last executing test programs: 33.012091495s ago: executing program 0: mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000080)='cgroup.max.descendants\x00', 0x2, 0x0) write$cgroup_int(r1, &(0x7f0000000040)=0x100000001, 0x12) 32.937798458s ago: executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x2a, &(0x7f0000000440), 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm-aes-ce)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x0) pwrite64(r6, &(0x7f0000000340)="5da1", 0x2, 0x0) r7 = accept(r5, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="000400000000000099e4c397614090d1", 0x10}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) sendto$inet6(r4, &(0x7f0000000e00)="dd11fa62c01f7cef67f2a127346208", 0xf, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 32.924825499s ago: executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$inet_icmp_raw(0x2, 0x3, 0x1) write$binfmt_misc(r1, &(0x7f0000000280)=ANY=[], 0xffffffb1) connect$inet(r2, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) splice(r0, 0x0, r2, 0x0, 0x400f04, 0xc) 32.832307048s ago: executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r0, &(0x7f0000000000)="313a527a28533ad8b35e0d35a8ae7ff6569aeb9780e7d1a64039fe36ec35", &(0x7f0000000040)=""/120}, 0x20) 32.719087775s ago: executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) getsockname(r1, &(0x7f00000014c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000001540)=0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000c00)=@deltfilter={0x30, 0x2d, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0x0, 0xffff}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) 32.698988773s ago: executing program 4: setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x0, 0xd06d}, 0x14) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000040)=ANY=[], 0xfe8e) 32.653137725s ago: executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80) 32.600717573s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000f00000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0), 0x6db6e559) sendfile(r3, r4, 0x0, 0x28000000000002) setsockopt$inet_dccp_buf(r4, 0x21, 0xd, &(0x7f0000000380)="ed8e73888369bbb548b09eee20eed3c0bdcfc3005daa024028018677885febd97e381c6bb8d021c5facb2165a90991421259d8de06db10d727ee8bacbf01ee409ad03b4df79d7dfc287fed4f0c316e6af5792a554b49e396bd28c2fd71af395cf78ff32168a71713ee5416de9a54c389a42d4dce2639a7eeb6b98096015152b2c710849e114b83d7541d36580c602ff5b7f60b01ff992da551172a69c355cefba5933dbf6d2753227e3e741e52210726e58ebca07e72950e310306040ecfbd8e7b174d3954c8cf245bdf218f11ed9658416da5961207ce5fa4b74466c0286d8c36", 0xe1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f0000000080)=0x8000, 0x4) accept4(r3, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x80, 0x80000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000480)="2c3d26f9bb58cae859e2b892fef9d2aecbe0de1ecfb5925a2110ae29d30870a2b8e0ec89978557643f41a7703bff6dcbcc66d5e23b31cb1df22c1e32105ba645e24680b26af4a7e67fdedd5c463486fec4ca577d50e2efdfe76b629d70082827b6dec79ca681a251c04dc18dd336f75befe4b8c274352323cd1c885224ecb102b5672610f53ae6ef452de068ed588cdc9486b5ac40c8b66090578be8a61a0ba748a9e16a8cb51b6371871cb683de1d80f4bb21fa77cdf7186fb99c7d710fd8e5233d2b0589faf244271aab116f580dbb9fe28b781fb8423e916f8e726af5", 0xde, 0x10, &(0x7f0000000300)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3f}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000010, 0x0, 0x0) 32.523807786s ago: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x2a, &(0x7f0000000440), 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm-aes-ce)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x0) pwrite64(r6, &(0x7f0000000340)="5da1", 0x2, 0x0) r7 = accept(r5, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="000400000000000099e4c397614090d1", 0x10}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) sendto$inet6(r4, &(0x7f0000000e00)="dd11fa62c01f7cef67f2a127346208", 0xf, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 32.49828544s ago: executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x2a, &(0x7f0000000440), 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm-aes-ce)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x0) pwrite64(r6, &(0x7f0000000340)="5da1", 0x2, 0x0) r7 = accept(r5, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="000400000000000099e4c397614090d1", 0x10}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) sendto$inet6(r4, &(0x7f0000000e00)="dd11fa62c01f7cef67f2a127346208", 0xf, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 32.359920663s ago: executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x2a, &(0x7f0000000440), 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm-aes-ce)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x0) pwrite64(r6, &(0x7f0000000340)="5da1", 0x2, 0x0) r7 = accept(r5, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="000400000000000099e4c397614090d1", 0x10}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) sendto$inet6(r4, &(0x7f0000000e00)="dd11fa62c01f7cef67f2a127346208", 0xf, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 32.013648172s ago: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x2a, &(0x7f0000000440), 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm-aes-ce)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x0) pwrite64(r6, &(0x7f0000000340)="5da1", 0x2, 0x0) r7 = accept(r5, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="000400000000000099e4c397614090d1", 0x10}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) sendto$inet6(r4, &(0x7f0000000e00)="dd11fa62c01f7cef67f2a127346208", 0xf, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 31.812911228s ago: executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x2a, &(0x7f0000000440), 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm-aes-ce)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x0) pwrite64(r6, &(0x7f0000000340)="5da1", 0x2, 0x0) r7 = accept(r5, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="000400000000000099e4c397614090d1", 0x10}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) sendto$inet6(r4, &(0x7f0000000e00)="dd11fa62c01f7cef67f2a127346208", 0xf, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 31.772483105s ago: executing program 4: r0 = socket$unix(0x1, 0x5, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x3]}}, @NL80211_TXRATE_HT={0x4}, @NL80211_TXRATE_LEGACY={0x4}]}]}]}, 0x40}}, 0x0) 31.724097713s ago: executing program 1: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000003c0)={0x0, 0x0, "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", "72fb9fd253f6de904ec7436f7c2f15a26d9ae2c72b97fe176d12eb05d94dc82dff97bfcf24e32dc4b1c28ede0c688914089d9383eaa0fabdbf047e705c2d3331e7022ae8fa2f4dffff60b67f2aa14f50c37de6ab89f25b5d550190743d71dec6e4b4bc7470e053abda13f8524732d5e9ad627bc66b040a81f0e5911fef684dfbdb802fa7947375e7b730b6bdc31ecc13b81b62991a0f1344debe2f916dbd9ba0e45ff7d238fb3801aea53244727f8d28412695f1042b641e3ea68df8d448097d90e2e49874337b036e68e6f116209025e052004fde6c01aee94499b65346ad97a533d7b3f0aac131ae06c8b16a0034cc75e376f8cd96d546bd910bea92dbfda83dd6595790c59d16aaaa2edc066167da851e85b41f0974988ab13fad0bdeb322d6767f9d8b09f3fefc42fe24455314cd2ceddb0f4452a8a23cd99142a17badea1b8c74e2f2f6d48d62bd9b933794b6c596d4e0f3824826a25c7f7b21b9f63448b94ce35bdf72b9db35cd19341f6b269d7dc827cd2ad5075276006c843441c69c6241df2982f1756de6fed62fbdeaf178636a5e3d8144f1b56481cafcde097e075c01a2b81295522a993ba09aeae8f5a4088d7389a06b84e52f2bb7e92aea62e7c466842705b47c6656e529cd579d35bea3aa3cada732623fe772e5a8f5c3061e3c304688b1e6f71963b345b8993bbd8329fc846bbcc3f7362e32e62c296f25baa5654c1714569fd09aa33d259fcb8680b2e8d1fda938a45f885c693375a813b87a6108a63dd7e3025fe33e2d122d67a710595ff6396c495c09f5915bd82665ebe35ec72fc1ba99253ad98cd501f4c80da2d3c6b5901449cf2aa9a82e8bcace28c036a634e960d8756aa0eff750cf98a1e39b130ef3de8926ed20d2f282e79926353d984cb0579ab81505de78ecbd55cf39f6c5c9c97daf3472656e325df11cd97a8d53596cce43f0151a01f49d2d59418543ac2caa6df2a82c2ab0de0cc8aeda59c502e369f4175ef8287dfe1b00d410493f2def2c10366d4be7051835a498103fd251d1201d1a196f9d2fa9c6c1d6be3a9fca6197c42ad6d89244b27635dca1e320cebc67f4c4a6db617758acb69866e13a5651437874dd77279b116ea848176396804630243c13c86e4d805306cef30a7ab1e6133e86cc46f99a9174c0c40ddbe70d4fa0fb9df762d1a7fc5c0df3dacf5a5695c5960057b746c41eb0ff9d06e3fc2b567a2d2af47a5986ae8ff3a5544646ebc63e5ef86326aa4efad604f16f1763389e17e6dc8669ec45184697b4c613104cdc9e59f9d792a6477ff49aa7715badd8b7c09e0a12f20df8a6c613b7b2ad5b80d5a19371a070913cbbead176128e689f8b9e63492875455ecf4a32652ca381922cb970468e5e65acb23fe29c36512968afe1a17d1d6b2217c303271cfc7b9e10d21511d27e9b39990db245c933bfdc57dcf6eaefc411792d2f9a6cdae42e56aa6f28ebd9f4d1934aa2430e9e5ccd65625c06bfdfcbc3a0f5f2aea467ebc1a043287993632385ae16434359240a24510262cd0b58e9808bb133cd3143ee095f53c9139831cc2948fdd06c81c898401b726beb64679afaf46b63e9367f4feeb5f9d48f1f8db350e48dfb56a3ab1fb54fed289e2260584764d760273eab01c97759720b6142e57bfb481d3fab829824db3f0d96387e34b11e7c4873bca74a44226368cb096e35bb9a3b8471953c78e954906a357a08dc405f898c8a83735aaea177926a278a37494838e1b6e4589a693bcd438353295b933ddd996f95b1d62d17f2322c91d6ef82da5474b41f009789cef87da15902e8999c2e363b0b864e776b08024ae9921ceec15739f7494634aa30391363404ad21c4f9166a2171ee89cfa558e6c3d2c2bb3c8b92b9747b5a7be1271644693add3c0b557dd051a185faaeeb29a27f7e1307cc53d2869a9d2260fd81cbabed83e0d2da0a1a98705e8a9d3966db5e46042dec29605da0b324ee3e66efc2af9cb3255229e64e0012596b59a6636016724eea752e1f64b21ec4b87e9d7c7fa6da958a5b722f8a42a328651f27b7005a4968f357a753d2c4711c28b467078de96f6fee88e4149cb7717e983bed41bcec82edd2f868e595f917bf38abee7408f7946adf4238e617e786baa6cabb5186b9d7d2bbb02dbbcd23317060d8305ceb2d037a3c8fd7b811b886bd2aef30aa3991113fa7279d5571807b21e15b616f7a766931208624d91a26c5c75eab53c5df284aacea938c801d0483e4e701104a93630ea5a984dca8bbd53b4433045cfe586751812480d59c30922ce4ed83c02cba98517bbf3a9aaf4d894448e017db94744a698cc10a07842e4b82661b50e35f27374c32b057fb889b47f731e0f832a9776bd5deeb80338e2a73a262fbb069dc8030cbf0e6f320314c47d65db54e63ca0da939f7582eeb5f36425f2cbc66c64e65c6a0c318a2ae6d82763c760b141404408fe23a94fcd1c3c9f6e22379ed2acfdb9f0298625945eef819d3d7dbc02185a4bf0bb2c29f06caba02afa03cf47eac3aea41cb2dcda7e24308edb624b2fe76d9abc3e6c5e6339fff3b1c4e3bb038375d81419ef3bd10262e19c7a0ccdb62ea961cef1ca5b519a2e4786c4f6df268380e146ad0662e615617165fa147b870437d6c807dadd73a23e3fdc534bcdff3d4c86e07801abe53b90ff15a91dc543450415921733aab501e3eb22db783832b7cdaa85f06be95f32dee5fcd60efeaf64c45fb0a1efdecd39e320fb341add22f58edd096a30ae6d5b16e7c25385daa9b937effbedef8b34702c7e6e4f8cea2c03f75fb3d2aca3238f5f7b690d9c9e5dda19cabcaceaf3202fc1e45ab1ab47203e6b3dd33178ccee31fc3ec505d8d10408ad64dddfd0d8068aa9106ee8c46693ca12c8f44961e44be810d6d3b14bf64ab8f0674533522c5217ab6b415166a9bba8c50391bb27fb9fac04760a9a47a2901e513e07f24976ca2a61f35d8f05cab5f6be22a87ce5eee9b218a6b23130a2943eef1d5f7169083da2e895896c07988056b7070d6ccfd758f4bec7abae023ed8a2d75e9adaea7a803d5498b134bed4dc3bec6aa9a42095f746a34f4798c62e758fa952545399a3b1600227234a472002599bf5490b393da958f636d43e6560ac077b04f61cb33d08316539b6112bc1dc7462bc07b6e098352849c0c2fc5009a474489df780e24d1b667417a1cbc3aad4504d8e8ee8b16aaba9e3405778c12e71b7b4289bc1e97c04d0d93764f4c0df6ecd0bb923ec4e03dc1b4e2675493daba334a5a5676acb4f993f4d36c89e78b85a31145a7376bd7c132b3f0f33a202a8ea00b0c4273b0af417dc4c739941391a4e8dd742678d17ddd4b9acff30db4c08e20f42aeddd5a5d55a955343a0b600788c58ed933a114e438761d27770ebb73780eef073467aca321158e76f8b8e6a05c24d7bec778a15bc7de21ff013be017502859dbb5b74007130258d29143e77ecb1f570f0005ab57fb913d1682238c5ce243a3063fc23e8addfe898d28a200c649ef98e5c7cf7c7987998307ae3d3d66f07e18af5d43b61969919136c9b3b3583c0721ecd8d6269417ff94b70eeb0c9730f99affe2f7ec77fa38fcadf747256e3230095be93cb7057d81bb89b8beacf6998a6bd07a7127783730899bd7602346aae9a935877140defdef8bab744643dd59274fcd1075e6adeacd40f99c0dee922e6553e83f5a007f825141a117871133d22fcf1b52237661d687eca1ae8f441e0d2f5d836f73eb9f1be6b6b26f4ecac4b307dc032c68c3ea05b33cd14c8d79473df45f2822e6e766adf16cef209d331fa24148b82dfc000dfe7dfd67c801989b66cc0a745374163e92348cc405b45e00c2ba013cf626963f322a1a85ad429d04624db423ecfccfb41a19daf44818c5fe40776572836677248d5cd31e1aea2a7b3abf34c349af4d058dc3d695b056169aa126ac4732026061ba282216fba35d0cccdaa8ff90969bb71d799c59f1ddad302eb9f058bda460979883d556eacb6acacdefb63c4be88abadabbdc95cb9c70bd8def6378bd85a62285552105c83070f1226e0028bbab8c916878f156712820d5bda9a7dd945de1c0cc8ff4c7f063851820b2eb515a2713a4338b6a5406325a0e514779b40a0c38d53300ca134c56ca5067d44d833a8840951cb9a4201b6cb7f7e738f0919bd39638e472b89683442ed7f88fc56f310f69ed59993de0657cc216cc6ae6f851adc17bd7e768c6df65bbe6d6418344de1b1aceb54f41818468c615035154f88b99aff0c99890c3bd2eb9221318362cfb24c24ef2bf4bd44a0b017aa3848aea7a89a65017e69667d9a7c4e1ba0835ac4ced6a6bf2e74eb43a78004f407fd0e8b1cf2169b59706c4fbf293e71fc7afc8283a2df8211b8b738428326b38e69f037ff1f1e45c6bf2a6597ef4acb4bfdc3c4ee429be122a1c2fe0d4d7a1fabd5de320981376ca5516e89da6865315c6f5810a5b536f428809ad76ad5a2ea29c8355d2719f4ae4cd2731c42978f4e7fa8d01354aeb36c4bebc3e5990241387a7916df921262b526db3303e0a0ee65d4b213ffb9c43188a3623d01da4780107b79b1792a7714065463adc6fb99acf4629ee467c4d4cdd529ea9d805aa2a7eeeb244bfbd91f51081f2208e1efdbff409627977ef72f05de23687c160f03e6b635bd064290b32b0bcf01713d5d2966836be08de5e90b84894a4ba9c1c37a897abcb452bd2e32c9c860d6cfbf6c78c728d0493cdd581733b83908b4eedc1f0e46e753a232e9f6eab44f439a66daea36d1a7da9d8a2cd078fa822f1b2fc7019a5d361070e4ebf45d3d6343107d33dd1a48c93bcee89bc5f20f066af08c64ad6b51d161fb3357ae2fbe327def478e168281e58c8df3e5d3c7a06c162f2de34d706e44b634a96db6d608bf5b4847eda91468187d05d0985b28e9453b434685edfbc800518b58ddd6d1fa87f0e2433a2bca8b3f318e53ea65bb4dbdf9a411ec9b7ec16cfdde852a5127fee2ca1e62ecffa92433c358f37fe2711da26123bfac6f5a73d0a04155b75abe4c0aadd0b059fd836eb28cb016382e89c59eae08c90a7f962d31da65a8c200c90300d6b8a01d81e8ee92f001346edb1d1ebd78ef154ccec9fc3e1fd2f5785724cd42454487da6e403fc94a23557f0de615a90d873b16f2946f195582462592d1f764e9adb5ac151d3ae090d43eba91b38bb14e86b8fe37d22145d7c6ebdbb2604c8072bab0b6a31e68cbcde37fd536314177e9b631cbb4ca10ebd5c48d1304198d60967bc71c2e19bb6b087b22eb0998f8aa815a559468c8c03ef7af0e52cfc8ce3bb3c51daeeb1f58385962300e13cbf97a22c74c19dc15f354758eb66dde13081f3115e6a87ceafe6a3c113333ddbe73e9a6b0b8652e3724"}) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x8933, &(0x7f00000004c0)) 31.666343959s ago: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x2a, &(0x7f0000000440), 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm-aes-ce)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x0) pwrite64(r6, &(0x7f0000000340)="5da1", 0x2, 0x0) r7 = accept(r5, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="000400000000000099e4c397614090d1", 0x10}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) sendto$inet6(r4, &(0x7f0000000e00)="dd11fa62c01f7cef67f2a127346208", 0xf, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 31.541796302s ago: executing program 0: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x2a, &(0x7f0000000440), 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm-aes-ce)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x0) pwrite64(r6, &(0x7f0000000340)="5da1", 0x2, 0x0) r7 = accept(r5, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="000400000000000099e4c397614090d1", 0x10}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) sendto$inet6(r4, &(0x7f0000000e00)="dd11fa62c01f7cef67f2a127346208", 0xf, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 31.359710719s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@bloom_filter={0x2}, 0x48) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@map, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) getuid() ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='d', 0xe}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) write$binfmt_misc(r1, 0x0, 