_0: left promiscuous mode [ 132.090867][ T7321] bond_slave_1: left promiscuous mode [ 132.256524][ T7342] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.317249][ T7342] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.317283][ T7345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.753182][ T7372] veth0_vlan: entered allmulticast mode [ 132.763067][ T7374] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 132.774820][ T7374] netlink: 168104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.840434][ T7364] veth0_vlan: left promiscuous mode [ 132.840592][ T7374] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 132.867144][ T7364] veth0_vlan: entered promiscuous mode [ 132.885541][ T7374] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 132.914172][ T7379] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.119441][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.126258][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.162084][ T7388] bond_slave_1: entered promiscuous mode [ 133.167964][ T7388] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 133.180738][ T7388] macsec1: entered promiscuous mode [ 133.186233][ T7388] bond0: entered promiscuous mode [ 133.195204][ T7388] macsec1: entered allmulticast mode [ 133.200644][ T7388] bond0: entered allmulticast mode [ 133.206769][ T7388] bond_slave_1: entered allmulticast mode [ 133.212644][ T7388] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 133.223310][ T7388] bond0: left allmulticast mode [ 133.229640][ T7388] bond_slave_1: left allmulticast mode [ 133.236546][ T7388] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 133.243858][ T7388] bond0: left promiscuous mode [ 133.249317][ T7388] bond_slave_1: left promiscuous mode [ 133.254990][ T7388] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 133.284496][ T7392] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.292671][ T7392] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.420500][ T7396] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.967610][ T7422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.010822][ T7428] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.026634][ T4490] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.036281][ T4490] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.045116][ T4490] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.059617][ T4490] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.067903][ T4490] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 134.076483][ T4490] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.152572][ T4288] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.166134][ T4288] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.251780][ T4288] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.262715][ T4288] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.362656][ T4288] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.380455][ T4288] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.412129][ T7439] bond_slave_0: entered promiscuous mode [ 134.417886][ T7439] bond_slave_1: entered promiscuous mode [ 134.423789][ T7439] macsec2: entered promiscuous mode [ 134.429190][ T7439] bond0: entered promiscuous mode [ 134.434537][ T7439] macsec2: entered allmulticast mode [ 134.442344][ T7439] bond0: entered allmulticast mode [ 134.447639][ T7439] bond_slave_0: entered allmulticast mode [ 134.453447][ T7439] bond_slave_1: entered allmulticast mode [ 134.465055][ T7439] bond0: left allmulticast mode [ 134.470011][ T7439] bond_slave_0: left allmulticast mode [ 134.475615][ T7439] bond_slave_1: left allmulticast mode [ 134.481103][ T7439] bond0: left promiscuous mode [ 134.488388][ T7439] bond_slave_0: left promiscuous mode [ 134.493870][ T7439] bond_slave_1: left promiscuous mode [ 134.572164][ T4288] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 134.582665][ T4288] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.761428][ T7427] chnl_net:caif_netlink_parms(): no params data found [ 134.823641][ T29] audit: type=1804 audit(1718624771.011:8): pid=7451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir880244009/syzkaller.WFwHot/63/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 134.878977][ T7455] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 134.908505][ T4288] bridge_slave_1: left allmulticast mode [ 134.924480][ T4288] bridge_slave_1: left promiscuous mode [ 134.935270][ T4288] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.945726][ T4288] bridge_slave_0: left allmulticast mode [ 134.951416][ T4288] bridge_slave_0: left promiscuous mode [ 134.977943][ T4288] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.513888][ T4288] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.524832][ T4288] bond0 (unregistering): Released all slaves [ 135.552453][ T7472] bond_slave_0: entered promiscuous mode [ 135.558229][ T7472] bond_slave_1: entered promiscuous mode [ 135.571781][ T7472] macsec2: entered promiscuous mode [ 135.609825][ T7472] bond0: entered promiscuous mode [ 135.624539][ T7472] macsec2: entered allmulticast mode [ 135.638974][ T7472] bond0: entered allmulticast mode [ 135.644555][ T7472] bond_slave_0: entered allmulticast mode [ 135.655366][ T7472] bond_slave_1: entered allmulticast mode [ 135.671801][ T7472] bond0: left allmulticast mode [ 135.678762][ T7472] bond_slave_0: left allmulticast mode [ 135.684376][ T7472] bond_slave_1: left allmulticast mode [ 135.694798][ T7472] bond0: left promiscuous mode [ 135.700044][ T7472] bond_slave_0: left promiscuous mode [ 135.705597][ T7472] bond_slave_1: left promiscuous mode [ 135.857674][ T7427] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.882749][ T7427] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.905034][ T7427] bridge_slave_0: entered allmulticast mode [ 135.918799][ T7427] bridge_slave_0: entered promiscuous mode [ 135.959380][ T7427] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.969461][ T7427] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.979072][ T7427] bridge_slave_1: entered allmulticast mode [ 135.991442][ T7427] bridge_slave_1: entered promiscuous mode [ 136.165228][ T5117] Bluetooth: hci3: command tx timeout [ 136.262559][ T7427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 136.358312][ T7427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 136.591528][ T4288] hsr_slave_0: left promiscuous mode [ 136.599879][ T4288] hsr_slave_1: left promiscuous mode [ 136.607847][ T4288] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.622900][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.632147][ T4288] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.650502][ T4288] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.680543][ T7516] __nla_validate_parse: 1 callbacks suppressed [ 136.680560][ T7516] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.701940][ T4288] veth1_macvtap: left promiscuous mode [ 136.713006][ T4288] veth0_macvtap: left promiscuous mode [ 136.719192][ T4288] veth1_vlan: left promiscuous mode [ 136.719686][ T7516] sock: sock_timestamping_bind_phc: sock not bind to device [ 136.727952][ T4288] veth0_vlan: left promiscuous mode [ 137.413818][ T4288] team0 (unregistering): Port device team_slave_1 removed [ 137.449662][ T4288] team0 (unregistering): Port device team_slave_0 removed [ 137.792431][ T7427] team0: Port device team_slave_0 added [ 137.810319][ T7518] bond_slave_0: entered promiscuous mode [ 137.816096][ T7518] bond_slave_1: entered promiscuous mode [ 137.821973][ T7518] macsec1: entered promiscuous mode [ 137.829231][ T7518] bond0: entered promiscuous mode [ 137.837219][ T7518] macsec1: entered allmulticast mode [ 137.851203][ T7518] bond0: entered allmulticast mode [ 137.856693][ T7518] bond_slave_0: entered allmulticast mode [ 137.862586][ T7518] bond_slave_1: entered allmulticast mode [ 137.871431][ T7518] bond0: left allmulticast mode [ 137.885486][ T7518] bond_slave_0: left allmulticast mode [ 137.894766][ T7518] bond_slave_1: left allmulticast mode [ 137.906084][ T7518] bond0: left promiscuous mode [ 137.911502][ T7518] bond_slave_0: left promiscuous mode [ 137.916990][ T7518] bond_slave_1: left promiscuous mode [ 137.985684][ T7427] team0: Port device team_slave_1 added [ 138.086146][ T7427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.093384][ T7427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.145478][ T7427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.152690][ T7552] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.176621][ T7552] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 138.185076][ T7427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.192537][ T7427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.195715][ T7552] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 138.232938][ T29] audit: type=1804 audit(1718624774.381:9): pid=7552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir880244009/syzkaller.WFwHot/73/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 138.260105][ T7427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.284793][ T5117] Bluetooth: hci3: command tx timeout [ 138.357721][ T7556] smc: net device wg0 applied user defined pnetid SYZ0 [ 138.413819][ T7427] hsr_slave_0: entered promiscuous mode [ 138.441396][ T7427] hsr_slave_1: entered promiscuous mode [ 138.454050][ T7427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.462381][ T7427] Cannot create hsr debugfs directory [ 139.258684][ T7589] bond_slave_0: entered promiscuous mode [ 139.264362][ T7589] bond_slave_1: entered promiscuous mode [ 139.270517][ T7589] macsec2: entered promiscuous mode [ 139.278449][ T7589] bond0: entered promiscuous mode [ 139.283963][ T7589] macsec2: entered allmulticast mode [ 139.293973][ T7589] bond0: entered allmulticast mode [ 139.299239][ T7589] bond_slave_0: entered allmulticast mode [ 139.305131][ T7589] bond_slave_1: entered allmulticast mode [ 139.313251][ T7589] bond0: left allmulticast mode [ 139.318185][ T7589] bond_slave_0: left allmulticast mode [ 139.323677][ T7589] bond_slave_1: left allmulticast mode [ 139.330572][ T7589] bond0: left promiscuous mode [ 139.335922][ T7589] bond_slave_0: left promiscuous mode [ 139.341366][ T7589] bond_slave_1: left promiscuous mode [ 139.513458][ T7427] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 139.576614][ T7427] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 139.597957][ T7427] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 139.630098][ T7427] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 139.859639][ T7616] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.885086][ T7616] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 139.896698][ T7616] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 139.913894][ T7616] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 139.936859][ T7616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.960912][ T7427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.025745][ T7427] 8021q: adding VLAN 0 to HW filter on device team0 [ 140.066073][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.073230][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.104384][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.111609][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.316244][ T5117] Bluetooth: hci3: command tx timeout [ 140.460277][ T7644] bond_slave_0: entered promiscuous mode [ 140.466095][ T7644] bond_slave_1: entered promiscuous mode [ 140.471856][ T7644] macsec1: entered promiscuous mode [ 140.478187][ T7644] bond0: entered promiscuous mode [ 140.483545][ T7644] macsec1: entered allmulticast mode [ 140.488910][ T7644] bond0: entered allmulticast mode [ 140.494024][ T7644] bond_slave_0: entered allmulticast mode [ 140.500773][ T7644] bond_slave_1: entered allmulticast mode [ 140.514558][ T7644] bond0: left allmulticast mode [ 140.519587][ T7644] bond_slave_0: left allmulticast mode [ 140.526135][ T7644] bond_slave_1: left allmulticast mode [ 140.531641][ T7644] bond0: left promiscuous mode [ 140.536869][ T7644] bond_slave_0: left