last executing test programs: 1m30.51225023s ago: executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r2, 0xf, 0x1, 0x0, &(0x7f0000000380)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 1m30.397304348s ago: executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @private0={0xfc, 0x25}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f033c00f0e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', r9, 0x1, 0x10, 0x795, 0x4, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x66, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0xc, 0xfc, 0x0, 0x6, [0x0, 0x81]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x1, 0x6, 0x21, @mcast2, @mcast2, 0x8000, 0x10, 0x7, 0x20}}) getsockopt$inet6_mreq(r0, 0x29, 0x26b77cc23bf8ff72, &(0x7f0000000280)={@private1, 0x0}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r14}, [@IFLA_AF_SPEC={0x1c, 0xc, 0x0, 0x0, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xdc, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x80, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6, 0x1, 0x2}, {0x14, 0x2, @mcast2}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000100)={'ip6erspan0\x00'}) 1m18.013344048s ago: executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @private0={0xfc, 0x25}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f033c00f0e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', r9, 0x1, 0x10, 0x795, 0x4, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x66, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0xc, 0xfc, 0x0, 0x6, [0x0, 0x81]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x1, 0x6, 0x21, @mcast2, @mcast2, 0x8000, 0x10, 0x7, 0x20}}) getsockopt$inet6_mreq(r0, 0x29, 0x26b77cc23bf8ff72, &(0x7f0000000280)={@private1, 0x0}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r14}, [@IFLA_AF_SPEC={0x1c, 0xc, 0x0, 0x0, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xdc, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x80, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6, 0x1, 0x2}, {0x14, 0x2, @mcast2}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000100)={'ip6erspan0\x00'}) 58.474376252s ago: executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @private0={0xfc, 0x25}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f033c00f0e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', r9, 0x1, 0x10, 0x795, 0x4, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x66, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0xc, 0xfc, 0x0, 0x6, [0x0, 0x81]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x1, 0x6, 0x21, @mcast2, @mcast2, 0x8000, 0x10, 0x7, 0x20}}) getsockopt$inet6_mreq(r0, 0x29, 0x26b77cc23bf8ff72, &(0x7f0000000280)={@private1, 0x0}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r14}, [@IFLA_AF_SPEC={0x1c, 0xc, 0x0, 0x0, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xdc, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x80, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6, 0x1, 0x2}, {0x14, 0x2, @mcast2}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000100)={'ip6erspan0\x00'}) 45.737118972s ago: executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @private0={0xfc, 0x25}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f033c00f0e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', r9, 0x1, 0x10, 0x795, 0x4, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x66, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0xc, 0xfc, 0x0, 0x6, [0x0, 0x81]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x1, 0x6, 0x21, @mcast2, @mcast2, 0x8000, 0x10, 0x7, 0x20}}) getsockopt$inet6_mreq(r0, 0x29, 0x26b77cc23bf8ff72, &(0x7f0000000280)={@private1, 0x0}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r14}, [@IFLA_AF_SPEC={0x1c, 0xc, 0x0, 0x0, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xdc, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x80, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6, 0x1, 0x2}, {0x14, 0x2, @mcast2}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000100)={'ip6erspan0\x00'}) 37.74066069s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x58, 0x4, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}]}, 0x58}}, 0x0) 37.668735961s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x58, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a7fd4531296b6353d1f3e08847"}, @NL80211_KEY_MODE={0x5}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x58}}, 0x0) 37.489226002s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f0000004f00)={0x0, 0x0, &(0x7f0000004ec0)={&(0x7f0000004e80)={0x1c, 0x6, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x5}]}, 0x1c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0xd94, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0xd78, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x4ac, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ebde8191ef32b791e708c5de2c6489cbf6041a3a4e139ac5dfa5375a39526077"}, @WGPEER_A_ALLOWEDIPS={0x41c, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0xfffffd06}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8560b2abfcff5f7fad26edbe46db38b2193196f33baad7e10cfd832dc3c8992a"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x82c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x120, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1e4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1c8, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d03c421799dad8e5f1569d04f366d37ad2d85b00ff504f8d8e2dd9f96bea6635"}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_FLAGS={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}]}]}]}, 0xd94}}, 0x0) 37.268679747s ago: executing program 4: socket$inet_smc(0x2b, 0x1, 0x0) r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r0, &(0x7f0000001680)=[{&(0x7f0000000000)=@in={0x2, 0x0, @loopback=0x7f000027}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="9e", 0x1}], 0x1}], 0x1, 0xfc) 37.105166707s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$TIPC_NL_KEY_SET(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)={0x1d0, 0x0, 0x0, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x48, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_MEDIA={0x70, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}]}]}, @TIPC_NLA_LINK={0x6c, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_PROP={0x44, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}]}, @TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc}]}, @TIPC_NLA_LINK={0x54, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffffb}]}]}]}, 0x1d0}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x0, 0x0, @prog_id}, 0x20) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r1, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000002c0), 0x0, 0x0}, 0x40) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) pwritev(r0, &(0x7f0000000240)=[{0x0}], 0x1, 0x0, 0x0) 37.003193272s ago: executing program 4: bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) sendmmsg$inet_sctp(0xffffffffffffffff, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_FLAGS(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x30, r1, 0x205, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private}]}]}, 0x30}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@map, r3, 0x4, 0x0, 0x0, @prog_id}, 0x20) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x64, &(0x7f0000000040)=0x1, 0x4) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000a80)={'tunl0\x00', &(0x7f0000000b40)={'syztnl0\x00', 0x0, 0x40, 0x10, 0x3, 0x1e1b, {{0x22, 0x4, 0x2, 0x0, 0x88, 0x65, 0x0, 0x5, 0x29, 0x0, @local, @multicast2, {[@cipso={0x86, 0x41, 0xffffffffffffffff, [{0x6, 0x8, "05176de9dee1"}, {0x5, 0x12, "5cc0c4fcb1ee2fd7d5e937cc5220d246"}, {0x6, 0x10, "a9a7ef6b247d510cee0662a0a34d"}, {0x2, 0x11, "c150baa4e1823e2b7a1229dbe5477e"}]}, @timestamp_addr={0x44, 0x1c, 0xe0, 0x1, 0x5, [{@multicast1, 0x20}, {@loopback, 0xffff0000}, {@broadcast, 0x756}]}, @noop, @ssrr={0x89, 0x13, 0x20, [@remote, @rand_addr=0x64010102, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000ac0)={'gre0\x00', &(0x7f0000000c00)={'sit0\x00', 0x0, 0x7800, 0x40, 0x1, 0xffffffc4, {{0x15, 0x4, 0x1, 0x6, 0x54, 0x65, 0x0, 0x6, 0x29, 0x0, @remote, @remote, {[@noop, @cipso={0x86, 0x38, 0x0, [{0x6, 0x6, "97d23bbf"}, {0x1, 0x8, "9e0522f52102"}, {0x6, 0x7, "57244ca1d2"}, {0x1, 0xe, "84e79f855d852262fd1ea6bc"}, {0x7, 0xb, "8affa7abad25fdb599"}, {0x2, 0x4, '+}'}]}, @ra={0x94, 0x4, 0x1}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000c80)={'wg0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r2, &(0x7f0000000f80)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000f40)={&(0x7f0000000cc0)={0x258, 0x0, 0x300, 0x70bd2c, 0x25dfdbfc, {}, [@HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}]}, @HEADER={0x78, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x64, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}]}, 0x258}, 0x1, 0x0, 0x0, 0x8081}, 0x10008000) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000140)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0x1, 0x1}, 0x20) 34.634195416s ago: executing program 1: r0 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@empty, @private0={0xfc, 0x25}, @loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10002}) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'ip6tnl0\x00', 0x0}) setsockopt$packet_int(r4, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r4, &(0x7f00000000c0)="3f033c00f0e812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @multicast}, 0x14) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_EGRESS_BLOCK={0x8}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x40}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r6, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f0000000000)={'ip_vti0\x00', r9, 0x1, 0x10, 0x795, 0x4, {{0x8, 0x4, 0x3, 0x9, 0x20, 0x66, 0x0, 0x6, 0x4, 0x0, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0xc, 0xfc, 0x0, 0x6, [0x0, 0x81]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x1, 0x6, 0x21, @mcast2, @mcast2, 0x8000, 0x10, 0x7, 0x20}}) getsockopt$inet6_mreq(r0, 0x29, 0x26b77cc23bf8ff72, &(0x7f0000000280)={@private1, 0x0}, &(0x7f00000002c0)=0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) r13 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r15 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r15, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@bridge_setlink={0x3c, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r14}, [@IFLA_AF_SPEC={0x1c, 0xc, 0x0, 0x0, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'veth0_macvtap\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f00000004c0)={&(0x7f0000000140), 0xc, &(0x7f0000000480)={&(0x7f0000000380)={0xdc, r3, 0x1, 0x70bd26, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macsec0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)={0x80, r2, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x58, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_ALLOWEDIPS={0x2c, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6, 0x1, 0x2}, {0x14, 0x2, @mcast2}, {0x5}}]}]}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg0\x00'}]}, 0x80}}, 0x0) ioctl$sock_inet_SIOCGIFPFLAGS(r1, 0x8935, &(0x7f0000000100)={'ip6erspan0\x00'}) 31.57829372s ago: executing program 2: r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f000000f780)={'netdevsim0\x00', &(0x7f000000f740)=@ethtool_pauseparam={0x12}}) close(0x5) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r3, &(0x7f00000002c0), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r1}, &(0x7f0000000700), &(0x7f0000000740)=r2}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) (async) write$binfmt_script(r5, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) (async) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030030000b12d25a80648c2594f90124fc60100c024002000000053582c137153e370248078000f01700d1bd", 0x33fe0}], 0xa}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) write$binfmt_script(r9, &(0x7f0000000240)={'#! ', './file0', [{0x20, '&\\'}, {}, {0x20, '#! '}, {0x20, '\x80:+)'}, {0x20, 'nl80211\x00'}, {0x20, 'wlan0\x00'}, {0x20, '#! '}]}, 0x2c) (async) write$binfmt_script(r9, &(0x7f0000000240)={'#! ', './file0', [{0x20, '&\\'}, {}, {0x20, '#! '}, {0x20, '\x80:+)'}, {0x20, 'nl80211\x00'}, {0x20, 'wlan0\x00'}, {0x20, '#! '}]}, 0x2c) sendmsg$nl_route_sched(r8, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newqdisc={0x24, 0x58, 0x4ee4e6a52ff56541}, 0x24}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000004c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'wlan0\x00'}) 31.29717185s ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe2b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000ac0)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x4}}}]}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={&(0x7f00000000c0), 0xc, &(0x7f0000000280)={&(0x7f0000000540)=ANY=[@ANYBLOB="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"], 0x164}}, 0x0) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6}]}, 0x10) syz_emit_ethernet(0xff9a, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400000010004b0400000000000000007a000000e33050e3a5a2a1494baf50d2adb85978c652b9b2177d6f3a5ddd1238022b0ea4ba55febc631c686bc3660cae76c983765753907abff76b1f83b01f306e86d53f2ab993f5056e6c2b9aad2b2dfc078eb0cd8afed57ddba98502270dc38a23eb4b33ad058ecc217b3c421264dcea4948ccfbc2afd6f04cb0d3e232b1041c87ace578a352eff01af5aace4b6538d7cbd1dbc48ca242b1d6eb929bcf7bc9081f5bb7a5bd93da3a95b9090023fb9a913efaa75768f0ccb5529493ba30cf5d6872d903ff1fe38bc0e36922688cb2ff37f00b6ad0bf8cb6980aec0592bc04c0c71b3a1801a76308d75bfecadc1beca89dafc141cda90ce8a5ece2a2ad9bf0f77841be91a3ae42b9063a2ba1a04a30", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028005001600030000000800040000000000"], 0x44}}, 0x0) 31.198597823s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000001700), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x1200, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000800000068000480"], 0x7c}}, 0x0) 31.150828464s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x58, r1, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a7fd4531296b6353d1f3e08847"}, @NL80211_KEY_MODE={0x5}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x58}}, 0x0) 31.102856762s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000004000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000bc0)={0x0, 0xffc, "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"}, &(0x7f0000000000)=0x1004) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendto$packet(r0, &(0x7f00000002c0)="05040800d3fc030000004788031c09102f28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 31.043899358s ago: executing program 0: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c", 0x44}], 0x1}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) 31.014048749s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000004c0)={'wlan0\x00', 0x0}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="090d0000000000f0ff000700000008000300", @ANYRES32=r8, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}}, 0x0) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x2c, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x4a}}, 0x0) sendfile(r2, r1, 0x0, 0x100004003) 30.978320115s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) unshare(0x400) r1 = socket$pppl2tp(0x18, 0x1, 0x1) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x13, r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xff}, 0x48) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000), 0x48) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) unshare(0x400) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040), 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000200)='GPL\x00', 0x4, 0xff9, &(0x7f0000002300)=""/4089, 0x0, 0x0, '\x00', r8}, 0x90) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv6_newnexthop={0x20, 0x68, 0x800, 0x0, 0x25dfdbff, {}, [@NHA_OIF={0x8, 0x5, r8}]}, 0x20}}, 0x0) r12 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r12, 