last executing test programs: 1m17.346836863s ago: executing program 0 (id=3231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000003}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000340)=0x400000, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000027c0)={0x2, 0x9, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_sa={0x2}]}, 0x28}, 0x1, 0x7}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fb", 0x1, 0xc000, 0x0, 0x0) recvmsg(r0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'pim6reg1\x00', {}, 0x7}) 1m2.729823862s ago: executing program 0 (id=3231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000003}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000340)=0x400000, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000027c0)={0x2, 0x9, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_sa={0x2}]}, 0x28}, 0x1, 0x7}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fb", 0x1, 0xc000, 0x0, 0x0) recvmsg(r0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'pim6reg1\x00', {}, 0x7}) 48.044484429s ago: executing program 0 (id=3231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000003}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000340)=0x400000, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000027c0)={0x2, 0x9, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_sa={0x2}]}, 0x28}, 0x1, 0x7}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fb", 0x1, 0xc000, 0x0, 0x0) recvmsg(r0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'pim6reg1\x00', {}, 0x7}) 34.201886957s ago: executing program 0 (id=3231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000003}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000340)=0x400000, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000027c0)={0x2, 0x9, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_sa={0x2}]}, 0x28}, 0x1, 0x7}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fb", 0x1, 0xc000, 0x0, 0x0) recvmsg(r0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'pim6reg1\x00', {}, 0x7}) 20.372741645s ago: executing program 0 (id=3231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000003}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000340)=0x400000, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000027c0)={0x2, 0x9, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_sa={0x2}]}, 0x28}, 0x1, 0x7}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fb", 0x1, 0xc000, 0x0, 0x0) recvmsg(r0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'pim6reg1\x00', {}, 0x7}) 6.321516339s ago: executing program 0 (id=3231): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000000c0), 0xfea7) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x80000003}) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000340)=0x400000, 0x4) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000027c0)={0x2, 0x9, 0x0, 0x2, 0x5, 0x0, 0x0, 0x0, [@sadb_key={0x1, 0x8}, @sadb_sa={0x2}]}, 0x28}, 0x1, 0x7}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r0, &(0x7f0000000480)="fb", 0x1, 0xc000, 0x0, 0x0) recvmsg(r0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000040)={0x1, 'pim6reg1\x00', {}, 0x7}) 1.73173587s ago: executing program 1 (id=5515): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200)}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="554fd397d1cba737d9832f3b25e6a524b5960428343335c179c752cdca96671092a361f35cf25d582b1ba8c6812dd367a95914b4a0f8f41f9a8eeb2530a9e91dc6745ad34f4e18a490f28bf67c20b241cd15cad034e9ad08b9d1364ff19622bb82b499428cd4892b039d54e9480ff61ead45e5ffda5b71519a709a8644b6ae78d92206854f"}, {&(0x7f0000000340)="8f672e6753e9f33b3c5b6fa3e92d984bee7d3ab020921c638a71fbbfb7278e98409c194d284213c2d98995722afe3adbfa17f30f58339d208090c3458c0fbf145978ad7abe4ffa1ac5ffaf92e7f7aa97c102999f338ef987c62ee0bf6530fcb604"}], 0x0, 0x0, 0xffffffc0, 0x2663}, 0x20000094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="110000001400a10c000000d5b400000002000000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x400c800) socket$pppoe(0x18, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x80005b, 0x10089, 0x2053, 0xffffffffffffffff, 0x3ee, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x33, &(0x7f0000000dc0)=ANY=[@ANYBLOB="b7000000a5517f5fbfa30000000000000703000028feffff720af0fff8ffffff71a4f0ff00000000b7060000000000012e400300000000006506020001cd00007118540000000000c3640000000000006b0a00fe00000000850000002e000000b7000000000000009500000000000000023bc065b7a379d179fc9e94af69912435f1b6a693172e6191a12bebf9f9804ea033388cd15b65877ad4b200000000000000000beca090f32050e436fe275daf51efd601b6bf01c8e8b1abe4fef3bef7074815ae98743d1ace4c46631256dd19aed0d600c0b6199fe3ff3128e599b0eaebbdbd7359a48f5b0afc3996792043a6787bac46aa7aa400000000000069669622208266f896ba2c9e73c2efeec2dc565fbafb2cb63f5fef9ab79ff8abaa8a08f54a062107e9bb3e980fff675c8d3e91df6648a7a6aebcb63e0867b75690152af27711f0cbb9c06018d21bf3f87b8eb65323b4267a526d53442db8e48dbc5ce47d67d07441a7975d5e41b14fd0154a8246249952a8b61633ce068220defe09d3b1136af6d03e9cf996c13d1bfcdc54567a9ca80dec2e943fe4ae7c617cc071f7add70cfbd48f8f6b50fe6a8297d88efa73e7e601040000b4a685969f28902bdecf66ef39755de79ed2c711477febc96231a53984d00877301d0ec62427a8e38618fdd1ce9aaed569ebc5f2e58d6028e66139a737cc7146a131d47dcebb32ed67021d76e983223c998aec22242ae54e87f438d26982876b58f9134366952f7399a733f07138a736924f3709000000e97f0c117ec439c6b7b965752bbc06eced08d97a32ae4b1ad4d11c5b6f68ee841975233e4cea13f3ef04b2cab9cc256d4539dbafd888c7097c1169e0bebcc81ca3da40bf34b6c9c1da2d6ed8acaf2a8091820ff4cf6be74ddca8bf2eed0e11b2139e8c3ec95436af5269d5792decda7d8b5dcf8640b504ba23c6d0a7f67cdfd27328100ebf9319a56f0f9cee17deecf747f3493f1dc39551f4c9a40b3e93fa80b8234ccbf39a9ef09bd97321f0dc20956f44ba2c5ec2e7569b05cf4690ddc189f174046a8b214acf23f42fb51ed4819e6b4cb5a8bf2b559d0c198fe0315483b8beb9801d06c58b22dd713fe3b7ef18e21081aacfd091b754125a488cea18255f79bebcb3051f622f8a1d9af1908e88a58774a24f35a4ccdbedea6212286c23dd89c2b4b90647f17231472af8dda7f3ab20f093aad3ce875f7458039ee6d0a50deb7bc8eb393f056a5e7725531c5485278e0362338e2e2710fe00465e0d182a322091022cf5b814eeb9b3cab21196581e4d92d0b6fe5525285eea359274f1f21d69233bbe94941f10ba292100000000000000000000000000000000c18e93a0c5231779f2ee201e9fe7e63e84b57b5f05ecd278919bad330ffcb594b8255b3085b352ca9533d6c31c1a30158c30352f8a126a65cb6582e58aa641007418611df53a601c3a8fb8d2286e86abf98136f345446730f68f5d6d1817a9e1b09e5650d2599fbe719a45337d29eb3fef5f7f565457660dec6fe903a1c2ea4f40a8ea1c179892afa219fc69a44163f0d731de418e9fd82a8c4661caea674b19242d1840d047882f640ea248457288c5ffb63e857da03ff5c0475c3cfff41c4806f1dc750eb1c45ec3a2a0b064834010604d6f88a29e8e9bda2bc9c18d1b53a08f25d62ccaa46bc0235c830a7b3fe64bc6031b431bcad6b698a1ba6027870ea9e55fafbbf140c5f82a33ee4ac793b989c12a5827a7957f4d8136cf918b7cbf5bc5fc64c8001992536584586edded6f65bdd371ac84fd5cc60ab79b84e9e85a1c54d5666a5d133e95eff121621dff14b9de7a188b8c5387f9da63c2cce405bc44079e34e2db2b275bfbb54841d647338cad74be91144b780cf381a6860f641446ef73bd11d45f5e4df8f3c6440d8425fd7382225cf8c2cada01bf3cd5cbc6a403173e0c89a491c75efc3c21b7825a521c6011945eef94abc3000000000000000000000000000000d71b794e9b4c145caf050429937eef4364d9e1cbe9150bccd9b2e73757f1f5e8ac50736cd3cbc029ede2869642841371bb4b9c1aaa8826889a909e6716b60e4b568b6761f8ccc7d35b0e66357746b10fc481b47e67f1e14408c1ef3e018a5e647e3f607654f3bf82bcfb42be038a272d82f8362944f608b3810000000019fda0b1b607f1ab34194ed954973f7a5accc0938d3364ab07574d0b32fc30f3ab73d012b63ee905e98ab6989ec2c840cd216eb18fedfb3b204e94e170bae930660368d3799c9b1bf7556ac57164966791626f06ad2e332341965f72141ec140b80efd7720ccdaa890b79bc4523386bd66553121543c9a35b7adcf2f6b257fefef1d6e1da2ee94d3f822bf45aad21e5b5a3788ab584090664065af39b0f43968dcd7c5f8e5a8dc6298691423fbf7e8e012260bc62f9422434a547ef7ca37953d435098d9b71edd1a03e46d0ade465d0c0db0a51f9e29cac05e5a04f94e"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x4000) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x92c01eb, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f02003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.372530539s ago: executing program 1 (id=5519): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000000)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x13, r3, 0x0) getsockopt$bt_BT_SECURITY(r2, 0x10e, 0x8, 0x0, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000040), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_FILTER(r5, 0x0, 0x2, &(0x7f0000000280)={0x8f6, [0x1, 0x8d], 0x3}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000018b7020000c3b8027d85b560000000008500000051000000bf0900000000000055090100f7000000950000000000480dbf91000000000000b702000000000000040000000e003cd8c7ff0000009ac19d88"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) 1.179591893s ago: executing program 1 (id=5521): r0 = socket$kcm(0x10, 0x2, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_inet6_SIOCDIFADDR(r6, 0x8936, &(0x7f00000009c0)={@remote, 0x0, r5}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000300)={'syztnl0\x00', r5, 0x4, 0x81, 0x7, 0x1000, 0x0, @private0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x1, 0x20, 0x1f, 0xbd6b}}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x34, r8, 0x211, 0x0, 0x0, {0x35}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r10 = socket$kcm(0x10, 0x400000002, 0x0) write$cgroup_subtree(r10, &(0x7f0000000100)=ANY=[@ANYBLOB="0007000042009103"], 0xfe33) recvmsg(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000440)=""/96, 0x60}, {&(0x7f0000001a80)=""/4104, 0x1008}], 0x2}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r9, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r9, @ANYBLOB="14000500fe800099"], 0x3c}}, 0x0) sendmsg$kcm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000380)="0401020028000b05d25a806f8c6394f90524fce02200030500000000000000c137153e370248018000f01700d1bde6b35f6ebfc29c55f94b7c10c4101181fe26e60da909bc0f7166b57c4d63804194449cfd3c4dd0269da5125f7ab183280bfedf10972ff762a003727b4e7c3a0b937e9ffb046509db6ddd1363", 0x7a}], 0x1}, 0x800) socket$nl_netfilter(0x10, 0x3, 0xc) socket$igmp(0x2, 0x3, 0x2) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000400)={0x24, @short={0x2, 0xfffc, 0xaaa1}}, 0x14) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r11, &(0x7f0000000340)={0x0, 0x1c00, &(0x7f0000000100)={&(0x7f0000000080)={0x1c, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) pwritev(r12, &(0x7f00000007c0)=[{&(0x7f00000004c0)="38b294b8051be06c24d7f5e39d944a13910672adb43e6e4ebf4a0f671cb05114f0e9f0fe38b7063e3cdd6fdcdc58cdd56e7a23ed47b986dc57602d1409dffa96a34f25aa055fed17e1281a400f7801000000000000002df260fb8c66eb60983fa3ccb36acf7b86242f0fc13bcf5c014ef681d62beb8904100e07049560c4d591995e1ae6d4a6969be860091d44c33a5e1f05dbcfd9c0665e6d809bb3c9fcfb74f2d93e05556a6ae854e87d", 0xab}, {&(0x7f0000000880)="35a14ca55d8a35868cda5e68920305579221c3dee10c067a46d68113fffcc3b73be561a87c83a9c030422cf3662517df9ad07550a94dadd89e4299c8b7042828da974b41000480006bea1701ee1b46e9394b50a72d25e70006ce8129432e6658d6d73750895337debcfdcf6d240a785739260c5288f0b42823de97e0620569e8d9a1148aa916adf36aaa", 0x8a}], 0x2, 0x0, 0x0) write$binfmt_script(r12, &(0x7f0000000100), 0xfecc) syz_genetlink_get_family_id$SEG6(&(0x7f0000000200), r12) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r12, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000140)={0x9c, 0x0, 0x8, 0x5, 0x0, 0x0, {0x2, 0x0, 0x8}, [@CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x6}, @CTA_TIMEOUT_DATA={0x3c, 0x4, 0x0, 0x1, @udp=[@CTA_TIMEOUT_UDP_REPLIED={0x0, 0x2, 0x1, 0x0, 0x7f}, @CTA_TIMEOUT_UDP_UNREPLIED={0x0, 0x1, 0x1, 0x0, 0xbd}]}, @CTA_TIMEOUT_DATA={0x2c, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x6}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xffffffff}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x3a}, @CTA_TIMEOUT_L4PROTO={0x5}]}, 0x9c}, 0x1, 0x0, 0x0, 0x8000}, 0x40000) 1.050882454s ago: executing program 2 (id=5525): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xee00}, {@in6=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x44}, {0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff}, {0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}}, 0xf0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x12) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x1, 0x0, &(0x7f0000000100)) 986.977015ms ago: executing program 4 (id=5526): socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2f) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 851.829044ms ago: executing program 2 (id=5528): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r1, &(0x7f0000000540)=[{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e4", 0x1}], 0x1, &(0x7f0000000740)=ANY=[@ANYBLOB="300000000000000017e2ffff010000001800000045f43a7ce45002bdb85e47ab3e39597e422ffab456dd963a000000001800000000000000170100000400000006020000004000001800000000000000170100000300000001"], 0x60}], 0x1, 0x0) recvmmsg(r1, &(0x7f0000003500)=[{{0x0, 0x1000000, &(0x7f00000024c0)=[{&(0x7f00000014c0)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) 