0xfffffc8f) splice(r0, 0x0, r3, 0x0, 0x800, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) 31.130808747s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000014c0)=@bloom_filter={0x2}, 0x48) pipe(&(0x7f0000000a40)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000200)={@map, 0xffffffffffffffff, 0x0, 0x0, 0xffffffffffffffff, @prog_id}, 0x20) getuid() ioctl$SIOCAX25ADDUID(0xffffffffffffffff, 0x89e1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f0000000040)=[{&(0x7f00000000c0)='d', 0xe}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) write$binfmt_misc(r1, 0x0, 0xfffffc8f) splice(r0, 0x0, r3, 0x0, 0x800, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$nl_route(0x10, 0x3, 0x0) 31.083668391s ago: executing program 2: r0 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r0, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r1 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r0, 0x80) 31.033356599s ago: executing program 4: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x2a, &(0x7f0000000440), 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm-aes-ce)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x0) pwrite64(r6, &(0x7f0000000340)="5da1", 0x2, 0x0) r7 = accept(r5, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="000400000000000099e4c397614090d1", 0x10}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) sendto$inet6(r4, &(0x7f0000000e00)="dd11fa62c01f7cef67f2a127346208", 0xf, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 30.99408226s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.979125079s ago: executing program 2: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x2a, &(0x7f0000000440), 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm-aes-ce)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x0) pwrite64(r6, &(0x7f0000000340)="5da1", 0x2, 0x0) r7 = accept(r5, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="000400000000000099e4c397614090d1", 0x10}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) sendto$inet6(r4, &(0x7f0000000e00)="dd11fa62c01f7cef67f2a127346208", 0xf, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 30.394383786s ago: executing program 1: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x2a, &(0x7f0000000440), 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm-aes-ce)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x0) pwrite64(r6, &(0x7f0000000340)="5da1", 0x2, 0x0) r7 = accept(r5, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="000400000000000099e4c397614090d1", 0x10}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) sendto$inet6(r4, &(0x7f0000000e00)="dd11fa62c01f7cef67f2a127346208", 0xf, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 30.02198429s ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x2, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x840, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r3, 0x6, 0x2a, &(0x7f0000000440), 0x4) r4 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(gcm-aes-ce)\x00'}, 0x58) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x8, 0x4, 0x4, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffd}, 0x48) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r6, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) read(r6, 0x0, 0x0) pwrite64(r6, &(0x7f0000000340)="5da1", 0x2, 0x0) r7 = accept(r5, 0x0, 0x0) sendmmsg$alg(r7, &(0x7f0000000740)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000000)="000400000000000099e4c397614090d1", 0x10}], 0x1, &(0x7f0000000480)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) sendto$inet6(r4, &(0x7f0000000e00)="dd11fa62c01f7cef67f2a127346208", 0xf, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.012088766s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x9) sendmsg$netlink(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000002c0)={0x10}, 0x10}, {&(0x7f0000001780)={0x10, 0x3ea}, 0x10}], 0x2}, 0x0) 976.027352ms ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="61128c000000000061138c0000000000bf2000000000000015000300081400002d0301000000000095"], 0x0}, 0x90) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000001300000008000300", @ANYRES32=0x0, @ANYBLOB="3c801a01000000f3050012"], 0x2c}}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) 963.278382ms ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000004d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe89}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB="043900002000ef"], 0x33fe0) 370.297962ms ago: executing program 1: ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, &(0x7f00000003c0)={0x0, 0x0, "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", "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"}) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_TIOCOUTQ(r0, 0x8933, &(0x7f00000004c0)) 0s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000f00000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha3-384-generic\x00'}, 0x58) r3 = accept$alg(r2, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f00000000c0), 0x6db6e559) sendfile(r3, r4, 0x0, 0x28000000000002) setsockopt$inet_dccp_buf(r4, 0x21, 0xd, &(0x7f0000000380)="ed8e73888369bbb548b09eee20eed3c0bdcfc3005daa024028018677885febd97e381c6bb8d021c5facb2165a90991421259d8de06db10d727ee8bacbf01ee409ad03b4df79d7dfc287fed4f0c316e6af5792a554b49e396bd28c2fd71af395cf78ff32168a71713ee5416de9a54c389a42d4dce2639a7eeb6b98096015152b2c710849e114b83d7541d36580c602ff5b7f60b01ff992da551172a69c355cefba5933dbf6d2753227e3e741e52210726e58ebca07e72950e310306040ecfbd8e7b174d3954c8cf245bdf218f11ed9658416da5961207ce5fa4b74466c0286d8c36", 0xe1) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet6_tcp_int(r5, 0x6, 0x5, &(0x7f0000000080)=0x8000, 0x4) accept4(r3, &(0x7f0000000100)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000001c0)=0x80, 0x80000) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f0000000480)="2c3d26f9bb58cae859e2b892fef9d2aecbe0de1ecfb5925a2110ae29d30870a2b8e0ec89978557643f41a7703bff6dcbcc66d5e23b31cb1df22c1e32105ba645e24680b26af4a7e67fdedd5c463486fec4ca577d50e2efdfe76b629d70082827b6dec79ca681a251c04dc18dd336f75befe4b8c274352323cd1c885224ecb102b5672610f53ae6ef452de068ed588cdc9486b5ac40c8b66090578be8a61a0ba748a9e16a8cb51b6371871cb683de1d80f4bb21fa77cdf7186fb99c7d710fd8e5233d2b0589faf244271aab116f580dbb9fe28b781fb8423e916f8e726af5", 0xde, 0x10, &(0x7f0000000300)={0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x1f}, 0x3f}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20000010, 0x0, 0x0) kernel console output (not intermixed with test programs): 0.303090][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.343278][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.350499][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.413363][ T8286] veth0_vlan: entered promiscuous mode [ 260.444776][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 260.501578][ T8286] veth1_vlan: entered promiscuous mode [ 260.628833][ T8323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 260.717333][ T8286] veth0_macvtap: entered promiscuous mode [ 260.734834][ T8286] veth1_macvtap: entered promiscuous mode [ 260.756816][ T5397] Bluetooth: hci1: command tx timeout [ 260.793216][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.805066][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.815992][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 260.828629][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.843547][ T8286] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 260.857744][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.880788][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.898840][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.912886][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.930424][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.944822][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 260.968363][ T8286] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 260.979365][ T8286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 261.007320][ T8286] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 261.033332][ T8286] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.044318][ T8286] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.066810][ T8286] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.104490][ T8286] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.218873][ T8606] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.434845][ T8614] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.488255][ T8323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.589430][ T2491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.604054][ T2491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.752567][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 261.793269][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 261.892637][ T8323] veth0_vlan: entered promiscuous mode [ 261.970715][ T8323] veth1_vlan: entered promiscuous mode [ 262.097824][ T8323] veth0_macvtap: entered promiscuous mode [ 262.133937][ T8323] veth1_macvtap: entered promiscuous mode [ 262.255099][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.306061][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.346831][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.385752][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.425624][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 262.455994][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.487384][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.540668][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.571780][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.605770][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.634742][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.654645][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.676981][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.698035][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.720157][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.748818][ T8323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.772331][ T8323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.799743][ T8323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.836233][ T5397] Bluetooth: hci1: command tx timeout [ 262.905975][ T8323] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.952485][ T8323] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.985147][ T8323] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.003636][ T8323] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.189107][ T8666] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.266740][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.306034][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.479764][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.498336][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.847058][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.939142][ T8695] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.177313][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.281348][ T8719] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.891562][ T8749] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.214075][ T8757] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.235341][ T8757] vlan0: entered promiscuous mode [ 265.249129][ T8757] team0: entered promiscuous mode [ 265.254386][ T8757] team_slave_0: entered promiscuous mode [ 265.269313][ T8757] team_slave_1: entered promiscuous mode [ 265.303144][ T8757] team0: left promiscuous mode [ 265.344153][ T8757] team_slave_0: left promiscuous mode [ 265.352595][ T8757] team_slave_1: left promiscuous mode [ 265.407789][ T8760] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.466562][ T8760] vlan2: entered promiscuous mode [ 265.503246][ T8760] team0: entered promiscuous mode [ 265.523278][ T8760] team_slave_0: entered promiscuous mode [ 265.535851][ T8760] team_slave_1: entered promiscuous mode [ 265.563301][ T8760] team0: left promiscuous mode [ 265.575784][ T8760] team_slave_0: left promiscuous mode [ 265.587295][ T8760] team_slave_1: left promiscuous mode [ 265.701110][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.737494][ T5399] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 265.754772][ T5399] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 265.762829][ T5399] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 265.779176][ T5399] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 265.786542][ T8777] batman_adv: batadv1: Adding interface: netdevsim0 [ 265.793162][ T8777] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.824111][ T8777] batman_adv: batadv1: Interface activated: netdevsim0 [ 265.845518][ T5399] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 265.864877][ T5399] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 266.098861][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.134139][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.196317][ T8791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 266.300105][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.323607][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.428967][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.459098][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.636740][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 266.652102][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 266.872281][ T8829] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 266.973620][ T8833] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 267.163237][ T8775] chnl_net:caif_netlink_parms(): no params data found [ 267.183674][ T12] bridge_slave_1: left allmulticast mode [ 267.192310][ T12] bridge_slave_1: left promiscuous mode [ 267.199532][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.210873][ T12] bridge_slave_0: left allmulticast mode [ 267.222817][ T12] bridge_slave_0: left promiscuous mode [ 267.228827][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.591651][ T8842] Bluetooth: MGMT ver 1.22 [ 267.955108][ T5397] Bluetooth: hci0: command tx timeout [ 268.101358][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 268.123242][ T12] bond_slave_0: left promiscuous mode [ 268.141344][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 268.155967][ T12] bond_slave_1: left promiscuous mode [ 268.170478][ T12] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 268.201194][ T12] batadv_slave_0: left promiscuous mode [ 268.222101][ T12] bond0 (unregistering): Released all slaves [ 268.544040][ T8876] __nla_validate_parse: 6 callbacks suppressed [ 268.544059][ T8876] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.875922][ T8775] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.883161][ T8775] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.892923][ T8775] bridge_slave_0: entered allmulticast mode [ 268.902870][ T8775] bridge_slave_0: entered promiscuous mode [ 268.926371][ T12] hsr_slave_0: left promiscuous mode [ 268.942318][ T12] hsr_slave_1: left promiscuous mode [ 268.956985][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.966143][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.993594][ T12] team0: left allmulticast mode [ 268.999030][ T12] team_slave_0: left allmulticast mode [ 269.007361][ T12] team_slave_1: left allmulticast mode [ 269.015040][ T12] team0: left promiscuous mode [ 269.024703][ T12] team_slave_0: left promiscuous mode [ 269.033882][ T12] team_slave_1: left promiscuous mode [ 269.039996][ T12] veth1_macvtap: left promiscuous mode [ 269.046955][ T12] veth0_macvtap: left promiscuous mode [ 269.060093][ T12] veth1_vlan: left promiscuous mode [ 269.066052][ T12] veth0_vlan: left promiscuous mode [ 269.074283][ T8895] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 269.782247][ T12] team0 (unregistering): Port device team_slave_1 removed [ 269.819161][ T12] team0 (unregistering): Port device team_slave_0 removed [ 270.043970][ T5397] Bluetooth: hci0: command tx timeout [ 270.238395][ T8775] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.245850][ T8775] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.253054][ T8775] bridge_slave_1: entered allmulticast mode [ 270.266409][ T8775] bridge_slave_1: entered promiscuous mode [ 270.292932][ T8914] sch_fq: defrate 0 ignored. [ 270.659981][ T8775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.677249][ T8925] tipc: Started in network mode [ 270.691625][ T8925] tipc: Node identity fe8, cluster identity 4711 [ 270.706292][ T8925] tipc: Enabling of bearer rejected, failed to enable media [ 270.720097][ T8923] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 270.860101][ T8775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.892647][ T8933] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.031426][ T8775] team0: Port device team_slave_0 added [ 271.055057][ T8775] team0: Port device team_slave_1 added [ 271.134138][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.142229][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.169018][ T8775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.189142][ T8775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.203738][ T8775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.232853][ T8775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.314404][ T8775] hsr_slave_0: entered promiscuous mode [ 271.327811][ T8775] hsr_slave_1: entered promiscuous mode [ 272.115118][ T5397] Bluetooth: hci0: command tx timeout [ 272.349455][ T8775] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 272.367125][ T8775] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 272.396257][ T8775] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 272.416483][ T8775] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 272.731615][ T8775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 272.759382][ T8775] 8021q: adding VLAN 0 to HW filter on device team0 [ 272.780519][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 272.787756][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 272.807829][ T5292] bridge0: port 2(bridge_slave_1) entered blocking state [ 272.815021][ T5292] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.298490][ T8775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.369258][ T8775] veth0_vlan: entered promiscuous mode [ 273.398074][ T8775] veth1_vlan: entered promiscuous mode [ 273.481503][ T8775] veth0_macvtap: entered promiscuous mode [ 273.519900][ T8775] veth1_macvtap: entered promiscuous mode [ 273.572001][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.602946][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.613217][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.632689][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.654418][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.674179][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.684872][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 273.705243][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.727419][ T8775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 273.757873][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.796707][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.821498][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.848087][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.880621][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.899313][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.910145][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.922338][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.934617][ T8775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 273.945867][ T8775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 273.968910][ T8775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 273.991971][ T8775] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.003782][ T8775] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.025732][ T8775] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.034479][ T8775] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.203606][ T5397] Bluetooth: hci0: command tx timeout [ 274.250721][ T2886] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.274073][ T2886] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.324013][ T2491] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.337650][ T2491] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.239093][ T9086] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 275.297281][ T9086] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 275.378455][ T9086] syz-executor.4 (9086) used greatest stack depth: 17072 bytes left [ 275.456357][ T9094] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [FSRP.]L3 index 0 [ 275.644396][ T9104] tipc: Enabling of bearer <Žz:l> rejected, media not registered [ 275.788026][ T9113] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 275.826529][ T9113] syz_tun: entered promiscuous mode [ 275.866573][ T9113] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 276.419118][ T9138] tipc: Enabling of bearer <Žz:l> rejected, media not registered [ 276.651697][ T5505] IPVS: starting estimator thread 0... [ 276.746119][ T9154] IPVS: using max 18 ests per chain, 43200 per kthread [ 277.919104][ T9212] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.923397][ T9216] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 277.960263][ T9216] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.981451][ T9216] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.989407][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 278.052397][ T9218] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 278.217794][ T9225] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 278.261383][ T29] audit: type=1804 audit(1717171447.090:14): pid=9225 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3738560937/syzkaller.JPETfR/62/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 278.323295][ T9227] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 278.338245][ T29] audit: type=1804 audit(1717171447.170:15): pid=9227 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1599994812/syzkaller.NA1u1T/24/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 278.638458][ T9233] Cannot find set identified by id 0 to match [ 278.896629][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 278.928947][ T9246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 278.947429][ T9248] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 278.988250][ T29] audit: type=1804 audit(1717171447.820:16): pid=9248 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2861992774/syzkaller.xX12Yt/178/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 279.592528][ T9274] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.673538][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 279.716584][ T9284] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 280.129589][ T9303] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 280.157903][ T29] audit: type=1804 audit(1717171448.990:17): pid=9303 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1345685586/syzkaller.FX7EAl/299/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 280.171641][ T9305] Cannot find set identified by id 0 to match [ 280.567889][ T9316] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 280.589897][ T29] audit: type=1804 audit(1717171449.420:18): pid=9316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1599994812/syzkaller.NA1u1T/32/cgroup.controllers" dev="sda1" ino=1933 res=1 errno=0 [ 281.196963][ T9344] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 281.947060][ T9374] Cannot find set identified by id 0 to match [ 281.996779][ T9380] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 282.029880][ T9379] Cannot find set identified by id 0 to match [ 282.376371][ T9390] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 282.481657][ T9394] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 282.743952][ T9407] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 283.964440][ T9471] sctp: [Deprecated]: syz-executor.4 (pid 9471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 283.964440][ T9471] Use struct sctp_sack_info instead [ 284.012999][ T9471] sctp: [Deprecated]: syz-executor.4 (pid 9471) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.012999][ T9471] Use struct sctp_sack_info instead [ 284.371638][ T9489] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 284.489069][ T9496] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 284.609970][ T9505] __nla_validate_parse: 2 callbacks suppressed [ 284.609989][ T9505] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 284.934449][ T9526] sctp: [Deprecated]: syz-executor.2 (pid 9526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.934449][ T9526] Use struct sctp_sack_info instead [ 284.976583][ T9526] sctp: [Deprecated]: syz-executor.2 (pid 9526) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.976583][ T9526] Use struct sctp_sack_info instead [ 285.621506][ T9557] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 285.696169][ T9557] dummy0: entered promiscuous mode [ 285.724210][ T9557] batman_adv: batadv0: Adding interface: macsec1 [ 285.731543][ T9557] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 285.754167][ T9557] batman_adv: batadv0: Interface activated: macsec1 [ 285.827747][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 285.864765][ T9559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.898758][ T9559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 285.927262][ T9559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.947134][ T9559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 285.963747][ T9569] IPVS: set_ctl: invalid protocol: 0 224.0.0.1:20003 [ 285.981309][ T9559] batman_adv: batadv0: Interface deactivated: macsec1 [ 285.998158][ T9559] batman_adv: batadv0: Removing interface: macsec1 [ 287.266345][ T9631] sctp: [Deprecated]: syz-executor.2 (pid 9631) Use of int in max_burst socket option deprecated. [ 287.266345][ T9631] Use struct sctp_assoc_value instead [ 287.396488][ T9635] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.558635][ T9646] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 287.610746][ T9646] dummy0: entered promiscuous mode [ 287.625356][ T9646] batman_adv: batadv0: Adding interface: macsec1 [ 287.633886][ T9646] batman_adv: batadv0: The MTU of interface macsec1 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.677740][ T9646] batman_adv: batadv0: Interface activated: macsec1 [ 287.688036][ T9651] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 287.697999][ T9651] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 287.707823][ T9651] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 287.743756][ T9651] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 287.772578][ T9651] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 287.795978][ T9651] batman_adv: batadv0: Interface deactivated: macsec1 [ 287.802811][ T9651] batman_adv: batadv0: Removing interface: macsec1 [ 287.993145][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 288.522632][ T9686] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 288.674409][ T9689] macvlan0: entered promiscuous mode [ 288.731516][ T9689] ipvlan0: entered promiscuous mode [ 288.738563][ T9689] ipvlan0: left promiscuous mode [ 288.753902][ T9689] macvlan0: left promiscuous mode [ 288.832289][ T9697] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 288.993900][ T9703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 289.424153][ T9718] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 289.484383][ T9721] Cannot find add_set index 0 as target [ 289.702550][ T9730] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 290.791228][ T9761] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.285574][ T9780] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.803673][ T9801] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 291.823625][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 291.902583][ T9797] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 292.146557][ T9813] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 292.688452][ T9833] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 292.809793][ T9837] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 292.856404][ T9837] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 292.925087][ T9840] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 296.535384][ T9977] rdma_op ffff88801e6f69f0 conn xmit_rdma 0000000000000000 [ 296.716382][ T9979] team_slave_0: entered promiscuous mode [ 296.722491][ T9979] team_slave_1: entered promiscuous mode [ 296.757101][ T9979] vlan0: entered promiscuous mode [ 296.764214][ T9979] team0: entered promiscuous mode [ 296.773435][ T9979] vlan0: entered allmulticast mode [ 296.794738][ T9979] team0: entered allmulticast mode [ 296.801305][ T9979] team_slave_0: entered allmulticast mode [ 296.813351][ T9979] team_slave_1: entered allmulticast mode [ 296.831517][ T9979] team0: left allmulticast mode [ 296.846754][ T9979] team_slave_0: left allmulticast mode [ 296.872510][ T9979] team_slave_1: left allmulticast mode [ 296.892922][ T9979] team0: left promiscuous mode [ 296.912629][ T9979] team_slave_0: left promiscuous mode [ 296.918277][ T9979] team_slave_1: left promiscuous mode [ 297.227649][T10007] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 297.342882][T10013] rdma_op ffff8880219d29f0 conn xmit_rdma 0000000000000000 [ 297.677483][T10030] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 297.776813][T10034] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 298.159871][T10052] syz_tun: entered promiscuous mode [ 298.207979][T10050] syz_tun: left promiscuous mode [ 298.721200][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.788263][T10073] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 298.822447][T10072] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 299.041480][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.236435][ T5399] Bluetooth: hci2: command 0x0406 tx timeout [ 299.286633][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.425238][T10090] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 299.482444][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 299.680769][ T5399] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 299.692485][ T5399] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 299.707986][ T5399] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 299.735508][ T5399] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 299.777822][ T5399] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 299.790993][ T5399] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 299.857623][ T51] bridge_slave_1: left allmulticast mode [ 299.875255][ T51] bridge_slave_1: left promiscuous mode [ 299.881149][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.986369][ T51] bridge_slave_0: left allmulticast mode [ 299.992064][ T51] bridge_slave_0: left promiscuous mode [ 300.015160][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.024888][T10111] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.183911][T10119] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.967330][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.983038][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.010316][ T51] bond0 (unregistering): Released all slaves [ 301.050567][T10115] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 301.189293][ T51] tipc: Left network mode [ 301.552999][T10150] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.830201][T10097] chnl_net:caif_netlink_parms(): no