0x400452c8, &(0x7f0000000100)) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001680)=ANY=[@ANYRES64=0x0, @ANYBLOB="b9c3a78ac99b1ed31b3f55efd0e79ca2109447ec36bf8130da097134ccd9d9e4a063c602af3f22da14776dc219c1bd94196464294a1daac9829a4430b22cc0ae9c664890d65e599176c4693909c89ccc69e78f3455d693457afd0ba261135cd140c93d0a706f3db3d70bc7a7c9eb017262fdaa238296691e8aa5e7d0ba66faaee80b92788ea02e3229261b7d869ed34b00882c173278370dd726d628f0c130d23af2da9119711adf43af799c9b3bad655ab44d55cb63d7f91f95d262b4e34b25f7e35753da21ece33a49d1eed746a7ed9b6b407b0625a62c8ec0b803ad98fab014cf78e877e59c99b7ec0a42d87b408be46db5fe52e123a285333cafc08f15cddbd1b060b8ee045dafa6677d404fdf16ac5182b4adb6c89543ceee9552860250d0faf98f01686b377e5276dc71b52f74bc85c016473e9a3f29b915ede0da9eecaf600d19d774fa74e6287141ac4fd5813f20cfbf7a7d05267efcdfae7b99a559e4da9b27a0e9e7df0244eb172c73189b437b9c464085b3e3ce020371838b3c92f59ffba0bfcf9207f2b9c92f1631a514424e24b052dc184e74f9b5fdbed13a37fb30842bcdc8fa34e78248234587f7ee92e6b4e73998d3ca6c94e366df08ac854e512abb2607ff813ed152e23bf815722bac1c146c67113e915868f4523edddcd9eadf15609c03fa4f326ca78d7811f85f7449d200842bb78f0dd43468b41bb0ac9b05ccb84418b6afd44ae58f1b68728dbae4484b28b0645d123a65ba988e3accc7ce7ba118cbc1f1b09f3c4e1629916431582602d2cb965a56b42cee0536e410d747b7f3032157513cc58b0decccdbe8f97a1a142691894f747e7119c9518f45e6ab995b98512066d4ebb096173bb6ed2cc7d1e6211ac1e97379b7f10657b8ff097e4c86625fc75a3cc51c33411f56f75ac945be6a9914a136e97c5bd6e0427a8adffb0eab6e8e13dd32bfc55b9ea31e8a64d901610d7532f325a937a15837b7cff12457764baad5343bad51e07b0e82f874ad529026892726a20d4936a6fe7dbd24aab49a9a3b65add6ef93268ade640502118e97aadb21255b5c69be4a4bea3a0562441a646e6609a96f6f161a7664faf0d0308f3e384b8237fec9da415f55e50ebf6a370bebad2f0012ab62862aa50c42d5a147455a82a9b44cd549c63e60dc1ad00c9f6b838365998ca82f901a51c5d5999817a5a68a8eec861b23baa7ac985a330919844030b7f2bec0f9dffee0c79b594f232e94ef546a3e3799680cb0e7bcc83a525999145f50ea6d207a143dbf20c68a20a189817029a6f6d22ecfb60473a0bab8de803d137896cb31571f624a4a597913d2ec8bf38cae586bb4827ebab205c3e84010b91d0b511c4f3d9cb2541632aa0a591aadd9a5bf388e7370ae7e98347de5971842f155b83eee4ae94ca26d7787cce90f341aaa95c0cd5d850ee831cfda88cc915e6949a1e460acdd329f223efb17e5d0034a6f88781b9b68c78eb616d82f117d0a9e6573f6de4d6c0c71f97b277b759d4416245350883e5f148421a371a541958dee5041c4e64226b2a9ae1b543756fb9057990140c4df3db556928edeb1cd557bd5747ba28395476291e1a55bba7de1526b1cad574f33acc6af433c711be51f458e91b954602acc3d090dbf9b05e8b4f0c88b3fefa3048aec857613c9ac78f3c647fc3793c3ad16c9311f88c74b422ef5bb84915f1dc09c060de4a6f2ca3438c177a322c59421a2af458b9826ddaa298433d5fc5874073ca531a09c9409d2b45673f5d80058e46bcb77c3579e16fa394e2c6eb18e1f31c5742b9e7b23f55afdec67d970f05e717c1073c23330e8fdfe84831280423c9864ad23c379b447c2bb043ef7c069f32a1e603c3b08a6feb939a3acabaea99dddcb2a301cad16c1b7db4a1a05b779da66a3651796af3b1b8062bae94bb9000f312d61b70cf236b8a6bd0439c608185b3a4337a626c31e1ce919d7b3d43d55e3e3eb2d70504cdc67a52b11537dc70fde79d8b80984e483b77668c8f9db66031b9f8aa958d91a5f07886b198954346e80be5650c11e0e2a6e520382b2cd185b4d6a5aaf236429a14b8b73e5e77a458b3f1ba164a26734ca205e248d2bb5dabc2da0d1896b0ec5ea8076be89d41d431dd28945fbc5f72bbd369353258019ecaa2e289a6f3f177e0f7d96374dc7c239e2e63f9310be85178ff5e1e5f0781532dba4e1ef36c278851b71f8b71c8fd42fd080d94bb8c3556d840e627094aafe304edc63d89cf970b8ee3e16fc2af865ea9cf486296d97a8a37a00d0ebf5f5afc684d760758b97e7703807addecc048a2f1aaced63cc83f6080a1b89a90773c23e24b3c301d1edbcfff32f99f3b73c26ca1ca250ef5d26ec77c75204e94135a6ce504e3e8e5cdaacf689c54c0456193ba04c4542513358732e51b60218c2b28a95f84dbe74ace34ffdc0f8c3ced8f62e6f9cf195cdeb90c8bfe31f2ddede0295d194beebe150a8ded84fb040a4b21ee50a3be6fadedb972ba9cbd334668615140de7215d75ca72d9c0d7352a5a9a22b8acaf5845f1cc8fc7dfc952ab8cf2d1592257a28345a1f46578e1c42ea35c939bdbc6fd479035c25b9f63c69b7ceaf28c2ca3d7bc7f7c595fea7756c3b9e38983ff8832482f5060500fcfe878652898a9f409cdbafb550b13cb98d5fdbd52cf66a025f65371e84eca175835063161df85cd6cb2119a8790fcab50cdd68de8ff342b324fd2243d0df663fdac683ca063ead068f96d7a2079d402397e2d4f0447ed1fa9b7f1a3a5f289e7110a2806eea2d33bb07e72a309404ba9e7f873075289bba2f03291f51ad3a66d19a9119b81ac3483537fdcc23d3cdca427884a3e315cc9a5b00e96a4ebd48c628fc618089d8e84e826da70a437b4b18ab1533e4ef0db49838ea578ae36e981042f2a38ac0c683a13f919b2f41430b8692a55c691746d17e4627243e8e808282f9940e8bbce126e570967cfd0fc4388461fda8424510835a9ff2c1cb84574841c210baae839fc752e2eb1cdb76e67de608c661fc52cebd28cda4861cab9db22a3c17abaed366801424507e58a3460d3e68950ed23c1360e554d45feca5dddfd81b9b23d6a38e730830896286f1daec6e5a214a99335054e87c4ef23db11c91c4e02096a2244b40e72f7092c7d3b8d63c2efbee9f40b78d1ede89de23e26ff4855c470a17b7b14c8e056b43363e3d7d3999db29dc9d7a8775126a36f39e82ab3a4f62b728c74d72a1af3ee9df37e97ca1627dccb6e21d92ed12d682ca4fcaae30340b36c01017b7041d04c19259186e641fcf3f910a23ad8d6048ee69d85ddf09c885733a493093faca24e549490c7e178dfd9e49bd9b41ca93e0346aa6827ed531954400b3965151ccb5da2e62a1e345c524c65450af2a8258674a299473547a8b338f21297850e292e5e8e03bf1e540467ef1d1780d143c83f8c981b4d8fff37ac24ccd7164d63b12c0ac47a23bdc775d77d6b20f4bbe6b9b650c578cf6ebd96cd1a79d12cdef958547eea79e62594b52300c7bdf1aa5433684b7b14cb05a4bbf7f6f04bd390463ea0fa3769ce23ab98239bfe897aaf40fa2f29d87171da3ad04606ee3d2dc278df4b941d90b3bd2cec23237a76d362f7d3d2e49243e6087fdc2050e3b911f515de509f0b35e54754cafbb3bbbe8bbc1e6174624233f837f4ffea0d8e7abcd7be2b56e15024da62811724d39664005daeefba39f23f691d29713ff7e282295e9c4283aea87d5f19b19fa758a230e782e8a4c2430bd8cfab2264868af972ae4506a23e3968b7caff9f71fd79ca667fae6a709c7246760ce84eed454faaec29ef294c2f0e5c945fd5d51f1131481ddf4bf762de49c309eea8dae9818265a51d6ae9156a840833e0aecf4afcece0a6bdff6bd4a1b649a45409c85630deedfd25f3ec993b4ed5af759fec2e0ce41ab281e1e594849ec49546cca4654b61063671ab3349905798f61f37bfdde4ef9a23437b493dce6e6f2f59d00c2ff68d46bf2ae1d4eedcfe61cdd049ca6e9b0944ee32e3e2fe7c32de32352d9d193b9c2e36d3549d7415a8c5260bcbd191b188d665233328e4cfc51b394e8d077843975f0b3c2b78a1dd582d71d73433514d0b66045c5830c9aaaf53a427421df1531359a3ab57c4b9f1db689d5fb6ec1e577f9a9cac871b0b3125d7ee94ba9b28c9301e5d70be5a0dbef106d73ded612dc72aea84a04698675075b9c5bc4d29ef73523d8283f568c2c08030ed2823042c35e6c87097c68f6f890c1d506927568282efff772ccb29993230b909c3a80e2f454df66ecf69bb2c25d369223e75d69852d8bc3000e493129f4919e8520e427ce2b681fbf25764e99a56d06865ddcd8df85ec1c6023cd49ebcb9e85654ee852f2fbd4b38697e153c3a58132cd37505c2658c55187e782183f8b39cac56e0c6c0b43a26a9e6144fcd9eee193601469c1898a0c604279b137379ec56cef77b7a2a9cbe0d326e33fe4a866f9c1379561054a130c477f972368069b6e538eb7c0d18a50ed2e460cab9381b340f61d553b5d72ce5fa57736bb271ec8249b15016d2c0fb60941ebb1eae1546b13070f4675fa124a9ad14e33d881c16f8f218de6decd047158324046b9a2a06cc5900994b878bb62f5976b69d69cea8f2c3e84f089853fb4c567f25963cc50c79a6c6f21196547ff03a205df8b6eb3a8267c9f81494e8ca9bf69b7bf747725c625308912df8c3ff485b9f65db6dce6da289b0163427ca7ad8047fc66d107554065d3d601c44b60e1dba712b5618508b0f0789ccbfa311a67f3ed6fa640ca622bd48e378fa461121ba719754195edf2536e5396ec123810832c3097f71d9e2e2e81bb09f03ab71b8e27d38144222db49e73d6c5d44c5ac5ee61ff75bdc70b2b247e91b66899549b5d445a638fd3ecfe1e05a1a2da6e56660034b1e8b9b50823708bc983e578e15575a6bd14933c08b6d732207a427b8adac8bae096c130633cc6a9d1a5afc5f3fe3a0b82f7cc9248b066f69b8b6866adf0b51cb06fdd1a99af37fe058a2eb30618319aac63e7fa3fab71350e4b4533e5d7e6a75db66f6600760f34723162104073a081d7991e4ba08f38d507b2c95592eaac7b9f365f54bf7da8bf2f2d76cb7aab9794f314aef0743a60e0f20e66f4c8a03048b8adae6823d23f43246fea258f6ea62af3ebb8e77abef3ba59bf2ba7728c8a3b563efb903f836f59e4a173b4e1bdfc9f9c645540f959bca3e6f9e2433da2e031ae7b7297f5d335d1410e263062a38b3fe9d707c5f69664ef33ffc2d494983db7e2cba88caddbefb175b60c9bf7d07260773b99e0fc96e8ed6b314b9822ad4658dda05487d46fb09879c5eb57c5add7102a77ba39370e9b1a289966814054db68518f9360240bf16d03e0c6b5e96c405a83e71b043951c3d31316e74ac2cc2183865e4ec95eaace783444c13f563072b7e5818ee127700530b269102f14b1dbe2d22e52b0fc1d44c8de9c6b421105d033d6f91cec3f4e99e7342fa70c0b2f70ff874c786b513bc4dd402327cc3cc7b3e24e98290d1bdc08bbd2b5b928a2392e1fe2b350300d40e434437c9ea7e767024431b3f5d87719bbfa5b57f3e06c8f3e448bf3356ca639bf8079f8ce3da41f7e974463ecf7a0a6c3ae6e0cf8675adaa768af9027c238126af326c3a423f6b04f573d3451868ef13a334851d844bc7afca2f87e49380f1b1893e75b6bf2a3a0c529da11c2823c72d3876e5e02361da40fc685e83ec5646b8d3cd09122cb1c9d9935cbe163805e3201a31fe", @ANYRESDEC=r9, @ANYRES16=r9, @ANYRES8=r0, @ANYRES64=r0, @ANYRESDEC=r12, @ANYRESHEX=r12, @ANYRES32=r10], 0x24d8}], 0x1, 0x0, 0x0, 0x4802}, 0x0) recvmmsg(r10, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) readv(r10, &(0x7f0000000240), 0x0) 30.917653077s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0xd94, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0xd78, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x4ac, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ebde8191ef32b791e708c5de2c6489cbf6041a3a4e139ac5dfa5375a39526077"}, @WGPEER_A_ALLOWEDIPS={0x41c, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0xfffffd06}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8560b2abfcff5f7fad26edbe46db38b2193196f33baad7e10cfd832dc3c8992a"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x82c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x120, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1e4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1c8, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d03c421799dad8e5f1569d04f366d37ad2d85b00ff504f8d8e2dd9f96bea6635"}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_FLAGS={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}]}]}]}, 0xd94}}, 0x0) 30.787996119s ago: executing program 3: accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x18, &(0x7f00000001c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 30.724133388s ago: executing program 3: r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000002ac0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0) sendmmsg$inet6(r2, &(0x7f00000001c0)=[{{0x0, 0x9b4c, 0x0, 0x800000000000000}}], 0x500, 0x0) 30.652537626s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x4888, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.330345514s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0xf0ff, &(0x7f0000000040)=[{&(0x7f0000000080)={0x24, 0x5e, 0x1, 0x0, 0x0, "", [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x8000000000000001}, @nested={0x5, 0x1, 0x0, 0x1, [@generic="de"]}]}, 0x24}], 0x1}, 0x0) 30.084022268s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x4}]}], {0x14}}, 0x80}}, 0x0) 30.015289581s ago: executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) sendmmsg(r0, &(0x7f0000000480), 0x0, 0x4000890) (async) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x2a, 0x0, 0x0) 629.362352ms ago: executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) (async) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000280)={'batadv_slave_1\x00', 0x0}) (async) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x3}, 0x20) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) (async) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) setsockopt$TIPC_MCAST_REPLICAST(r5, 0x10f, 0x4) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000fc020000000000000000000000000000ff02000000000000000000000000000100000000000000000a0080"], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r9 = socket(0x1e, 0x5, 0x0) epoll_create1(0x0) (async) listen(r9, 0x0) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r8, &(0x7f0000000340)="07000000010000", 0x7) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000580)={'batadv_slave_0\x00', 0x0}) (rerun: 64) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r10}, 0x10) (async, rerun: 32) r11 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@ipmr_getroute={0x1c, 0x1a, 0x43d2163713cca40d, 0x0, 0x0, {0x80, 0x20, 0x0, 0x3f}}, 0x1c}}, 0x0) bind$xdp(r0, &(0x7f0000000200)={0x2c, 0x1, r2, 0x0, r3}, 0x10) 312.552499ms ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000004000000000000000000008500000028000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000009b00000095"], &(0x7f0000000180)='syzkaller\x00'}, 0x90) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000bc0)={0x0, 0xffc, "3fd22ceab72f48e5b221e954f2884b8177ab0418eedbb0ff6086b6d1d4707aaa86e4bdf20885366b5bbee12989ef0210806a1a654ada1e0f0379d268ec3bbbd81e628e8b0654f3600ffdca96ae8dce543d1b0a7ecbd1cc4e88ee566045b48547776d1a9dbaaf2d9b41d1d209aaa69301461a1a17c57e20c66bce4faa5163a8e2def89ed4e07284e42e3789c5b4d60b69babc636504d0d44dcf1dd67287a6ba69955c79c2939b5f28c1a65e9734c7739bba6ee93f87b1ebd8b79c01ed5eac7243fd144b879b4e8f0b56fddc66358452bbd5c0d10345a9da171a69092c37ee81b6e8285a1ce8e3bb96a4ab18e692a12f0fffb21ddeff2d98291e201478608954f4f2f808b737a57f00a3abd5205ab587d9ac2d43e55df0d982b8f03431ef30ce7f1b29960a17bc40ada8637f244734b72e6968e1156642575fd343e9fd4bfd6f7166eb57644afa4981984aa66756943522b00055e86c6592721aa2f0271362558f4405e3c8d6202161c3e1ab04136e94a12aecc57407d65dbe2172417fffa549c98e004300224fe84f3975bcb8b833d0c74af6eb8dec2cc44287d3cba1151a8a27fa6220756822cf176e026b485a69e624117462b3332be1388d7ea4e2d635d77dd73e49750bd7ba464c62ce03354d8874b545f3f9b77619500bede7aba8ae1bfbdb73b7a41aa856b84e06b04ec9eb421c98a48f1ed9380706ec0887ea6393bed3091b1795f2cd9fbe85039d097466f160299f9c5988baf16e222177bbf274ee59cbee1119499ad34b9c0c35c91bfad91447f6a43b025545454c8eeb53a2e6d61f8651fa48ac086c4fa1ba33d893d5627ec758d7669547073cb13d73e9f8127674f4dcea0c18b54b459304f6e3b05fe3cd3b481dd1a4872082e77ab280758e191b86e8decdfa3e42b87d039cca6e02b5c934a9668ddb415eebc80bdea8f4740cee2ad881f1e2e08cd33f52697a2ee36fc84204e1eb4635705806c562b0fcdfb15e912b111d6361c7220a5f874e886a361d98f1550ff42c9e26149c0d1f66de2f676d541ad46b3b5a478795b39c82b317d6b83ed9bb75eef526d6247838f48355d779116723b93960c9ad4aa0bcb2d72f7941f35b9e46dda6565a86f1fcb6e6aaef74752738a718c6486cfe88ad404530c4199cf256c323b2eeb4a6396db89db0c23ca2128c1ebeebeaf165757ef5d1f5d5d2a42ffa7545318b6fb5339462e7c95477cf0f0e0c1548abe7875dce9f7fec22a138c247fcf1380435c835e5147fdffef6d253348ee534c8e5679efab42cbc828467fe4510529e15fc6701e8c8de741cb58c0db18824c2f7356f72343c2a97bcee7fc0ed577452a6762f7a7ddc8473b3cd26cdb70b68963439b1c9751f9081dc4a569f19f3c120e9944cdf87f3d234c41edbf2775edc7bd79bd155c65337a57a5d58e10700307ee21b5336c8b70ddb1239d9b441dd44066428416cd3a1dba8664cdcc59b4f9b72ed48522d77f1895506b78b6966760124f3b9298926493f5b5f34686edeaec168d13554aa305b5c410b38d0410cff19dc00f465f40258fbba4866ccc1ebc526c4d7f37950d812b3a4fff1e93921c81503b78e0dbfa7fa5347f3f3142998c9fd846acd5f4350438ed8b711b3520be2d03dd4116b9251e0ee9327f49a0d5589d32a8157d1ba40e08a4c43d37fafab4d7ca13fcf2f4094bd2a5d3b758df2a3f990607434a9596b47b39f8b98d88cd8a2a2bae6ab6c132adcbf51aefcebf7713f2bea7eafec323f0338ac07c428249a5835799dec30174d89a99b696e8569cdb8bdc744e37a79493b5f25cf52df4ac3e78c04bd3484cd65ab26d51e171ac4fb764e9c0c298af269b2523a39915ef928fd17bd7c4dd0a0b6e128a7edf80c9a5d921427398fc648f00479a7c8b34e3dda1a0909f066e8f12de47333fa4a118bb6faf43fb2256d9de986add3335acef07a2425f07222933602b0412de6f34d8780ff6e6b5e3d7f09758ea543bc691b4dd1b08f46f069550c83967353f2540309152f94bff17a4ad84aee91b0d0c907272c1375be1ce6cc50b012d6601ee7037925f07f0710f403c4a27c877ed50b849cfeb8413c48fb9277f8ea34d540c35b1f89c9daa6efaee05227aabcbe48804f1f855673f4d0e54de6e76bc0bb306fc36e34ecf64b7604ee18df2bfec650f57b36f2f17bb4fdb355afb674d21b144f12cca1383a337aedae01aae91edaa344e4d2cf630d82d6bef30012fa342f84903178ede91d0051c92c57948815edc6c8ea83f9390debc20ae48c9b27aaf3042195553d0a98eb24449db1a83abf856cd3fe5268fb005868f492403ec52e141f0f20693f16961338c4500b278c0548e4715cb3fd8123612587c7a652b5ea047725d7f9fb9219617b45148567e0d77f8bc2950f092f0b94b4566f4d3145a8da179c8af3ec52d84db19537a56264b6d651072125413bf436961eb3abbef6c37b72e9341d65fc3cac09a73fe2ba87c3ece6f41666015a06afb85b413232153de3b3e38ea5a95981f54ba1a08ec671b7048faf1f6ebbb18d351ba64482d60a89393bdee81f2f8252efe8a60dc1f769135db4ecdbeb6f44f320dee600d9de693acdd68e3c5511fb4e8b31c2f032044ba63bf3acb4cbd02263bbed82e07ae13e237e5b4b32b73bb60052ce3d832ec7fa4d7a46e36b593dca0e561fa812025dcf10de9c8797f9c9b6980d81f2e6fbf391ff68a57e09486656d31360086506ec4f34f240f00cb94611a85cf0ebd0b7abcc5cb2b8c562b114049b0ac764364169db14d2c99c4e4b09fd6fbdba22f458d3df18dc34e58c051812434a7045cb3956a3919dc99e8ea224afa7537416272939643980e48d3605cef5422d155eb3c3792ddab540e9fe2b969619f82a02348b20c4c50eadba0abab81f189ddc18f250a09cd2d6ec9229455f3ab99e2a1e6ae7fe5e885e44c07ae7d771bf9aeb7a1e06ab2c3e5421100c64b449ebe2cfbf3928839a28834e26aec2ac85ef1f717fa8d79ec406d7abb71be9b7c66ddabfdb9bc0a5df047473d78124a9b76bfe0524ed39a29a1661c958b00c9277fe8844ceaabceb7ba9b322815a675dd7396ecb75f2f9f528c083f8d6f6f632845725dd8d60f98e023dfbbb2a7405f254fd6b66d5786bdf55c061d34d1ba0bcadf0bf4f6516df7b296180a5c8efb6460a56d7b24d63331e02f338ec544ecc1baf257b0ec050f3c65ceb750f26528c234710ccdb3bbc7ade2369b0a5bb873297e856be722ae41ba351ad6578d5f9075ba12bce4f994f65d1c99edcab37aef70d916cc93213bd54b5577223dd0db86a8053714fbcddc929ddc2d9fb4779dddfe3141dc8412a5dd98d6f18254837770ebebbf9a33e10f16c3dc17edb66dccb571b2d7b3bc1110d6f4956c99687ca25d69a45fc8980045e72ca2e1940525bf6b1a7fba653a412e5e4a3b6f8cb4da5431f508598dd6f45a78926264980415fd76b62ac626b30bca7f6449c64b430aca2c719963f45a7bd074138b2819846ede2b0bcf3a6cca9e90340662cd006453ea7586bca040f68616773ae8c08fe083dc2b86dde17d8ca994857c41d6a99b6f59db523efc2868473c63d43fa4f2c661be0999dcca301b8abf368473bd62176086d9b3733f21e23a96b4ef7b8237602c6210305cb5fe5f043f22345eaa6d2c2373dc60a50dcdd0ffe4d14f846f43cc26cafdc1927a7e566e407038d1742be887e7eabd526413327f5edd6076825580f46630da4d8b423a5729c123003cf2b967197847633cb5754b362ae0b1b2cb529b010851154e426a7eaeb5dd0538d5d00cd42cd22669592cec3189110e20a19db5a0af8693b68679da96d2a244ea997a6ef2183f152cbd3ebd99446bb4b730f6c4b955a8d8770fe21437ead213d27f56fc8128b6727f2acf19623a6da7c8e9a5ef54b39cf695349dd121d52ee583f2a7f62a42090a74de24dbc923e7f85a06270adecd0397b149f14e46d553f80f50a56da21d3ee9b370ad63016d2be079caa6f92a8294927f241833988e7785838c93ef17d680d5ba211325376102538229227100459752fcceb9d5ff11370e4bc046315f8d3232af38221235fe627f6c8e87a10b116932ce4b35d0c119128b4ce9d2e084dbfaecfa604bdf5d86edbcedf7a634469a515e3fdfe6a120717057e3f0ac3e11b90d982a3a1037013c920aa4ed5d7deac26e23f2fd7bd2c9ca601290752515268c9b462dea6788e15abeba229107471473db16c8e8ce5f848dd9c84e2fbda9122309f8910f1037fb549dc3a7d7a516579b9860e7b97bfd67bc65cd247db3fa2149bbe6747c38e859c437938d8818956ce07ccf2137d9ff5b3d7dae33ad10f1274056778c0bc5d1b26a608c1183cf8388addc69467e1f4da707cff8e0de1e916ea13f44d375aa2eaac37738056410601aaea4625346daa7bab3b2e8fd1d988c5c6274838b6515f649d350ebf10221f43ae969fc72bac2d148ba621fd183ef0e7ace849864a075dc85a08494b2ad0634f0c538a0eb59747af181d5881a1a1b2a00b73f5f2c00cfcb826ff5efabb027772bd35b880680a850b73a0e06268d753568a824c237357cdab03a30e26811798b55f0ca16986841815a146aebbcdc0810bf6be717cc4e23f48a754f9c93a0bacea17338483afb7dbeedd859c69987e4794339b1f1ba04a5ad8688ca866ec22364a9b7ed727cfe46cfcafc09123cf7e71abdabf5a97c6fe56333b6f224ef3a61da46c028cd877e1ffdcc847e32fb688040ac3f105b841587717814bf88d286cd73450ba7d4797156dc03d9b8fb3abd5a3ab213a92940782293db92ac1cff242867496ffa25cd8ca36ccb9ddb504ca67fc41169c31d7d202dc43e749adbea888d19811f5103cc8ce40e5b0d360821469c2e0b719ae2d1fe8ebbec03d567b14c9b2b6fa80a3c2dd5e6ceecc97e41afe1e176f46e15fac02892de4f19a97a84ae2e7056c1dae31d7d063de3c2b57dcc3af20e6750edc486d4379f0847c158e353105eab00ba16e7a2ef5465fadd239d3fdecc77bf0b62824b328eeb7fd2feb3e6f5df4ba15db4ff35d76f67f69b5b0b93e759e1350e1b6cd487382a79b63bb3344f0b9e88b2ce924acf79f11d8f4044acd383fd50c8b9cc97a61b425a58161aa07ed7ec44aff814f012ff3dede1d4069680fecd00f22c40a259a0903b7d36734352c72b3ed2da511a777dd14940efba00154fb7afe78631836e65c72c29ece41c3a0871fdd3199b8c6dc4dbfe7d8baa0919fbbac054347976bb9ed1c2353b7c41a6a6ccbfe3ee39aca6396f9eecd27559d8f79de42b859143cc20924da57f43c1e62c506e5a98b582f9eb98a1398afe73aca93edb6a4f9383499bee6867682ad27ff2c39001c91e0b4f3910eddfeb730e7d1105ea6fd627b77e71b46bea78e3b4a70aafc33701e32aabe9b8f986098c292c5e77607384ea6c008799a8d9037c752f3d4abb5b9673ae65e14c85656317cb450e6775908f0cc63f49ef30ba12e10f6b84f7359903b54a4693e3ac20e1ae0f19b201ae465a0cbaad9988086450a639fb2aa6aa836f1a977214aca95daa3e6a6e006320d85f4a368dab34c36e201a1bda5c1fd06d6ef441812afa456f1545645cd6379249673f230de5e98b875012777c6ef762a4cda5d042bf788abd6ff8c67c68ca75d924665c4071cc1babebf6adc122579819f91234a097ce6d9df215b3960786238bd7c8d3472860337d14037b8d3db88fef36cc77919499147098beb6f08b646e82d3c79cb73b4cf64591380e39ecc900169dbc0e866b3b22ad8"}, &(0x7f0000000000)=0x1004) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendto$packet(r0, &(0x7f00000002c0)="05040800d3fc030000004788031c09102f28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @multicast}, 