792.168882ms ago: executing program 3 (id=5529): bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200)}, 0x38) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000100)="554fd397d1cba737d9832f3b25e6a524b5960428343335c179c752cdca96671092a361f35cf25d582b1ba8c6812dd367a95914b4a0f8f41f9a8eeb2530a9e91dc6745ad34f4e18a490f28bf67c20b241cd15cad034e9ad08b9d1364ff19622bb82b499428cd4892b039d54e9480ff61ead45e5ffda5b71519a709a8644b6ae78d92206854f"}, {&(0x7f0000000340)="8f672e6753e9f33b3c5b6fa3e92d984bee7d3ab020921c638a71fbbfb7278e98409c194d284213c2d98995722afe3adbfa17f30f58339d208090c3458c0fbf145978ad7abe4ffa1ac5ffaf92e7f7aa97c102999f338ef987c62ee0bf6530fcb604"}], 0x0, 0x0, 0xffffffc0, 0x2663}, 0x20000094) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[@ANYBLOB="110000001400a10c000000d5b400000002000000", @ANYRES32=0x0], 0x18}, 0x1, 0x0, 0x0, 0x81}, 0x400c800) socket$pppoe(0x18, 0x1, 0x0) socket$inet(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x80005b, 0x10089, 0x2053, 0xffffffffffffffff, 0x3ee, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x1}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x33, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000000)={0xfffffffd}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r0}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x4000) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x92c01eb, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f02003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 753.258782ms ago: executing program 2 (id=5530): r0 = socket(0x2, 0x6, 0x0) connect$rxrpc(r0, &(0x7f0000000480)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, 0x6b) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x75, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)=0x18) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000400070a0101000000000000000005000000"], 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="68010000100013070000030000000000ac1414bb000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000a8c95e370a9a424d0bae70216a4958b3d147782ae1bc117f6b02f60480eb4e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006374722d63616d656c6c69612d6165736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000e00fe8800000000000000000000000000011c0004000000000000000000fc00"/288], 0x168}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="3c00330080000000080211000001080211000000505050505050000000000002aba519ed06dd895d00000100040600000000"], 0x58}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @empty}, {0x1, @multicast}, 0x8, {0x2, 0x4e21, @empty}, 'syzkaller0\x00'}) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) openat$cgroup_ro(r11, 0x0, 0x26e1, 0x0) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="0000ebff000a00020411ba67aaaabb0000009c000000000000000000"], 0x34}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) 751.132142ms ago: executing program 4 (id=5531): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000780), 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x7964, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018180000", @ANYRES32=r0, @ANYBLOB="00000000000000006600000000400000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 719.419398ms ago: executing program 1 (id=5532): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) r2 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r2, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) r4 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000280)={&(0x7f0000000040)={0x1d, r5}, 0x10, &(0x7f0000000180)={&(0x7f0000000200)={0x1, 0x27, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "c4f40c848d97a447"}}, 0x48}}, 0x0) r6 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r6, &(0x7f00000005c0), 0x10) recvmmsg(r6, &(0x7f0000001080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000002ac0)=""/4096, 0x1000}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$DEVLINK_CMD_RATE_NEW(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000000000000e0001006e657464657673696d0000000f0002006e657464657673696d3000000800030000000000c272d5c7e09f69052f0420a1fbfe23e13c58a7f3d9f7ea525b7460bb2e355a3f1903c1a8042a3b3737bb094ec8f08e9b90fdf432e92148f623ebaee3810a42cfd622"], 0x3c}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r8 = socket$kcm(0x10, 0x2, 0x4) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmsg$kcm(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000040)="89000000120081ae08060cdc030000007f03e3f7000000006ee2ffca1b1f1400000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec001210000140020c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0xff0f0000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) ioctl$TUNSETCARRIER(r7, 0x400454e2, &(0x7f0000000380)=0x1) close(r9) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x5, 0x200, 0x1f, 0x1105, r9, 0x10001, '\x00', 0x0, r7, 0x1, 0x3, 0x5, 0x8002}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0x23}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000000), 0x9) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.events\x00', 0x275a, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x8, 0x7fe2, 0x1}, 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=0x0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500020001000000850000002300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000010c0)='ext4_ext_remove_space_done\x00', r12}, 0x10) 607.376187ms ago: executing program 3 (id=5533): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x406, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14}}}}, @IFLA_MASTER={0x8, 0x3}]}, 0x50}}, 0x0) 539.374195ms ago: executing program 4 (id=5534): syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000880)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8}]}, 0x44}}, 0x0) (async) syz_emit_ethernet(0x68, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x5a, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0x9000000, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000440)=@security={'security\x00', 0x4, 0x4, 0x3b8, 0xffffffff, 0xd0, 0x1a8, 0xd0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x7fffffe, 0x0, {[{{@ipv6={@dev, @ipv4={'\x00', '\xff\xff', @multicast1}, [], [], 'bridge_slave_1\x00', 'geneve0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@private1, @mcast1, [], [], 'geneve1\x00', 'macvlan0\x00'}, 0x0, 0x118, 0x140, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'syz0\x00'}}, @common=@ipv6header={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) (async) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r0, &(0x7f00000005c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000040)={&(0x7f0000000540)={0x40, r1, 0x200, 0x70bd29, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1, 0x67}}}}, [@NL80211_ATTR_WIPHY={0x8, 0x1, 0x9}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0xf}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r2}]}, 0x40}}, 0x8005) socket$inet_sctp(0x2, 0x1, 0x84) (async) r4 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r5, 0x0, 0x30, &(0x7f0000010140)=ANY=[], 0x110) (async) connect$netrom(r4, &(0x7f0000000140)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @default, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000300)={{0x6, @rose}, [@null, @default, @default, @default, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}}}, 0xf8}}, 0x0) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@netrom={'nr', 0x0}, 0x10) (async) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) (async) sendmsg$NL802154_CMD_GET_INTERFACE(0xffffffffffffffff, &(0x7f0000000980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040025bd7000fedbdf250500000008000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=0x0, @ANYBLOB="0c0006000300000000000000"], 0x38}, 0x1, 0x0, 0x0, 0x4001}, 0x40004) (async) sendmsg$DEVLINK_CMD_RELOAD(0xffffffffffffffff, 0x0, 0x0) (async) r8 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) (async) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000021c0)={0x20, r8, 0x1, 0x0, 0x0, {0x3, 0x2, 0x2}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x40030000000000}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) 427.796377ms ago: executing program 4 (id=5535): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='pids.current\x00', 0x0, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x3, &(0x7f0000000100)=[0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x0, 0x5b, 0x0, 0x0, 0x10, &(0x7f0000000180), &(0x7f00000001c0), 0x8, 0xa9, 0x8, 0x8, &(0x7f0000000200)}}, 0x10) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002c00)={0x5, 0x5, &(0x7f0000000040)=@framed={{}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}]}, &(0x7f0000002b40)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1}, 0x90) 402.819542ms ago: executing program 2 (id=5536): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="f0000000100001000000000000000000fe880000000000000000000000000001fe80000000000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe800000000000000000000000000000000000002b000000fc0200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000a00"/168], 0xf0}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r1, 0x0) epoll_create1(0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local, {[@cipso={0x86, 0xf, 0x3, [{0x1, 0x4, "4492"}, {0x7, 0x5, "e0f493"}]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb0100180000000002000014009ed9c34b8e4208e11173870deee618ce00001400000002000000002000000100000d0ba35e508754f6d7be26e86d4e0000000000800000020000000000"], &(0x7f0000001f80)=""/237, 0x2e, 0xed, 0x1}, 0x20) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x2, 0xa, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, [@sadb_x_filter={0x5, 0x1a, @in6=@loopback, @in=@local, 0x0, 0x0, 0x1b5524f0c417548a}]}, 0x38}}, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000140)={r4, 0xffffffffffffffff, 0x24}, 0xc) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r2) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000480)="26d19345d2d4d5f619a46a53cdf385b182611594585965f5d9bec1fbadde417c4e591e14fc3b0f8a140196ba9a9eae64943243727f6751babe5be57a2d0d190f4795f9ce20eb28f88c2e2c7a0b2bbca4de6a4c0718b9b988c6e18de98f1c670c4e0266295e0d0cd46561c0794fcd1bef177e95cb6652be8ebd064c30db4be0ffd2b00d71092247df4471e349eb0540bb6165b0a1b560b5c6968a373eeea43d7707211832fefb1dcfa6aea62d57353eb46335efd4228129657cdbe1d902d8442eb2e8d2cb2ed31840c370f1de92c906c226da78795e5e7c7106e66fc1e04c65a7ac6a405aec2bbbaf110376558b818b4a801abfbc", 0xf4) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000600)={0x5c, r5, 0x610, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_SECCTX={0x2b, 0x7, 'system_u:object_r:crond_unit_file_t:s0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000000)={0x27}, 0x74) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002180)=[{{&(0x7f00000000c0)=@file={0x0, './file0\x00'}, 0x6e, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 402.254561ms ago: executing program 3 (id=5537): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x60, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @crypto_settings=[@NL80211_ATTR_PMK={0x2b, 0xfe, "bacee2aae6d1b417a918fc4aad2a528daf55784d88b55ebe66612e9c26f796a31d127af729f270"}]]}, 0x60}}, 0x0) 307.743236ms ago: executing program 3 (id=5538): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x0, {{@in=@local, @in=@dev={0xac, 0x14, 0x14, 0x3c}, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0xee00}, {@in6=@loopback, 0x0, 0x32}, @in=@dev={0xac, 0x14, 0x14, 0x44}, {0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0xffffffffffffffff}, {0x2}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x96}}, 0xf0}, 0x1, 0x0, 0x0, 0x24004040}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) write$cgroup_int(r4, &(0x7f0000000200), 0x12) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r5, 0x11c, 0x1, 0x0, &(0x7f0000000100)) 285.392902ms ago: executing program 1 (id=5539): openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(0xffffffffffffffff) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@bridge_delneigh={0x3c, 0x1c, 0xc07, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x141}, [@NDA_VLAN={0x6, 0x5, 0x1}, @NDA_FDB_EXT_ATTRS={0xc, 0xe, 0x0, 0x1, [@NFEA_ACTIVITY_NOTIFY={0x5, 0x1, 0x5}]}, @NDA_LLADDR={0xa, 0x2, @random="000200"}]}, 0x3c}}, 0x0) ioctl$FS_IOC_SETFLAGS(0xffffffffffffffff, 0x40086602, &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f00000007c0)=ANY=[], 0x2a8) shutdown(0xffffffffffffffff, 0x0) setsockopt$WPAN_SECURITY(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05acb6aefb00000071114200000000008510000002000000850000007600000095"], 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x60ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00'}, 0x90) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x34, r4, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0x5, 