promiscuous mode [ 140.542277][ T7644] bond_slave_1: left promiscuous mode [ 140.585130][ T7427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 140.666239][ T7427] veth0_vlan: entered promiscuous mode [ 140.700444][ T7427] veth1_vlan: entered promiscuous mode [ 140.748259][ T7652] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 140.761912][ T7427] veth0_macvtap: entered promiscuous mode [ 140.768011][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.769929][ T7653] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.797868][ T7652] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 140.810405][ T7652] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.849916][ T7654] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.872714][ T7427] veth1_macvtap: entered promiscuous mode [ 140.923816][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.941389][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.956395][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 140.978272][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.997246][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.013324][ T7664] syz-executor.1[7664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.013584][ T7664] syz-executor.1[7664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.022426][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.055399][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 141.070158][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.089689][ T7664] syz-executor.1[7664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.089954][ T7664] syz-executor.1[7664] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 141.103527][ T7427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 141.141158][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.165523][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.183174][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.203119][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.211799][ T7670] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 141.213136][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.242677][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.254584][ T7427] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 141.272980][ T7427] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 141.300541][ T7427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 141.315494][ T7672] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.349108][ T7675] bond_slave_0: entered promiscuous mode [ 141.354924][ T7675] bond_slave_1: entered promiscuous mode [ 141.361213][ T7675] macsec2: entered promiscuous mode [ 141.366565][ T7675] bond0: entered promiscuous mode [ 141.371883][ T7675] macsec2: entered allmulticast mode [ 141.377427][ T7675] bond0: entered allmulticast mode [ 141.382549][ T7675] bond_slave_0: entered allmulticast mode [ 141.390048][ T7675] bond_slave_1: entered allmulticast mode [ 141.398038][ T7675] bond0: left allmulticast mode [ 141.403011][ T7675] bond_slave_0: left allmulticast mode [ 141.408818][ T7675] bond_slave_1: left allmulticast mode [ 141.414393][ T7675] bond0: left promiscuous mode [ 141.421254][ T7675] bond_slave_0: left promiscuous mode [ 141.426739][ T7675] bond_slave_1: left promiscuous mode [ 141.456885][ T7427] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.465957][ T7427] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.474958][ T7427] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.483682][ T7427] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.503799][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.725785][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.751603][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.800186][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.813821][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 141.901076][ T7683] bond_slave_0: entered promiscuous mode [ 141.906799][ T7683] bond_slave_1: entered promiscuous mode [ 141.912786][ T7683] macsec2: entered promiscuous mode [ 141.918594][ T7683] bond0: entered promiscuous mode [ 141.924326][ T7683] macsec2: entered allmulticast mode [ 141.929903][ T7683] bond0: entered allmulticast mode [ 141.937508][ T7683] bond_slave_0: entered allmulticast mode [ 141.943459][ T7683] bond_slave_1: entered allmulticast mode [ 141.961498][ T7683] bond0: left allmulticast mode [ 141.967779][ T7683] bond_slave_0: left allmulticast mode [ 141.973282][ T7683] bond_slave_1: left allmulticast mode [ 141.984926][ T7683] bond0: left promiscuous mode [ 141.990275][ T7683] bond_slave_0: left promiscuous mode [ 141.995780][ T7683] bond_slave_1: left promiscuous mode [ 142.048039][ T7689] __nla_validate_parse: 1 callbacks suppressed [ 142.048057][ T7689] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.255993][ T7703] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 142.264120][ T7703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.394861][ T5117] Bluetooth: hci3: command tx timeout [ 142.479678][ T7708] bond_slave_0: entered promiscuous mode [ 142.485485][ T7708] bond_slave_1: entered promiscuous mode [ 142.499555][ T7708] macsec2: entered promiscuous mode [ 142.505850][ T7708] bond0: entered promiscuous mode [ 142.511407][ T7708] macsec2: entered allmulticast mode [ 142.517171][ T7708] bond0: entered allmulticast mode [ 142.522312][ T7708] bond_slave_0: entered allmulticast mode [ 142.528345][ T7708] bond_slave_1: entered allmulticast mode [ 142.537484][ T7708] bond0: left allmulticast mode [ 142.542576][ T7708] bond_slave_0: left allmulticast mode [ 142.548191][ T7708] bond_slave_1: left allmulticast mode [ 142.554199][ T7708] bond0: left promiscuous mode [ 142.570819][ T7708] bond_slave_0: left promiscuous mode [ 142.576333][ T7708] bond_slave_1: left promiscuous mode [ 142.620898][ T7719] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 142.638158][ T7725] bridge0: entered allmulticast mode [ 142.652062][ T7727] batadv0: entered promiscuous mode [ 142.659794][ T7727] batadv_slave_0: entered promiscuous mode [ 142.677919][ T7727] batadv_slave_0: left promiscuous mode [ 142.695131][ T7727] batadv0: left promiscuous mode [ 142.928644][ T7738] bond_slave_1: entered promiscuous mode [ 142.934421][ T7738] macsec1: entered promiscuous mode [ 142.939851][ T7738] bond0: entered promiscuous mode [ 142.945483][ T7738] macsec1: entered allmulticast mode [ 142.950923][ T7738] bond0: entered allmulticast mode [ 142.956930][ T7738] bond_slave_1: entered allmulticast mode [ 142.972129][ T7738] bond0: left allmulticast mode [ 142.977186][ T7738] bond_slave_1: left allmulticast mode [ 142.982677][ T7738] bond0: left promiscuous mode [ 142.988059][ T7738] bond_slave_1: left promiscuous mode [ 143.015750][ T7740] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.023198][ T7740] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.034339][ T7740] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 143.419099][ T7758] bond_slave_0: entered promiscuous mode [ 143.424861][ T7758] bond_slave_1: entered promiscuous mode [ 143.459110][ T7758] macsec1: entered promiscuous mode [ 143.467807][ T7763] netlink: 816 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.477559][ T7758] bond0: entered promiscuous mode [ 143.483114][ T7758] macsec1: entered allmulticast mode [ 143.493154][ T7758] bond0: entered allmulticast mode [ 143.499402][ T7758] bond_slave_0: entered allmulticast mode [ 143.514972][ T7758] bond_slave_1: entered allmulticast mode [ 143.533599][ T7758] bond0: left allmulticast mode [ 143.538940][ T7758] bond_slave_0: left allmulticast mode [ 143.544591][ T7758] bond_slave_1: left allmulticast mode [ 143.563432][ T7758] bond0: left promiscuous mode [ 143.579436][ T7758] bond_slave_0: left promiscuous mode [ 143.585005][ T7758] bond_slave_1: left promiscuous mode [ 143.831655][ T29] audit: type=1804 audit(1718624780.021:10): pid=7786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4180393365/syzkaller.X8uZX3/61/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 143.881239][ T7786] netlink: 1074 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.941318][ T7778] bond_slave_0: entered promiscuous mode [ 143.947141][ T7778] bond_slave_1: entered promiscuous mode [ 143.953447][ T7778] macsec1: entered promiscuous mode [ 143.958972][ T7778] bond0: entered promiscuous mode [ 143.966115][ T7778] macsec1: entered allmulticast mode [ 143.972302][ T7778] bond0: entered allmulticast mode [ 143.977842][ T7778] bond_slave_0: entered allmulticast mode [ 143.983796][ T7778] bond_slave_1: entered allmulticast mode [ 143.994200][ T7778] bond0: left allmulticast mode [ 144.006458][ T7778] bond_slave_0: left allmulticast mode [ 144.012124][ T7778] bond_slave_1: left allmulticast mode [ 144.017976][ T7778] bond0: left promiscuous mode [ 144.032442][ T7778] bond_slave_0: left promiscuous mode [ 144.037991][ T7778] bond_slave_1: left promiscuous mode [ 144.103310][ T7799] netlink: 816 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.435602][ T7816] bond0: (slave bond_slave_0): Releasing backup interface [ 144.505285][ T29] audit: type=1804 audit(1718624780.691:11): pid=7823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3180501862/syzkaller.0Hq5t3/10/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 144.530939][ T7820] bond_slave_1: entered promiscuous mode [ 144.544970][ T7820] macsec1: entered promiscuous mode [ 144.550346][ T7820] bond0: entered promiscuous mode [ 144.553106][ T7823] syz-executor.2[7823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.559539][ T7823] syz-executor.2[7823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.571693][ T7820] macsec1: entered allmulticast mode [ 144.602191][ T7820] bond0: entered allmulticast mode [ 144.621884][ T7820] bond_slave_1: entered allmulticast mode [ 144.657403][ T7820] bond0: left allmulticast mode [ 144.671444][ T7820] bond_slave_1: left allmulticast mode [ 144.682233][ T7820] bond0: left promiscuous mode [ 144.694671][ T7820] bond_slave_1: left promiscuous mode [ 144.941785][ T7845] bridge0: port 3(netdevsim1) entered blocking state [ 144.949957][ T7845] bridge0: port 3(netdevsim1) entered disabled state [ 144.962074][ T7845] netdevsim netdevsim1 netdevsim1: entered allmulticast mode [ 144.973074][ T7845] netdevsim netdevsim1 netdevsim1: entered promiscuous mode [ 145.009188][ T7845] bridge0: port 3(netdevsim1) entered blocking state [ 145.016876][ T7845] bridge0: port 3(netdevsim1) entered forwarding state [ 145.059025][ T7851] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.090199][ T7851] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 145.140397][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 145.536706][ T7882] hsr0: entered promiscuous mode [ 145.550034][ T7882] hsr0: left promiscuous mode [ 145.617307][ T7884] bond_slave_1: entered promiscuous mode [ 145.631222][ T7884] macsec1: entered promiscuous mode [ 145.639428][ T7884] bond0: entered promiscuous mode [ 145.653123][ T7884] macsec1: entered allmulticast mode [ 145.658669][ T7884] bond0: entered allmulticast mode [ 145.663948][ T7884] bond_slave_1: entered allmulticast mode [ 145.676434][ T7884] bond0: left allmulticast mode [ 145.681444][ T7884] bond_slave_1: left allmulticast mode [ 145.688316][ T7884] bond0: left promiscuous mode [ 145.693581][ T7884] bond_slave_1: left promiscuous mode [ 145.748193][ T7895] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.906692][ T7899] bridge0: port 3(netdevsim1) entered blocking state [ 145.928159][ T7899] bridge0: port 3(netdevsim1) entered disabled state [ 145.948145][ T7899] netdevsim netdevsim4 netdevsim1: entered allmulticast mode [ 145.959231][ T7899] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 145.972222][ T7904] bond0: (slave bond_slave_0): Releasing backup interface [ 146.024015][ T7899] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.057106][ T7899] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 146.158528][ T7911] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 146.185302][ T7911] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 