0x14) 0s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000440)={0x58, 0x0, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "a7fd4531296b6353d1f3e08847"}, @NL80211_KEY_MODE={0x5}]}]}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x994}]]}, 0x58}}, 0x0) kernel console output (not intermixed with test programs): e type 4 has an invalid length. [ 65.542122][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 65.786614][ T5358] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 65.870704][ T5363] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 66.506834][ T5411] bridge_slave_0: left allmulticast mode [ 66.512505][ T5411] bridge_slave_0: left promiscuous mode [ 66.554112][ T5411] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.613776][ T5411] bridge_slave_1: left allmulticast mode [ 66.619474][ T5411] bridge_slave_1: left promiscuous mode [ 66.649744][ T5411] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.697806][ T5411] bond0: (slave bond_slave_0): Releasing backup interface [ 66.751641][ T5411] bond0: (slave bond_slave_1): Releasing backup interface [ 66.823183][ T5411] team0: Port device team_slave_0 removed [ 66.853262][ T5411] team0: Port device team_slave_1 removed [ 66.871601][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.881553][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.895703][ T5411] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.903127][ T5411] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 67.021862][ T5402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.045534][ T5402] team0: Port device bond0 added [ 67.231638][ T5460] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 67.467560][ T5472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.555838][ T5474] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.604255][ T5474] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.721782][ T5489] bridge_slave_0: left allmulticast mode [ 67.787768][ T5489] bridge_slave_0: left promiscuous mode [ 67.811555][ T5489] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.888126][ T5489] bridge_slave_1: left allmulticast mode [ 67.894780][ T5489] bridge_slave_1: left promiscuous mode [ 67.918028][ T5489] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.939073][ T5489] bond0: (slave bond_slave_0): Releasing backup interface [ 67.984523][ T5489] bond0: (slave bond_slave_1): Releasing backup interface [ 68.025029][ T5489] team0: Port device team_slave_0 removed [ 68.046009][ T5489] team0: Port device team_slave_1 removed [ 68.052603][ T5489] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.060239][ T5489] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 68.069730][ T5489] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 68.078570][ T5489] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 68.112119][ T5492] 8021q: adding VLAN 0 to HW filter on device bond0 [ 68.127679][ T5492] team0: Port device bond0 added [ 68.140208][ T5497] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.181192][ T29] audit: type=1800 audit(1718620247.022:2): pid=5497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1942 res=0 errno=0 [ 68.224595][ T5502] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.265482][ T5502] batadv_slave_0: entered allmulticast mode [ 68.274826][ T5502] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 68.311970][ T5509] syz-executor.3: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 68.326400][ T5510] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 68.343900][ T5509] CPU: 0 PID: 5509 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 68.354344][ T5509] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 68.364420][ T5509] Call Trace: [ 68.367718][ T5509] [ 68.370663][ T5509] dump_stack_lvl+0x241/0x360 [ 68.375391][ T5509] ? __pfx_dump_stack_lvl+0x10/0x10 [ 68.380600][ T5509] ? __pfx__printk+0x10/0x10 [ 68.385203][ T5509] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 68.391646][ T5509] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 68.398165][ T5509] warn_alloc+0x278/0x410 [ 68.402490][ T5509] ? stack_depot_save_flags+0x6e4/0x830 [ 68.408044][ T5509] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 68.414130][ T5509] ? __pfx_warn_alloc+0x10/0x10 [ 68.419000][ T5509] ? kasan_save_track+0x3f/0x80 [ 68.423851][ T5509] ? __kasan_kmalloc+0x98/0xb0 [ 68.428645][ T5509] ? xsk_setsockopt+0x598/0x950 [ 68.433532][ T5509] ? do_sock_setsockopt+0x3af/0x720 [ 68.438737][ T5509] ? __sys_setsockopt+0x1ae/0x250 [ 68.443749][ T5509] ? __x64_sys_setsockopt+0xb5/0xd0 [ 68.448940][ T5509] ? do_syscall_64+0xf3/0x230 [ 68.453620][ T5509] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.459721][ T5509] __vmalloc_node_range_noprof+0x130/0x1460 [ 68.465630][ T5509] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 68.471955][ T5509] ? __kasan_kmalloc+0x98/0xb0 [ 68.476721][ T5509] ? xskq_create+0x54/0x170 [ 68.481223][ T5509] vmalloc_user_noprof+0x74/0x80 [ 68.486158][ T5509] ? xskq_create+0xb6/0x170 [ 68.490658][ T5509] xskq_create+0xb6/0x170 [ 68.495000][ T5509] xsk_init_queue+0xa1/0x100 [ 68.499609][ T5509] xsk_setsockopt+0x598/0x950 [ 68.504298][ T5509] ? __pfx_xsk_setsockopt+0x10/0x10 [ 68.509511][ T5509] ? __pfx_lock_acquire+0x10/0x10 [ 68.514526][ T5509] ? aa_sock_opt_perm+0x79/0x120 [ 68.519464][ T5509] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 68.525017][ T5509] ? security_socket_setsockopt+0x87/0xb0 [ 68.530726][ T5509] ? __pfx_xsk_setsockopt+0x10/0x10 [ 68.535922][ T5509] do_sock_setsockopt+0x3af/0x720 [ 68.540956][ T5509] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 68.546508][ T5509] ? __fget_files+0x29/0x470 [ 68.551090][ T5509] ? __fget_files+0x3f6/0x470 [ 68.555784][ T5509] __sys_setsockopt+0x1ae/0x250 [ 68.560660][ T5509] __x64_sys_setsockopt+0xb5/0xd0 [ 68.565705][ T5509] do_syscall_64+0xf3/0x230 [ 68.570271][ T5509] ? clear_bhb_loop+0x35/0x90 [ 68.574962][ T5509] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 68.580876][ T5509] RIP: 0033:0x7f24ea87cea9 [ 68.585308][ T5509] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 68.604912][ T5509] RSP: 002b:00007f24eb5300c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 68.613347][ T5509] RAX: ffffffffffffffda RBX: 00007f24ea9b3f80 RCX: 00007f24ea87cea9 [ 68.621326][ T5509] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 68.629293][ T5509] RBP: 00007f24ea8ebff4 R08: 0000000000000020 R09: 0000000000000000 [ 68.637285][ T5509] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 68.645259][ T5509] R13: 000000000000000b R14: 00007f24ea9b3f80 R15: 00007ffea2070d28 [ 68.653231][ T5509] [ 68.678544][ T5509] Mem-Info: [ 68.681718][ T5509] active_anon:17329 inactive_anon:0 isolated_anon:0 [ 68.681718][ T5509] active_file:0 inactive_file:46391 isolated_file:0 [ 68.681718][ T5509] unevictable:768 dirty:8922 writeback:0 [ 68.681718][ T5509] slab_reclaimable:9708 slab_unreclaimable:92884 [ 68.681718][ T5509] mapped:18868 shmem:1467 pagetables:694 [ 68.681718][ T5509] sec_pagetables:0 bounce:0 [ 68.681718][ T5509] kernel_misc_reclaimable:0 [ 68.681718][ T5509] free:1387419 free_pcp:1771 free_cma:0 [ 68.731916][ T5519] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.733490][ T5509] Node 0 active_anon:69316kB inactive_anon:0kB active_file:0kB inactive_file:185484kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:75472kB dirty:35672kB writeback:0kB shmem:4332kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10356kB pagetables:2876kB sec_pagetables:0kB all_unreclaimable? no [ 68.748229][ T5519] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.781824][ T5509] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:16kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 68.814296][ T5519] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 68.845206][ T5519] vlan0: entered allmulticast mode [ 68.848517][ T5509] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 68.872370][ T5519] veth0_vlan: entered allmulticast mode [ 68.948626][ T5509] lowmem_reserve[]: 0 2571 2571 0 0 [ 68.961445][ T5509] Node 0 DMA32 free:1586240kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:69076kB inactive_anon:0kB active_file:0kB inactive_file:185176kB unevictable:1536kB writepending:35664kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:2396kB local_pcp:1876kB free_cma:0kB [ 69.021099][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.029653][ T5509] lowmem_reserve[]: 0 0 0 0 0 [ 69.035758][ T5509] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:8kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 69.037032][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.066342][ T5509] lowmem_reserve[]: 0 0 0 0 0 [ 69.078975][ T5523] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.096030][ T5509] Node 1 Normal free:3946624kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:16kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:5460kB local_pcp:5148kB free_cma:0kB [ 69.137241][ T5509] lowmem_reserve[]: 0 0 0 0 0 [ 69.141993][ T5509] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 69.157358][ T5530] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 69.167225][ T5509] Node 0 DMA32: 2*4kB (UE) 70*8kB (UME) 82*16kB (UME) 51*32kB (UME) 25*64kB (UME) 25*128kB (UME) 8*256kB (M) 2*512kB (UM) 3*1024kB (ME) 1*2048kB (U) 383*4096kB (M) = 1585272kB [ 69.203468][ T5509] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 69.223696][ T5509] Node 1 Normal: 1*4kB (M) 3*8kB (UM) 2*16kB (UM) 4*32kB (UM) 1*64kB (U) 3*128kB (U) 5*256kB (UM) 3*512kB (UM) 3*1024kB (U) 0*2048kB 962*4096kB (M) = 3946876kB [ 69.263679][ T5509] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 69.283558][ T5509] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 69.292866][ T5509] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 69.347446][ T5509] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 69.377381][ T5509] 47871 total pagecache pages [ 69.393945][ T5509] 0 pages in swap cache [ 69.408001][ T5509] Free swap = 124996kB [ 69.422622][ T5509] Total swap = 124996kB [ 69.437670][ T5509] 2097051 pages RAM [ 69.442222][ T5509] 0 pages HighMem/MovableOnly [ 69.459861][ T5509] 400873 pages reserved [ 69.489539][ T5509] 0 pages cma reserved [ 69.513183][ T5550] team0: Port device bond0 removed [ 69.602141][ T5552] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.646557][ T5552] team0: Port device bond0 added [ 69.748749][ T5570] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 69.762180][ T5569] xt_HMARK: spi-set and port-set can't be combined [ 69.944494][ T5583] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 69.995494][ T5584] IPVS: length: 215 != 24 [ 70.064083][ T5591] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 70.257493][ T5604] team0: Port device bond0 removed [ 70.321790][ T5607] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 70.340503][ T5608] 8021q: adding VLAN 0 to HW filter on device bond0 [ 70.360995][ T5608] team0: Port device bond0 added [ 70.758266][ T5649] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 71.022243][ T5657] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 71.509732][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 71.522259][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 71.534696][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 71.547014][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 71.556050][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 71.565014][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 71.648785][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.657905][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.909104][ T5689] chnl_net:caif_netlink_parms(): no params data found [ 71.936907][ T5710] syzkaller0: entered promiscuous mode [ 72.097746][ T5710] syzkaller0 (unregistering): left promiscuous mode [ 72.295608][ T5689] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.307952][ T5689] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.316848][ T5689] bridge_slave_0: entered allmulticast mode [ 72.330485][ T5689] bridge_slave_0: entered promiscuous mode [ 72.339692][ T5689] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.353693][ T5689] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.378474][ T5689] bridge_slave_1: entered allmulticast mode [ 72.399448][ T5689] bridge_slave_1: entered promiscuous mode [ 72.434277][ T5730] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 72.462978][ T5734] Driver unsupported XDP return value 0 on prog (id 52) dev N/A, expect packet loss! [ 72.641078][ T5689] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.673560][ T5689] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.862081][ T5689] team0: Port device team_slave_0 added [ 72.908198][ T5742] bridge0: port 1(gretap0) entered blocking state [ 72.967813][ T5742] bridge0: port 1(gretap0) entered disabled state [ 73.094139][ T5748] __nla_validate_parse: 9 callbacks suppressed [ 73.094157][ T5748] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.207811][ T5742] gretap0: entered allmulticast mode [ 73.242210][ T5742] gretap0: entered promiscuous mode [ 73.364300][ T5742] bridge0: port 1(gretap0) entered blocking state [ 73.371116][ T5742] bridge0: port 1(gretap0) entered forwarding state [ 73.416653][ T5689] team0: Port device team_slave_1 added [ 73.618995][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.648074][ T5761] Cannot find map_set index 0 as target [ 73.653794][ T5120] Bluetooth: hci0: command tx timeout [ 73.673497][ T5689] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.689725][ T5689] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.761856][ T5689] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.824502][ T5769] ieee802154 phy0 wpan0: encryption failed: -22 [ 73.831699][ T5772] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 73.863546][ T5772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 73.886828][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 73.908201][ T5689] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.922391][ T5689] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 73.974893][ T5689] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.011626][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.046855][ T5778] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 74.140064][ T5778] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 74.291943][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 74.458391][ T29] audit: type=1804 audit(1718620253.302:3): pid=5787 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2109498968/syzkaller.gyAkf0/37/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 74.613188][ T5689] hsr_slave_0: entered promiscuous mode [ 74.641650][ T5689] hsr_slave_1: entered promiscuous mode [ 74.664241][ T5689] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.683097][ T5689] Cannot create hsr debugfs directory [ 74.726180][ T5808] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 74.771692][ T5808] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 75.365749][ T51] team0: Port device bond0 removed [ 75.377158][ T51] bond0 (unregistering): Released all slaves [ 75.406227][ T5816] bridge0: port 3(geneve1) entered blocking state [ 75.412849][ T5816] bridge0: port 3(geneve1) entered disabled state [ 75.422266][ T5816] geneve1: entered allmulticast mode [ 75.435872][ T5816] geneve1: entered promiscuous mode [ 75.441818][ T5816] bridge0: port 3(geneve1) entered blocking state [ 75.448435][ T5816] bridge0: port 3(geneve1) entered forwarding state [ 75.703865][ T1148] IPVS: starting estimator thread 0... [ 75.722547][ T5835] IPVS: set_ctl: invalid protocol: 50 255.255.255.255:20004 [ 75.730274][ T5120] Bluetooth: hci0: command tx timeout [ 75.839408][ T5838] IPVS: using max 19 ests per chain, 45600 per kthread [ 75.994969][ T51] hsr_slave_0: left promiscuous mode [ 76.008076][ T51] hsr_slave_1: left promiscuous mode [ 76.033154][ T51] veth1_macvtap: left promiscuous mode [ 76.045022][ T51] veth0_macvtap: left promiscuous mode [ 76.051381][ T51] veth1_vlan: left promiscuous mode [ 76.061912][ T51] veth0_vlan: left allmulticast mode [ 76.072917][ T51] veth0_vlan: left promiscuous mode [ 76.077541][ T5855] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 76.086584][ T5855] netlink: 127340 bytes leftover after parsing attributes in process `syz-executor.3'. [ 76.780127][ T45] cfg80211: failed to load regulatory.db [ 77.213230][ T5889] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 77.803802][ T5120] Bluetooth: hci0: command 0x040f tx timeout [ 77.861625][ T5883] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 77.920030][ T5887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 77.936127][ T5898] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 77.990920][ T5887] dummy0 (unregistering): left allmulticast mode [ 78.263188][ T5689] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.286155][ T5689] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.329986][ T5689] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.361133][ T5689] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.611079][ T5933] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.627562][ T5689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.670015][ T5689] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.690437][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.697628][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.729103][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.736278][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.228077][ T5689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.277914][ T5977] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 79.305988][ T5977] gretap1: entered promiscuous mode [ 79.321471][ T5977] gretap1: entered allmulticast mode [ 79.377200][ T5978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.481768][ T5989] bridge0: port 3(vlan2) entered blocking state [ 79.494401][ T5989] bridge0: port 3(vlan2) entered disabled state [ 79.500835][ T5989] vlan2: entered allmulticast mode [ 79.534009][ T5989] vlan2: left allmulticast mode [ 79.587196][ T5991] bridge0: port 3(vlan2) entered blocking state [ 79.598854][ T5991] bridge0: port 3(vlan2) entered disabled state [ 79.606418][ T5991] vlan2: entered allmulticast mode [ 79.615768][ T5991] vlan2: left allmulticast mode [ 79.877717][ T6010] x_tables: duplicate underflow at hook 3 [ 79.883962][ T5120] Bluetooth: hci0: command 0x040f tx timeout [ 79.940515][ T5689] veth0_vlan: entered promiscuous mode [ 79.967105][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 80.036964][ T5689] veth1_vlan: entered promiscuous mode [ 80.142807][ T5689] veth0_macvtap: entered promiscuous mode [ 80.191443][ T5689] veth1_macvtap: entered promiscuous mode [ 80.237681][ T6031] delete_channel: no stack [ 80.249457][ T5689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.285396][ T5689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.306121][ T5689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.323735][ T5689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.346191][ T5689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.375094][ T5689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.408268][ T5689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.425612][ T5689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.452243][ T5689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.489009][ T5689] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.518098][ T6052] netlink: 'syz-executor.0': attribute type 20 has an invalid length. [ 80.533142][ T5689] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.556999][ T5689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.688244][ T6053] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 80.759379][ T5689] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.795344][ T5689] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.818754][ T5689] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.837561][ T5689] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.213285][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.252537][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.410196][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.470652][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.645932][ T6074] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 81.696146][ T6076] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 81.790209][ T6078] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 81.834940][ T6082] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 81.963673][ T53] Bluetooth: hci0: command 0x040f tx timeout [ 83.415625][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 83.576157][ T6128] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 83.602073][ T6128] x_tables: ip6_tables: DNPT target: used from hooks FORWARD, but only usable from PREROUTING/OUTPUT [ 83.622367][ T6131] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 83.631882][ T6131] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.647271][ T6127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 84.418144][ T6175] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 84.538492][ T6183] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 84.560297][ T6183] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 84.626828][ T6190] gretap0: entered promiscuous mode [ 84.639493][ T6190] gretap0: left promiscuous mode [ 84.897626][ T6204] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 84.926248][ T6204] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.955805][ T6204] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.995758][ T6212] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.300398][ T6241] syzkaller1: entered promiscuous mode [ 85.323562][ T6241] syzkaller1: entered allmulticast mode [ 85.452405][ T6250] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.624774][ T6252] wg2: entered promiscuous mode [ 85.656405][ T6252] wg2: entered allmulticast mode [ 85.722672][ T6264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 85.840000][ T6272] bridge0: port 3(vlan2) entered blocking state [ 85.862256][ T6272] bridge0: port 3(vlan2) entered disabled state [ 85.874534][ T6272] vlan2: entered allmulticast mode [ 85.904715][ T6272] vlan2: left allmulticast mode [ 86.065328][ T6282] syzkaller1: entered promiscuous mode [ 86.070842][ T6282] syzkaller1: entered allmulticast mode [ 86.367736][ T6307] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.397763][ T6307] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.040614][ T6346] syzkaller1: entered promiscuous mode [ 87.047259][ T6346] syzkaller1: entered allmulticast mode [ 87.189383][ T6350] netlink: 816 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.454654][ T6370] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 87.486275][ T6370] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 87.506996][ T6370] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 88.008237][ T29] audit: type=1804 audit(1718620266.852:4): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2109498968/syzkaller.gyAkf0/82/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 88.054547][ T29] audit: type=1804 audit(1718620266.852:5): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2109498968/syzkaller.gyAkf0/82/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 88.090044][ T29] audit: type=1804 audit(1718620266.852:6): pid=6404 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2109498968/syzkaller.gyAkf0/82/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 88.259110][ T6414] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 88.880260][ T29] audit: type=1804 audit(1718620267.722:7): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2909224847/syzkaller.jTkYYK/22/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 88.932372][ T6460] __nla_validate_parse: 3 callbacks suppressed [ 88.932390][ T6460] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 88.955202][ T29] audit: type=1804 audit(1718620267.722:8): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2909224847/syzkaller.jTkYYK/22/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 89.000578][ T29] audit: type=1804 audit(1718620267.732:9): pid=6459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2909224847/syzkaller.jTkYYK/22/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 89.003549][ T6461] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.543865][ T6482] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.744469][ T6499] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 89.763697][ T6499] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.784906][ T6502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.937519][ T29] audit: type=1804 audit(1718620268.782:10): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2909224847/syzkaller.jTkYYK/26/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 90.098025][ T29] audit: type=1804 audit(1718620268.822:11): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2909224847/syzkaller.jTkYYK/26/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 90.179831][ T6531] xt_TPROXY: Can be used only with -p tcp or -p udp [ 90.187531][ T29] audit: type=1804 audit(1718620268.832:12): pid=6511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2909224847/syzkaller.jTkYYK/26/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 90.327733][ T6536] syz-executor.3: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 90.347902][ T6536] CPU: 0 PID: 6536 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 90.358355][ T6536] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 90.368430][ T6536] Call Trace: [ 90.371727][ T6536] [ 90.374674][ T6536] dump_stack_lvl+0x241/0x360 [ 90.379379][ T6536] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.384688][ T6536] ? __pfx__printk+0x10/0x10 [ 90.389309][ T6536] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 90.395746][ T6536] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 90.402278][ T6536] warn_alloc+0x278/0x410 [ 90.405449][ T6545] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.406613][ T6536] ? stack_depot_save_flags+0x29/0x830 [ 90.421347][ T6536] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 90.427434][ T6536] ? __pfx_warn_alloc+0x10/0x10 [ 90.432314][ T6536] ? kasan_save_track+0x3f/0x80 [ 90.437182][ T6536] ? __kasan_kmalloc+0x98/0xb0 [ 90.441966][ T6536] ? xsk_setsockopt+0x598/0x950 [ 90.446839][ T6536] ? do_sock_setsockopt+0x3af/0x720 [ 90.452054][ T6536] ? __sys_setsockopt+0x1ae/0x250 [ 90.457098][ T6536] ? __x64_sys_setsockopt+0xb5/0xd0 [ 90.462312][ T6536] ? do_syscall_64+0xf3/0x230 [ 90.467005][ T6536] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.473099][ T6536] __vmalloc_node_range_noprof+0x130/0x1460 [ 90.479042][ T6536] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 90.485393][ T6536] ? __kasan_kmalloc+0x98/0xb0 [ 90.490182][ T6536] ? xskq_create+0x54/0x170 [ 90.494713][ T6536] vmalloc_user_noprof+0x74/0x80 [ 90.499669][ T6536] ? xskq_create+0xb6/0x170 [ 90.504201][ T6536] xskq_create+0xb6/0x170 [ 90.508554][ T6536] xsk_init_queue+0xa1/0x100 [ 90.513176][ T6536] xsk_setsockopt+0x598/0x950 [ 90.517879][ T6536] ? __pfx_xsk_setsockopt+0x10/0x10 [ 90.523103][ T6536] ? __pfx_lock_acquire+0x10/0x10 [ 90.528146][ T6536] ? aa_sock_opt_perm+0x79/0x120 [ 90.533104][ T6536] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 90.538668][ T6536] ? security_socket_setsockopt+0x87/0xb0 [ 90.544412][ T6536] ? __pfx_xsk_setsockopt+0x10/0x10 [ 90.549632][ T6536] do_sock_setsockopt+0x3af/0x720 [ 90.554682][ T6536] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 90.560242][ T6536] ? __fget_files+0x29/0x470 [ 90.564937][ T6536] ? __fget_files+0x3f6/0x470 [ 90.569647][ T6536] __sys_setsockopt+0x1ae/0x250 [ 90.574527][ T6536] __x64_sys_setsockopt+0xb5/0xd0 [ 90.579586][ T6536] do_syscall_64+0xf3/0x230 [ 90.584111][ T6536] ? clear_bhb_loop+0x35/0x90 [ 90.588812][ T6536] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.594721][ T6536] RIP: 0033:0x7f24ea87cea9 [ 90.599151][ T6536] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 90.618777][ T6536] RSP: 002b:00007f24eb5300c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 90.627214][ T6536] RAX: ffffffffffffffda RBX: 00007f24ea9b3f80 RCX: 00007f24ea87cea9 [ 90.635203][ T6536] RDX: 0000000000000002 RSI: 000000000000011b RDI: 000000000000000e [ 90.643184][ T6536] RBP: 00007f24ea8ebff4 R08: 0000000000000020 R09: 0000000000000000 [ 90.651168][ T6536] R10: 00000000200033c0 R11: 0000000000000246 R12: 0000000000000000 [ 90.659145][ T6536] R13: 000000000000000b R14: 00007f24ea9b3f80 R15: 00007ffea2070d28 [ 90.667147][ T6536] [ 90.688708][ T6536] Mem-Info: [ 90.695251][ T6536] active_anon:17386 inactive_anon:0 isolated_anon:0 [ 90.695251][ T6536] active_file:1 inactive_file:46625 isolated_file:0 [ 90.695251][ T6536] unevictable:768 dirty:61 writeback:0 [ 90.695251][ T6536] slab_reclaimable:10406 slab_unreclaimable:100350 [ 90.695251][ T6536] mapped:19375 shmem:1517 pagetables:643 [ 90.695251][ T6536] sec_pagetables:0 bounce:0 [ 90.695251][ T6536] kernel_misc_reclaimable:0 [ 90.695251][ T6536] free:1370568 free_pcp:1296 free_cma:0 [ 90.733380][ T29] audit: type=1804 audit(1718620269.542:13): pid=6553 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2995565029/syzkaller.Trf2iV/83/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 90.826476][ T6565] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 90.840429][ T6536] Node 0 active_anon:69544kB inactive_anon:0kB active_file:4kB inactive_file:186820kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73500kB dirty:440kB writeback:0kB shmem:4532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10264kB pagetables:2672kB sec_pagetables:0kB all_unreclaimable? no [ 90.953675][ T6536] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 91.019039][ T6536] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.057191][ T6576] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.104612][ T6536] lowmem_reserve[]: 0 2571 2571 0 0 [ 91.120652][ T6536] Node 0 DMA32 free:1516220kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:71000kB inactive_anon:0kB active_file:0kB inactive_file:186316kB unevictable:1536kB writepending:132kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:2792kB local_pcp:1452kB free_cma:0kB [ 91.169103][ T6536] lowmem_reserve[]: 0 0 0 0 0 [ 91.186402][ T6536] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:308kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 91.245454][ T6536] lowmem_reserve[]: 0 0 0 0 0 [ 91.250961][ T6536] Node 1 Normal free:3948688kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:3384kB local_pcp:3384kB free_cma:0kB [ 91.291013][ T6589] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 91.301407][ T6536] lowmem_reserve[]: 0 0 0 0 0 [ 91.306711][ T6536] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 91.327659][ T6536] Node 0 DMA32: 2*4kB (UE) 1*8kB (U) 85*16kB (UM) 87*32kB (UME) 60*64kB (UME) 35*128kB (UME) 19*256kB (ME) 4*512kB (M) 4*1024kB (UME) 3*2048kB (ME) 362*4096kB (M) = 1512384kB [ 91.381420][ T6536] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 91.420050][ T6536] Node 1 Normal: 2*4kB (UM) 3*8kB (UM) 3*16kB (UM) 10*32kB (UM) 2*64kB (U) 3*128kB (U) 5*256kB (UM) 4*512kB (UM) 4*1024kB (U) 0*2048kB 962*4096kB (M) = 3948688kB [ 91.460458][ T6536] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.493831][ T6536] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 91.511341][ T6536] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 91.523860][ T6536] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 91.537946][ T6536] 48611 total pagecache pages [ 91.569619][ T6536] 0 pages in swap cache [ 91.586133][ T6536] Free swap = 124996kB [ 91.617139][ T6536] Total swap = 124996kB [ 91.621324][ T6536] 2097051 pages RAM [ 91.644429][ T6536] 0 pages HighMem/MovableOnly [ 91.649133][ T6536] 400873 pages reserved [ 91.653291][ T6536] 0 pages cma reserved [ 91.724625][ T6605] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.994687][ T6623] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.042346][ T6623] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.102124][ T6634] bridge_slave_1: left allmulticast mode [ 92.110044][ T6634] bridge_slave_1: left promiscuous mode [ 92.116136][ T6634] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.146165][ T6634] bridge_slave_0: left allmulticast mode [ 92.158247][ T6634] bridge_slave_0: left promiscuous mode [ 92.178757][ T6634] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.520274][ T6623] : entered promiscuous mode [ 92.981496][ T6663] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 94.067541][ T6746] __nla_validate_parse: 2 callbacks suppressed [ 94.067559][ T6746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.198954][ T6746] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.470768][ T6768] trusted_key: syz-executor.3 sent an empty control message without MSG_MORE. [ 94.958568][ T6808] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 95.242375][ T6826] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 95.641032][ T6848] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 96.478856][ T6905] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.502166][ T6906] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.518612][ T6905] Bluetooth: MGMT ver 1.22 [ 96.524591][ T6906] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.534935][ T6906] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.920503][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.936406][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.946739][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.956805][ T6911] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.347416][ T6929] Êü: entered promiscuous mode [ 97.747155][ T6963] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 97.817685][ T6963] syz-executor.1[6963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.822564][ T6963] syz-executor.1[6963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.877960][ T6963] syz-executor.1[6963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 97.901072][ T6963] syz-executor.1[6963] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 98.605052][ T5120] Bluetooth: hci0: command 0x040f tx timeout [ 98.624038][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 98.840568][ T7020] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 99.280300][ T7043] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 99.295427][ T7040] vlan0: entered promiscuous mode [ 99.424785][ T7040] vlan0 (unregistering): left promiscuous mode [ 99.468903][ T7048] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 99.740717][ T7058] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 100.083175][ T7074] __nla_validate_parse: 66 callbacks suppressed [ 100.083192][ T7074] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.356593][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.474523][ T7092] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 100.491374][ T7097] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 100.530919][ T7092] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 100.683536][ T5120] Bluetooth: hci0: command 0x040f tx timeout [ 100.795178][ T7106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.819255][ T7106] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.928991][ T7113] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.120433][ T7120] pimreg: entered allmulticast mode [ 101.452835][ T7130] siw: device registration error -23 [ 101.464212][ T7130] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.663100][ T1107] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.681404][ T7141] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.3'. [ 101.761801][ T7138] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 101.789322][ T7141] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 101.906673][ T1107] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.995666][ T7150] openvswitch: netlink: Missing key (keys=40, expected=100) [ 102.027451][ T7150] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 102.141901][ T1107] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.323141][ T1107] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.364122][ T29] kauditd_printk_skb: 3 callbacks suppressed [ 102.364139][ T29] audit: type=1804 audit(1718620281.202:17): pid=7163 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir553718819/syzkaller.H3hf1f/148/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 102.605501][ T1107] bridge_slave_1: left allmulticast mode [ 102.628770][ T1107] bridge_slave_1: left promiscuous mode [ 102.638436][ T1107] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.680958][ T1107] bridge_slave_0: left allmulticast mode [ 102.693155][ T1107] bridge_slave_0: left promiscuous mode [ 102.700690][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 102.710079][ T1107] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.719250][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 102.728055][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 102.736914][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 102.745159][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 102.752501][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 103.262046][ T7185] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 103.712985][ T7201] unsupported nlmsg_type 40 [ 104.217491][ T1107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 104.229888][ T1107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 104.241264][ T1107] bond0 (unregistering): Released all slaves [ 104.254434][ T1107] bond1 (unregistering): Released all slaves [ 104.621364][ T7229] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.778065][ T7239] siw: device registration error -23 [ 104.843570][ T53] Bluetooth: hci3: command tx timeout [ 104.937674][ T7246] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 105.002489][ T7173] chnl_net:caif_netlink_parms(): no params data found [ 105.305299][ T7274] tipc: Started in network mode [ 105.310860][ T7274] tipc: Node identity fe8, cluster identity 4711 [ 105.327218][ T7274] tipc: Enabling of bearer rejected, failed to enable media [ 105.437222][ T7273] syzkaller0: entered allmulticast mode [ 105.463179][ T7268] __nla_validate_parse: 10 callbacks suppressed [ 105.463198][ T7268] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.481697][ T7268] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 105.519918][ T1107] hsr_slave_0: left promiscuous mode [ 105.526771][ T1107] hsr_slave_1: left promiscuous mode [ 105.532969][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.543185][ T1107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.551245][ T1107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.576092][ T1107] veth1_macvtap: left promiscuous mode [ 105.582026][ T1107] veth0_macvtap: left promiscuous mode [ 105.587954][ T1107] veth1_vlan: left promiscuous mode [ 105.593274][ T1107] veth0_vlan: left promiscuous mode [ 105.699173][ T1107] pim6reg (unregistering): left allmulticast mode [ 105.998549][ T1107] team0 (unregistering): Port device team_slave_1 removed [ 106.035873][ T1107] team0 (unregistering): Port device team_slave_0 removed [ 106.372432][ T7173] bridge0: port 1(bridge_slave_0) entered blocking state [ 106.411240][ T7173] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.431042][ T7173] bridge_slave_0: entered allmulticast mode [ 106.442902][ T7173] bridge_slave_0: entered promiscuous mode [ 106.511295][ T7173] bridge0: port 2(bridge_slave_1) entered blocking state [ 106.531193][ T7173] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.540770][ T7173] bridge_slave_1: entered allmulticast mode [ 106.555408][ T7173] bridge_slave_1: entered promiscuous mode [ 106.562760][ T7270] syzkaller0: left allmulticast mode [ 106.646376][ T7173] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 106.671423][ T7302] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 106.673124][ T7173] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 106.751313][ T7302] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.853054][ T7173] team0: Port device team_slave_0 added [ 106.895813][ T7173] team0: Port device team_slave_1 added [ 106.927508][ T53] Bluetooth: hci3: command tx timeout [ 107.042653][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 107.062428][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.090761][ T7173] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 107.106952][ T7328] tipc: Started in network mode [ 107.112172][ T7328] tipc: Node identity fe8, cluster identity 4711 [ 107.149460][ T7328] tipc: Enabling of bearer rejected, failed to enable media [ 107.170419][ T7173] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 107.190283][ T7173] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 107.234633][ T7173] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 107.272830][ T7320] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.289407][ T7320] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.425375][ T7173] hsr_slave_0: entered promiscuous mode [ 107.452802][ T7351] vcan0: tx drop: invalid da for name 0x000000000000000d [ 107.461328][ T7173] hsr_slave_1: entered promiscuous mode [ 107.761338][ T7370] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.781327][ T7370] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.024092][ T7379] tipc: Started in network mode [ 108.042716][ T7379] tipc: Node identity fe8, cluster identity 4711 [ 108.050348][ T7379] tipc: Enabling of bearer rejected, failed to enable media [ 108.084241][ T7382] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.098870][ T7382] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.284312][ T7173] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 108.298488][ T7173] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 108.329247][ T7173] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 108.354218][ T7173] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 108.411315][ T7404] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.541367][ T7173] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.621622][ T7173] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.649012][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.656215][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.704354][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.711508][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.802287][ T7173] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.861516][ T7429] tipc: Enabling of bearer rejected, failed to enable media [ 109.014467][ T53] Bluetooth: hci3: command tx timeout [ 109.201421][ T7173] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.315918][ T7173] veth0_vlan: entered promiscuous mode [ 109.332126][ T7173] veth1_vlan: entered promiscuous mode [ 109.419349][ T7173] veth0_macvtap: entered promiscuous mode [ 109.448857][ T7462] geneve1: left allmulticast mode [ 109.456210][ T7462] geneve1: left promiscuous mode [ 109.461464][ T7462] bridge0: port 3(geneve1) entered disabled state [ 109.475965][ T7462] bridge_slave_1: left allmulticast mode [ 109.486802][ T7462] bridge_slave_1: left promiscuous mode [ 109.503765][ T7462] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.536792][ T7462] bridge_slave_0: left promiscuous mode [ 109.547511][ T7462] bridge0: port 1(bridge_slave_0) entered disabled state [ 109.657181][ T7471] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 109.767588][ T7477] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 109.781286][ T7173] veth1_macvtap: entered promiscuous mode [ 109.828842][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.855749][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.869851][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.884823][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.895601][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.907126][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.926959][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.942802][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.959843][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.973226][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.998748][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.039594][ T7173] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 110.064192][ T7173] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.088307][ T7173] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.138020][ T7173] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.147639][ T7173] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.158176][ T7173] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.167431][ T7173] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.439713][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.470564][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.520562][ T7504] __nla_validate_parse: 6 callbacks suppressed [ 110.520580][ T7504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.555564][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.569674][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.582638][ T7510] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.782458][ T7509] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 110.855366][ T7523] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 111.350770][ T7555] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 111.637489][ T7565] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.673094][ T7565] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.513133][ T7623] netlink: 209848 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.928671][ T7644] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.985178][ T7644] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.015402][ T7644] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.461112][ T5120] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 113.470364][ T5120] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 113.479489][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 113.504080][ T5120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 113.512129][ T5120] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 113.520507][ T5120] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 113.657546][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.284461][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.295549][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 114.304834][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 114.313449][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.324824][ T7665] chnl_net:caif_netlink_parms(): no params data found [ 114.324999][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.345939][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 114.364332][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.489597][ T7710] pimreg: entered allmulticast mode [ 114.537280][ T7710] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 114.564488][ T7665] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.590700][ T7665] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.609981][ T7665] bridge_slave_0: entered allmulticast mode [ 114.634926][ T7665] bridge_slave_0: entered promiscuous mode [ 114.689220][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.725668][ T7715] pimreg: left allmulticast mode [ 114.783681][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.799126][ T7665] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.808597][ T7665] bridge_slave_1: entered allmulticast mode [ 114.822997][ T7665] bridge_slave_1: entered promiscuous mode [ 114.902822][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.102137][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.151909][ T7745] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 115.184706][ T7665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.201824][ T7774] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.216883][ T7665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.275793][ T7774] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 115.409209][ T7665] team0: Port device team_slave_0 added [ 115.427920][ T7665] team0: Port device team_slave_1 added [ 115.563576][ T5120] Bluetooth: hci2: command tx timeout [ 115.572451][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.580710][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.608031][ T7665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.624624][ T7665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.631582][ T7665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.658092][ T7665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.931080][ T7665] hsr_slave_0: entered promiscuous mode [ 115.954000][ T7665] hsr_slave_1: entered promiscuous mode [ 115.978721][ T7665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.999651][ T7665] Cannot create hsr debugfs directory [ 116.011544][ T51] bridge_slave_1: left allmulticast mode [ 116.030537][ T51] bridge_slave_1: left promiscuous mode [ 116.038364][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.066014][ T51] bridge_slave_0: left allmulticast mode [ 116.071756][ T51] bridge_slave_0: left promiscuous mode [ 116.082050][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.446693][ T5120] Bluetooth: hci3: command tx timeout [ 116.542433][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.556269][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.568357][ T51] bond0 (unregistering): Released all slaves [ 116.729084][ T7705] chnl_net:caif_netlink_parms(): no params data found [ 116.944174][ T29] audit: type=1804 audit(1718620295.782:18): pid=7841 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2909224847/syzkaller.jTkYYK/116/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 117.039653][ T7845] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 117.052073][ T7845] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 117.140099][ T7841] ipvlan2: entered promiscuous mode [ 117.159648][ T7841] ipvlan2: entered allmulticast mode [ 117.170156][ T7841] mac80211_hwsim hwsim16 wlan0: entered allmulticast mode [ 117.342623][ T7855] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.400085][ T51] hsr_slave_0: left promiscuous mode [ 117.420872][ T51] hsr_slave_1: left promiscuous mode [ 117.432816][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.450778][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.461655][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.480722][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.507336][ T51] veth1_macvtap: left promiscuous mode [ 117.512923][ T51] veth0_macvtap: left promiscuous mode [ 117.519042][ T51] veth1_vlan: left promiscuous mode [ 117.524576][ T51] veth0_vlan: left promiscuous mode [ 117.669035][ T5120] Bluetooth: hci2: command tx timeout [ 118.001140][ T51] team0 (unregistering): Port device team_slave_1 removed [ 118.040092][ T51] team0 (unregistering): Port device team_slave_0 removed [ 118.386455][ T7705] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.394414][ T7705] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.401710][ T7705] bridge_slave_0: entered allmulticast mode [ 118.413981][ T7705] bridge_slave_0: entered promiscuous mode [ 118.435320][ T7705] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.461135][ T7705] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.479611][ T7705] bridge_slave_1: entered allmulticast mode [ 118.492680][ T7705] bridge_slave_1: entered promiscuous mode [ 118.526188][ T5120] Bluetooth: hci3: command tx timeout [ 118.689305][ T7665] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.758040][ T7705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.817146][ T7665] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.866280][ T7705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 119.014391][ T7665] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.047471][ T7705] team0: Port device team_slave_0 added [ 119.105296][ T7705] team0: Port device team_slave_1 added [ 119.145246][ T7665] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.198655][ T7906] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.231446][ T7906] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 119.264087][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 119.280046][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.310009][ T7705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 119.323173][ T7906] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 119.363105][ T7705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 119.374284][ T7705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 119.443705][ T7705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.611126][ T7665] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 119.637988][ T7665] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 119.723948][ T5120] Bluetooth: hci2: command tx timeout [ 119.726838][ T7705] hsr_slave_0: entered promiscuous mode [ 119.751260][ T7705] hsr_slave_1: entered promiscuous mode [ 119.764078][ T7665] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 120.265225][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 120.278037][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 120.289596][ T51] bond0 (unregistering): Released all slaves [ 120.301658][ T51] bond1 (unregistering): Released all slaves [ 120.317106][ T7932] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 120.350401][ T7665] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 120.606270][ T5120] Bluetooth: hci3: command tx timeout [ 121.255225][ T51] hsr_slave_0: left promiscuous mode [ 121.274349][ T51] hsr_slave_1: left promiscuous mode [ 121.283139][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 121.292021][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 121.311866][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 121.329704][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 121.341720][ T8005] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.378512][ T51] veth1_macvtap: left promiscuous mode [ 121.394312][ T51] veth0_macvtap: left promiscuous mode [ 121.399987][ T51] veth1_vlan: left promiscuous mode [ 121.415273][ T51] veth0_vlan: left promiscuous mode [ 121.814031][ T5120] Bluetooth: hci2: command tx timeout [ 122.679259][ T51] team0 (unregistering): Port device team_slave_1 removed [ 122.696223][ T5120] Bluetooth: hci3: command tx timeout [ 123.107559][ T51] team0 (unregistering): Port device team_slave_0 removed [ 124.391250][ T51] bridge_slave_0 (unregistering): left allmulticast mode [ 127.167615][ T7665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.323148][ T7665] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.398665][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.406271][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.462993][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.470288][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.566889][ T8047] netlink: 2046 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.606392][ T8047] netlink: 14432 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.731248][ T51] IPVS: stop unused estimator thread 0... [ 127.764404][ T7705] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 127.788218][ T7705] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 127.833642][ T7705] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 127.883038][ T7705] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 127.953585][ T29] audit: type=1804 audit(1718620306.782:19): pid=8054 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir553718819/syzkaller.H3hf1f/234/cgroup.controllers" dev="sda1" ino=1940 res=1 errno=0 [ 127.999622][ T8054] ipvlan2: entered promiscuous mode [ 128.005360][ T8054] ipvlan2: entered allmulticast mode [ 128.010823][ T8054] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 128.050796][ T8064] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 128.280077][ T7705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 128.325105][ T7665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.360195][ T7705] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.396776][ T1148] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.403986][ T1148] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.464307][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.471491][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.535075][ T7665] veth0_vlan: entered promiscuous mode [ 128.586008][ T7665] veth1_vlan: entered promiscuous mode [ 128.691877][ T7665] veth0_macvtap: entered promiscuous mode [ 128.763219][ T7665] veth1_macvtap: entered promiscuous mode [ 128.835869][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.868886][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.903925][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 128.929406][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 128.951030][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.012362][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.035656][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.055698][ T7665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.074854][ T7665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.093500][ T7665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.132351][ T7665] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.145868][ T7665] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.159524][ T7665] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.169433][ T7665] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.220506][ T7705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.368466][ T8101] xt_TCPMSS: Only works on TCP SYN packets [ 129.396610][ T8101] rdma_op ffff88805ed081f0 conn xmit_rdma 0000000000000000 [ 129.424999][ T7778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.432837][ T7778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.452779][ T7705] veth0_vlan: entered promiscuous mode [ 129.487984][ T8101] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 129.596776][ T7705] veth1_vlan: entered promiscuous mode [ 129.623604][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 129.648108][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 129.673053][ T8116] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.710585][ T7705] veth0_macvtap: entered promiscuous mode [ 129.775236][ T7705] veth1_macvtap: entered promiscuous mode [ 129.857580][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.882363][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.904439][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.925402][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.938807][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.949680][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.961732][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.973182][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.002921][ T29] audit: type=1804 audit(1718620308.842:20): pid=8133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3015807617/syzkaller.Ia406T/204/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 130.054731][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.086417][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.105834][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.142954][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.159147][ T7705] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 130.170804][ T7705] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 130.190641][ T7705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 130.254674][ T7705] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.290790][ T7705] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.306462][ T7705] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.332153][ T7705] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 130.351691][ T8140] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.411120][ T8140] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 130.551051][ T7778] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.584073][ T7778] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.675616][ T7778] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 130.705868][ T7778] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 130.998984][ T8163] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 131.159020][ T8180] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 131.630510][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.027752][ T8238] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.121726][ T8243] veth0_to_hsr: entered promiscuous mode [ 132.142077][ T8244] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 132.158434][ T8241] veth0_to_hsr: left promiscuous mode [ 132.172388][ T8244] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 132.633011][ T8269] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.673183][ T8269] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 133.088546][ T8282] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.149623][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.156167][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.231638][ T8285] xt_hashlimit: max too large, truncated to 1048576 [ 133.465418][ T51] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.688674][ T8304] syz-executor.4[8304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.688912][ T8304] syz-executor.4[8304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.706649][ T8304] syz-executor.4[8304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.729518][ T8304] syz-executor.4[8304] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 133.823127][ T51] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.995095][ T51] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.045049][ T5120] Bluetooth: hci0: command tx timeout [ 134.070145][ T8314] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 134.089846][ T8316] tipc: Enabled bearer , priority 10 [ 134.147642][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 134.160094][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 134.165183][ T8314] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 134.178923][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 134.187968][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 134.197005][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 134.204898][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 134.382138][ T51] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.711885][ T51] bridge_slave_1: left allmulticast mode [ 134.732175][ T51] bridge_slave_1: left promiscuous mode [ 134.759112][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.800295][ T51] bridge_slave_0: left allmulticast mode [ 134.809319][ T51] bridge_slave_0: left promiscuous mode [ 134.822439][ T8347] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 134.833565][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.842714][ T8347] netlink: 210880 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.215945][ T5166] tipc: Node number set to 4269801472 [ 135.422853][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.437161][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.449092][ T51] bond0 (unregistering): Released all slaves [ 135.718175][ T8361] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 135.751835][ T8368] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.782253][ T8368] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 135.805259][ T8361] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.942993][ T8325] chnl_net:caif_netlink_parms(): no params data found [ 136.131394][ T8373] bridge0: port 3(netdevsim0) entered blocking state [ 136.152341][ T8373] bridge0: port 3(netdevsim0) entered disabled state [ 136.161486][ T8373] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 136.211027][ T8373] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 136.238785][ T8373] bridge0: port 3(netdevsim0) entered blocking state [ 136.245638][ T8373] bridge0: port 3(netdevsim0) entered forwarding state [ 136.284490][ T5120] Bluetooth: hci3: command tx timeout [ 136.305780][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.328664][ T8382] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.370391][ T51] hsr_slave_0: left promiscuous mode [ 136.377960][ T51] hsr_slave_1: left promiscuous mode [ 136.395090][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 136.404288][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 136.413118][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 136.427581][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 136.498360][ T51] veth1_macvtap: left promiscuous mode [ 136.517304][ T51] veth0_macvtap: left promiscuous mode [ 136.538974][ T51] veth1_vlan: left promiscuous mode [ 136.554373][ T51] veth0_vlan: left promiscuous mode [ 136.578384][ T8394] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 137.201965][ T51] team0 (unregistering): Port device team_slave_1 removed [ 137.283073][ T51] team0 (unregistering): Port device team_slave_0 removed [ 137.813279][ T8394] bond0: entered promiscuous mode [ 137.821488][ T8394] bond_slave_0: entered promiscuous mode [ 137.828871][ T8394] bond_slave_1: entered promiscuous mode [ 137.851799][ T8403] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.925223][ T8394] bond0: left promiscuous mode [ 137.930156][ T8394] bond_slave_0: left promiscuous mode [ 137.936369][ T8394] bond_slave_1: left promiscuous mode [ 137.994706][ T8325] bridge0: port 1(bridge_slave_0) entered blocking state [ 138.003037][ T8325] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.016343][ T8325] bridge_slave_0: entered allmulticast mode [ 138.025478][ T8325] bridge_slave_0: entered promiscuous mode [ 138.034381][ T8325] bridge0: port 2(bridge_slave_1) entered blocking state [ 138.041642][ T8325] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.050192][ T8325] bridge_slave_1: entered allmulticast mode [ 138.057718][ T8325] bridge_slave_1: entered promiscuous mode [ 138.157275][ T8421] netlink: 'syz-executor.4': attribute type 64 has an invalid length. [ 138.167043][ T8421] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.186766][ T8325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 138.299579][ T8418] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 138.364424][ T5120] Bluetooth: hci3: command tx timeout [ 138.385635][ T8325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 138.389182][ T8431] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.691587][ T8325] team0: Port device team_slave_0 added [ 138.727190][ T8325] team0: Port device team_slave_1 added [ 138.866669][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.887954][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.966894][ T8325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.005338][ T8325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.037452][ T8325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.107974][ T8325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.150338][ T8442] netlink: 'syz-executor.2': attribute type 37 has an invalid length. [ 139.223287][ T8442] nbd: must specify a device to reconfigure [ 139.337919][ T8325] hsr_slave_0: entered promiscuous mode [ 139.378470][ T8325] hsr_slave_1: entered promiscuous mode [ 139.863107][ T8467] batadv1: entered allmulticast mode [ 139.961534][ T8469] A link change request failed with some changes committed already. Interface bond_slave_0 may have been left with an inconsistent configuration, please check. [ 140.021461][ T8469] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.126193][ T51] wlan1: Trigger new scan to find an IBSS to join [ 140.154085][ T8475] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.162498][ T8475] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.272023][ T8481] team_slave_0: entered allmulticast mode [ 140.353781][ T8485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.373239][ T784] IPVS: starting estimator thread 0... [ 140.401403][ T8485] vlan2: entered promiscuous mode [ 140.428047][ T8485] vlan2: entered allmulticast mode [ 140.458618][ T5120] Bluetooth: hci3: command tx timeout [ 140.493894][ T8486] IPVS: using max 20 ests per chain, 48000 per kthread [ 140.645505][ T8325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 140.677781][ T8325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 140.710062][ T8325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 140.757804][ T8325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 141.486221][ T29] audit: type=1800 audit(1718620320.322:21): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 141.576524][ T29] audit: type=1804 audit(1718620320.352:22): pid=8557 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3972849211/syzkaller.Zcqdk8/38/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 141.679452][ T8325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.718395][ T8564] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.750725][ T8564] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 141.795347][ T8564] macsec1: entered allmulticast mode [ 141.800777][ T8564] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 141.886617][ T8564] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 141.915458][ T8564] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 142.019006][ T8574] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 142.042587][ T8325] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.067865][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 142.075065][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.113361][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.120540][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.257772][ T8325] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 142.449298][ T8585] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.492540][ T8585] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.524264][ T5120] Bluetooth: hci3: command tx timeout [ 142.536796][ T8591] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 142.582236][ T8591] 8021q: adding VLAN 0 to HW filter on device team0 [ 142.596743][ T8591] bond0: (slave team0): Enslaving as an active interface with an up link [ 142.666013][ T8596] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.713540][ T8596] tipc: Started in network mode [ 142.718451][ T8596] tipc: Node identity 6, cluster identity 4711 [ 142.744197][ T8596] tipc: Node number set to 6 [ 142.761095][ T29] audit: type=1800 audit(1718620321.602:23): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 142.799906][ T29] audit: type=1804 audit(1718620321.632:24): pid=8598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir553718819/syzkaller.H3hf1f/280/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 142.822797][ T8325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.036764][ T8325] veth0_vlan: entered promiscuous mode [ 143.077135][ T8325] veth1_vlan: entered promiscuous mode [ 143.190773][ T8325] veth0_macvtap: entered promiscuous mode [ 143.209637][ T8615] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 143.238821][ T8615] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 143.263792][ T8615] macsec1: entered allmulticast mode [ 143.269133][ T8615] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 143.316104][ T8615] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 143.364884][ T8615] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 143.429402][ T8325] veth1_macvtap: entered promiscuous mode [ 143.517402][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.550456][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.578618][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.602001][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.613298][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 143.626023][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.655907][ T8629] sock: sock_timestamping_bind_phc: sock not bind to device [ 143.666663][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 143.705898][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.755305][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.771643][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.782466][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.792944][ T8325] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 143.804831][ T8325] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 143.817072][ T8325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 143.854518][ T8325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.884340][ T8325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.893073][ T8325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.934094][ T8325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 143.958346][ T8629] pim6reg: entered allmulticast mode [ 143.972463][ T29] audit: type=1800 audit(1718620322.802:25): pid=8642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1943 res=0 errno=0 [ 144.043997][ T29] audit: type=1804 audit(1718620322.812:26): pid=8642 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3972849211/syzkaller.Zcqdk8/48/memory.events" dev="sda1" ino=1943 res=1 errno=0 [ 144.253901][ T7760] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.261725][ T7760] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.386099][ T7773] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 144.395731][ T8652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.412004][ T7773] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 144.457427][ T8652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.595253][ T8655] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 144.634391][ T8662] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.667773][ T8662] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 144.685696][ T8662] macsec1: entered allmulticast mode [ 144.694432][ T8662] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 144.714544][ T8662] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 144.721821][ T8662] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 144.958760][ T8666] macvlan0: entered promiscuous mode [ 144.983902][ T8666] ipvlan0: entered promiscuous mode [ 145.001127][ T8666] ipvlan0: left promiscuous mode [ 145.033586][ T8666] macvlan0: left promiscuous mode [ 145.079516][ T8668] sit0: entered promiscuous mode [ 145.084889][ T7770] wlan1: Trigger new scan to find an IBSS to join [ 145.132739][ T8668] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 145.153555][ T8668] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.207569][ T8672] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 145.290352][ T29] audit: type=1800 audit(1718620324.132:27): pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1944 res=0 errno=0 [ 145.332150][ T29] audit: type=1804 audit(1718620324.162:28): pid=8677 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir553718819/syzkaller.H3hf1f/286/memory.events" dev="sda1" ino=1944 res=1 errno=0 [ 145.641101][ T8694] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.665892][ T8694] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 145.673288][ T8694] macsec1: entered allmulticast mode [ 145.684741][ T8694] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 145.726008][ T8694] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 145.746861][ T8694] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 146.064896][ T7773] wlan1: Creating new IBSS network, BSSID 5a:a3:a0:14:6a:8c [ 146.387596][ T7760] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.610319][ T7760] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.664149][ T8721] vlan0: entered promiscuous mode [ 146.681278][ T8721] team0: entered promiscuous mode [ 146.695850][ T8721] bond0: entered promiscuous mode [ 146.709808][ T8721] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 146.735062][ T8721] vlan0: entered allmulticast mode [ 146.749494][ T8721] team0: entered allmulticast mode [ 146.791084][ T8721] bond0: entered allmulticast mode [ 146.801204][ T8721] mac80211_hwsim hwsim9 wlan1: entered allmulticast mode [ 146.830536][ T8721] team0: left allmulticast mode [ 146.846342][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 146.854634][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 146.862364][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 146.870836][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 146.877342][ T8721] bond0: left allmulticast mode [ 146.887090][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 146.893893][ T8721] mac80211_hwsim hwsim9 wlan1: left allmulticast mode [ 146.901279][ T8721] team0: left promiscuous mode [ 146.901603][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 146.908949][ T8721] bond0: left promiscuous mode [ 146.922486][ T8721] mac80211_hwsim hwsim9 wlan1: left promiscuous mode [ 147.015352][ T7760] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.068500][ T8735] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 147.125776][ T7760] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.221044][ T8748] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.263040][ T8748] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 147.283648][ T8748] macsec1: entered allmulticast mode [ 147.289088][ T8748] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 147.303710][ T8748] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 147.318997][ T8748] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 147.349916][ T8755] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.603190][ T7760] bridge_slave_1: left allmulticast mode [ 147.629742][ T7760] bridge_slave_1: left promiscuous mode [ 147.649526][ T7760] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.670917][ T7760] bridge_slave_0: left allmulticast mode [ 147.677763][ T7760] bridge_slave_0: left promiscuous mode [ 147.684970][ T7760] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.999115][ T8780] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 148.507219][ T7760] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 148.543962][ T7760] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 148.566463][ T7760] bond0 (unregistering): Released all slaves [ 148.704090][ T8804] Bluetooth: MGMT ver 1.22 [ 148.708589][ T8804] Bluetooth: hci3: unsupported parameter 64512 [ 148.715576][ T8804] Bluetooth: hci3: unsupported parameter 114 [ 148.721590][ T8804] Bluetooth: hci3: unsupported parameter 64512 [ 148.732492][ T8804] Bluetooth: hci3: unsupported parameter 114 [ 148.795926][ T8807] netlink: 'syz-executor.0': attribute type 20 has an invalid length. [ 148.915483][ T8730] chnl_net:caif_netlink_parms(): no params data found [ 148.960587][ T8814] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 149.008754][ T5120] Bluetooth: hci3: command tx timeout [ 149.218049][ T8831] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.268521][ T8827] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 149.380936][ T7760] hsr_slave_0: left promiscuous mode [ 149.407310][ T7760] hsr_slave_1: left promiscuous mode [ 149.450030][ T7760] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 149.474268][ T7760] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 149.489687][ T7760] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 149.509161][ T7760] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 149.559740][ T7760] veth1_macvtap: left promiscuous mode [ 149.583337][ T7760] veth0_macvtap: left promiscuous mode [ 149.589173][ T7760] veth1_vlan: left promiscuous mode [ 149.600309][ T7760] veth0_vlan: left promiscuous mode [ 150.152397][ T29] audit: type=1804 audit(1718620328.992:29): pid=8862 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3015807617/syzkaller.Ia406T/227/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 150.315842][ T7760] team0 (unregistering): Port device team_slave_1 removed [ 150.355902][ T7760] team0 (unregistering): Port device team_slave_0 removed [ 150.712426][ T8855] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.774147][ T8730] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.781432][ T8730] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.802005][ T8730] bridge_slave_0: entered allmulticast mode [ 150.811696][ T8730] bridge_slave_0: entered promiscuous mode [ 150.822584][ T8730] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.830506][ T8730] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.854535][ T8730] bridge_slave_1: entered allmulticast mode [ 150.861953][ T8730] bridge_slave_1: entered promiscuous mode [ 150.988625][ T8730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.021919][ T8730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.084255][ T5120] Bluetooth: hci3: command tx timeout [ 151.164898][ T8730] team0: Port device team_slave_0 added [ 151.184045][ T8730] team0: Port device team_slave_1 added [ 151.296027][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.303009][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.363261][ T8730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.390558][ T8730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.424786][ T8730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.483843][ T8730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.594425][ T8921] netlink: 'syz-executor.2': attribute type 32 has an invalid length. [ 151.594590][ T8912] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.705454][ T8730] hsr_slave_0: entered promiscuous mode [ 151.751170][ T8730] hsr_slave_1: entered promiscuous mode [ 152.522402][ T8730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 152.533219][ T8730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 152.545751][ T8730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 152.556702][ T8730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 152.685525][ T8963] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 152.720434][ T8730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 152.763208][ T8730] 8021q: adding VLAN 0 to HW filter on device team0 [ 152.766779][ T8969] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 152.816082][ T8971] openvswitch: netlink: Unknown nsh attribute 0 [ 152.839029][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.846246][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 152.883761][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.890913][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.011562][ T8730] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 153.164766][ T5120] Bluetooth: hci3: command tx timeout [ 153.331944][ T8730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 153.440704][ T8730] veth0_vlan: entered promiscuous mode [ 153.468564][ T8730] veth1_vlan: entered promiscuous mode [ 153.576688][ T8730] veth0_macvtap: entered promiscuous mode [ 153.597299][ T8730] veth1_macvtap: entered promiscuous mode [ 153.651703][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.681585][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.692180][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.709092][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.719137][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 153.741836][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.765197][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 153.806026][ T9009] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.817056][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.850405][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.861433][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.873530][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.904413][ T8730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 153.924388][ T8730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 153.942627][ T8730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 153.976553][ T8730] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.999606][ T8730] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.025681][ T8730] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.049279][ T8730] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.220399][ T9024] vlan3: entered promiscuous mode [ 154.226433][ T9024] batman_adv: batadv0: Adding interface: vlan3 [ 154.232616][ T9024] batman_adv: batadv0: The MTU of interface vlan3 is too small (1332) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.269588][ T9024] batman_adv: batadv0: Not using interface vlan3 (retrying later): interface not active [ 154.333814][ T7773] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.341665][ T7773] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.418308][ T7763] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 154.445639][ T7763] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 154.593258][ T9051] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 154.614788][ T9051] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.697526][ T9054] IPv6: Can't replace route, no match found [ 154.848954][ T9060] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 155.032647][ T9066] vlan0: entered promiscuous mode [ 155.041303][ T9066] batman_adv: batadv0: Adding interface: vlan0 [ 155.053694][ T9066] batman_adv: batadv0: The MTU of interface vlan0 is too small (1332) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.093178][ T9066] batman_adv: batadv0: Not using interface vlan0 (retrying later): interface not active [ 155.372250][ T9074] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 155.395812][ T9074] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 155.427644][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.437053][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.446780][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.461331][ T9074] batadv0: entered promiscuous mode [ 155.467396][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.480587][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.488926][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.560676][ T7759] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.665317][ T7759] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.685411][ T9089] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.788349][ T9094] dvmrp0: entered allmulticast mode [ 155.797283][ T9094] dvmrp0: left allmulticast mode [ 155.860323][ T9100] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.955227][ T7759] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.063240][ T7759] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.148869][ T9112] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 156.255570][ T9077] chnl_net:caif_netlink_parms(): no params data found [ 156.304648][ T9120] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.676905][ T7759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 