0x1, '\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_IPV4MASK={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}}, 0x0) 248.618617ms ago: executing program 4 (id=5540): sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) accept(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x3, [@array]}, {0x0, [0x0]}}, 0x0, 0x33}, 0x20) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0xfffffffd}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="8801000014"], 0x188}}, 0x0) 163.618652ms ago: executing program 2 (id=5541): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x9, 0xfffffffe}}, &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x70}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 163.053404ms ago: executing program 3 (id=5542): socket$l2tp(0x2, 0x2, 0x73) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet6(0xa, 0x3, 0x2f) socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$kcm(0x2, 0xa, 0x2) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000440)=@newtfilter={0x34, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xfff2}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}]}, 0x34}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 143.781249ms ago: executing program 4 (id=5543): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$qrtr(0xffffffffffffffff, 0x0, 0x0) getpeername$l2tp6(r0, &(0x7f00000002c0)={0xa, 0x0, 0x0, @mcast2}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r2, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) sendmsg$NFT_BATCH(r3, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="180000914d00000000000000000000008500000031000000fb72000000000000"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x1, 0x2}}, 0x26) getsockopt$bt_BT_SECURITY(r4, 0x111, 0x5, 0x0, 0x20001f00) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b0f, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket(0x200000100000011, 0x803, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'xfrm0\x00'}) 100.400438ms ago: executing program 1 (id=5544): r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYRESOCT=0x0], 0x48}}, 0x0) ioctl$SIOCPNGETOBJECT(r0, 0x89e0, &(0x7f0000000000)=0x2) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r2) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)={0x30, r7, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}, @NL802154_SECLEVEL_ATTR_FRAME={0x8}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x30}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r1, &(0x7f0000001740)={&(0x7f0000001680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001700)={&(0x7f00000016c0)={0x38, r7, 0x100, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xffffffffffff0083}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0302}}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}]}, 0x38}, 0x1, 0x0, 0x0, 0xc000}, 0x20000010) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x2c, r3, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}]}, 0x2c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000001880)=[{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000100)="937a07d330673701d08287fd074fbb692a60d5a4e45edaa2560f28ae2f26fa55dadbfd3420182722a617adf5b2ad34ca1c49d2b43aaa4fdcd727c46b3122ae55b2bb", 0x42}, {&(0x7f00000001c0)="bd4a1cd310c827f04306856cc2ceadec8e8af05d5eb0667a88", 0x19}, {&(0x7f0000000200)="cc3fc2e8423f55f7c6f1705c2f0c4726fa3766ba31b1727f63cd0ccabf1d56bdf48db350a6a69d4bbb0c5ba669d14055ea29213355f5bebf863cd8eb85c880721d76f4de983f95e4fb3d3a0178287b9d4a163e0f68a9f2e4fbdcec016209f16debd4bfeadd9d87b5b517d00b8a565ee7240893e107159d2c7b43b8eb7cd091079d3e94901266684fc29e045ded8e81f538a3943bee97087b27c4bef4fdb7d87f2dbd607c3a7f4598e1831a79fcf3018e51bb62327fe90e9ac823e9d09549b81be01b2abef08e30fe303c4a65286d587eea0a193f0f905c01f305c21a716e6218ed459bf9413d2ea20ebc7b506f831482fa88d36dd5b4", 0xf6}, {&(0x7f0000000300)="a140a67aefc4adb63477db4a5c1e3d474046e5e0d40cc5087844e34a4e02b5889e1349588d4953621512f4805b2bcd810e689bdcf20c4ee2b04836e56a552d049e8315d0d3b3bbc1f0fca8b7de2f39bd22345f4f7c0e13db7e470a069fc49e786de34212f9bd0e25ba29cf1bc8f7ea168eb8ada5dabf4e20450f850f8d0485a4fc9208cadd3dcde9aa0933696cd144966bfad91732d1c75a4ae134ad66ce068cd7fe6980cc9804342fda9c88fe546831e40457e9cd85ed9164c57ac190a74510e9a1ece86d", 0xc5}, {&(0x7f0000000400)="50aa80e8e1d6dd35b35f3b294edeb18ba0ae4abb7cfdf68864d281ba146b609406cf41bf0f90cf4451807af55b7d4906502b2dead0c5692d9edfdf22b2168f89ceb93aa5d785c289c2a89061e31a25825b18d5b5edb32d65f66f6ce035aee7c33c995c0b6df419627d50c17e22a993251750bd435c335391ed408b4a31a5c7d823ca0681023e66f62b8fc71b564076896edd8a33a83b8de9239dbd7e2b73da539d6689495c968b8fe9c9134e5a1fb8468c755b808e475bb7235877cbfc97b4dcd495b62cadd8bf91ffa2fcd90a3228f70ade5f28272b57816f5780a297a4ef3e4f297973424bc943", 0xe8}, {&(0x7f0000000500)="91fc6ae21b733f42467be34f451de56760da3a70c2504ea31849465c5ce1f52c4246548e017b32b196850e5220ed9fdc0cba567cef2030c1b124ccc0948cc2bf103c09a4032942bdd8c88ab89302457d32cedbab0767cc65ac2f68a7ed4717dbd32340684aec003924b3714de572933ed919fffa41ad", 0x76}, {&(0x7f0000000580)="e6ece36aaf5b98d938b399f2dd7ca8ec686fe81e2498c22fe13b97d8c11091fa72ff410f0d3daf0e5fb49f50ab919fbac104030836d109b6e003f7aa004a28e751e583cd30087d918af07b539781b1d74b121f29a33321a098ad82ce5980f5b6ac5bc969", 0x64}, {&(0x7f0000000600)="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", 0x1000}], 0x8, 0x0, 0x0, 0x240108c4}, {0x0, 0x0, &(0x7f0000001740), 0x0, &(0x7f0000001780)=[@iv={0xe0, 0x117, 0x2, 0xcb, "676ba5796f8a0df7f9139d0e8b891df12b376c0a83f2c5e9922c94fccc38c923902a246f868d7d099aa03d2a5ef4d100e7ccfc98de832bf6a73946add30d17fa7a43c9673eee8972e38269dbe8d660d6b56266d66310d3ebc6ca1e0630e3bcf139c60116686d5cb88b32a77aa6ce732d06180180d2b57f92a5e873b7537d72fd56ff49ed820e8016202c6fcfa1a3299b9fdd9e76fe24f246c8d2ff27564119dbd437b34b0104719a3453a489ba40b6b9bd72184e3ae66044ef5e56907749ffbb92231fe2b648a82324fec2"}], 0xe0, 0x41}], 0x2, 0x0) 1.089142ms ago: executing program 2 (id=5545): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000005040)={0x0, 0x60000000, &(0x7f0000005000)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x1}}], {0x14}}, 0x3c}}, 0x0) 0s ago: executing program 3 (id=5546): r0 = socket(0x2, 0x6, 0x0) connect$rxrpc(r0, &(0x7f0000000480)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @multicast2}}, 0x24) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[], 0x7c}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000280)={0x7, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xff}, 0x6b) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x75, &(0x7f0000000040)={r3, 0x0, 0x0, 0x0, 0x1}, &(0x7f0000000080)=0x18) sendmsg$NFT_MSG_GETRULE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000400070a0101000000000000000005000000"], 0x14}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000a00)=ANY=[@ANYBLOB="68010000100013070000030000000000ac1414bb000000000000000000000000ac1414aa00000000000000000000000000000000000000000000000000000000a8c95e370a9a424d0bae70216a4958b3d147782ae1bc117f6b02f60480eb4e", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="7f00000100000000000000000000000000000000330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a0000000000000000000000480002006374722d63616d656c6c69612d6165736e69000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000014000e00fe8800000000000000000000000000011c0004000000000000000000fc00"/288], 0x168}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r8, @ANYBLOB="3c00330080000000080211000001080211000000505050505050000000000002aba519ed06dd895d00000100040600000000"], 0x58}}, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000480)=@mangle={'mangle\x00', 0x44, 0x6, 0x418, 0x2b0, 0x210, 0x2b0, 0x2b0, 0x98, 0x380, 0x380, 0x380, 0x380, 0x380, 0x6, 0x0, {[{{@ip={@broadcast, @multicast1=0xe0007600, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @local, 0x0, 0x0, 'batadv_slave_1\x00', 'veth1_virt_wifi\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @local}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'vlan1\x00', 'nr0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @ECN={0x28}}, {{@ip={@loopback, @multicast2, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_team\x00'}, 0x0, 0x70, 0xa0}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @empty}}}, {{@ip={@broadcast, @multicast2, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xd0, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @loopback}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x478) ioctl$sock_inet_SIOCSARP(r9, 0x8955, &(0x7f00000000c0)={{0x2, 0x4e22, @empty}, {0x1, @multicast}, 0x8, {0x2, 0x4e21, @empty}, 'syzkaller0\x00'}) r10 = socket$inet_udp(0x2, 0x2, 0x0) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r11, 0x0) openat$cgroup_ro(r11, 0x0, 0x26e1, 0x0) setsockopt$inet_group_source_req(r10, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @loopback}}}, 0x108) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000010005fba00"/20, @ANYRES32=0x0, @ANYBLOB="0000ebff000a00020411ba67aaaabb0000009c000000000000000000"], 0x34}}, 0x0) r12 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r12, 0x0) kernel console output (not intermixed with test programs): to 1560 would solve the problem. [ 476.375874][T19110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 476.392265][T19193] lo speed is unknown, defaulting to 1000 [ 476.495231][T19110] hsr_slave_0: entered promiscuous mode [ 476.530113][T19110] hsr_slave_1: entered promiscuous mode [ 476.574307][T19213] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4515'. [ 476.705356][T19215] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4516'. [ 476.726878][T19142] lo speed is unknown, defaulting to 1000 [ 477.098401][T19225] netlink: 'syz.3.4520': attribute type 11 has an invalid length. [ 477.118806][T19142] lo speed is unknown, defaulting to 1000 [ 477.321817][T19142] lo speed is unknown, defaulting to 1000 [ 477.491253][T19230] netlink: 'syz.3.4522': attribute type 10 has an invalid length. [ 477.523240][T19230] team0: Device netdevsim0 failed to register rx_handler [ 477.557616][T19142] lo speed is unknown, defaulting to 1000 [ 477.771609][T19142] lo speed is unknown, defaulting to 1000 [ 477.941335][ T4495] Bluetooth: hci4: command tx timeout [ 477.963999][T19142] lo speed is unknown, defaulting to 1000 [ 478.117179][T19142] lo speed is unknown, defaulting to 1000 [ 478.273179][T19215] rdma_rxe: rxe_newlink: failed to add caif0 [ 478.384926][T19244] netlink: 44 bytes leftover after parsing attributes in process `syz.1.4527'. [ 479.028406][T19268] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4536'. [ 479.030661][T19110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 479.069092][T19110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 479.092784][T19110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 479.111016][T19272] netlink: 140 bytes leftover after parsing attributes in process `syz.1.4537'. [ 479.132203][T19110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 479.151183][T19272] rdma_rxe: rxe_newlink: failed to add caif0 [ 479.538632][T19288] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4543'. [ 479.566775][T19110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 479.653846][T19110] 8021q: adding VLAN 0 to HW filter on device team0 [ 479.703906][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 479.711112][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 479.728793][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 479.736010][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 480.006346][T19306] __nla_validate_parse: 1 callbacks suppressed [ 480.006368][T19306] netlink: 108 bytes leftover after parsing attributes in process `syz.1.4548'. [ 480.023427][ T4495] Bluetooth: hci4: command tx timeout [ 480.069247][T19306] netlink: 72 bytes leftover after parsing attributes in process `syz.1.4548'. [ 480.137709][T19313] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.147244][T19313] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.156225][T19313] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.165666][T19313] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 480.194038][T19313] vxlan0: entered promiscuous mode [ 480.199256][T19313] vxlan0: entered allmulticast mode [ 480.219342][T19313] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.228478][T19313] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.237966][T19313] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.247058][T19313] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 480.324282][T19317] ip6erspan0: entered allmulticast mode [ 480.384756][T19110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 480.575693][ T29] audit: type=1804 audit(1719630478.289:51): pid=19329 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4556" name="/root/syzkaller.AXkTY8/546/cgroup.controllers" dev="sda1" ino=2004 res=1 errno=0 [ 480.613138][T19329] netlink: 