params data found [ 301.877891][ T5397] Bluetooth: hci1: command tx timeout [ 301.950816][ T51] hsr_slave_0: left promiscuous mode [ 302.020932][ T51] hsr_slave_1: left promiscuous mode [ 302.051085][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 302.059824][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 302.081508][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 302.108655][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.126524][T10174] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.205717][ T51] veth1_macvtap: left promiscuous mode [ 302.220258][ T51] veth0_macvtap: left promiscuous mode [ 302.233877][ T51] veth1_vlan: left promiscuous mode [ 302.247442][ T51] veth0_vlan: left promiscuous mode [ 303.259090][ T51] team0 (unregistering): Port device team_slave_1 removed [ 303.312895][ T51] team0 (unregistering): Port device team_slave_0 removed [ 303.952777][T10180] bond0: entered allmulticast mode [ 303.955273][ T5397] Bluetooth: hci1: command tx timeout [ 303.970690][T10180] bond_slave_0: entered allmulticast mode [ 303.991083][T10180] bond_slave_1: entered allmulticast mode [ 304.005008][ T29] audit: type=1800 audit(1717171472.820:19): pid=10188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 304.009924][T10180] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.037603][T10184] bridge0: port 3(team0) entered blocking state [ 304.046492][T10184] bridge0: port 3(team0) entered disabled state [ 304.053678][T10184] team0: entered allmulticast mode [ 304.077043][ T29] audit: type=1804 audit(1717171472.820:20): pid=10188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1599994812/syzkaller.NA1u1T/80/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 304.114623][T10184] team_slave_0: entered allmulticast mode [ 304.120820][T10184] team_slave_1: entered allmulticast mode [ 304.159231][T10184] team0: entered promiscuous mode [ 304.164318][T10184] team_slave_0: entered promiscuous mode [ 304.207662][T10184] team_slave_1: entered promiscuous mode [ 304.237143][T10184] bridge0: port 3(team0) entered blocking state [ 304.245121][T10184] bridge0: port 3(team0) entered forwarding state [ 304.552239][T10205] tipc: Started in network mode [ 304.573267][T10205] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 304.629611][T10205] tipc: Enabled bearer , priority 10 [ 304.686553][T10097] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.693718][T10097] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.740824][T10097] bridge_slave_0: entered allmulticast mode [ 304.748501][T10097] bridge_slave_0: entered promiscuous mode [ 304.824766][T10097] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.831939][T10097] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.907478][T10097] bridge_slave_1: entered allmulticast mode [ 304.915395][T10097] bridge_slave_1: entered promiscuous mode [ 305.045972][T10097] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.087484][T10097] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.180929][T10097] team0: Port device team_slave_0 added [ 305.241846][T10097] team0: Port device team_slave_1 added [ 305.451172][T10097] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.494405][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.556561][T10097] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.609623][T10097] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.627645][T10097] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.676571][T10097] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.736713][ T25] tipc: Node number set to 4269801488 [ 305.743331][T10228] bond0: entered promiscuous mode [ 305.749578][T10228] bond_slave_0: entered promiscuous mode [ 305.756741][T10228] bond_slave_1: entered promiscuous mode [ 305.773856][T10228] bond0: entered allmulticast mode [ 305.789109][T10228] bond_slave_0: entered allmulticast mode [ 305.814983][T10228] bond_slave_1: entered allmulticast mode [ 306.035716][ T5397] Bluetooth: hci1: command tx timeout [ 306.108477][T10097] hsr_slave_0: entered promiscuous mode [ 306.123724][T10097] hsr_slave_1: entered promiscuous mode [ 306.147226][T10097] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.167635][T10097] Cannot create hsr debugfs directory [ 306.433261][T10245] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 306.608494][T10249] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.725239][T10251] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 306.954699][T10255] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 307.363849][T10097] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 307.433450][T10097] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 307.457349][T10270] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 307.494478][T10097] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 307.521977][T10097] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 307.650350][T10280] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 307.890689][T10097] 8021q: adding VLAN 0 to HW filter on device bond0 [ 308.010933][T10097] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.046992][ T5505] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.054181][ T5505] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.114734][ T5397] Bluetooth: hci1: command tx timeout [ 308.137980][ T5505] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.145197][ T5505] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.510555][T10304] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.641721][T10097] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.828709][T10097] veth0_vlan: entered promiscuous mode [ 308.883344][T10097] veth1_vlan: entered promiscuous mode [ 308.973755][T10097] veth0_macvtap: entered promiscuous mode [ 309.011144][T10097] veth1_macvtap: entered promiscuous mode [ 309.041276][T10315] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 309.089067][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.123893][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.156486][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 309.182368][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 309.192315][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.205906][T10097] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 309.217411][T10318] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 309.253639][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.289649][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.318488][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.349613][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.370882][T10097] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.382497][T10097] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.401612][T10097] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.465548][T10318] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 309.525908][T10097] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.574621][T10097] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.583743][T10097] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.599894][T10097] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.623320][T10325] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 309.705545][T10325] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 309.759082][T10325] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 309.921103][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.957210][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 310.057535][ T5505] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 310.073108][ T5505] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.006116][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 311.930718][T10403] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 312.815656][T10439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.377049][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 314.376456][T10493] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.537193][T10493] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.594693][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 314.683108][T10510] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 314.898937][T10493] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.279890][T10493] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.767996][T10493] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.828184][T10493] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.914089][T10493] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.954743][ T5399] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 315.985937][T10493] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.432079][T10587] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.767879][T10605] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 316.788695][T10605] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 316.843437][T10605] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.852757][T10605] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.887923][T10605] bridge0: entered promiscuous mode [ 317.204280][T10613] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 317.612951][T10621] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.649131][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.657027][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.846978][T10621] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.032114][T10621] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.115882][T10621] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 318.270095][T10621] batman_adv: batadv1: Removing interface: netdevsim0 [ 318.305245][T10621] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.545342][T10621] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.563803][T10637] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 318.614609][T10637] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.631524][T10637] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.639295][T10637] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.660846][T10637] bridge0: entered promiscuous mode [ 318.731720][T10621] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.808210][T10621] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.826589][T10642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.833227][T10621] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.929770][T10646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 319.267305][T10656] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 319.297580][T10656] netlink: 113592 bytes leftover after parsing attributes in process `syz-executor.1'. [ 319.946710][T10683] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 320.531423][T10686] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 322.293447][T10725] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 322.593717][ T29] audit: type=1800 audit(1717171491.420:21): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 322.657991][ T29] audit: type=1804 audit(1717171491.450:22): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1599994812/syzkaller.NA1u1T/140/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 322.776218][ T29] audit: type=1804 audit(1717171491.450:23): pid=10731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1599994812/syzkaller.NA1u1T/140/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 323.470439][T10746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.957645][T10756] team_slave_0: entered promiscuous mode [ 323.988746][T10755] team_slave_0: left promiscuous mode [ 324.050070][T10759] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 324.320017][T10768] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 324.904366][T10787] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 325.082529][T10797] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 326.095625][T10840] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 326.906292][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 327.622040][T10898] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 327.652943][T10898] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 327.665035][T10903] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 327.697893][T10903] ipvlan1: entered promiscuous mode [ 327.724428][T10903] team0: Device ipvlan1 is up. Set it down before adding it as a team port [ 328.198205][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 328.238917][T10925] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 328.274724][T10925] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 328.472065][T10935] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.0'. [ 328.523674][T10935] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 328.674796][T10944] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 328.702930][T10944] ipvlan1: entered promiscuous mode [ 328.792963][T10944] team0: Device ipvlan1 failed to register rx_handler [ 329.001432][T10944] syz-executor.1 (10944) used greatest stack depth: 16848 bytes left [ 329.210638][T10970] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 329.256673][T10970] team0: Device ipvlan1 failed to register rx_handler [ 329.286034][T10971] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 329.633171][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 329.668721][T10988] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 329.709735][T10988] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 330.061993][T11000] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 330.088956][T11000] team0: Device ipvlan1 failed to register rx_handler [ 331.715444][T11075] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 332.004872][T11099] Bluetooth: hci3: too big key_count value 18187 [ 332.779957][T11114] __nla_validate_parse: 1 callbacks suppressed [ 332.779979][T11114] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 332.812117][T11121] Bluetooth: hci3: too big key_count value 18187 [ 333.113735][T11135] xt_hashlimit: max too large, truncated to 1048576 [ 333.280508][T11146] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 333.435162][T11151] netlink: zone id is out of range [ 333.441194][T11151] netlink: zone id is out of range [ 333.502084][T11151] netlink: zone id is out of range [ 333.507970][T11151] netlink: zone id is out of range [ 333.516016][T11151] netlink: zone id is out of range [ 333.521492][T11151] netlink: zone id is out of range [ 333.527135][T11151] netlink: zone id is out of range [ 333.534342][T11151] netlink: zone id is out of range [ 333.540280][T11151] netlink: zone id is out of range [ 333.617101][T11151] netlink: zone id is out of range [ 334.054893][T11176] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 337.326033][T11311] bond0: Unable to set down delay as MII monitoring is disabled [ 338.825763][T11378] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 339.689558][T11408] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.0'. [ 339.739056][T11408] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.0'. [ 339.808031][T11404] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.0'. [ 339.877487][T11416] netdevsim netdevsim3 netdevsim1: Unsupported IPsec algorithm [ 339.919739][T11419] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.392765][T11434] syzkaller0: entered promiscuous mode [ 340.398758][T11434] syzkaller0: entered allmulticast mode [ 340.406853][T11440] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 343.368972][T11439] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 343.416637][T11441] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 343.583757][T11452] netdevsim netdevsim0 netdevsim1: Unsupported IPsec algorithm [ 343.779109][T11462] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.967186][T11470] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 