156.688728][ T7759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.705335][ T7759] bond0 (unregistering): Released all slaves [ 156.789170][ T7759] : left promiscuous mode [ 156.814458][ T9077] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.822413][ T9077] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.845455][ T9077] bridge_slave_0: entered allmulticast mode [ 156.860190][ T9077] bridge_slave_0: entered promiscuous mode [ 156.880315][ T9077] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.917588][ T9077] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.932323][ T9077] bridge_slave_1: entered allmulticast mode [ 156.940852][ T9077] bridge_slave_1: entered promiscuous mode [ 156.954879][ T7759] tipc: Disabling bearer [ 156.961045][ T7759] tipc: Left network mode [ 157.069730][ T9077] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.108604][ T9133] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 157.142133][ T9077] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.347748][ T9077] team0: Port device team_slave_0 added [ 157.409143][ T9077] team0: Port device team_slave_1 added [ 157.463061][ T9148] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 157.496804][ T9077] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.512549][ T9077] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.562322][ T9077] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.574108][ T5120] Bluetooth: hci0: command tx timeout [ 157.592449][ T7759] hsr_slave_0: left promiscuous mode [ 157.603279][ T7759] hsr_slave_1: left promiscuous mode [ 157.611861][ T7759] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.626095][ T9155] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.627698][ T7759] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.652065][ T7759] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.669006][ T7759] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.715996][ T7759] veth1_macvtap: left promiscuous mode [ 157.723856][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 157.726849][ T7759] veth0_macvtap: left promiscuous mode [ 157.737669][ T7759] veth1_vlan: left promiscuous mode [ 157.737919][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 157.743049][ T7759] veth0_vlan: left promiscuous mode [ 157.760035][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 157.769177][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 157.778455][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 157.786670][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 158.198458][ T7759] team0 (unregistering): Port device team_slave_1 removed [ 158.236925][ T7759] team0 (unregistering): Port device team_slave_0 removed [ 158.571029][ T9153] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.583494][ T9153] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 158.606188][ T9077] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 158.613285][ T9077] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 158.642942][ T9077] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.717896][ T9160] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 158.903146][ T9077] hsr_slave_0: entered promiscuous mode [ 158.929222][ T9077] hsr_slave_1: entered promiscuous mode [ 158.945265][ T9077] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.952854][ T9077] Cannot create hsr debugfs directory [ 159.046560][ T9174] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.249088][ T7759] IPVS: stop unused estimator thread 0... [ 159.411844][ T9196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.535898][ T7759] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.617926][ T7759] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.644582][ T9157] chnl_net:caif_netlink_parms(): no params data found [ 159.660057][ T53] Bluetooth: hci0: command tx timeout [ 159.761693][ T7759] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.794700][ T9213] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 159.805229][ T9213] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 159.813953][ T9213] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.850820][ T9211] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 159.883894][ T53] Bluetooth: hci3: command tx timeout [ 159.888162][ T9219] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.900048][ T9219] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 159.985590][ T9221] macvlan2: entered allmulticast mode [ 159.992041][ T9221] team_slave_0: entered promiscuous mode [ 159.998153][ T9221] team_slave_1: entered promiscuous mode [ 160.009623][ T9221] team0: entered allmulticast mode [ 160.015543][ T9221] team_slave_1: entered allmulticast mode [ 160.021991][ T9221] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 160.033884][ T9221] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 160.068952][ T7759] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.203702][ T9157] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.231209][ T9157] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.244234][ T9157] bridge_slave_0: entered allmulticast mode [ 160.258386][ T9157] bridge_slave_0: entered promiscuous mode [ 160.269582][ T9157] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.307427][ T9239] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.309145][ T9157] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.318287][ T9239] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 160.333592][ T9157] bridge_slave_1: entered allmulticast mode [ 160.347055][ T9157] bridge_slave_1: entered promiscuous mode [ 160.362598][ T9240] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.404091][ T9240] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.454626][ T9244] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.499397][ T9242] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.528774][ T9157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.548143][ T9157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.681987][ T7759] bridge_slave_1: left allmulticast mode [ 160.704963][ T7759] bridge_slave_1: left promiscuous mode [ 160.711667][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.730625][ T7759] bridge_slave_0: left allmulticast mode [ 160.732718][ T29] audit: type=1804 audit(1718620339.572:30): pid=9255 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir553718819/syzkaller.H3hf1f/331/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 160.747519][ T9252] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 160.773990][ T7759] bridge_slave_0: left promiscuous mode [ 160.779763][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.138984][ T7759] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 161.152122][ T7759] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 161.162567][ T7759] bond0 (unregistering): Released all slaves [ 161.179440][ T9157] team0: Port device team_slave_0 added [ 161.198524][ T9257] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.723866][ T53] Bluetooth: hci0: command tx timeout [ 161.963709][ T53] Bluetooth: hci3: command tx timeout [ 163.803795][ T53] Bluetooth: hci0: command tx timeout [ 164.043547][ T53] Bluetooth: hci3: command tx timeout [ 166.132805][ T53] Bluetooth: hci3: command tx timeout [ 178.532195][ T7763] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 181.244483][ T5120] Bluetooth: hci1: command 0x0406 tx timeout [ 191.544121][ T5120] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 191.554724][ T5120] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 191.562473][ T5120] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 191.571368][ T5120] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 191.579748][ T5120] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 191.587681][ T5120] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 191.679007][ T5120] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 191.706787][ T5120] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 191.733479][ T5120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 191.741853][ T5120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 191.749550][ T5120] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 191.764126][ T5120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 192.015684][ T5120] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 192.032143][ T5120] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 192.042797][ T5120] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 192.054521][ T5120] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 192.062808][ T5120] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 192.070408][ T5120] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 193.643514][ T53] Bluetooth: hci5: command tx timeout [ 193.804180][ T53] Bluetooth: hci6: command tx timeout [ 194.131771][ T53] Bluetooth: hci7: command tx timeout [ 194.527544][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.543841][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.730661][ T5120] Bluetooth: hci5: command tx timeout [ 195.883391][ T5120] Bluetooth: hci6: command tx timeout [ 196.203445][ T5120] Bluetooth: hci7: command tx timeout [ 196.616235][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 197.803946][ T5120] Bluetooth: hci5: command tx timeout [ 197.963499][ T5120] Bluetooth: hci6: command tx timeout [ 198.283466][ T5120] Bluetooth: hci7: command tx timeout [ 199.888900][ T5120] Bluetooth: hci5: command tx timeout [ 200.043420][ T5120] Bluetooth: hci6: command tx timeout [ 200.363395][ T5120] Bluetooth: hci7: command tx timeout [ 210.525361][ T7763] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 220.502324][ T53] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 220.519234][ T53] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 220.529836][ T53] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 220.544160][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 220.552124][ T53] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 220.561038][ T53] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 222.603668][ T5120] Bluetooth: hci8: command tx timeout [ 222.703251][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 222.714062][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 222.722366][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 222.730995][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 222.741468][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 222.749785][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 224.683418][ T53] Bluetooth: hci8: command tx timeout [ 224.843471][ T53] Bluetooth: hci9: command tx timeout [ 226.763409][ T53] Bluetooth: hci8: command tx timeout [ 226.923455][ T53] Bluetooth: hci9: command tx timeout [ 228.843647][ T53] Bluetooth: hci8: command tx timeout [ 229.003449][ T53] Bluetooth: hci9: command tx timeout [ 231.083377][ T53] Bluetooth: hci9: command tx timeout [ 237.563418][ T5120] Bluetooth: hci2: command 0x0406 tx timeout [ 242.523423][ T7773] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 255.966779][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.973136][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.702026][ T5120] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 256.712052][ T5120] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 256.721768][ T5120] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 256.730804][ T5120] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 256.743125][ T5120] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 256.763696][ T5120] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 256.784694][ T5128] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 256.794664][ T5128] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 256.802509][ T5128] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 256.811676][ T5128] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 256.821282][ T5128] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 256.829400][ T5128] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 257.056256][ T5128] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 257.068287][ T5128] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 257.077975][ T5128] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 257.093953][ T5128] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 257.104090][ T5128] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 257.111529][ T5128] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 258.843791][ T5120] Bluetooth: hci10: command tx timeout [ 258.923626][ T5120] Bluetooth: hci11: command tx timeout [ 259.163598][ T5120] Bluetooth: hci12: command tx timeout [ 260.923651][ T5120] Bluetooth: hci10: command tx timeout [ 261.003435][ T5120] Bluetooth: hci11: command tx timeout [ 261.244519][ T5120] Bluetooth: hci12: command tx timeout [ 263.003630][ T5120] Bluetooth: hci10: command tx timeout [ 263.083530][ T5120] Bluetooth: hci11: command tx timeout [ 263.323433][ T5120] Bluetooth: hci12: command tx timeout [ 265.083644][ T5120] Bluetooth: hci10: command tx timeout [ 265.173755][ T5120] Bluetooth: hci11: command tx timeout [ 265.403940][ T5120] Bluetooth: hci12: command tx timeout [ 274.523897][ T7752] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 278.523946][ T5128] Bluetooth: hci0: command 0x0406 tx timeout [ 283.645605][ T5128] Bluetooth: hci3: command 0x0406 tx timeout [ 285.610582][ T5128] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 285.625584][ T5128] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 285.637341][ T5128] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 285.646808][ T5128] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 285.655777][ T5128] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 285.663466][ T5128] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 287.723525][ T5120] Bluetooth: hci13: command tx timeout [ 287.913865][ T5128] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 287.922994][ T5128] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 287.931560][ T5128] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 287.940943][ T5128] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 287.949307][ T5128] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 287.957085][ T5128] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 289.803846][ T5120] Bluetooth: hci13: command tx timeout [ 290.043978][ T5120] Bluetooth: hci14: command tx timeout [ 291.883796][ T5120] Bluetooth: hci13: command tx timeout [ 292.124001][ T5120] Bluetooth: hci14: command tx timeout [ 293.963386][ T5120] Bluetooth: hci13: command tx timeout [ 294.203402][ T5120] Bluetooth: hci14: command tx timeout [ 296.283530][ T5120] Bluetooth: hci14: command tx timeout [ 306.532604][ T7752] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 314.363763][ T5130] Bluetooth: hci7: command 0x0406 tx timeout [ 314.369850][ T4488] Bluetooth: hci6: command 0x0406 tx timeout [ 314.376367][ T5128] Bluetooth: hci5: command 0x0406 tx timeout [ 317.405712][ T1243] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.412072][ T1243] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.323439][ T30] INFO: task kworker/0:4:5165 blocked for more than 143 seconds. [ 319.331202][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 319.350205][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.360238][ T30] task:kworker/0:4 state:D stack:22384 pid:5165 tgid:5165 ppid:2 flags:0x00004000 2024/06/17 10:34:58 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 319.376906][ T30] Workqueue: events cfg80211_destroy_iface_wk [ 319.402543][ T30] Call Trace: [ 319.413334][ T30] [ 319.416313][ T30] __schedule+0x17e8/0x4a20 [ 319.420861][ T30] ? __pfx___schedule+0x10/0x10 [ 319.432927][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 319.438978][ T30] ? __pfx_lock_release+0x10/0x10 [ 319.450897][ T30] ? kick_pool+0x1bd/0x620 [ 319.456360][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 319.461583][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 319.473282][ T30] ? schedule+0x90/0x320 [ 319.477975][ T30] schedule+0x14b/0x320 [ 319.482163][ T30] schedule_preempt_disabled+0x13/0x30 [ 319.494014][ T30] __mutex_lock+0x6a4/0xd70 [ 319.498554][ T30] ? __mutex_lock+0x527/0xd70 [ 319.508947][ T30] ? cfg80211_destroy_iface_wk+0x19/0x30 [ 319.514738][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 319.519783][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 319.532537][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 319.538996][ T30] ? process_scheduled_works+0x945/0x1830 [ 319.544969][ T30] cfg80211_destroy_iface_wk+0x19/0x30 [ 319.550545][ T30] process_scheduled_works+0xa2c/0x1830 [ 319.582381][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 319.593479][ T30] ? assign_work+0x364/0x3d0 [ 319.598126][ T30] worker_thread+0x86d/0xd70 [ 319.602742][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 319.633304][ T30] ? __kthread_parkme+0x169/0x1d0 [ 319.638385][ T30] ? __pfx_worker_thread+0x10/0x10 [ 319.660006][ T30] kthread+0x2f0/0x390 [ 319.673468][ T30] ? __pfx_worker_thread+0x10/0x10 [ 319.678631][ T30] ? __pfx_kthread+0x10/0x10 [ 319.695842][ T30] ret_from_fork+0x4b/0x80 [ 319.700306][ T30] ? __pfx_kthread+0x10/0x10 [ 319.723724][ T30] ret_from_fork_asm+0x1a/0x30 [ 319.728564][ T30] [ 319.731688][ T30] INFO: task kworker/1:6:5169 blocked for more than 143 seconds. [ 319.753848][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 319.761506][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 319.790693][ T30] task:kworker/1:6 state:D stack:22744 pid:5169 tgid:5169 ppid:2 flags:0x00004000 [