'syz.3.4556': attribute type 4 has an invalid length. [ 480.685794][T19331] netlink: 'syz.3.4556': attribute type 4 has an invalid length. [ 480.730354][T19110] veth0_vlan: entered promiscuous mode [ 480.768464][T19110] veth1_vlan: entered promiscuous mode [ 480.854489][T19110] veth0_macvtap: entered promiscuous mode [ 480.876856][T19110] veth1_macvtap: entered promiscuous mode [ 480.921202][T19110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.953759][T19110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 480.980331][T19110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 480.999576][T19110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.009716][T19110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.024685][T19110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.035724][T19110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.048320][T19110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.081906][T19110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.100322][T19110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.120423][T19110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 481.150196][T19110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.175346][T19110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 481.223508][T19110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.250318][T19110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.264123][T19110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.288829][T19110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.310769][T19110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.334888][T19110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.357177][T19110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.368477][T19110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.378539][T19110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.389175][T19110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.402771][T19110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 481.414323][T19110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 481.427585][T19110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 481.463543][T19110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.475821][T19110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.489053][T19110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.498079][T19110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 481.717434][ T6813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.750494][ T6813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 481.831578][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 481.850211][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 482.003545][T19370] netlink: 104 bytes leftover after parsing attributes in process `syz.1.4569'. [ 482.031204][T19374] ipt_ECN: cannot use operation on non-tcp rule [ 482.277294][T19383] netlink: zone id is out of range [ 482.285818][T19383] netlink: zone id is out of range [ 482.291506][T19383] netlink: zone id is out of range [ 482.297195][T19383] netlink: zone id is out of range [ 482.304833][T19383] netlink: zone id is out of range [ 482.312726][T19383] netlink: zone id is out of range [ 482.317882][T19383] netlink: zone id is out of range [ 482.323285][T19383] netlink: zone id is out of range [ 482.328449][T19383] netlink: zone id is out of range [ 482.355731][T19383] netlink: zone id is out of range [ 482.440900][T19386] netlink: 'syz.3.4575': attribute type 10 has an invalid length. [ 483.112836][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4584'. [ 483.131357][T19408] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4584'. [ 483.292868][T19414] veth0_vlan: entered allmulticast mode [ 483.354106][T19418] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4588'. [ 483.852110][T19434] bridge0: port 2(bridge_slave_1) entered disabled state [ 483.948716][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4591'. [ 484.131289][T19447] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4594'. [ 484.186471][T19447] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.195455][T19447] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.206625][T19447] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.215484][T19447] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.249131][T19447] vxlan0: entered promiscuous mode [ 484.277045][T19451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4596'. [ 484.300832][T19451] netlink: 'syz.3.4596': attribute type 18 has an invalid length. [ 484.362347][T19451] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.371452][T19451] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.380434][T19451] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.389148][T19451] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 484.420862][T19451] vxlan0: entered promiscuous mode [ 484.499776][ T2837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.283464][ T2837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.339189][ T2837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.423490][ T2837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 485.558961][ T2837] bridge_slave_1: left allmulticast mode [ 485.564863][ T2837] bridge_slave_1: left promiscuous mode [ 485.571485][ T2837] bridge0: port 2(bridge_slave_1) entered disabled state [ 485.581207][ T2837] bridge_slave_0: left allmulticast mode [ 485.586979][ T2837] bridge_slave_0: left promiscuous mode [ 485.594764][ T2837] bridge0: port 1(bridge_slave_0) entered disabled state [ 485.779962][T19455] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4598'. [ 485.857439][T19463] x_tables: duplicate underflow at hook 2 [ 485.921093][ T29] audit: type=1804 audit(1719630483.629:52): pid=19461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4599" name="/root/syzkaller.iHpBVL/222/cgroup.controllers" dev="sda1" ino=2000 res=1 errno=0 [ 486.331486][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 486.351674][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 486.360093][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 486.384763][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 486.407279][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 486.416902][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 486.584924][ T2837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 486.621253][ T2837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 486.636592][ T2837] bond0 (unregistering): Released all slaves [ 486.667096][T19461] geneve2: entered promiscuous mode [ 486.700261][T19461] geneve2: entered allmulticast mode [ 486.879820][T19484] batadv0: entered promiscuous mode [ 486.931748][T19475] lo speed is unknown, defaulting to 1000 [ 487.043660][T19498] netlink: 196 bytes leftover after parsing attributes in process `syz.1.4609'. [ 487.152487][T19498] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 487.178569][T19505] netlink: 'syz.1.4609': attribute type 10 has an invalid length. [ 487.208262][T19505] bond0: (slave bond_slave_0): Releasing backup interface [ 487.269704][T19506] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4610'. [ 487.294947][T19506] netlink: 'syz.4.4610': attribute type 18 has an invalid length. [ 487.318329][T19506] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.327489][T19506] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.336463][T19506] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.345552][T19506] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 487.366009][T19506] vxlan0: entered promiscuous mode [ 487.466562][T19512] can: request_module (can-proto-4) failed. [ 488.100003][ T2837] hsr_slave_0: left promiscuous mode [ 488.113470][ T2837] hsr_slave_1: left promiscuous mode [ 488.159941][ T2837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 488.182498][ T2837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 488.212392][ T2837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 488.235495][ T2837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 488.305514][ T2837] veth1_macvtap: left promiscuous mode [ 488.311953][ T2837] veth0_macvtap: left promiscuous mode [ 488.317754][ T2837] veth1_vlan: left promiscuous mode [ 488.325680][ T2837] veth0_vlan: left promiscuous mode [ 488.500437][ T5102] Bluetooth: hci4: command tx timeout [ 489.007747][ T2837] team0 (unregistering): Port device team_slave_1 removed [ 489.057093][ T2837] team0 (unregistering): Port device team_slave_0 removed [ 489.676042][T19475] chnl_net:caif_netlink_parms(): no params data found [ 489.830144][T19573] net_ratelimit: 30 callbacks suppressed [ 489.830166][T19573] openvswitch: netlink: IP tunnel dst address not specified [ 489.883906][T19572] ieee802154 phy0 wpan0: encryption failed: -22 [ 490.034980][ T6813] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 490.078590][T19475] bridge0: port 1(bridge_slave_0) entered blocking state [ 490.096746][T19475] bridge0: port 1(bridge_slave_0) entered disabled state [ 490.111235][T19475] bridge_slave_0: entered allmulticast mode [ 490.125147][T19475] bridge_slave_0: entered promiscuous mode [ 490.169460][T19475] bridge0: port 2(bridge_slave_1) entered blocking state [ 490.187592][T19475] bridge0: port 2(bridge_slave_1) entered disabled state [ 490.198306][T19475] bridge_slave_1: entered allmulticast mode [ 490.219601][T19475] bridge_slave_1: entered promiscuous mode [ 490.331148][T19475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 490.364733][T19475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 490.580585][ T5102] Bluetooth: hci4: command tx timeout [ 490.598355][T19605] can: request_module (can-proto-4) failed. [ 490.612328][T19475] team0: Port device team_slave_0 added [ 490.721540][T19475] team0: Port device team_slave_1 added [ 490.813202][T19475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 490.831119][T19475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.894325][T19475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 490.927158][T19475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 490.943155][T19475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 490.979706][T19475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 491.012379][T19617] vlan3: entered promiscuous mode [ 491.017505][T19617] gretap0: entered promiscuous mode [ 491.044287][T19617] vlan3: entered allmulticast mode [ 491.049465][T19617] gretap0: entered allmulticast mode [ 491.091969][T19617] gretap0: left allmulticast mode [ 491.097151][T19617] gretap0: left promiscuous mode [ 491.284106][T19475] hsr_slave_0: entered promiscuous mode [ 491.301278][T19475] hsr_slave_1: entered promiscuous mode [ 491.670348][T19638] syz0: rxe_newlink: already configured on lo [ 491.872222][T19645] netlink: 'syz.2.4648': attribute type 5 has an invalid length. [ 491.901694][T19645] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4648'. [ 491.954592][T19645] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4648'. [ 492.048832][T19654] netlink: 'syz.3.4652': attribute type 3 has an invalid length. [ 492.226628][T19475] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 492.267277][T19475] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 492.300375][T19475] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 492.343060][T19475] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 492.577598][T19475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 492.644736][T19475] 8021q: adding VLAN 0 to HW filter on device team0 [ 492.660604][ T5102] Bluetooth: hci4: command tx timeout [ 492.683164][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 492.690403][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 492.722940][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 492.730189][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 492.789198][T19475] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 492.810412][T19475] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 493.058457][T19695] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4668'. [ 493.193722][ T29] audit: type=1804 audit(1719630490.909:53): pid=19701 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4670" name="/root/syzkaller.syTG5G/128/cgroup.controllers" dev="sda1" ino=1999 res=1 errno=0 [ 493.236664][T19475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 493.355715][T19708] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 493.421172][T19711] netlink: 11 bytes leftover after parsing attributes in process `syz.1.4674'. [ 493.430327][T19475] veth0_vlan: entered promiscuous mode [ 493.439987][T19475] veth1_vlan: entered promiscuous mode [ 493.539105][T19475] veth0_macvtap: entered promiscuous mode [ 493.571823][T19714] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 493.581040][T19475] veth1_macvtap: entered promiscuous mode [ 