344.104901][T11477] netlink: 'syz-executor.4': attribute type 14 has an invalid length. [ 344.295345][T11472] syzkaller0: entered promiscuous mode [ 344.316783][T11472] syzkaller0: entered allmulticast mode [ 344.329431][T11477] sch_tbf: burst 0 is lower than device lo mtu (18) ! [ 348.237421][T11499] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 348.260785][T11503] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 349.332841][T11563] syzkaller0: entered promiscuous mode [ 349.394308][T11563] syzkaller0: entered allmulticast mode [ 354.966791][T11601] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 354.984867][T11601] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 355.001951][T11601] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 355.025381][T11601] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 355.099566][T11621] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.139536][T11621] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.184715][T11621] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.278902][T11626] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.506945][T11642] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.566984][T11642] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 355.625110][T11647] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.2'. [ 356.112794][ T29] audit: type=1804 audit(1717171524.940:24): pid=11661 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1345685586/syzkaller.FX7EAl/492/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 356.353065][T11672] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 356.370049][T11672] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 356.388190][T11672] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 356.584985][T11681] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 356.625164][T11681] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 356.647482][T11685] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 356.746962][T11681] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 356.911724][T11700] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 357.133133][ T29] audit: type=1804 audit(1717171525.960:25): pid=11701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3738560937/syzkaller.JPETfR/231/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 357.974295][ T29] audit: type=1804 audit(1717171526.800:26): pid=11738 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2861992774/syzkaller.xX12Yt/387/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0 [ 358.135820][ T29] audit: type=1804 audit(1717171526.970:27): pid=11748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir403827730/syzkaller.euJEAA/120/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 358.483435][T11775] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 358.910531][ T29] audit: type=1804 audit(1717171527.740:28): pid=11786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2861992774/syzkaller.xX12Yt/391/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 359.032748][ T29] audit: type=1804 audit(1717171527.860:29): pid=11796 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1345685586/syzkaller.FX7EAl/503/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 359.482144][T11815] syzkaller0: refused to change device tx_queue_len [ 360.168478][T11841] __nla_validate_parse: 13 callbacks suppressed [ 360.168500][T11841] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 360.260953][T11844] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 360.408984][T11847] syzkaller0: refused to change device tx_queue_len [ 360.962149][T11881] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 361.146793][T11893] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 361.159065][T11895] validate_nla: 8 callbacks suppressed [ 361.159084][T11895] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 361.783793][ T29] audit: type=1804 audit(1717171530.610:30): pid=11917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir403827730/syzkaller.euJEAA/127/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 361.971559][T11924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 362.010774][T11928] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 363.005939][T11977] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 363.205848][T11988] net_ratelimit: 45 callbacks suppressed [ 363.205866][T11988] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 363.473730][T12001] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.679544][T12012] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 363.942304][T12021] sctp: [Deprecated]: syz-executor.1 (pid 12021) Use of struct sctp_assoc_value in delayed_ack socket option. [ 363.942304][T12021] Use struct sctp_sack_info instead [ 364.217360][T12046] netlink: 'syz-executor.2': attribute type 33 has an invalid length. [ 364.247138][T12046] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.926257][T12082] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 365.159414][T12095] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 365.428246][T12108] xt_TPROXY: Can be used only with -p tcp or -p udp [ 365.607695][T12116] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 366.090472][T12137] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 366.139061][T12137] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 366.277516][T12143] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 366.842580][T12173] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 366.872265][T12173] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 366.966066][T12176] xt_CT: You must specify a L4 protocol and not use inversions on it [ 367.850748][T12214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 368.774266][T12264] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 369.002380][T12282] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.232731][T12297] xt_CT: You must specify a L4 protocol and not use inversions on it [ 369.714171][T12328] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 369.742927][T12328] netlink: 113592 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.935509][T12339] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 370.452311][T12359] wg2: entered promiscuous mode [ 370.476860][T12359] wg2: entered allmulticast mode [ 370.914655][ T5397] Bluetooth: hci3: command 0x0406 tx timeout [ 372.027917][T12438] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 372.234786][T12455] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 372.298634][T12453] wg2: entered promiscuous mode [ 372.327017][T12453] wg2: entered allmulticast mode [ 372.339479][T12458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 372.704264][T12481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 372.814869][T12487] wg2: entered promiscuous mode [ 372.831710][T12487] wg2: entered allmulticast mode [ 373.129689][T12504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 373.139298][T12503] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 373.282311][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 373.404006][T12517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.763565][T12536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.891521][T12544] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 374.393121][T12569] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.454744][T12574] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 374.762762][ T29] audit: type=1804 audit(1717171543.590:31): pid=12580 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3738560937/syzkaller.JPETfR/314/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 375.192203][T12614] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 375.786236][T12641] SET target dimension over the limit! [ 376.034914][ T5399] Bluetooth: hci5: command 0x0406 tx timeout [ 376.048007][T12660] syzkaller0: entered promiscuous mode [ 376.068670][T12660] syzkaller0: entered allmulticast mode [ 376.333413][T12676] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 376.343421][T12676] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 376.357477][T12676] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 376.377996][T12676] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 376.395851][T12676] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.009833][T12704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 377.106520][T12707] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 377.109942][ T5399] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 377.125601][ T5399] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 377.134328][ T5399] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 377.143165][T12707] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 377.166833][ T5399] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 377.177097][ T5399] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 377.184922][ T5399] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 377.185575][T12707] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 377.255922][T12707] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 377.274789][T12707] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.545977][T12725] dccp_invalid_packet: P.CsCov 4 exceeds packet length 28 [ 377.573479][T12723] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.0'. [ 377.977782][T12708] chnl_net:caif_netlink_parms(): no params data found [ 378.123169][T12745] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 378.386759][T12758] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.0'. [ 378.589972][T12768] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 378.602579][T12768] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 378.620131][T12768] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.629099][T12768] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.637540][T12768] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.645847][T12768] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 378.665187][T12768] vxlan0: entered promiscuous mode [ 378.760309][T12708] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.791380][T12708] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.811646][T12708] bridge_slave_0: entered allmulticast mode [ 378.831548][T12708] bridge_slave_0: entered promiscuous mode [ 378.857352][T12708] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.870475][T12708] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.892710][T12708] bridge_slave_1: entered allmulticast mode [ 378.914075][T12708] bridge_slave_1: entered promiscuous mode [ 378.984729][T12708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 379.010102][T12708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 379.082379][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.099125][T12708] team0: Port device team_slave_0 added [ 379.122349][T12708] team0: Port device team_slave_1 added [ 379.176900][T12708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 379.192311][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.226386][T12708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 379.237921][ T5399] Bluetooth: hci3: command tx timeout [ 379.263653][T12708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.273055][T12708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.305857][T12708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.406341][T12792] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 379.553228][T12708] hsr_slave_0: entered promiscuous mode [ 379.580528][T12708] hsr_slave_1: entered promiscuous mode [ 379.620596][T12708] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.642711][T12708] Cannot create hsr debugfs directory [ 380.080896][T12708] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.103337][T12708] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.144029][T12818] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 380.173864][T12819] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 380.191764][T12819] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 380.213990][T12819] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.223240][T12819] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.232215][T12819] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.241213][T12819] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 380.258778][T12819] vxlan1: entered promiscuous mode [ 380.328917][T12708] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.344389][T12708] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.350301][T12823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 380.448552][T12708] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.459172][T12708] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.542975][T12708] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 380.553907][T12708] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 380.673754][T12708] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 380.680977][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888067ff1c00: rx timeout, send abort [ 380.683344][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888067ff3000: rx timeout, send abort [ 380.692214][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888067ff1c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 380.692498][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888067ff3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 380.762816][T12708] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 380.781363][T12708] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 380.807017][T12708] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 380.889697][T12833] Bluetooth: MGMT ver 1.22 [ 380.895064][T12833] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 380.921567][T12833] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 380.933365][T12708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 380.974029][T12708] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.015348][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.022526][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.048433][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.052374][ T29] audit: type=1800 audit(1717171549.880:32): pid=12837 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 381.055628][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 381.159261][ T29] audit: type=1804 audit(1717171549.990:33): pid=12840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir403827730/syzkaller.euJEAA/205/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 381.230342][ T29] audit: type=1804 audit(1717171549.990:34): pid=12840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir403827730/syzkaller.euJEAA/205/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 381.328182][ T5399] Bluetooth: hci3: command tx timeout [ 381.330850][ T29] audit: type=1804 audit(1717171550.000:35): pid=12840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir403827730/syzkaller.euJEAA/205/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 381.377151][T12848] netlink: 'syz-executor.4': attribute type 309 has an invalid length. [ 381.443916][ T29] audit: type=1804 audit(1717171550.050:36): pid=12844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir403827730/syzkaller.euJEAA/205/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 381.482592][ T29] audit: type=1804 audit(1717171550.060:37): pid=12844 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir403827730/syzkaller.euJEAA/205/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 381.516493][T12855] macsec0: entered promiscuous mode [ 381.522843][T12855] macsec2: entered promiscuous mode [ 381.751259][T12708] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.883810][T12708] veth0_vlan: entered promiscuous mode [ 381.931100][T12708] veth1_vlan: entered promiscuous mode [ 381.941568][T12877] netlink: 'syz-executor.4': attribute type 309 has an invalid length. [ 382.067218][T12708] veth0_macvtap: entered promiscuous mode [ 382.093011][T12708] veth1_macvtap: entered promiscuous mode [ 382.131404][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.142344][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.161255][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.182862][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.192936][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 382.204962][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.231358][T12708] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.269475][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.295461][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.313429][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.328016][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.343999][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.376760][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.405651][T12708] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 382.422995][T12708] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 382.471852][T12708] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.547457][T12708] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.581473][T12708] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.613796][T12708] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.633819][T12708] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.673017][T12896] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 382.887172][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.922414][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.038124][ T2886] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.055812][ T2886] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.183352][T12915] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.394981][ T5399] Bluetooth: hci3: command tx timeout [ 383.514321][T12933] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.592117][T12937] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 383.656898][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888078d37400: rx timeout, send abort [ 383.666004][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802c4cb800: rx timeout, send abort [ 383.674735][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888078d37400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 383.689738][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802c4cb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 383.715373][T12940] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 383.763594][T12941] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 383.928537][T12946] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 384.022381][T12948] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 384.055593][T12946] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 384.107747][T12949] af_packet: tpacket_rcv: packet too big, clamped from 4192 to 3952. macoff=96 [ 384.218684][T12949] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 384.225265][T12951] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 385.009111][T12946] bridge0: left promiscuous mode [ 385.070147][T12946] bond0: left promiscuous mode [ 385.085589][T12946] bond_slave_0: left promiscuous mode [ 385.096203][T12946] bond_slave_1: left promiscuous mode [ 385.108844][T12946] bond0: left allmulticast mode [ 385.119694][T12946] bond_slave_0: left allmulticast mode [ 385.131291][T12946] bond_slave_1: left allmulticast mode [ 385.474822][ T5399] Bluetooth: hci3: command tx timeout [ 385.670524][T12946] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 385.713519][T12946] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.001507][T12946] ipvlan1: left promiscuous mode [ 386.095356][T12946] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.103884][T12946] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.128588][T12946] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.137065][T12946] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.198842][T12950] netlink: 'syz-executor.0': attribute type 27 has an invalid length. [ 386.496804][T12950] syz_tun: left promiscuous mode [ 386.585549][T12950] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.775723][T12950] wg2: left promiscuous mode [ 386.780686][T12950] wg2: left allmulticast mode [ 387.345310][T12950] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.360714][T12950] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.369695][T12950] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.378995][T12950] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 387.516479][T12950] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.525877][T12950] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.534839][T12950] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.543717][T12950] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 387.553936][T12950] vxlan1: left promiscuous mode [ 387.572279][T12963] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 388.255882][T13013] dummy0: entered promiscuous mode [ 388.275721][T13013] dummy0: left promiscuous mode [ 388.779871][T13048] tipc: Started in network mode [ 388.792083][T13048] tipc: Node identity fe80000000000000000000000000002c, cluster identity 4711 [ 388.810381][T13048] tipc: Enabling of bearer rejected, failed to enable media [ 389.103976][T13062] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 389.129506][T13062] netlink: 'syz-executor.4': attribute type 27 has an invalid length. [ 389.197341][T13063] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 389.485593][T13062] bridge0: left promiscuous mode [ 389.535719][T13062] bond0: left promiscuous mode [ 389.543416][T13062] bond_slave_0: left promiscuous mode [ 389.553293][T13062] bond_slave_1: left promiscuous mode [ 389.566094][T13062] bond0: left allmulticast mode [ 389.571012][T13062] bond_slave_0: left allmulticast mode [ 389.587971][T13062] bond_slave_1: left allmulticast mode [ 389.844916][T13062] wg2: left promiscuous mode [ 389.856318][T13062] wg2: left allmulticast mode [ 390.720189][T13062] ipvlan1: left promiscuous mode [ 390.725668][T13097] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 390.920035][T13062] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 390.946842][T13099] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 390.954569][T13062] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.001079][T13062] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.031052][T13062] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.184681][T13062] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.193272][T13062] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.202369][T13062] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.210908][T13062] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 391.223542][T13062] vxlan0: left promiscuous mode [ 391.260065][T13062] macsec2: left promiscuous mode [ 391.322236][T13098] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 391.884799][T13122] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 392.023152][T13127] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 392.116700][T13098] bridge0: port 2(bridge_slave_1) entered disabled state [ 392.135880][T13098] bridge0: port 1(bridge_slave_0) entered disabled state [ 392.812126][T13098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 392.868437][T13098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 393.256474][T13098] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.271371][T13098] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.280999][T13098] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.290441][T13098] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.424177][T13122] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 393.913918][T13183] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 394.066076][T13190] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 394.081730][T13187] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 394.151849][T13187] syzkaller0: entered promiscuous mode [ 394.159113][T13187] syzkaller0: entered allmulticast mode [ 397.417900][T13257] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 397.427029][T13257] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.0'. [ 397.449810][T13250] veth0: entered promiscuous mode [ 397.475342][T13250] veth0: left promiscuous mode [ 397.967051][T13284] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 398.044406][T13284] syzkaller0: entered promiscuous mode [ 398.064834][T13284] syzkaller0: entered allmulticast mode [ 398.104848][T13290] veth0: entered promiscuous mode [ 398.145704][T13290] veth0: left promiscuous mode [ 398.223227][T13292] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 398.298248][T13292] syzkaller0: entered promiscuous mode [ 398.318729][T13292] syzkaller0: entered allmulticast mode [ 400.438321][T13297] syzkaller0: entered promiscuous mode [ 400.443913][T13297] syzkaller0: entered allmulticast mode [ 402.571141][T13316] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 404.686244][T13339] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 404.776209][ T29] audit: type=1800 audit(1717171573.610:38): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 404.849814][T13350] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 404.885484][ T29] audit: type=1804 audit(1717171573.640:39): pid=13342 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1364644343/syzkaller.plWHPH/25/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 405.179364][T13359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 405.274223][T13353] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 406.314425][T13364] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 406.388729][T13364] syzkaller0: entered promiscuous mode [ 406.416506][T13364] syzkaller0: entered allmulticast mode [ 406.465753][T13368] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 406.506522][T13383] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 406.508347][T13368] syzkaller0: entered promiscuous mode [ 406.529468][T13368] syzkaller0: entered allmulticast mode [ 406.735331][T13393] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 408.681039][ T5397] Bluetooth: hci3: command 0x0405 tx timeout [ 410.711487][T13407] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 410.726756][T13408] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 410.778869][T13414] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 410.797203][T13413] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 410.828935][T13407] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 411.037592][T13414] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 411.070053][T13408] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 411.504839][T13438] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 411.641994][T13438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 411.793031][T13443] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 411.940518][T13456] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 411.981078][T13456] syzkaller0: entered promiscuous mode [ 411.996236][T13456] syzkaller0: entered allmulticast mode [ 412.002194][T13460] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 412.072508][T13464] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 412.116311][T13460] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 412.171300][T13464] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 412.478813][T13475] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 412.868139][T13494] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 412.884214][T13496] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 412.936555][T13498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 413.008645][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 413.311756][T13514] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 413.403096][T13514] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 414.501561][T13543] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 415.244921][ T5397] Bluetooth: hci3: command 0x0405 tx timeout [ 415.923408][T13564] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 415.933528][T13563] bond0: option arp_interval: invalid value (18446744071578845184) [ 415.974515][T13563] bond0: option arp_interval: allowed values 0 - 2147483647 [ 416.100737][T13571] bond0: (slave vlan2): Opening slave failed [ 416.768250][T13619] netlink: 160 bytes leftover after parsing attributes in process `syz-executor.2'. [ 416.886197][T13627] tipc: Enabling of bearer rejected, failed to enable media [ 417.258263][T13649] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 417.358878][T13657] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 417.370359][T13659] tipc: Enabling of bearer rejected, failed to enable media [ 417.479009][T13669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 417.704949][T13680] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 418.141969][T13703] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 418.168132][T13702] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 418.206873][T13708] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 418.504909][T13723] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 419.134197][ T5397] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 419.147345][ T5397] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 419.158118][ T5397] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 419.166657][ T5397] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 419.188385][ T5397] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 419.198811][ T5397] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 419.256205][T13753] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 419.538402][T13748] chnl_net:caif_netlink_parms(): no params data found [ 419.836234][T13748] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.851887][T13748] bridge0: port 1(bridge_slave_0) entered disabled state [ 419.860721][T13748] bridge_slave_0: entered allmulticast mode [ 419.881129][T13748] bridge_slave_0: entered promiscuous mode [ 419.906310][T13748] bridge0: port 2(bridge_slave_1) entered blocking state [ 419.913573][T13748] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.928815][T13748] bridge_slave_1: entered allmulticast mode [ 419.936893][T13748] bridge_slave_1: entered promiscuous mode [ 420.000981][T13748] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 420.023911][T13748] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 420.113583][T13748] team0: Port device team_slave_0 added [ 420.136128][T13748] team0: Port device team_slave_1 added [ 420.214328][T13748] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.231905][T13748] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.258322][T13748] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.279919][T13748] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.291788][T13748] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.325964][T13748] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.447962][T13748] hsr_slave_0: entered promiscuous mode [ 420.468465][T13748] hsr_slave_1: entered promiscuous mode [ 420.478466][T13748] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.493477][T13748] Cannot create hsr debugfs directory [ 420.716898][T13817] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 420.750941][T13816] sctp: [Deprecated]: syz-executor.0 (pid 13816) Use of struct sctp_assoc_value in delayed_ack socket option. [ 420.750941][T13816] Use struct sctp_sack_info instead [ 421.245423][ T5397] Bluetooth: hci2: command tx timeout [ 