146.223632][ T7911] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 146.253641][ T7911] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 146.266892][ T7911] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 146.281506][ T7911] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 146.300738][ T7911] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 146.574500][ T7929] bond_slave_1: entered promiscuous mode [ 146.580312][ T7929] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 146.611945][ T7929] macsec1: entered promiscuous mode [ 146.622503][ T7929] bond0: entered promiscuous mode [ 146.633970][ T7929] macsec1: entered allmulticast mode [ 146.642922][ T7929] bond0: entered allmulticast mode [ 146.651737][ T29] audit: type=1804 audit(1718624782.841:12): pid=7935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir4180393365/syzkaller.X8uZX3/70/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 146.654432][ T7929] bond_slave_1: entered allmulticast mode [ 146.688754][ T7929] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 146.699468][ T7929] bond0: left allmulticast mode [ 146.704572][ T7929] bond_slave_1: left allmulticast mode [ 146.718109][ T7929] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 146.725663][ T7929] bond0: left promiscuous mode [ 146.731033][ T7929] bond_slave_1: left promiscuous mode [ 146.736568][ T7929] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 146.954224][ T7948] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.971657][ T7948] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 147.636966][ T7977] bond_slave_1: entered promiscuous mode [ 147.642685][ T7977] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 147.689383][ T7977] macsec1: entered promiscuous mode [ 147.735063][ T7977] bond0: entered promiscuous mode [ 147.749579][ T7977] macsec1: entered allmulticast mode [ 147.761759][ T7977] bond0: entered allmulticast mode [ 147.767183][ T7977] bond_slave_1: entered allmulticast mode [ 147.781020][ T7977] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 147.809398][ T7977] bond0: left allmulticast mode [ 147.819169][ T7977] bond_slave_1: left allmulticast mode [ 147.839618][ T7977] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 147.865739][ T7977] bond0: left promiscuous mode [ 147.879836][ T7977] bond_slave_1: left promiscuous mode [ 147.885416][ T7977] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 147.926764][ T7988] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 147.935721][ T7991] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 147.974475][ T7991] team0: Device veth1_macvtap failed to register rx_handler [ 148.025863][ T7999] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.036479][ T7999] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 148.054156][ T7998] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.061833][ T7998] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.436643][ T8016] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.452774][ T8016] bond0 (unregistering): Released all slaves [ 148.820324][ T8046] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 148.873974][ T8047] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.2'. [ 149.128748][ T8052] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.144154][ T8052] xt_CT: You must specify a L4 protocol and not use inversions on it [ 149.453141][ T8059] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.535399][ T8063] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 149.861388][ T8073] bond_slave_1: entered promiscuous mode [ 149.915434][ T8073] macsec1: entered promiscuous mode [ 149.920698][ T8073] bond0: entered promiscuous mode [ 149.943085][ T8073] macsec1: entered allmulticast mode [ 149.952989][ T8073] bond0: entered allmulticast mode [ 149.958488][ T8073] bond_slave_1: entered allmulticast mode [ 149.981112][ T8073] bond0: left allmulticast mode [ 149.991384][ T8073] bond_slave_1: left allmulticast mode [ 149.998753][ T8073] bond0: left promiscuous mode [ 150.004129][ T8073] bond_slave_1: left promiscuous mode [ 150.056665][ T8084] dvmrp5: entered allmulticast mode [ 150.064838][ T8081] dvmrp5: left allmulticast mode [ 150.191518][ T8093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.366487][ T8106] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.439081][ T8111] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.568447][ T8117] bond_slave_1: entered promiscuous mode [ 150.574297][ T8117] macsec2: entered promiscuous mode [ 150.579687][ T8117] bond0: entered promiscuous mode [ 150.585149][ T8117] macsec2: entered allmulticast mode [ 150.590445][ T8117] bond0: entered allmulticast mode [ 150.595596][ T8117] bond_slave_1: entered allmulticast mode [ 150.603326][ T8117] bond0: left allmulticast mode [ 150.612125][ T8117] bond_slave_1: left allmulticast mode [ 150.617644][ T8117] bond0: left promiscuous mode [ 150.622648][ T8117] bond_slave_1: left promiscuous mode [ 152.184369][ T8169] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.203063][ T8157] bond_slave_1: entered promiscuous mode [ 152.222011][ T8157] macsec1: entered promiscuous mode [ 152.233780][ T8157] bond0: entered promiscuous mode [ 152.260316][ T8157] macsec1: entered allmulticast mode [ 152.283706][ T8157] bond0: entered allmulticast mode [ 152.292628][ T8157] bond_slave_1: entered allmulticast mode [ 152.312460][ T8157] bond0: left allmulticast mode [ 152.324759][ T8157] bond_slave_1: left allmulticast mode [ 152.330260][ T8157] bond0: left promiscuous mode [ 152.359716][ T8157] bond_slave_1: left promiscuous mode [ 152.622338][ T8193] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.819498][ T8201] IPVS: Scheduler module ip_vs_sip not found [ 152.903706][ T8208] sysfs: cannot create duplicate filename '/class/ieee80211/ü!ô' [ 152.913479][ T8208] CPU: 0 PID: 8208 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 152.923932][ T8208] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 152.934004][ T8208] Call Trace: [ 152.937298][ T8208] [ 152.940315][ T8208] dump_stack_lvl+0x241/0x360 [ 152.945109][ T8208] ? __pfx_dump_stack_lvl+0x10/0x10 [ 152.950343][ T8208] ? __pfx__printk+0x10/0x10 [ 152.954938][ T8208] ? sysfs_warn_dup+0x51/0xa0 [ 152.959616][ T8208] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 152.965007][ T8208] sysfs_warn_dup+0x8e/0xa0 [ 152.969525][ T8208] sysfs_do_create_link_sd+0xbe/0x110 [ 152.974992][ T8208] device_add_class_symlinks+0x1c5/0x250 [ 152.980712][ T8208] device_add+0x553/0xbf0 [ 152.985045][ T8208] wiphy_register+0x1d3f/0x2b30 [ 152.989907][ T8208] ? __pfx_wiphy_register+0x10/0x10 [ 152.995097][ T8208] ? minstrel_ht_alloc+0x72b/0x860 [ 153.000214][ T8208] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 153.006289][ T8208] ieee80211_register_hw+0x3098/0x3d80 [ 153.011753][ T8208] ? ieee80211_register_hw+0x10c1/0x3d80 [ 153.017387][ T8208] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 153.023195][ T8208] ? __asan_memset+0x23/0x50 [ 153.027787][ T8208] ? __hrtimer_init+0x170/0x250 [ 153.032668][ T8208] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 153.038401][ T8208] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 153.044456][ T8208] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 153.050857][ T8208] ? kstrndup+0x5c/0xb0 [ 153.055009][ T8208] ? __asan_memcpy+0x40/0x70 [ 153.059593][ T8208] hwsim_new_radio_nl+0xe4c/0x21d0 [ 153.064716][ T8208] ? __pfx___nla_validate_parse+0x10/0x10 [ 153.070440][ T8208] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 153.076005][ T8208] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 153.082341][ T8208] genl_rcv_msg+0xb14/0xec0 [ 153.086839][ T8208] ? mark_lock+0x9a/0x350 [ 153.091165][ T8208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.096206][ T8208] ? __pfx_lock_acquire+0x10/0x10 [ 153.101223][ T8208] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 153.106764][ T8208] ? __pfx___might_resched+0x10/0x10 [ 153.112050][ T8208] netlink_rcv_skb+0x1e3/0x430 [ 153.117005][ T8208] ? __pfx_genl_rcv_msg+0x10/0x10 [ 153.122029][ T8208] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 153.127317][ T8208] ? __netlink_deliver_tap+0x77e/0x7c0 [ 153.132787][ T8208] genl_rcv+0x28/0x40 [ 153.136762][ T8208] netlink_unicast+0x7ea/0x980 [ 153.141526][ T8208] ? __pfx_netlink_unicast+0x10/0x10 [ 153.146798][ T8208] ? __virt_addr_valid+0x183/0x520 [ 153.151904][ T8208] ? __check_object_size+0x49c/0x900 [ 153.157184][ T8208] ? bpf_lsm_netlink_send+0x9/0x10 [ 153.162295][ T8208] netlink_sendmsg+0x8db/0xcb0 [ 153.167068][ T8208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.172349][ T8208] ? __import_iovec+0x536/0x820 [ 153.177209][ T8208] ? aa_sock_msg_perm+0x91/0x160 [ 153.182139][ T8208] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 153.187414][ T8208] ? security_socket_sendmsg+0x87/0xb0 [ 153.192890][ T8208] ? __pfx_netlink_sendmsg+0x10/0x10 [ 153.198182][ T8208] __sock_sendmsg+0x221/0x270 [ 153.202868][ T8208] ____sys_sendmsg+0x525/0x7d0 [ 153.207648][ T8208] ? __pfx_____sys_sendmsg+0x10/0x10 [ 153.212948][ T8208] __sys_sendmsg+0x2b0/0x3a0 [ 153.217539][ T8208] ? __pfx___sys_sendmsg+0x10/0x10 [ 153.222703][ T8208] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 153.229031][ T8208] ? do_syscall_64+0x100/0x230 [ 153.233793][ T8208] ? do_syscall_64+0xb6/0x230 [ 153.238468][ T8208] do_syscall_64+0xf3/0x230 [ 153.243053][ T8208] ? clear_bhb_loop+0x35/0x90 [ 153.247743][ T8208] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 153.253628][ T8208] RIP: 0033:0x7fde2f47cea9 [ 153.258033][ T8208] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 153.277809][ T8208] RSP: 002b:00007fde301ed0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 153.286229][ T8208] RAX: ffffffffffffffda RBX: 00007fde2f5b3f80 RCX: 00007fde2f47cea9 [ 153.294198][ T8208] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 153.302158][ T8208] RBP: 00007fde2f4ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 153.310127][ T8208] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 153.318182][ T8208] R13: 000000000000000b R14: 00007fde2f5b3f80 R15: 00007fff16e737c8 [ 153.326162][ T8208] [ 153.359785][ T8210] Bluetooth: MGMT ver 1.22 [ 153.669447][ T8225] bond_slave_1: entered promiscuous mode [ 153.676135][ T8225] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 153.744874][ T8225] macsec1: entered promiscuous mode [ 153.750226][ T8225] bond0: entered promiscuous mode [ 153.762570][ T8225] macsec1: entered allmulticast mode [ 153.769938][ T8225] bond0: entered allmulticast mode [ 153.781097][ T8225] bond_slave_1: entered allmulticast mode [ 153.787098][ T8225] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 153.806027][ T8225] bond0: left allmulticast mode [ 153.821050][ T8225] bond_slave_1: left allmulticast mode [ 153.831490][ T8225] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 153.849356][ T8225] bond0: left promiscuous mode [ 153.860015][ T8225] bond_slave_1: left promiscuous mode [ 153.865603][ T8225] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 153.980868][ T8238] IPVS: Scheduler module ip_vs_sip not found [ 153.991542][ T8234] __nla_validate_parse: 1 callbacks suppressed [ 153.991561][ T8234] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 154.212377][ T8257] validate_nla: 8 callbacks suppressed [ 154.212396][ T8257] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 154.254338][ T8257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 154.368149][ T8268] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 154.381206][ T8268] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 154.496333][ T8275] IPVS: Scheduler module ip_vs_sip not found [ 154.838345][ T8296] IPVS: Scheduler module ip_vs_sip not found [ 154.905563][ T8297] bond_slave_1: entered promiscuous mode [ 154.911524][ T8297] macsec1: entered promiscuous mode [ 154.917140][ T8297] bond0: entered promiscuous mode [ 154.922713][ T8297] macsec1: entered allmulticast mode [ 154.928579][ T8297] bond0: entered allmulticast mode [ 154.933830][ T8297] bond_slave_1: entered allmulticast mode [ 154.942007][ T8297] bond0: left allmulticast mode [ 154.948484][ T8297] bond_slave_1: left allmulticast mode [ 154.954099][ T8297] bond0: left promiscuous mode [ 154.959602][ T8297] bond_slave_1: left promiscuous mode [ 154.990376][ T8302] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 155.004523][ T8302] netlink: 616 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.146414][ T8313] syz-executor.1[8313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.146558][ T8313] syz-executor.1[8313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 155.408268][ T8323] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.459547][ T8323] sctp: [Deprecated]: syz-executor.1 (pid 8323) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.459547][ T8323] Use struct sctp_sack_info instead [ 155.541512][ T8337] IPVS: Scheduler module ip_vs_sip not found [ 155.830563][ T8348] bond_slave_1: entered promiscuous mode [ 155.836351][ T8348] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 155.844248][ T8348] macsec1: entered promiscuous mode [ 155.849596][ T8348] bond0: entered promiscuous mode [ 155.855209][ T8348] macsec1: entered allmulticast mode [ 155.860511][ T8348] bond0: entered allmulticast mode [ 155.867265][ T8348] bond_slave_1: entered allmulticast mode [ 155.873009][ T8348] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 155.883068][ T8348] bond0: left allmulticast mode [ 155.888086][ T8348] bond_slave_1: left allmulticast mode [ 155.893551][ T8348] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 155.900795][ T8348] bond0: left promiscuous mode [ 155.906126][ T8348] bond_slave_1: left promiscuous mode [ 155.911554][ T8348] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 156.075677][ T8350] bond_slave_1: entered promiscuous mode [ 156.081421][ T8350] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 156.088972][ T8350] macsec1: entered promiscuous mode [ 156.094192][ T8350] bond0: entered promiscuous mode [ 156.100876][ T8350] macsec1: entered allmulticast mode [ 156.106442][ T8350] bond0: entered allmulticast mode [ 156.111725][ T8350] bond_slave_1: entered allmulticast mode [ 156.120127][ T8350] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 156.137713][ T8350] bond0: left allmulticast mode [ 156.145023][ T8350] bond_slave_1: left allmulticast mode [ 156.150632][ T8350] netdevsim netdevsim3 netdevsim0: left allmulticast mode [ 156.164604][ T8350] bond0: left promiscuous mode [ 156.171299][ T8350] bond_slave_1: left promiscuous mode [ 156.176830][ T8350] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 156.295048][ T8358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 156.318418][ T8358] x_tables: unsorted underflow at hook 4 [ 156.541694][ T8369] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.566998][ T8369] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.782546][ T8380] IPVS: Scheduler module ip_vs_sip not found [ 156.793411][ T8388] syz-executor.3[8388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 156.793641][ T8388] syz-executor.3[8388] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 157.065651][ T8404] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.437231][ T8431] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 157.489240][ T8431] bond1: entered promiscuous mode [ 157.512134][ T8427] bond_slave_1: entered promiscuous mode [ 157.529302][ T8427] macsec2: entered promiscuous mode [ 157.537863][ T8427] bond0: entered promiscuous mode [ 157.543290][ T8427] macsec2: entered allmulticast mode [ 157.549981][ T8427] bond0: entered allmulticast mode [ 157.555283][ T8427] bond_slave_1: entered allmulticast mode [ 157.576464][ T8427] bond0: left allmulticast mode [ 157.589763][ T8427] bond_slave_1: left allmulticast mode [ 157.597542][ T8427] bond0: left promiscuous mode [ 157.624400][ T8427] bond_slave_1: left promiscuous mode [ 157.663770][ T8431] lo: entered promiscuous mode [ 157.669102][ T8431] bond1: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 157.689528][ T8431] bond1: (slave lo): making interface the new active one [ 157.699400][ T8431] bond1: (slave lo): Enslaving as an active interface with an up link [ 157.744546][ T8443] ieee802154 phy0 wpan0: encryption failed: -22 [ 157.851855][ T8448] syz_tun: entered promiscuous mode [ 157.946513][ T8447] syz_tun: left promiscuous mode [ 157.979022][ T8460] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 157.998956][ T8460] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 158.035175][ T8464] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 158.043555][ T8464] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.069373][ T8464] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 158.086712][ T8460] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 158.099956][ T8460] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 158.135060][ T8460] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 158.259162][ T29] audit: type=1800 audit(1718624794.451:13): pid=8476 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 158.314776][ T5163] IPVS: starting estimator thread 0... [ 158.323374][ T29] audit: type=1804 audit(1718624794.491:14): pid=8477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3180501862/syzkaller.0Hq5t3/49/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 158.455274][ T8483] IPVS: using max 20 ests per chain, 48000 per kthread [ 158.482466][ T29] audit: type=1804 audit(1718624794.671:15): pid=8491 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir835665561/syzkaller.XgsSCM/210/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 158.540906][ T8485] bond_slave_1: entered promiscuous mode [ 158.547375][ T8485] macsec1: entered promiscuous mode [ 158.552608][ T8485] bond0: entered promiscuous mode [ 158.559955][ T8485] macsec1: entered allmulticast mode [ 158.565361][ T8485] bond0: entered allmulticast mode [ 158.571148][ T8485] bond_slave_1: entered allmulticast mode [ 158.579706][ T8485] bond0: left allmulticast mode [ 158.584616][ T8485] bond_slave_1: left allmulticast mode [ 158.590157][ T8485] bond0: left promiscuous mode [ 158.595520][ T8485] bond_slave_1: left promiscuous mode [ 158.620332][ T8487] veth0_vlan: left promiscuous mode [ 158.901545][ T8501] tap0: tun_chr_ioctl cmd 1074025677 [ 158.925014][ T8501] tap0: linktype set to 65534 [ 159.275714][ T8535] __nla_validate_parse: 2 callbacks suppressed [ 159.275732][ T8535] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 159.345092][ T8530] bond_slave_1: entered promiscuous mode [ 159.363608][ T8530] macsec1: entered promiscuous mode [ 159.369578][ T8530] bond0: entered promiscuous mode [ 159.380431][ T8530] macsec1: entered allmulticast mode [ 159.387576][ T8530] bond0: entered allmulticast mode [ 159.403108][ T8530] bond_slave_1: entered allmulticast mode [ 159.410770][ T8530] bond0: left allmulticast mode [ 159.416165][ T8530] bond_slave_1: left allmulticast mode [ 159.421667][ T8530] bond0: left promiscuous mode [ 159.426895][ T8530] bond_slave_1: left promiscuous mode [ 159.604189][ T8554] validate_nla: 2 callbacks suppressed [ 159.604208][ T8554] netlink: 'syz-executor.4': attribute type 14 has an invalid length. [ 159.723349][ T8564] xt_cluster: you have exceeded the maximum number of cluster nodes (2684354560 > 32) [ 160.006200][ T8579] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.040768][ T8581] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.191339][ T8585] bond_slave_0: entered promiscuous mode [ 160.197130][ T8585] bond_slave_1: entered promiscuous mode [ 160.205713][ T8585] macsec1: entered promiscuous mode [ 160.211030][ T8585] bond0: entered promiscuous mode [ 160.216860][ T8585] macsec1: entered allmulticast mode [ 160.222255][ T8585] bond0: entered allmulticast mode [ 160.229785][ T8585] bond_slave_0: entered allmulticast mode [ 160.235897][ T8585] bond_slave_1: entered allmulticast mode [ 160.245029][ T8585] bond0: left allmulticast mode [ 160.251244][ T8585] bond_slave_0: left allmulticast mode [ 160.257176][ T8585] bond_slave_1: left allmulticast mode [ 160.262727][ T8585] bond0: left promiscuous mode [ 160.269955][ T8585] bond_slave_0: left promiscuous mode [ 160.275451][ T8585] bond_slave_1: left promiscuous mode [ 160.301769][ T8587] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.918054][ T8631] bond_slave_1: entered promiscuous mode [ 160.926360][ T8631] macsec1: entered promiscuous mode [ 160.931875][ T8631] bond0: entered promiscuous mode [ 160.948354][ T8631] macsec1: entered allmulticast mode [ 160.953685][ T8631] bond0: entered allmulticast mode [ 160.973581][ T29] audit: type=1800 audit(1718624797.161:16): pid=8630 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 160.976775][ T8631] bond_slave_1: entered allmulticast mode [ 161.016806][ T8631] bond0: left allmulticast mode [ 161.021780][ T8631] bond_slave_1: left allmulticast mode [ 161.027700][ T8631] bond0: left promiscuous mode [ 161.038933][ T8631] bond_slave_1: left promiscuous mode [ 161.542612][ T8645] af_packet: tpacket_rcv: packet too big, clamped from 64989 to 3952. macoff=96 [ 161.985681][ T5124] IPVS: starting estimator thread 0... [ 162.014519][ T8657] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.049205][ T8658] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 162.087735][ T8664] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.090915][ T8667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.115016][ T8660] IPVS: using max 26 ests per chain, 62400 per kthread [ 162.406184][ T8677] bond_slave_1: entered promiscuous mode [ 162.412544][ T8677] macsec1: entered promiscuous mode [ 162.428695][ T8677] bond0: entered promiscuous mode [ 162.438314][ T29] audit: type=1800 audit(1718624798.631:17): pid=8680 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 162.445658][ T8677] macsec1: entered allmulticast mode [ 162.475410][ T8677] bond0: entered allmulticast mode [ 162.483147][ T8677] bond_slave_1: entered allmulticast mode [ 162.500752][ T8677] bond0: left allmulticast mode [ 162.511681][ T8677] bond_slave_1: left allmulticast mode [ 162.517965][ T8677] bond0: left promiscuous mode [ 162.533458][ T8677] bond_slave_1: left promiscuous mode [ 162.593978][ T8684] bond_slave_1: entered promiscuous mode [ 162.599819][ T8684] macsec2: entered promiscuous mode [ 162.605313][ T8684] bond0: entered promiscuous mode [ 162.610706][ T8684] macsec2: entered allmulticast mode [ 162.616149][ T8684] bond0: entered allmulticast mode [ 162.621273][ T8684] bond_slave_1: entered allmulticast mode [ 162.633243][ T8684] bond0: left allmulticast mode [ 162.638638][ T8684] bond_slave_1: left allmulticast mode [ 162.644263][ T8684] bond0: left promiscuous mode [ 162.655551][ T8684] bond_slave_1: left promiscuous mode [ 163.181622][ T8716] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 163.232560][ T8716] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.260420][ T8716] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 163.514758][ T29] audit: type=1800 audit(1718624799.691:18): pid=8721 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 163.523757][ T8733] bond_slave_1: entered promiscuous mode [ 163.640121][ T8733] macsec1: entered promiscuous mode [ 163.664867][ T8733] bond0: entered promiscuous mode [ 163.696122][ T8733] macsec1: entered allmulticast mode [ 163.701464][ T8733] bond0: entered allmulticast mode [ 163.732316][ T8733] bond_slave_1: entered allmulticast mode [ 163.760236][ T8733] bond0: left allmulticast mode [ 163.771009][ T8733] bond_slave_1: left allmulticast mode [ 163.784263][ T8733] bond0: left promiscuous mode [ 163.794869][ T8733] bond_slave_1: left promiscuous mode [ 164.002474][ T8757] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 164.013483][ T8754] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.038679][ T8757] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.284940][ T8768] IPv4: Oversized IP packet from 127.202.26.0 [ 164.452182][ T29] audit: type=1800 audit(1718624800.641:19): pid=8767 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 164.952923][ T8805] bond_slave_1: entered