493.656265][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.687923][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.706894][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.742710][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.769336][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.796997][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.818581][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.855039][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.881667][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.892412][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.912509][T19728] netlink: 'syz.2.4680': attribute type 3 has an invalid length. [ 493.913234][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 493.946575][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 493.978634][T19475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 494.006152][T19730] netlink: 'syz.1.4678': attribute type 10 has an invalid length. [ 494.057942][T19730] team0: Port device syz_tun added [ 494.082288][T19731] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4680'. [ 494.110008][T19731] vlan3: entered promiscuous mode [ 494.120101][T19731] macvlan2: entered promiscuous mode [ 494.137403][T19731] macvlan2: left promiscuous mode [ 494.182100][T19736] netlink: 8 bytes leftover after parsing attributes in process `syz.4.4682'. [ 494.204512][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.229133][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.257250][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.271166][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.283593][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.304335][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.320319][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.337146][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.347555][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.358178][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.368220][T19475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 494.381658][T19475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 494.394879][T19475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 494.403177][T19738] netlink: 'syz.3.4683': attribute type 2 has an invalid length. [ 494.475546][T19475] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.493227][T19475] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.503565][T19475] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.512366][T19475] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 494.652329][T19755] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 494.698096][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.718285][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.741962][ T5102] Bluetooth: hci4: command tx timeout [ 494.782001][ T2837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 494.805296][ T2837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 494.981431][T19764] syz.3.4692[19764] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 495.087083][T19765] lo speed is unknown, defaulting to 1000 [ 495.673009][T19797] netlink: 60 bytes leftover after parsing attributes in process `syz.1.4704'. [ 495.688555][T19796] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 495.705999][T19797] openvswitch: Êü: Dropping previously announced user features [ 496.884421][ T29] audit: type=1804 audit(1719630494.599:54): pid=19842 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4719" name="/root/syzkaller.syTG5G/145/cgroup.controllers" dev="sda1" ino=2002 res=1 errno=0 [ 496.944454][T19845] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4720'. [ 497.356098][T19863] openvswitch: netlink: IP tunnel dst address not specified [ 497.390918][T19866] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4728'. [ 497.401089][T19866] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4728'. [ 497.476745][T19870] netlink: 'syz.1.4729': attribute type 5 has an invalid length. [ 497.486061][T19870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4729'. [ 497.665608][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.750153][ T5102] Bluetooth: hci0: command 0x0406 tx timeout [ 498.768813][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.846310][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.914110][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.014221][ T35] bridge_slave_1: left allmulticast mode [ 499.019899][ T35] bridge_slave_1: left promiscuous mode [ 499.026836][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.036868][ T35] bridge_slave_0: left allmulticast mode [ 499.042956][ T35] bridge_slave_0: left promiscuous mode [ 499.049860][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.533985][T19895] openvswitch: netlink: IP tunnel dst address not specified [ 499.695267][ T4495] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 499.714610][ T4495] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 499.723322][ T4495] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 499.739047][ T4495] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 499.748744][ T4495] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 499.756795][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 499.775213][ T4495] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 499.827161][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 499.852614][ T35] bond0 (unregistering): Released all slaves [ 499.874335][T19890] tipc: Started in network mode [ 499.879408][T19890] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 499.889358][T19890] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 499.903704][T19890] tipc: Enabled bearer , priority 10 [ 499.925103][T19903] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 500.036303][T19903] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4741'. [ 500.036505][T19898] lo speed is unknown, defaulting to 1000 [ 500.359423][T19905] syzkaller0: entered promiscuous mode [ 500.378629][T19905] syzkaller0: entered allmulticast mode [ 500.705945][T19932] openvswitch: netlink: IP tunnel dst address not specified [ 500.892455][ T5191] tipc: Node number set to 1 [ 501.787539][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.861310][ T4495] Bluetooth: hci4: command tx timeout [ 502.960777][T19949] sctp: [Deprecated]: syz.3.4756 (pid 19949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 502.960777][T19949] Use struct sctp_sack_info instead [ 503.005696][T19949] sctp: [Deprecated]: syz.3.4756 (pid 19949) Use of struct sctp_assoc_value in delayed_ack socket option. [ 503.005696][T19949] Use struct sctp_sack_info instead [ 503.048896][T19947] xt_TPROXY: Can be used only with -p tcp or -p udp [ 503.102610][T19947] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4754'. [ 503.179622][T19898] chnl_net:caif_netlink_parms(): no params data found [ 503.258922][ T35] hsr_slave_0: left promiscuous mode [ 503.269722][ T35] hsr_slave_1: left promiscuous mode [ 503.286054][T19962] openvswitch: netlink: IP tunnel dst address not specified [ 503.294780][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 503.304044][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 503.348236][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 503.368679][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 503.406305][T19970] netlink: zone id is out of range [ 503.418390][T19970] netlink: zone id is out of range [ 503.429106][T19970] netlink: zone id is out of range [ 503.440435][ T35] veth1_macvtap: left promiscuous mode [ 503.443378][T19970] netlink: zone id is out of range [ 503.454468][ T35] veth0_macvtap: left promiscuous mode [ 503.461493][ T35] veth1_vlan: left promiscuous mode [ 503.466982][ T35] veth0_vlan: left promiscuous mode [ 503.484191][T19970] netlink: set zone limit has 4 unknown bytes [ 503.941599][ T4495] Bluetooth: hci4: command tx timeout [ 504.208290][ T35] team0 (unregistering): Port device team_slave_1 removed [ 504.249654][ T35] team0 (unregistering): Port device team_slave_0 removed [ 504.959411][T19898] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.002577][T20004] xt_TPROXY: Can be used only with -p tcp or -p udp [ 505.011082][T19898] bridge0: port 1(bridge_slave_0) entered disabled state [ 505.018385][T19898] bridge_slave_0: entered allmulticast mode [ 505.038038][T19898] bridge_slave_0: entered promiscuous mode [ 505.063848][T19994] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4771'. [ 505.191979][T19898] bridge0: port 2(bridge_slave_1) entered blocking state [ 505.199255][T19898] bridge0: port 2(bridge_slave_1) entered disabled state [ 505.206872][T19898] bridge_slave_1: entered allmulticast mode [ 505.217039][T19898] bridge_slave_1: entered promiscuous mode [ 505.251097][T20009] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4770'. [ 505.364286][T19898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 505.416458][T19898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 505.562177][T19898] team0: Port device team_slave_0 added [ 505.581660][T20023] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4779'. [ 505.593492][T19898] team0: Port device team_slave_1 added [ 505.719688][T19898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.727387][T19898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.763600][T19898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.769386][T20023] ieee802154 phy0 wpan0: encryption failed: -22 [ 505.817437][T19898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.827398][T19898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.858781][T19898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.972957][T20030] geneve2: entered promiscuous mode [ 505.978785][T20030] geneve2: entered allmulticast mode [ 506.021873][ T4495] Bluetooth: hci4: command tx timeout [ 506.089735][T19898] hsr_slave_0: entered promiscuous mode [ 506.123131][T19898] hsr_slave_1: entered promiscuous mode [ 506.476311][T20059] vxcan1: tx address claim with different name [ 506.977875][T19898] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 507.006485][T19898] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 507.045301][T19898] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 507.078548][T19898] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 507.306060][T19898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 507.332250][T19898] 8021q: adding VLAN 0 to HW filter on device team0 [ 507.361660][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.368812][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 507.407187][ T5191] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.414386][ T5191] bridge0: port 2(bridge_slave_1) entered forwarding state [ 507.611431][T20109] netlink: 'syz.3.4809': attribute type 33 has an invalid length. [ 508.073577][T19898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 508.111528][ T4495] Bluetooth: hci4: command tx timeout [ 508.185865][T20139] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4815'. [ 508.235157][T20139] netlink: zone id is out of range [ 508.244043][T19898] veth0_vlan: entered promiscuous mode [ 508.295385][T19898] veth1_vlan: entered promiscuous mode [ 508.412680][T19898] veth0_macvtap: entered promiscuous mode [ 508.445425][T19898] veth1_macvtap: entered promiscuous mode [ 508.484409][T19898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.507975][T19898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.534841][T19898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.570984][T19898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.574500][T20156] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 508.595029][T20157] "syz.2.4821" (20157) uses obsolete ecb(arc4) skcipher [ 508.603255][T19898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.627578][T19898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.638054][T20162] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 508.652317][T19898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.686143][T19898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.696625][T19898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.707485][T19898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.717439][T19898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 508.728484][T19898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.759867][T19898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 508.801297][T19898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.840191][T19898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.850492][T19898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.861279][T19898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.871235][T19898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.883462][T19898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.894404][T19898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.905067][T19898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.915300][T19898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.925839][T19898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.935813][T19898] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 