421.377212][T13748] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 421.425889][T13748] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 421.463425][T13748] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 421.542506][T13855] __nla_validate_parse: 6 callbacks suppressed [ 421.542527][T13855] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 421.564414][T13852] sch_tbf: peakrate 71 is lower than or equals to rate 13415355817161298577 ! [ 421.592506][T13748] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 421.924405][T13748] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.980949][T13748] 8021q: adding VLAN 0 to HW filter on device team0 [ 422.008347][T13135] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.015606][T13135] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.078555][T13135] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.085806][T13135] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.597132][T13748] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 422.608824][T13904] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 423.171862][T13748] veth0_vlan: entered promiscuous mode [ 423.249596][T13748] veth1_vlan: entered promiscuous mode [ 423.317053][ T5397] Bluetooth: hci2: command tx timeout [ 423.340504][T13748] veth0_macvtap: entered promiscuous mode [ 423.359554][T13748] veth1_macvtap: entered promiscuous mode [ 423.380134][T10586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.388457][T10586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.426332][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.453182][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.473552][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 423.492010][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.516735][T13748] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 423.532146][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.549091][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.573965][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.585590][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.597595][T13748] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 423.608545][T13748] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 423.620561][T13748] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 423.653760][T13748] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.663142][T13748] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.673367][T13748] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.685518][T13748] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 423.859781][T10586] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.869212][T10586] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.949876][T10586] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.965804][T10586] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 424.338617][T13977] sctp: [Deprecated]: syz-executor.1 (pid 13977) Use of struct sctp_assoc_value in delayed_ack socket option. [ 424.338617][T13977] Use struct sctp_sack_info instead [ 424.365580][T13981] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 424.700104][T13995] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 425.191656][T14025] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 425.236617][T14027] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 425.396091][ T5397] Bluetooth: hci2: command tx timeout [ 425.675583][T14059] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 426.176971][T14093] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 426.841418][T14132] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 427.475884][ T5397] Bluetooth: hci2: command tx timeout [ 428.202057][T14211] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 428.520290][T14235] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 429.381007][T14287] EXT4-fs warning: 1 callbacks suppressed [ 429.381027][T14287] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 429.457657][T14296] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 429.884019][T14319] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 430.840052][T14371] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.881891][T14373] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.272094][T14388] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 431.488837][T14393] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 433.670475][T14488] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 434.177634][T14523] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 434.840423][T14562] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 435.807582][T14614] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 436.323838][T14644] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.0'. [ 436.356883][T14648] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 436.638125][T14660] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 436.701959][T14660] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 436.872002][T14681] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 436.980213][T14687] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 437.126916][T14690] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.1'. [ 437.494527][ T29] audit: type=1800 audit(1717171606.320:40): pid=14718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 437.557294][ T29] audit: type=1804 audit(1717171606.390:41): pid=14718 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1364644343/syzkaller.plWHPH/156/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 437.704267][T14729] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 438.074155][T14747] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 438.087122][T14745] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 438.107027][T14745] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 438.216685][ T29] audit: type=1800 audit(1717171607.050:42): pid=14751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 438.275414][ T29] audit: type=1804 audit(1717171607.100:43): pid=14751 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir113100327/syzkaller.b0trLM/66/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 438.444720][ T5399] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 438.469056][ T5399] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 438.478004][ T5399] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 438.504889][ T5399] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 438.515156][ T5399] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 438.523484][ T5399] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 438.866438][T14772] __nla_validate_parse: 2 callbacks suppressed [ 438.866459][T14772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 439.067739][T14789] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 439.088463][T14789] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 439.100696][T14756] chnl_net:caif_netlink_parms(): no params data found [ 439.383501][T14756] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.413830][T14756] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.433888][T14756] bridge_slave_0: entered allmulticast mode [ 439.454126][T14756] bridge_slave_0: entered promiscuous mode [ 439.481234][T14756] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.481788][T14810] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 439.503398][T14810] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 439.512579][T14756] bridge0: port 2(bridge_slave_1) entered disabled state [ 439.520909][T14756] bridge_slave_1: entered allmulticast mode [ 439.530374][T14756] bridge_slave_1: entered promiscuous mode [ 439.591485][T14756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 439.601323][T14814] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 439.639374][T14756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 439.777737][T14756] team0: Port device team_slave_0 added [ 439.793881][T14821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 439.819065][T14756] team0: Port device team_slave_1 added [ 439.898104][T14756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 439.918236][T14756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 439.951322][T14756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 439.982170][T14756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 440.013185][T14756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 440.060411][T14756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 440.107986][T14830] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 440.171931][T14834] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 440.215342][T14756] hsr_slave_0: entered promiscuous mode [ 440.223156][T14756] hsr_slave_1: entered promiscuous mode [ 440.238323][T14756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 440.254633][T14756] Cannot create hsr debugfs directory [ 440.358043][T14846] xt_CT: You must specify a L4 protocol and not use inversions on it [ 440.359944][T14842] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 440.406671][T14844] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 440.422566][T14844] netlink: 'syz-executor.2': attribute type 20 has an invalid length. [ 440.532599][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.596494][ T5399] Bluetooth: hci3: command tx timeout [ 441.173070][T14854] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 441.483255][T14881] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 442.674970][ T5399] Bluetooth: hci3: command tx timeout [ 443.131053][T14756] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 443.179822][T14756] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 443.232779][T14756] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 443.271908][T14756] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 443.602467][T14756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 443.681908][T14756] 8021q: adding VLAN 0 to HW filter on device team0 [ 443.700100][ T786] bridge0: port 1(bridge_slave_0) entered blocking state [ 443.707307][ T786] bridge0: port 1(bridge_slave_0) entered forwarding state [ 443.734700][ T786] bridge0: port 2(bridge_slave_1) entered blocking state [ 443.741920][ T786] bridge0: port 2(bridge_slave_1) entered forwarding state [ 444.269951][T14756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 444.431268][T14756] veth0_vlan: entered promiscuous mode [ 444.480749][T14756] veth1_vlan: entered promiscuous mode [ 444.562848][T14756] veth0_macvtap: entered promiscuous mode [ 444.588266][T14969] __nla_validate_parse: 7 callbacks suppressed [ 444.588288][T14969] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 444.636360][T14971] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 444.675939][T14756] veth1_macvtap: entered promiscuous mode [ 444.756922][ T5399] Bluetooth: hci3: command tx timeout [ 444.761357][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.823522][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.835280][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.871800][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.899243][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 444.934567][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 444.951256][T14756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 445.026348][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.084940][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.116793][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.143807][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.166916][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.190536][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.213562][T14756] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 445.252899][T14756] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 445.287630][T14756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 445.312439][T14987] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 445.335524][T14988] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 445.360835][T14756] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.389802][T14756] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.409713][T14756] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.418999][T14756] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 445.443368][T14995] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 445.466830][T14995] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 445.659590][T10575] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.674302][T10575] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.775591][ T786] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 445.801414][ T786] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 445.867582][T15008] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 445.939204][T15016] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.2'. [ 445.974805][T15016] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.2'. [ 445.995475][T15010] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.2'. [ 446.834792][ T5399] Bluetooth: hci3: command tx timeout [ 447.815713][T15092] dccp_invalid_packet: P.Data Offset(144) too large [ 450.413376][T15228] __nla_validate_parse: 3 callbacks suppressed [ 450.413399][T15228] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 450.964595][T15258] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 451.708092][T15298] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 451.882199][T15303] ip6gre1: entered allmulticast mode [ 451.909159][T15307] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 452.743373][T15355] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 453.204769][T15381] x_tables: ip_tables: ah match: only valid for protocol 51 [ 453.531758][T15402] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 453.571296][T15405] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 453.684686][T15411] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 455.139660][T15459] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 455.171088][T15460] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 455.185620][T15459] openvswitch: netlink: Multiple metadata blocks provided [ 455.857346][T15506] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 456.248912][T15525] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 456.336545][T15534] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 456.364273][T15534] openvswitch: netlink: Multiple metadata blocks provided [ 456.678917][T15557] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 456.823872][T15561] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 457.060584][T15582] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 457.118020][T15586] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 457.485686][T15604] pim6reg9: entered allmulticast mode [ 457.876398][T15631] ieee802154 phy1 wpan1: encryption failed: -22 [ 458.148413][T15652] pim6reg9: entered allmulticast mode [ 458.256677][T15655] pim6reg9: entered allmulticast mode [ 458.449641][T15670] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 458.780573][T15690] pim6reg9: entered allmulticast mode [ 458.855719][T15692] pim6reg9: entered allmulticast mode [ 458.875782][T15699] ipvlan0: entered promiscuous mode [ 458.903012][T15697] ipvlan0: left promiscuous mode [ 458.940265][T15703] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 459.257525][T15726] Cannot find add_set index 0 as target [ 459.408166][T15735] ipvlan0: entered promiscuous mode [ 459.417935][T15733] ipvlan0: left promiscuous mode [ 459.573398][T15747] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 459.802721][T15765] validate_nla: 3 callbacks suppressed [ 459.802743][T15765] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 459.938319][T15772] --map-set only usable