promiscuous mode [ 164.983739][ T8805] macsec1: entered promiscuous mode [ 164.990956][ T8805] bond0: entered promiscuous mode [ 165.000925][ T8805] macsec1: entered allmulticast mode [ 165.007346][ T8805] bond0: entered allmulticast mode [ 165.012924][ T8805] bond_slave_1: entered allmulticast mode [ 165.050882][ T8805] bond0: left allmulticast mode [ 165.058888][ T8805] bond_slave_1: left allmulticast mode [ 165.073143][ T8805] bond0: left promiscuous mode [ 165.079423][ T8805] bond_slave_1: left promiscuous mode [ 165.148170][ T8811] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 165.218661][ T8811] __nla_validate_parse: 1 callbacks suppressed [ 165.218680][ T8811] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.254881][ T8811] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.280247][ T8820] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 165.297751][ T8820] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 165.311611][ T8820] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 165.447114][ T8831] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 165.544893][ T29] audit: type=1800 audit(1718624801.731:20): pid=8827 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1954 res=0 errno=0 [ 166.346790][ T8871] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 166.394499][ T8871] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.416021][ T8871] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.444166][ T8876] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 166.632012][ T8888] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 167.681191][ T8947] tipc: Started in network mode [ 167.694786][ T8947] tipc: Node identity fec0ffff00000000000000000000001, cluster identity 4711 [ 167.706437][ T8947] tipc: Enabling of bearer rejected, failed to enable media [ 167.942562][ T8961] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.949819][ T8961] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.956475][ T8961] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.962969][ T8961] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.969610][ T8961] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 167.976138][ T8961] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 167.983518][ T8961] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 168.053297][ T8961] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.143027][ T8971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.383648][ T8978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.541908][ T8998] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.768842][ T29] audit: type=1804 audit(1718624804.961:21): pid=9012 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir768795638/syzkaller.iLxy1V/252/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 168.952788][ T9022] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 168.972512][ T9021] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.026300][ T9024] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.129321][ T9030] bridge0: entered promiscuous mode [ 169.142563][ T9030] bridge0: entered allmulticast mode [ 169.343086][ T9032] bridge1: entered promiscuous mode [ 169.372889][ T9032] bridge1: entered allmulticast mode [ 169.548060][ T4490] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 169.558196][ T4490] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 169.576496][ T4490] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 169.585170][ T4490] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 169.595528][ T4490] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 169.613829][ T4490] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 169.887799][ T9063] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 170.132960][ T1047] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.165987][ T1047] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.256636][ T9046] chnl_net:caif_netlink_parms(): no params data found [ 170.410826][ T1047] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.428918][ T1047] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.563276][ T1047] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.574213][ T1047] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.596524][ T9046] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.603912][ T9046] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.621993][ T9046] bridge_slave_0: entered allmulticast mode [ 170.631473][ T9046] bridge_slave_0: entered promiscuous mode [ 170.682379][ T1047] bond0: (slave netdevsim0): Releasing backup interface [ 170.693675][ T1047] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 170.721933][ T1047] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.751730][ T9046] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.771490][ T9046] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.781263][ T9046] bridge_slave_1: entered allmulticast mode [ 170.797212][ T9046] bridge_slave_1: entered promiscuous mode [ 170.882566][ T9046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 170.905380][ T9046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 170.973962][ T9046] team0: Port device team_slave_0 added [ 171.004297][ T58] IPVS: starting estimator thread 0... [ 171.010008][ T9046] team0: Port device team_slave_1 added [ 171.091130][ T9046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 171.100563][ T9046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.128976][ T9125] IPVS: using max 20 ests per chain, 48000 per kthread [ 171.154215][ T9046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 171.627561][ T1047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.640860][ T1047] bond0 (unregistering): Released all slaves [ 171.654550][ T9046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.662085][ T9046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.688906][ T9046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.702043][ T5117] Bluetooth: hci5: command tx timeout [ 171.870090][ T9046] hsr_slave_0: entered promiscuous mode [ 171.890856][ T9046] hsr_slave_1: entered promiscuous mode [ 171.906536][ T9046] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 171.916478][ T9046] Cannot create hsr debugfs directory [ 172.711579][ T1047] hsr_slave_0: left promiscuous mode [ 172.736603][ T1047] hsr_slave_1: left promiscuous mode [ 172.749024][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.765431][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.792402][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.814897][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.869553][ T1047] veth1_macvtap: left promiscuous mode [ 172.882094][ T1047] veth0_macvtap: left promiscuous mode [ 172.895526][ T1047] veth1_vlan: left promiscuous mode [ 172.906610][ T1047] veth0_vlan: left promiscuous mode [ 173.092820][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 173.109355][ T4490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 173.120942][ T4490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 173.134206][ T4490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 173.142606][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 173.151602][ T4490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 173.755326][ T4490] Bluetooth: hci5: command tx timeout [ 173.793464][ T1047] team0 (unregistering): Port device team_slave_1 removed [ 174.132864][ T9188] syzkaller0: entered promiscuous mode [ 174.138757][ T9188] syzkaller0: entered allmulticast mode [ 175.205717][ T4490] Bluetooth: hci0: command tx timeout [ 175.759385][ T9046] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 175.794082][ T9046] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 175.813409][ T9046] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 175.833252][ T9046] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 175.845646][ T4490] Bluetooth: hci5: command tx timeout [ 176.330528][ T9191] chnl_net:caif_netlink_parms(): no params data found [ 176.501839][ T9046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.546820][ T9251] syz-executor.2[9251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.546962][ T9251] syz-executor.2[9251] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 176.602896][ T9191] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.641160][ T9191] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.654212][ T9191] bridge_slave_0: entered allmulticast mode [ 176.671754][ T9191] bridge_slave_0: entered promiscuous mode [ 176.687094][ T9191] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.694255][ T9191] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.734451][ T9191] bridge_slave_1: entered allmulticast mode [ 176.761080][ T9191] bridge_slave_1: entered promiscuous mode [ 176.779999][ T9046] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.901380][ T9191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 176.930360][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.937540][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.982142][ T9191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 177.003276][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.010450][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.145737][ T9191] team0: Port device team_slave_0 added [ 177.158989][ T9191] team0: Port device team_slave_1 added [ 177.270690][ T9191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 177.280232][ T4490] Bluetooth: hci0: command tx timeout [ 177.298212][ T9191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.383277][ T9191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 177.421211][ T9191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 177.428674][ T9191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 177.469503][ T9191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 177.734501][ T9191] hsr_slave_0: entered promiscuous mode [ 177.803879][ T9191] hsr_slave_1: entered promiscuous mode [ 177.828386][ T9191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 177.854892][ T9191] Cannot create hsr debugfs directory [ 177.920795][ T4490] Bluetooth: hci5: command tx timeout [ 178.206657][ T9191] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.218441][ T9191] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.307087][ T9046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 178.368120][ T9191] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.386040][ T9191] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.498891][ T9191] netdevsim netdevsim4 netdevsim1 (unregistering): left allmulticast mode [ 178.516071][ T9191] netdevsim netdevsim4 netdevsim1 (unregistering): left promiscuous mode [ 178.517221][ T9313] syz-executor.1[9313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.540480][ T9313] syz-executor.1[9313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 178.542945][ T9191] bridge0: port 3(netdevsim1) entered disabled state [ 178.602342][ T9191] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.620079][ T9191] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.689313][ T9046] veth0_vlan: entered promiscuous mode [ 178.775108][ T9191] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 178.795686][ T9191] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.858057][ T9046] veth1_vlan: entered promiscuous mode [ 178.967903][ T9046] veth0_macvtap: entered promiscuous mode [ 179.026042][ T9046] veth1_macvtap: entered promiscuous mode [ 179.118876][ T9046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.131665][ T9046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.141820][ T9046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.161942][ T9046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.183398][ T9046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 179.207126][ T9046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.231234][ T9046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.280189][ T9046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.291969][ T9046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.304035][ T9046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.316586][ T9046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.327260][ T9046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.353346][ T9046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.363991][ T4490] Bluetooth: hci0: command tx timeout [ 179.373662][ T9046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 179.387237][ T9046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.418420][ T9046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.429487][ T9046] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.438914][ T9046] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.448948][ T9046] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.458106][ T9046] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.469352][ T9191] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 179.501408][ T9191] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 179.540059][ T9191] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 179.575679][ T9191] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 179.759449][ T1047] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.790413][ T1047] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.913280][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.951360][ T9191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.958476][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.023459][ T9191] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.087693][ T3021] bridge0: port 1(bridge_slave_0) entered blocking state [ 180.094879][ T3021] bridge0: port 1(bridge_slave_0) entered forwarding state [ 180.119075][ T3021] bridge0: port 2(bridge_slave_1) entered blocking state [ 180.126372][ T3021] bridge0: port 2(bridge_slave_1) entered forwarding state [ 180.693428][ T9390] veth0_vlan: entered allmulticast mode [ 180.781646][ T9191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.326108][ T9191] veth0_vlan: entered promiscuous mode [ 181.368591][ T9191] veth1_vlan: entered promiscuous mode [ 181.446102][ T4490] Bluetooth: hci0: command tx timeout [ 181.497699][ T9191] veth0_macvtap: entered promiscuous mode [ 181.533363][ T9434] __nla_validate_parse: 4 callbacks suppressed [ 181.533382][ T9434] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.556185][ T9431] tap0: tun_chr_ioctl cmd 1074025680 [ 181.563005][ T9191] veth1_macvtap: entered promiscuous mode [ 181.712661][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.736427][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.752460][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.775727][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.821401][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.843826][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.865960][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 181.885780][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.898973][ T9191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 181.956002][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 181.979167][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.002015][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.023900][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.045455][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.074492][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.106103][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.129867][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.153282][ T9191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.182725][ T9191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.207907][ T9191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.248511][ T9191] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.263507][ T9191] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.280842][ T9191] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.292653][ T9191] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.467750][ T4288] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.503291][ T4288] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.592950][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.617242][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.099150][ T9471] net_ratelimit: 51 callbacks suppressed [ 183.099169][ T9471] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 183.274189][ T9480] syz-executor.3[9480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.274435][ T9480] syz-executor.3[9480] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.250700][ T9554] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.688144][ T9523] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.187331][ T9583] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 185.198584][ T5117] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 185.208179][ T5117] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 185.216620][ T5117] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 185.225980][ T5117] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 185.233646][ T5117] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 185.245457][ T5117] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 185.542089][ T9581] chnl_net:caif_netlink_parms(): no params data found [ 185.610612][ T9601] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.710976][ T9523] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.865094][ T9612] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 185.879571][ T9612] netlink: 9372 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.884445][ T9523] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.889625][ T9612] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.919661][ T9612] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.039767][ T9523] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.065441][ T9581] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.084543][ T9581] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.087496][ T9626] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 186.098199][ T9581] bridge_slave_0: entered allmulticast mode [ 186.110046][ T9581] bridge_slave_0: entered promiscuous mode [ 186.119303][ T9581] bridge0: port 2(bridge_slave_1) entered blocking state [ 186.127004][ T9581] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.134321][ T9581] bridge_slave_1: entered allmulticast mode [ 186.142065][ T9581] bridge_slave_1: entered promiscuous mode [ 186.191826][ T9581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.213777][ T9581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.318651][ T9581] team0: Port device team_slave_0 added [ 186.357068][ T9581] team0: Port device team_slave_1 added [ 186.432733][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.451338][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.479065][ T9581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.505723][ T9523] bridge_slave_1: left allmulticast mode [ 186.512305][ T9523] bridge_slave_1: left promiscuous mode [ 186.524955][ T9523] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.543044][ T9523] bridge_slave_0: left allmulticast mode [ 186.550248][ T9523] bridge_slave_0: left promiscuous mode [ 186.570756][ T9523] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.221366][ T9523] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.236560][ T9523] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.249882][ T9523] bond0 (unregistering): Released all slaves [ 187.266608][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 187.277543][ T5117] Bluetooth: hci0: command tx timeout [ 187.281096][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 187.311025][ T9581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 187.390450][ T9657] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.603427][ T9581] hsr_slave_0: entered promiscuous mode [ 187.619970][ T9581] hsr_slave_1: entered promiscuous mode [ 187.637708][ T9581] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 187.650653][ T9581] Cannot create hsr debugfs directory [ 187.767343][ T9523] hsr_slave_0: left promiscuous mode [ 187.777876][ T9523] hsr_slave_1: left promiscuous mode [ 187.784108][ T9523] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.792969][ T9523] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.801313][ T9523] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.809467][ T9523] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.832211][ T9523] veth1_macvtap: left promiscuous mode [ 187.839836][ T9523] veth0_macvtap: left promiscuous mode [ 187.846346][ T9523] veth1_vlan: left promiscuous mode [ 187.851643][ T9523] veth0_vlan: left promiscuous mode [ 188.330799][ T9523] team0 (unregistering): Port device team_slave_1 removed [ 188.387016][ T9523] team0 (unregistering): Port device team_slave_0 removed [ 189.323698][ T9721] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 189.335262][ T9722] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 189.546360][ T9722] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 189.933684][ T9581] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 189.954388][ T9581] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 189.977534][ T9581] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 189.988280][ T9581] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 190.086752][ T9761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.111497][ T9581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.146587][ T9581] 8021q: adding VLAN 0 to HW filter on device team0 [ 190.163114][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.170317][ T5124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 190.199688][ T58] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.206941][ T58] bridge0: port 2(bridge_slave_1) entered forwarding state [ 190.500404][ T9778] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.509754][ T9581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.937388][ T9798] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 190.997585][ T9798] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 191.043077][ T9581] veth0_vlan: entered promiscuous mode [ 191.086327][ T9581] veth1_vlan: entered promiscuous mode [ 191.182870][ T9581] veth0_macvtap: entered promiscuous mode [ 191.222458][ T9581] veth1_macvtap: entered promiscuous mode [ 191.252792][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.264232][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.299845][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.328707][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.346235][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.368680][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.394551][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 191.420275][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.459676][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 191.491079][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.518883][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.546737][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.575207][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.593748][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.616760][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.640014][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.655084][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.675357][ T9581] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 191.695107][ T9581] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 191.720429][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.759307][ T9581] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.782287][ T9581] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.805652][ T9581] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.825209][ T9581] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.964420][ T953] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.991226][ T953] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.070692][ T9523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.096441][ T9523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.173917][ T9838] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 192.843412][ T9853] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 193.075915][ T9863] syz-executor.1[9863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.076212][ T9863] syz-executor.1[9863] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.131263][ T9864] netlink: 'syz-executor.3': attribute type 291 has an invalid length. [ 194.068952][ T9903] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.138959][ T9908] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.331574][ T9912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.360078][ T9912] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 194.378736][ T9903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.558147][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.219283][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 195.252528][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 195.603444][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 195.613424][ T4490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 195.625316][ T4490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 195.633792][ T4490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 195.647404][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 195.655405][ T4490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.022443][ T9940] chnl_net:caif_netlink_parms(): no params data found [ 196.087380][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.250760][ T9940] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.265681][ T9940] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.283555][ T9940] bridge_slave_0: entered allmulticast mode [ 196.294166][ T9940] bridge_slave_0: entered promiscuous mode [ 196.353957][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.456063][ T9940] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.464047][ T9968] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.481401][ T9940] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.500454][ T9940] bridge_slave_1: entered allmulticast mode [ 196.511106][ T9940] bridge_slave_1: entered promiscuous mode [ 196.583258][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.604091][ T9970] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.673212][ T9940] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.831199][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.941241][ T9940] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.977342][ T9971] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.133982][ T9984] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 197.278252][ T9940] team0: Port device team_slave_0 added [ 197.317504][ T9940] team0: Port device team_slave_1 added [ 197.521582][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.535161][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.603246][ T9940] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.646633][ T9940] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.662236][ T9940] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.732918][ T9940] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.755653][ T5117] Bluetooth: hci0: command tx timeout [ 197.934131][ T9940] hsr_slave_0: entered promiscuous mode [ 197.949472][ T9940] hsr_slave_1: entered promiscuous mode [ 197.964736][ T9940] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.984950][ T9940] Cannot create hsr debugfs directory [ 198.115608][ T11] bridge_slave_1: left allmulticast mode [ 198.121640][ T11] bridge_slave_1: left promiscuous mode [ 198.127861][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.142351][ T11] bridge_slave_0: left allmulticast mode [ 198.150514][ T11] bridge_slave_0: left promiscuous mode [ 198.172147][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 198.827536][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.855605][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.880090][ T11] bond0 (unregistering): Released all slaves [ 199.223839][T10040] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 199.263158][T10033] __nla_validate_parse: 3 callbacks suppressed [ 199.263177][T10033] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.712813][ T11] hsr_slave_0: left promiscuous mode [ 199.734322][ T11] hsr_slave_1: left promiscuous mode [ 199.774920][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.799952][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.835133][ T5117] Bluetooth: hci0: command tx timeout [ 199.842419][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.854597][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.929299][ T11] veth1_macvtap: left promiscuous mode [ 199.959481][ T11] veth0_macvtap: left promiscuous mode [ 199.969981][ T11] veth1_vlan: left promiscuous mode [ 199.980934][ T11] veth0_vlan: left promiscuous mode [ 200.662178][ T11] team0 (unregistering): Port device team_slave_1 removed [ 200.700171][ T11] team0 (unregistering): Port device team_slave_0 removed [ 201.282478][T10059] tap0: tun_chr_ioctl cmd 1074025677 [ 201.289555][T10059] tap0: linktype set to 768 [ 201.589372][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.654033][ T9940] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 201.686345][ T9940] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 201.775773][T10074] team0: Port device team_slave_0 removed [ 201.789942][T10074] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 201.808191][ T9940] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 201.828510][ T9940] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 201.864077][T10080] team0: No ports can be present during mode change [ 201.915151][ T5117] Bluetooth: hci0: command tx timeout [ 201.958768][T10089] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.014307][T10090] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.187993][ T9940] 8021q: adding VLAN 0 to HW filter on device bond0 [ 202.260455][T10099] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.261044][ T9940] 8021q: adding VLAN 0 to HW filter on device team0 [ 202.307715][T10101] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.331841][T10101] team_slave_1: entered promiscuous mode [ 202.338526][T10101] macvtap1: entered promiscuous mode [ 202.343871][T10101] team0: entered promiscuous mode [ 202.351614][T10101] macvtap1: entered allmulticast mode [ 202.358753][T10101] team0: entered allmulticast mode [ 202.364280][T10101] team_slave_1: entered allmulticast mode [ 202.371502][T10101] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 202.379554][T10103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.394097][T10105] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.405846][T10105] team0: left allmulticast mode [ 202.429196][T10105] team_slave_1: left allmulticast mode [ 202.439541][T10105] team0: left promiscuous mode [ 202.445029][T10105] team_slave_1: left promiscuous mode [ 202.450712][T10105] macvtap1: left promiscuous mode [ 202.456803][T10105] macvtap1: left allmulticast mode [ 202.468181][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.475391][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 202.506948][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.514136][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.610798][T10113] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.642528][T10111] vcan0 speed is unknown, defaulting to 1000 [ 202.678411][T10111] vcan0 speed is unknown, defaulting to 1000 [ 202.703191][T10111] vcan0 speed is unknown, defaulting to 1000 [ 202.972432][T10124] Bluetooth: hci3: unsupported parameter 64512 [ 203.000973][ T9940] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.009293][T10124] Bluetooth: hci3: invalid length 0, exp 2 for type 16 [ 203.034792][ T5162] vcan0 speed is unknown, defaulting to 1000 [ 203.064884][T10111] infiniband syz1: set active [ 203.070895][T10111] infiniband syz1: added vcan0 [ 203.218681][T10111] RDS/IB: syz1: added [ 203.230723][T10111] smc: adding ib device syz1 with port count 1 [ 203.237883][T10111] smc: ib device syz1 port 1 has pnetid [ 203.254492][ T5162] vcan0 speed is unknown, defaulting to 1000 [ 203.264567][T10111] vcan0 speed is unknown, defaulting to 1000 [ 203.599969][T10111] vcan0 speed is unknown, defaulting to 1000 [ 203.623810][T10154] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.680020][ T9940] veth0_vlan: entered promiscuous mode [ 203.711269][ T9940] veth1_vlan: entered promiscuous mode [ 203.760817][ T9940] veth0_macvtap: entered promiscuous mode [ 203.799089][T10157] vlan0: entered allmulticast mode [ 203.804435][T10157] bridge_slave_0: entered allmulticast mode [ 203.814843][T10157] bridge_slave_0: left allmulticast mode [ 203.878382][ T9940] veth1_macvtap: entered promiscuous mode [ 203.898684][T10111] vcan0 speed is unknown, defaulting to 1000 [ 203.907354][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.934836][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.954673][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 203.974663][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.984514][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.007864][ T5117] Bluetooth: hci0: command tx timeout [ 204.013622][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.040235][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 204.071922][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.119013][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 204.166801][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.186429][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.198834][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.210127][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.220742][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.236070][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.264668][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.284689][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.295251][ T9940] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 204.310457][ T9940] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 204.322836][ T9940] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 204.337629][T10111] vcan0 speed is unknown, defaulting to 1000 [ 204.347715][ T9940] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.395667][ T9940] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.421112][ T9940] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.445389][ T9940] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 204.669722][ T2840] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.693562][ T2840] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.768555][T10178] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.773521][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.805331][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.847664][T10111] vcan0 speed is unknown, defaulting to 1000 [ 205.110587][T10184] syzkaller0: entered promiscuous mode [ 205.116859][T10184] syzkaller0: entered allmulticast mode [ 205.126514][T10188] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.158535][T10111] vcan0 speed is unknown, defaulting to 1000 [ 205.303230][T10197] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 206.923907][T10202] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 206.933668][T10202] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 207.224296][T10233] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.383914][T10245] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 207.555444][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 207.967955][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.001712][ T4490] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.013940][ T4490] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.032549][ T4490] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.044045][ T4490] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.055195][ T4490] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 