from mangle table [ 460.078492][T15785] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 460.236570][T15795] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 460.253860][T15795] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 460.273664][T15800] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 460.453058][T15809] ieee802154 phy1 wpan1: encryption failed: -22 [ 460.458042][T15812] ipvlan0: entered promiscuous mode [ 460.490947][T15808] ipvlan0: left promiscuous mode [ 460.541592][T15816] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.3'. [ 460.908132][T15833] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 461.258405][T15862] ipvlan0: entered promiscuous mode [ 461.268094][T15860] ipvlan0: left promiscuous mode [ 461.339458][T15866] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 462.356343][T15927] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 462.541756][T15938] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 463.925619][T16010] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 464.453104][T16039] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 465.088099][T16072] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 465.110291][T16074] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 465.323364][T16077] mac80211_hwsim hwsim24 wlan0: left promiscuous mode [ 465.416870][T16081] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 465.440163][T16083] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 465.640873][T16083] mac80211_hwsim hwsim24 wlan0: left promiscuous mode [ 465.900311][T16096] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 466.010049][T16070] mac80211_hwsim hwsim38 wlan0: left promiscuous mode [ 466.147906][T16095] mac80211_hwsim hwsim20 wlan0: left promiscuous mode [ 466.296666][T16104] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 466.326293][T16080] mac80211_hwsim hwsim27 wlan0: left promiscuous mode [ 466.516338][T16113] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 466.734981][T16116] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 466.958923][T16124] mac80211_hwsim hwsim20 wlan0: left promiscuous mode [ 467.121877][T16132] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 467.185506][T16103] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 467.231133][T16134] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 467.279545][T16137] mac80211_hwsim hwsim20 wlan0: left promiscuous mode [ 467.431828][T16143] mac80211_hwsim hwsim27 wlan0: entered promiscuous mode [ 467.671763][T16149] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 467.960625][T16156] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 468.184014][T16160] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 468.300721][T16133] mac80211_hwsim hwsim38 wlan0: left promiscuous mode [ 468.347210][T16141] mac80211_hwsim hwsim27 wlan0: left promiscuous mode [ 468.480478][T16168] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 468.596872][T16170] mac80211_hwsim hwsim24 wlan0: entered promiscuous mode [ 468.729227][T16168] mac80211_hwsim hwsim20 wlan0: left promiscuous mode [ 468.808732][T16170] mac80211_hwsim hwsim24 wlan0: left promiscuous mode [ 468.885968][T16174] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 468.978545][T16154] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 469.545853][T16204] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 469.563749][T16207] mac80211_hwsim hwsim38 wlan0: entered promiscuous mode [ 469.657509][T16209] mac80211_hwsim hwsim20 wlan0: entered promiscuous mode [ 469.871486][T16209] mac80211_hwsim hwsim20 wlan0: left promiscuous mode [ 470.454278][T16206] mac80211_hwsim hwsim38 wlan0: left promiscuous mode [ 470.476566][T16226] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 470.955246][T16246] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 472.335886][T16288] vcan0 speed is unknown, defaulting to 1000 [ 472.383136][T16288] vcan0 speed is unknown, defaulting to 1000 [ 472.427049][T16288] vcan0 speed is unknown, defaulting to 1000 [ 472.902793][T16288] infiniband syz1: set down [ 472.929884][T13131] vcan0 speed is unknown, defaulting to 1000 [ 472.947758][T16288] infiniband syz1: added vcan0 [ 472.973670][T16300] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 473.147475][T16288] RDS/IB: syz1: added [ 473.182548][T16288] smc: adding ib device syz1 with port count 1 [ 473.230747][T16288] smc: ib device syz1 port 1 has pnetid [ 473.279297][T13131] vcan0 speed is unknown, defaulting to 1000 [ 473.307506][T16288] vcan0 speed is unknown, defaulting to 1000 [ 473.846873][T16288] vcan0 speed is unknown, defaulting to 1000 [ 474.417102][T16288] vcan0 speed is unknown, defaulting to 1000 [ 474.905962][T16288] vcan0 speed is unknown, defaulting to 1000 [ 475.269288][T16288] vcan0 speed is unknown, defaulting to 1000 [ 475.669412][T16288] vcan0 speed is unknown, defaulting to 1000 [ 476.002017][ T29] audit: type=1804 audit(1717171644.830:44): pid=16385 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir113100327/syzkaller.b0trLM/202/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 476.176949][T16288] vcan0 speed is unknown, defaulting to 1000 [ 476.639286][T16288] vcan0 speed is unknown, defaulting to 1000 [ 477.001421][T16288] vcan0 speed is unknown, defaulting to 1000 [ 477.855801][ T29] audit: type=1804 audit(1717171646.690:45): pid=16428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3738560937/syzkaller.JPETfR/617/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 478.218834][T16445] rdma_rxe: rxe_newlink: failed to add vcan0 [ 478.462370][ T29] audit: type=1804 audit(1717171647.290:46): pid=16454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir588170243/syzkaller.Va7Hev/108/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 478.865810][T16487] rdma_rxe: rxe_newlink: failed to add vcan0 [ 479.227655][ T29] audit: type=1804 audit(1717171648.060:47): pid=16499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir588170243/syzkaller.Va7Hev/113/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 501.957798][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 513.697735][ T5397] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 513.718202][ T5397] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 513.743989][ T5397] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 513.754009][ T5397] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 513.767544][ T5397] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 513.775039][ T5397] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 513.957507][ T5397] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 513.974953][ T5397] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 513.992158][ T5397] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 514.016280][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 514.024101][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 514.031767][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 514.046098][ T5399] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 514.065395][T16785] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 514.074818][T16785] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 514.083528][T16785] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 514.091628][T16785] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 514.101381][T16785] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 514.325455][T16785] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 514.336699][T16785] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 514.354841][T16785] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 514.363832][T16785] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 514.371713][T16785] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 514.384554][T16785] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 514.645122][T16785] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 514.656709][T16785] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 514.673877][T16785] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 514.682966][T16785] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 514.692030][T16785] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 514.699674][T16785] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 515.874580][T16785] Bluetooth: hci6: command tx timeout [ 516.114756][T16785] Bluetooth: hci7: command tx timeout [ 516.194680][T16785] Bluetooth: hci8: command tx timeout [ 516.435966][T16785] Bluetooth: hci9: command tx timeout [ 516.764773][T16785] Bluetooth: hci10: command tx timeout [ 517.954854][T16785] Bluetooth: hci6: command tx timeout [ 518.194600][T16785] Bluetooth: hci7: command tx timeout [ 518.274923][T16785] Bluetooth: hci8: command tx timeout [ 518.524488][T16785] Bluetooth: hci9: command tx timeout [ 518.834555][T16785] Bluetooth: hci10: command tx timeout [ 520.034716][T16785] Bluetooth: hci6: command tx timeout [ 520.274768][T16785] Bluetooth: hci7: command tx timeout [ 520.354725][T16785] Bluetooth: hci8: command tx timeout [ 520.594681][T16785] Bluetooth: hci9: command tx timeout [ 520.914686][T16785] Bluetooth: hci10: command tx timeout [ 522.114610][T16785] Bluetooth: hci6: command tx timeout [ 522.354716][T16785] Bluetooth: hci7: command tx timeout [ 522.440946][T16785] Bluetooth: hci8: command tx timeout [ 522.675175][T16785] Bluetooth: hci9: command tx timeout [ 522.994695][T16785] Bluetooth: hci10: command tx timeout [ 544.994535][ T5397] Bluetooth: hci2: command 0x0406 tx timeout [ 563.399902][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 565.474815][ T5397] Bluetooth: hci3: command 0x0406 tx timeout [ 578.726370][ T5397] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 578.748354][ T5397] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 578.761658][ T5397] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 578.770790][ T5397] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 578.779025][ T5397] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 578.786841][ T5397] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 578.915649][ T5397] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 578.925823][ T5397] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 578.934824][ T5397] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 578.955045][ T5397] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 578.964838][ T5397] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 578.972327][ T5397] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 579.115378][ T5397] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 579.125937][ T5397] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 579.134722][ T5397] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 579.143416][ T5397] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 579.152188][ T5397] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 579.160971][ T5397] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 579.416181][ T5397] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 579.426690][ T5397] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 579.436417][ T5397] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 579.444818][ T5397] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 579.453898][ T5397] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 579.462950][ T5397] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 579.772477][ T5397] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 579.782586][ T5397] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 579.791174][ T5397] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 579.801695][ T5397] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 579.823338][ T5397] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 579.833123][ T5397] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 580.834602][ T5397] Bluetooth: hci11: command tx timeout [ 581.085987][ T5397] Bluetooth: hci12: command tx timeout [ 581.234607][ T5397] Bluetooth: hci13: command tx timeout [ 581.558984][ T5397] Bluetooth: hci14: command tx timeout [ 581.874675][ T5397] Bluetooth: hci15: command tx timeout [ 582.915410][ T5397] Bluetooth: hci11: command tx timeout [ 583.157947][ T5397] Bluetooth: hci12: command tx timeout [ 583.314621][ T5397] Bluetooth: hci13: command tx timeout [ 583.644483][ T5397] Bluetooth: hci14: command tx timeout [ 583.954609][ T5397] Bluetooth: hci15: command tx timeout [ 585.002433][ T5397] Bluetooth: hci11: command tx timeout [ 585.248811][ T5397] Bluetooth: hci12: command tx timeout [ 585.394576][ T5397] Bluetooth: hci13: command tx timeout [ 585.714812][ T5397] Bluetooth: hci14: command tx timeout [ 586.034588][ T5397] Bluetooth: hci15: command tx timeout [ 587.081274][ T5397] Bluetooth: hci11: command tx timeout [ 587.315846][ T5397] Bluetooth: hci12: command tx timeout [ 587.474578][ T5397] Bluetooth: hci13: command tx timeout [ 587.800518][ T5397] Bluetooth: hci14: command tx timeout [ 588.114651][ T5397] Bluetooth: hci15: command tx timeout [ 624.839046][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 628.034687][ T30] INFO: task syz-executor.4:16721 blocked for more than 143 seconds. [ 628.042810][ T30] Not tainted 6.9.0-syzkaller-12171-gccf23c916ca3 #0 [ 628.063292][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 628.073285][ T30] task:syz-executor.4 state:D stack:27424 pid:16721 tgid:16713 ppid:13748 flags:0x00000006 2024/05/31 16:09:56 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 628.093141][ T30] Call Trace: [ 628.134657][ T30] [ 628.137647][ T30] __schedule+0x17e8/0x4a20 [ 628.142204][ T30] ? __pfx___schedule+0x10/0x10 [ 628.166483][ T30] ? __pfx_lock_release+0x10/0x10 [ 628.171571][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 628.194466][ T30] ? schedule+0x90/0x320 [ 628.198766][ T30] schedule+0x14b/0x320 [ 628.202969][ T30] schedule_preempt_disabled+0x13/0x30 [ 628.224425][ T30] __mutex_lock+0x6a4/0xd70 [ 628.228996][ T30] ? __mutex_lock+0x527/0xd70 [ 628.233693][ T30] ? ppp_ioctl+0x78b/0x1cd0 [ 628.244410][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 628.250134][ T30] ppp_ioctl+0x78b/0x1cd0 [ 628.264424][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 628.269252][ T30] ? __fget_files+0x3f6/0x470 [ 628.273948][ T30] ? __fget_files+0x29/0x470 [ 628.294411][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 628.299407][ T30] ? security_file_ioctl+0x87/0xb0 [ 628.314377][ T30] ? __pfx_ppp_ioctl+0x10/0x10 [ 628.319186][ T30] __se_sys_ioctl+0xfc/0x170 [ 628.323790][ T30] do_syscall_64+0xf3/0x230 [ 628.344385][ T30] ? clear_bhb_loop+0x35/0x90 [ 628.349291][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 628.364419][ T30] RIP: 0033:0x7f54ebe7cee9 [ 628.368887][ T30] RSP: 002b:00007f54ecb270c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 628.394405][ T30] RAX: ffffffffffffffda RBX: 00007f54ebfb4070 RCX: 00007f54ebe7cee9 [ 628.402429][ T30] RDX: 0000000020000040 RSI: 00000000c004743e RDI: 000000000000000a [ 628.424432][ T30] RBP: 00007f54ebec947f R08: 0000000000000000 R09: 0000000000000000 [ 628.432447][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 628.464378][ T30] R13: 000000000000006e R14: 00007f54ebfb4070 R15: 00007ffc13c61f18 [ 628.472443][ T30] [ 628.484404][ T30] INFO: task syz-executor.4:16726 blocked for more than 143 seconds. [ 628.492508][ T30] Not tainted 6.9.0-syzkaller-12171-gccf23c916ca3 #0 [ 628.515092][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 628.523816][ T30] task:syz-executor.4 state:D stack:27632 pid:16726 tgid:16713 ppid:13748 flags:0x00000006 [ 628.564756][ T30] Call Trace: [ 628.568097][ T30] [ 628.571043][ T30] __schedule+0x17e8/0x4a20 [ 628.584403][ T30] ? __pfx___schedule+0x10/0x10 [ 628.589303][ T30] ? __pfx_lock_release+0x10/0x10 [ 628.603633][ T30] ? __mutex_trylock_common+0x92/0x2e0 [