208.062725][ T4490] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.080852][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.213856][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.398636][T10267] vcan0 speed is unknown, defaulting to 1000 [ 208.482749][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 208.516410][ T12] bridge_slave_1: left allmulticast mode [ 208.532414][ T12] bridge_slave_1: left promiscuous mode [ 208.545724][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.565322][T10291] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.593053][ T12] bridge_slave_0: left allmulticast mode [ 208.612117][ T12] bridge_slave_0: left promiscuous mode [ 208.643980][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.108329][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 209.124028][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 209.139859][ T12] bond0 (unregistering): Released all slaves [ 210.165316][ T5117] Bluetooth: hci0: command tx timeout [ 212.244962][ T5117] Bluetooth: hci0: command tx timeout [ 214.314971][ T5117] Bluetooth: hci0: command tx timeout [ 216.396049][ T5117] Bluetooth: hci0: command tx timeout [ 222.235306][ T4490] Bluetooth: hci1: command 0x0406 tx timeout [ 232.475488][ T4490] Bluetooth: hci2: command 0x0406 tx timeout [ 239.305502][ T4490] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 239.316881][ T5116] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 239.330818][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 239.338909][ T5123] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.346293][ T5113] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 239.358442][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.367081][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.376089][ T5123] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 239.384025][ T5123] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.391721][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 239.400106][ T5123] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 239.407306][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 239.415590][ T5113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 239.424208][ T5123] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.426447][ T5117] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 239.444534][ T5117] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 239.452759][ T5117] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 239.465368][ T5117] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 239.538293][ T5116] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 239.549188][ T5116] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 239.557733][ T5116] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 239.573536][ T5116] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 239.582256][ T5116] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 239.591252][ T5116] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 241.515100][ T4490] Bluetooth: hci6: command tx timeout [ 241.515128][ T5117] Bluetooth: hci4: command tx timeout [ 241.526756][ T5116] Bluetooth: hci7: command tx timeout [ 241.675551][ T4490] Bluetooth: hci8: command tx timeout [ 243.595972][ T5116] Bluetooth: hci6: command tx timeout [ 243.595983][ T5117] Bluetooth: hci7: command tx timeout [ 243.602218][ T4490] Bluetooth: hci4: command tx timeout [ 243.759338][ T4490] Bluetooth: hci8: command tx timeout [ 245.675244][ T4490] Bluetooth: hci7: command tx timeout [ 245.685294][ T5117] Bluetooth: hci6: command tx timeout [ 245.691916][ T4490] Bluetooth: hci4: command tx timeout [ 245.845236][ T4490] Bluetooth: hci8: command tx timeout [ 247.755291][ T4490] Bluetooth: hci4: command tx timeout [ 247.760735][ T4490] Bluetooth: hci6: command tx timeout [ 247.766820][ T5117] Bluetooth: hci7: command tx timeout [ 247.915288][ T4490] Bluetooth: hci8: command tx timeout [ 256.005433][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 273.237199][ T5116] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 273.247141][ T5116] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 273.256203][ T5116] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 273.264437][ T5116] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 273.273080][ T5116] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 273.281109][ T5116] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 275.354969][ T5116] Bluetooth: hci9: command tx timeout [ 277.444989][ T5116] Bluetooth: hci9: command tx timeout [ 279.515393][ T5116] Bluetooth: hci9: command tx timeout [ 281.595909][ T5116] Bluetooth: hci9: command tx timeout [ 288.794749][ T4490] Bluetooth: hci3: command 0x0406 tx timeout [ 293.915350][ T4490] Bluetooth: hci5: command 0x0406 tx timeout [ 304.329582][ T4490] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 304.365206][ T4490] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 304.385116][ T4490] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 304.401267][ T4490] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 304.409504][ T4490] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 304.420321][ T4490] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 304.503157][ T5117] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 304.535063][ T5117] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 304.566968][ T5116] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 304.579618][ T5113] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 304.587945][ T5123] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 304.595365][ T5113] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 304.602845][ T5113] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 304.604873][ T5123] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 304.612458][ T5113] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 304.631128][ T5113] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 304.639038][ T4490] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 304.648940][ T5113] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 304.658013][ T4490] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 304.675601][ T4490] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 304.683787][ T5113] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 304.691500][ T4490] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 304.699579][ T5113] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 304.713409][ T5116] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 306.474873][ T5117] Bluetooth: hci10: command tx timeout [ 306.634970][ T5117] Bluetooth: hci11: command tx timeout [ 306.714997][ T5117] Bluetooth: hci13: command tx timeout [ 306.794870][ T5117] Bluetooth: hci12: command tx timeout [ 308.554728][ T5117] Bluetooth: hci10: command tx timeout [ 308.732338][ T5117] Bluetooth: hci11: command tx timeout [ 308.794824][ T5117] Bluetooth: hci13: command tx timeout [ 308.875116][ T5117] Bluetooth: hci12: command tx timeout [ 310.634758][ T5117] Bluetooth: hci10: command tx timeout [ 310.804648][ T5117] Bluetooth: hci11: command tx timeout [ 310.875253][ T5117] Bluetooth: hci13: command tx timeout [ 310.955238][ T5117] Bluetooth: hci12: command tx timeout [ 312.715359][ T5117] Bluetooth: hci10: command tx timeout [ 312.875211][ T5117] Bluetooth: hci11: command tx timeout [ 312.955202][ T5117] Bluetooth: hci13: command tx timeout [ 313.035186][ T5117] Bluetooth: hci12: command tx timeout [ 317.443594][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 334.881580][ T5117] Bluetooth: hci0: command 0x0406 tx timeout [ 338.554058][ T5117] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 338.566074][ T5117] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 338.575310][ T5117] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 338.583611][ T5117] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 338.592628][ T5117] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 338.601577][ T5117] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 340.635508][ T5116] Bluetooth: hci14: command tx timeout [ 342.714793][ T5116] Bluetooth: hci14: command tx timeout [ 344.794822][ T5116] Bluetooth: hci14: command tx timeout [ 346.874841][ T5116] Bluetooth: hci14: command tx timeout [ 364.155495][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 364.163174][ T30] Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 364.183193][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 364.192875][ T30] task:kworker/u8:1 state:D stack:22736 pid:12 tgid:12 ppid:2 flags:0x00004000 2024/06/17 11:50:00 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 364.213274][ T30] Workqueue: netns cleanup_net [ 364.223151][ T30] Call Trace: [ 364.235146][ T30] [ 364.238115][ T30] __schedule+0x17e8/0x4a20 [ 364.242663][ T30] ? __pfx___schedule+0x10/0x10 [ 364.257518][ T30] ? __pfx_lock_release+0x10/0x10 [ 364.262579][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 364.274160][ T30] ? kthread_data+0x52/0xd0 [ 364.279366][ T30] ? schedule+0x90/0x320 [ 364.283631][ T30] ? wq_worker_sleeping+0x66/0x240 [ 364.295075][ T30] ? schedule+0x90/0x320 [ 364.299348][ T30] schedule+0x14b/0x320 [ 364.303522][ T30] schedule_preempt_disabled+0x13/0x30 [ 364.320857][ T30] __mutex_lock+0x6a4/0xd70 [ 364.331267][ T30] ? __mutex_lock+0x527/0xd70 [ 364.338775][ T30] ? ieee80211_unregister_hw+0x55/0x2c0 [ 364.344357][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 364.355133][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 364.361080][ T30] ? rcu_is_watching+0x15/0xb0 [ 364.375324][ T30] ieee80211_unregister_hw+0x55/0x2c0 [ 364.380741][ T30] mac80211_hwsim_del_radio+0x2c2/0x4c0 [ 364.393527][ T30] ? __pfx_mac80211_hwsim_del_radio+0x10/0x10 [ 364.400436][ T30] hwsim_exit_net+0x5c1/0x670 [ 364.405808][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 364.411109][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 364.428904][ T30] cleanup_net+0x802/0xcc0 [ 364.433361][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 364.443341][ T30] ? process_scheduled_works+0x945/0x1830 [ 364.449865][ T30] process_scheduled_works+0xa2c/0x1830 [ 364.465807][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 364.471999][ T30] ? assign_work+0x364/0x3d0 [ 364.486397][ T30] worker_thread+0x86d/0xd70 [ 364.491030][ T30] ? __kthread_parkme+0x169/0x1d0 [ 364.502171][ T30] ? __pfx_worker_thread+0x10/0x10 [ 364.508044][ T30] kthread+0x2f0/0x390 [ 364.512127][ T30] ? __pfx_worker_thread+0x10/0x10 [ 364.525136][ T30] ? __pfx_kthread+0x10/0x10 [ 364.529754][ T30] ret_from_fork+0x4b/0x80 [ 364.534176][ T30] ? __pfx_kthread+0x10/0x10 [ 364.548471][ T30] ret_from_fork_asm+0x1a/0x30 [ 364.553369][ T30] [ 364.562961][ T30] INFO: task kworker/0:5:5162 blocked for more than 143 seconds. [ 364.580128][ T30] Not tainted 6.10.0-rc2-syzkaller-00249-gbe27b8965297 #0 [ 364.591799][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 364.609296][ T30] task:kworker/0:5 state:D stack:22328 pid:5162 tgid:5162 ppid:2 flags:0x00004000 [ 364.620056][ T30] Workqueue: events switchdev_deferred_process_work [ 364.635198][ T30] Call Trace: [ 364.638494][ T30] [ 364.641436][ T30] __schedule+0x17e8/0x4a20 [ 364.656309][ T30] ? __pfx___schedule+0x10/0x10 [ 364.662587][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 364.677457][ T30] ? __pfx_lock_release+0x10/0x10 [ 364.682514][ T30] ? kick_pool+0x45c/0x620 [ 364.687702][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 364.692921][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 364.708059][ T30] ? schedule+0x90/0x320 [ 364.712332][ T30] schedule+0x14b/0x320 [ 364.722263][ T30] schedule_preempt_disabled+0x13/0x30 [ 364.731741][ T30] __mutex_lock+0x6a4/0xd70 [ 364.736880][ T30] ? __mutex_lock+0x527/0xd70 [ 364.741573][ T30] ? switchdev_deferred_process_work+0xe/0x20 [ 364.756533][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 364.762992][ T30] ? process_scheduled_works+0x945/0x1830 [ 364.775084][ T30] switchdev_deferred_process_work+0xe/0x20 [ 364.781012][ T30] process_scheduled_works+0xa2c/0x1830 [