508.946604][T19898] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 508.958356][T19898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 508.993299][T19898] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.040231][T19898] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.049152][T19898] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.100613][T19898] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 509.353672][ T2874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.378921][ T2874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.465879][ T29] audit: type=1804 audit(1719630507.179:55): pid=20185 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.4831" name="/root/syzkaller.syTG5G/172/cgroup.controllers" dev="sda1" ino=1990 res=1 errno=0 [ 509.473411][ T6813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 509.570622][ T6813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 509.896853][T20205] team0: entered promiscuous mode [ 509.907948][T20205] team_slave_0: entered promiscuous mode [ 509.918240][T20205] team_slave_1: entered promiscuous mode [ 509.948632][T20205] syz_tun: entered promiscuous mode [ 509.982034][T20204] team0: left promiscuous mode [ 509.993621][T20204] team_slave_0: left promiscuous mode [ 510.007231][T20204] team_slave_1: left promiscuous mode [ 510.015681][T20204] syz_tun: left promiscuous mode [ 510.112967][T20199] syzkaller0: entered promiscuous mode [ 510.118562][T20199] syzkaller0: entered allmulticast mode [ 512.090545][T20220] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 512.101243][T20226] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4843'. [ 512.855452][T20252] can: request_module (can-proto-4) failed. [ 512.884936][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.013711][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.111383][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.188691][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 513.286051][ T35] bridge_slave_1: left allmulticast mode [ 513.293824][ T35] bridge_slave_1: left promiscuous mode [ 513.299519][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 513.313244][ T35] bridge_slave_0: left allmulticast mode [ 513.318911][ T35] bridge_slave_0: left promiscuous mode [ 513.324675][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 513.718763][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 513.738733][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 513.750713][ T35] bond0 (unregistering): Released all slaves [ 514.137789][ T35] hsr_slave_0: left promiscuous mode [ 514.144040][ T35] hsr_slave_1: left promiscuous mode [ 514.155730][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 514.163284][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 514.172639][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 514.181788][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 514.209748][ T35] veth1_macvtap: left promiscuous mode [ 514.215583][ T35] veth0_macvtap: left promiscuous mode [ 514.221500][ T35] veth1_vlan: left promiscuous mode [ 514.226779][ T35] veth0_vlan: left promiscuous mode [ 514.607462][T20272] netlink: 120 bytes leftover after parsing attributes in process `syz.3.4858'. [ 514.689942][T20279] xt_TPROXY: Can be used only with -p tcp or -p udp [ 514.887480][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 514.898659][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 514.906902][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 514.922806][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 514.938122][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 514.946797][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 515.209623][ T35] team0 (unregistering): Port device team_slave_1 removed [ 515.319416][ T35] team0 (unregistering): Port device team_slave_0 removed [ 515.819069][T20281] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4858'. [ 515.958098][T20282] lo speed is unknown, defaulting to 1000 [ 516.650524][T20318] can: request_module (can-proto-4) failed. [ 516.888546][T20282] chnl_net:caif_netlink_parms(): no params data found [ 516.924625][T20340] syz.3.4876[20340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.924905][T20340] syz.3.4876[20340] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 516.980632][ T4495] Bluetooth: hci4: command tx timeout [ 517.367687][T20282] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.380953][T20282] bridge0: port 1(bridge_slave_0) entered disabled state [ 517.388419][T20282] bridge_slave_0: entered allmulticast mode [ 517.396172][T20282] bridge_slave_0: entered promiscuous mode [ 517.407636][T20282] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.415243][T20282] bridge0: port 2(bridge_slave_1) entered disabled state [ 517.422632][T20282] bridge_slave_1: entered allmulticast mode [ 517.432252][T20282] bridge_slave_1: entered promiscuous mode [ 517.548907][T20282] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 517.583025][T20282] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 517.683251][T20282] team0: Port device team_slave_0 added [ 517.684476][T20377] netlink: 'syz.4.4886': attribute type 2 has an invalid length. [ 517.703782][T20282] team0: Port device team_slave_1 added [ 517.706120][T20377] netlink: 'syz.4.4886': attribute type 1 has an invalid length. [ 517.718524][T20377] netlink: 181400 bytes leftover after parsing attributes in process `syz.4.4886'. [ 517.809540][T20282] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 517.824401][T20282] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.826635][T20381] netlink: zone id is out of range [ 517.855616][T20282] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 517.856452][T20381] netlink: zone id is out of range [ 517.874188][T20377] netlink: 72 bytes leftover after parsing attributes in process `syz.4.4886'. [ 517.876445][T20381] netlink: zone id is out of range [ 517.901770][T20381] netlink: zone id is out of range [ 517.908469][T20381] netlink: zone id is out of range [ 517.916343][T20381] netlink: zone id is out of range [ 517.916625][T20282] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 517.921892][T20381] netlink: zone id is out of range [ 517.937355][T20282] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 517.951788][T20381] netlink: set zone limit has 4 unknown bytes [ 517.970236][T20282] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 518.081484][T20282] hsr_slave_0: entered promiscuous mode [ 518.100654][T20282] hsr_slave_1: entered promiscuous mode [ 518.362555][T20392] can: request_module (can-proto-4) failed. [ 518.500850][ T4495] Bluetooth: hci0: command 0x0406 tx timeout [ 518.754069][T20424] netlink: zone id is out of range [ 518.759288][T20424] netlink: zone id is out of range [ 519.063277][ T4495] Bluetooth: hci4: command tx timeout [ 519.136649][T20441] ip6tnl1: entered promiscuous mode [ 519.155526][T20441] ip6tnl1: entered allmulticast mode [ 519.244450][T20282] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 519.271285][T20282] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 519.301284][T20282] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 519.327104][T20282] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 519.451599][T20449] can: request_module (can-proto-4) failed. [ 519.570617][T20282] 8021q: adding VLAN 0 to HW filter on device bond0 [ 519.610010][T20462] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4911'. [ 519.622653][T20282] 8021q: adding VLAN 0 to HW filter on device team0 [ 519.649467][T20462] netlink: 'syz.1.4911': attribute type 3 has an invalid length. [ 519.667999][ T5191] bridge0: port 1(bridge_slave_0) entered blocking state [ 519.675208][ T5191] bridge0: port 1(bridge_slave_0) entered forwarding state [ 519.734203][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 519.741389][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 520.376409][T20282] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 520.568849][T20282] veth0_vlan: entered promiscuous mode [ 520.608294][T20282] veth1_vlan: entered promiscuous mode [ 520.753904][T20282] veth0_macvtap: entered promiscuous mode [ 520.807889][T20282] veth1_macvtap: entered promiscuous mode [ 520.923857][T20282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 520.963411][T20282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.010861][T20282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.036448][T20282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.061418][T20282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.086493][T20282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.096990][T20282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.108886][T20282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.120475][T20282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.133544][T20282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.143746][ T5102] Bluetooth: hci4: command tx timeout [ 521.155051][T20282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 521.168384][T20282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.183743][T20282] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 521.271285][ T35] wlan0: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 521.283630][T20535] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4930'. [ 521.349461][T20282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.398019][T20282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.429813][T20282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.480324][T20282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.499494][T20282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.520155][T20282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.549614][T20282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.569914][T20282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.591835][T20282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.613584][T20282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.645285][T20282] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 521.691007][T20282] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 521.712569][T20282] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.728875][T20282] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.750464][T20282] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.764116][T20282] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 521.780924][T20282] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.148162][ T2860] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.187925][ T2860] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.237712][ T6813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.258785][ T6813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.388124][T20585] netlink: 12 bytes leftover after parsing attributes in process `syz.3.4948'. [ 522.402695][T20586] can: request_module (can-proto-4) failed. [ 522.641259][T20607] team0: entered promiscuous mode [ 522.648969][T20607] team_slave_0: entered promiscuous mode [ 522.659137][T20607] team_slave_1: entered promiscuous mode [ 522.681942][T20607] syz_tun: entered promiscuous mode [ 522.804245][T20604] team0: left promiscuous mode [ 522.809093][T20604] team_slave_0: left promiscuous mode [ 522.842421][T20604] team_slave_1: left promiscuous mode [ 522.848037][T20604] syz_tun: left promiscuous mode [ 523.220618][ T5102] Bluetooth: hci4: command 0x0419 tx timeout [ 523.632051][T20653] net_ratelimit: 14 callbacks suppressed [ 523.632071][T20653] netlink: zone id is out of range [ 523.657787][T20653] netlink: zone id is out of range [ 523.664753][T20653] netlink: zone id is out of range [ 523.679700][T20653] netlink: zone id is out of range [ 523.686688][T20653] netlink: zone id is out of range [ 523.692482][T20653] netlink: zone id is out of range [ 523.697823][T20653] netlink: zone id is out of range [ 523.707260][T20653] netlink: zone id is out of range [ 523.718723][T20653] netlink: zone id is out of range [ 523.726827][T20653] netlink: zone id is out of range [ 524.546394][ T5102] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 524.556527][ T5102] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 524.567109][ T5102] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 524.602681][ T5102] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 524.621425][ T5102] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 524.631636][ T5102] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 526.743253][ T5102] Bluetooth: hci2: command tx timeout [ 526.797076][ T6813] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.808418][ T6813] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.922440][ T6813] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 526.935817][ T6813] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.979699][T20678] lo speed is unknown, defaulting to 1000 [ 527.063193][ T6813] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.100131][ T6813] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.312052][ T6813] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 527.340483][ T6813] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 527.577074][ T6813] bridge_slave_1: left allmulticast mode [ 527.583455][ T6813] bridge_slave_1: left promiscuous mode [ 527.589579][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.598500][ T6813] bridge_slave_0: left allmulticast mode [ 527.605873][ T6813] bridge_slave_0: left promiscuous mode [ 527.611832][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.086853][ T6813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 528.099147][ T6813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 528.111122][ T6813] bond0 (unregistering): Released all slaves [ 528.175077][ T6813] tipc: Disabling bearer [ 528.184717][ T6813] tipc: Left network mode [ 528.251830][T20678] chnl_net:caif_netlink_parms(): no params data found [ 528.345331][T20678] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.358610][T20678] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.366079][T20678] bridge_slave_0: entered allmulticast mode [ 528.374454][T20678] bridge_slave_0: entered promiscuous mode [ 528.416262][T20678] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.425653][T20678] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.434827][T20678] bridge_slave_1: entered allmulticast mode [ 528.442863][T20678] bridge_slave_1: entered promiscuous mode [ 528.492995][T20678] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.554397][T20678] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.612229][T20678] team0: Port device team_slave_0 added [ 528.621629][T20678] team0: Port device team_slave_1 added [ 528.729030][T20678] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.751924][T20678] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.785806][T20678] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.808542][T20678] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.816762][T20678] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.844604][T20678] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.855611][ T5102] Bluetooth: hci2: command tx timeout [ 528.867441][ T6813] hsr_slave_0: left promiscuous mode [ 528.879582][ T6813] hsr_slave_1: left promiscuous mode [ 528.885770][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 528.894249][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 528.903444][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 528.911041][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 528.932610][ T6813] veth1_macvtap: left promiscuous mode [ 528.938205][ T6813] veth0_macvtap: left promiscuous mode [ 528.943957][ T6813] veth1_vlan: left promiscuous mode [ 529.479087][ T4495] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 529.495793][ T4495] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 529.505038][ T4495] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 529.515479][ T4495] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 529.525451][ T4495] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 529.539304][ T4495] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 529.795241][ T6813] team0 (unregistering): Port device team_slave_1 removed [ 529.860431][ T6813] team0 (unregistering): Port device team_slave_0 removed [ 530.350802][T20727] netlink: 'syz.2.4991': attribute type 16 has an invalid length. [ 530.358833][T20727] netlink: 48 bytes leftover after parsing attributes in process `syz.2.4991'. [ 530.369259][T20727] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.543484][T20733] lo speed is unknown, defaulting to 1000 [ 530.573231][T20678] hsr_slave_0: entered promiscuous mode [ 530.610996][T20678] hsr_slave_1: entered promiscuous mode [ 530.625093][T20678] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.644063][T20678] Cannot create hsr debugfs directory [ 530.658834][T20741] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4995'. [ 530.684975][T20741] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4995'. [ 530.803436][T20745] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4996'. [ 530.831438][T20745] netlink: 'syz.1.4996': attribute type 12 has an invalid length. [ 530.864877][T20745] netlink: 'syz.1.4996': attribute type 13 has an invalid length. [ 530.900318][ T4495] Bluetooth: hci2: command tx timeout [ 531.155206][T20753] net_ratelimit: 28 callbacks suppressed [ 531.155227][T20753] netlink: zone id is out of range [ 531.170683][T20753] netlink: zone id is out of range [ 531.181281][T20753] netlink: zone id is out of range [ 531.188527][T20753] netlink: zone id is out of range [ 531.194506][T20753] netlink: zone id is out of range [ 531.220609][T20753] netlink: zone id is out of range [ 531.235520][T20753] netlink: zone id is out of range [ 531.256300][T20753] netlink: zone id is out of range [ 531.267231][T20753] netlink: zone id is out of range [ 531.273841][T20753] netlink: zone id is out of range [ 531.288806][ T6813] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.511175][ T6813] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.620448][ T4495] Bluetooth: hci4: command tx timeout [ 531.640620][T20769] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5002'. [ 531.724293][ T6813] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.828716][ T6813] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 531.857803][T20733] chnl_net:caif_netlink_parms(): no params data found [ 532.021401][T20777] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5006'. [ 532.115313][T20733] bridge0: port 1(bridge_slave_0) entered blocking state [ 532.123780][T20733] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.132610][T20733] bridge_slave_0: entered allmulticast mode [ 532.140778][T20733] bridge_slave_0: entered promiscuous mode [ 532.175675][T20733] bridge0: port 2(bridge_slave_1) entered blocking state [ 532.189963][T20733] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.198125][T20733] bridge_slave_1: entered allmulticast mode [ 532.207206][T20733] bridge_slave_1: entered promiscuous mode [ 532.344257][ T6813] bridge_slave_1: left allmulticast mode [ 532.349966][ T6813] bridge_slave_1: left promiscuous mode [ 532.369126][ T6813] bridge0: port 2(bridge_slave_1) entered disabled state [ 532.379650][ T6813] bridge_slave_0: left allmulticast mode [ 532.386049][ T6813] bridge_slave_0: left promiscuous mode [ 532.392396][ T6813] bridge0: port 1(bridge_slave_0) entered disabled state [ 532.950729][ T6813] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 532.979950][ T6813] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 532.986996][ T4495] Bluetooth: hci2: command tx timeout [ 532.999907][ T6813] bond0 (unregistering): Released all slaves [ 533.022161][T20678] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 533.048659][T20733] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 533.086589][T20678] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 533.147149][T20678] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 533.204815][T20733] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 533.213937][T20802] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5014'. [ 533.276384][T20798] : renamed from ipvlan1 [ 533.287678][T20678] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 533.444945][T20733] team0: Port device team_slave_0 added [ 533.516554][T20733] team0: Port device team_slave_1 added [ 533.522638][T20816] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5019'. [ 533.583467][T20816] xt_TPROXY: Can be used only with -p tcp or -p udp [ 533.632410][T20816] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5019'. [ 533.662464][T20733] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.669496][T20733] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.673519][T20818] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5020'. [ 533.732618][ T4495] Bluetooth: hci4: command tx timeout [ 533.753699][T20733] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.794418][T20733] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.840492][T20733] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.888161][T20733] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.971568][ T6813] hsr_slave_0: left promiscuous mode [ 533.983917][ T6813] hsr_slave_1: left promiscuous mode [ 533.996903][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 534.006858][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 534.015499][ T6813] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 534.023579][ T6813] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 534.051215][ T6813] veth1_macvtap: left promiscuous mode [ 534.058480][ T6813] veth0_macvtap: left promiscuous mode [ 534.069045][ T6813] veth1_vlan: left promiscuous mode [ 534.079139][ T6813] veth0_vlan: left promiscuous mode [ 534.719785][ T6813] team0 (unregistering): Port device team_slave_1 removed [ 534.775907][ T6813] team0 (unregistering): Port device team_slave_0 removed [ 535.370709][T20733] hsr_slave_0: entered promiscuous mode [ 535.377517][T20733] hsr_slave_1: entered promiscuous mode [ 535.408687][T20832] __nla_validate_parse: 2 callbacks suppressed [ 535.408707][T20832] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5024'. [ 535.554492][T20842] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5026'. [ 535.780298][ T4495] Bluetooth: hci4: command tx timeout [ 535.932544][T20846] lo speed is unknown, defaulting to 1000 [ 536.083828][T20857] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5030'. [ 536.097103][T20678] 8021q: adding VLAN 0 to HW filter on device bond0 [ 536.137902][T20678] 8021q: adding VLAN 0 to HW filter on device team0 [ 536.179067][ T5147] bridge0: port 1(bridge_slave_0) entered blocking state [ 536.186323][ T5147] bridge0: port 1(bridge_slave_0) entered forwarding state [ 536.261205][T20859] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5031'. [ 536.264138][ T5147] bridge0: port 2(bridge_slave_1) entered blocking state [ 536.277493][ T5147] bridge0: port 2(bridge_slave_1) entered forwarding state [ 536.301076][T20859] xt_TPROXY: Can be used only with -p tcp or -p udp [ 536.344273][T20859] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5031'. [ 536.602639][T20733] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 536.659737][T20733] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 536.811019][T20733] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 536.824071][T20733] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 537.093635][T20678] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 537.286399][T20891] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5040'. [ 537.331415][T20891] net_ratelimit: 21 callbacks suppressed [ 537.331436][T20891] openvswitch: netlink: Flow actions attr not present in new flow. [ 537.372915][T20733] 8021q: adding VLAN 0 to HW filter on device bond0 [ 537.464460][T20733] 8021q: adding VLAN 0 to HW filter on device team0 [ 537.512494][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 537.519678][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 537.542309][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 537.549469][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 537.737624][T20897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.757938][T20897] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.861224][ T4495] Bluetooth: hci4: command tx timeout [ 537.898232][T20897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.909734][T20897] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.124974][T20897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.143073][T20897] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.411706][T20922] netlink: 209848 bytes leftover after parsing attributes in process `syz.2.5050'. [ 538.437453][T20897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 538.446188][T20922] openvswitch: netlink: Message has 2 unknown bytes. [ 538.462703][T20897] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.595544][T20926] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5052'. [ 538.640551][T20678] veth0_vlan: entered promiscuous mode [ 538.651394][T20926] openvswitch: netlink: Flow actions attr not present in new flow. [ 538.684975][T20678] veth1_vlan: entered promiscuous mode [ 538.772934][T20897] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.807956][T20897] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.882058][T20897] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.892224][T20897] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 538.913758][T20678] veth0_macvtap: entered promiscuous mode [ 538.964360][T20897] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 538.990628][T20897] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.018772][T20897] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 539.027744][T20897] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.088593][T20678] veth1_macvtap: entered promiscuous mode [ 539.137803][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.149153][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.165322][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.181585][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.194166][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.206732][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.217206][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.238590][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.249153][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.259621][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.272042][T20678] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 539.295713][T20733] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 539.316146][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.327536][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.337676][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.348558][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.358614][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.369116][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.379141][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.395117][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.405233][T20678] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 539.415990][T20678] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 539.427610][T20678] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 539.437154][T20948] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5059'. [ 539.448966][T20947] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5059'. [ 539.468967][T20678] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.487113][T20678] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.496917][T20678] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.509575][T20678] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 539.573473][T20952] openvswitch: netlink: Message has 2 unknown bytes. [ 539.671503][T20733] veth0_vlan: entered promiscuous mode [ 539.728701][ T6813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.729205][T20733] veth1_vlan: entered promiscuous mode [ 539.742781][ T6813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.815824][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 539.843977][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 539.868071][T20733] veth0_macvtap: entered promiscuous mode [ 539.886802][T20956] openvswitch: netlink: Flow actions attr not present in new flow. [ 539.888609][T20733] veth1_macvtap: entered promiscuous mode [ 539.962862][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 539.993413][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.022299][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.053907][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.092138][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.100736][T20966] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 540.109172][T20966] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 540.115755][T20966] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 540.121377][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.122764][T20966] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 540.138546][T20966] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 540.147416][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.212214][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.226919][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.237699][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.254768][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 540.281458][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.302166][T20733] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 540.419278][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.448623][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.459214][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.476268][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.496872][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.514026][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.532886][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.556437][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.569863][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.592593][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.609488][T20733] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 540.630098][T20733] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 540.655283][T20733] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 540.702182][T20978] __nla_validate_parse: 2 callbacks suppressed [ 540.702202][T20978] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5070'. [ 540.710872][T20733] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.736954][T20733] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.750712][T20733] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.769953][T20733] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 540.822403][T20961] lo speed is unknown, defaulting to 1000 [ 540.865017][T20983] netlink: 209848 bytes leftover after parsing attributes in process `syz.1.5071'. [ 541.019840][ T6813] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.039403][T20985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5072'. [ 541.049574][ T6813] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.084741][T20985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5072'. [ 541.101658][T20985] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5072'. [ 541.128985][ T2874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 541.151314][ T2874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 541.589577][T20973] lo speed is unknown, defaulting to 1000 [ 542.012919][ T2837] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.160804][ T2837] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.527406][ T2837] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.805772][ T2837] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 542.968846][ T2837] bridge_slave_1: left allmulticast mode [ 542.977097][ T2837] bridge_slave_1: left promiscuous mode [ 542.983233][ T2837] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.999032][ T2837] bridge_slave_0: left allmulticast mode [ 543.005034][ T2837] bridge_slave_0: left promiscuous mode [ 543.011932][ T2837] bridge0: port 1(bridge_slave_0) entered disabled state [ 543.426725][ T2837] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.441719][ T2837] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.454528][ T2837] bond0 (unregistering): Released all slaves [ 543.849973][T21023] netlink: 209848 bytes leftover after parsing attributes in process `syz.2.5083'. [ 543.882491][T21023] net_ratelimit: 53 callbacks suppressed [ 543.882856][T21023] openvswitch: netlink: Message has 2 unknown bytes. [ 543.954416][T21029] netlink: 'syz.4.5088': attribute type 9 has an invalid length. [ 543.978208][T21029] netlink: 'syz.4.5088': attribute type 6 has an invalid length. [ 544.100643][T21031] openvswitch: netlink: Flow actions attr not present in new flow. [ 544.209292][ T2837] hsr_slave_0: left promiscuous mode [ 544.293204][ T2837] hsr_slave_1: left promiscuous mode [ 544.317278][ T2837] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 544.335361][ T2837] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 544.356291][ T2837] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 544.383013][ T2837] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.466452][ T2837] veth1_macvtap: left promiscuous mode [ 544.490331][ T2837] veth0_macvtap: left promiscuous mode [ 544.505150][ T2837] veth1_vlan: left promiscuous mode [ 544.523226][ T2837] veth0_vlan: left promiscuous mode [ 544.652691][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 544.664892][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 544.674124][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 544.682904][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 544.692465][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 544.699866][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 544.706464][T21063] netlink: zone id is out of range [ 544.749548][T21063] netlink: zone id is out of range [ 544.761428][T21063] netlink: zone id is out of range [ 544.771949][T21063] netlink: zone id is out of range [ 544.777833][T21063] netlink: zone id is out of range [ 544.786814][T21063] netlink: zone id is out of range [ 544.798084][T21063] netlink: zone id is out of range [ 544.809309][T21063] netlink: zone id is out of range [ 545.268628][ T2837] team0 (unregistering): Port device team_slave_1 removed [ 545.323268][ T2837] team0 (unregistering): Port device team_slave_0 removed [ 545.474535][T21067] netlink: 209848 bytes leftover after parsing attributes in process `syz.2.5100'. [ 546.027877][T21060] lo speed is unknown, defaulting to 1000 [ 546.096164][T21083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5108'. [ 546.205191][T21083] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5108'. [ 546.223419][T21085] bridge0: port 3(gretap0) entered blocking state [ 546.230430][T21085] bridge0: port 3(gretap0) entered disabled state [ 546.253312][T21085] gretap0: entered allmulticast mode [ 546.289504][T21085] gretap0: entered promiscuous mode [ 546.308601][T21085] bridge0: port 3(gretap0) entered blocking state [ 546.315211][T21085] bridge0: port 3(gretap0) entered forwarding state [ 546.325105][T21091] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5108'. [ 546.351927][T21084] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5107'. [ 546.745210][ T4495] Bluetooth: hci4: command tx timeout [ 547.187651][T21115] sctp: [Deprecated]: syz.1.5116 (pid 21115) Use of int in maxseg socket option. [ 547.187651][T21115] Use struct sctp_assoc_value instead [ 547.589776][T21060] chnl_net:caif_netlink_parms(): no params data found [ 547.621973][T21140] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 547.806040][T21135] tipc: Enabling of bearer rejected, failed to enable media [ 548.067045][T21060] bridge0: port 1(bridge_slave_0) entered blocking state [ 548.096985][T21060] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.100782][ T29] audit: type=1804 audit(1719630545.809:56): pid=21159 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5126" name="/root/syzkaller.iHpBVL/352/cgroup.controllers" dev="sda1" ino=2008 res=1 errno=0 [ 548.126518][T21060] bridge_slave_0: entered allmulticast mode [ 548.145839][T21060] bridge_slave_0: entered promiscuous mode [ 548.187102][T21060] bridge0: port 2(bridge_slave_1) entered blocking state [ 548.207558][T21060] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.227720][T21060] bridge_slave_1: entered allmulticast mode [ 548.257741][T21060] bridge_slave_1: entered promiscuous mode [ 548.385801][T21060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 548.405507][T21166] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5132'. [ 548.422248][T21166] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5132'. [ 548.458368][T21060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.519047][T21166] netlink: 'syz.4.5132': attribute type 5 has an invalid length. [ 548.735655][T21060] team0: Port device team_slave_0 added [ 548.755076][T21060] team0: Port device team_slave_1 added [ 548.820645][ T4495] Bluetooth: hci4: command tx timeout [ 548.861632][T21060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.868627][T21060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.922755][T21060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.997690][T21060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 549.010113][T21060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 549.051467][T21060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 549.090520][T21191] netlink: 20 bytes leftover after parsing attributes in process `syz.2.5139'. [ 549.153091][T21193] net_ratelimit: 11 callbacks suppressed [ 549.153114][T21193] netlink: zone id is out of range [ 549.189168][T21193] netlink: zone id is out of range [ 549.213455][T21193] netlink: zone id is out of range [ 549.219346][T21193] netlink: zone id is out of range [ 549.231204][T21060] hsr_slave_0: entered promiscuous mode [ 549.245835][T21193] netlink: zone id is out of range [ 549.256680][T21060] hsr_slave_1: entered promiscuous mode [ 549.268325][T21193] netlink: zone id is out of range [ 549.274826][T21193] netlink: zone id is out of range [ 549.318570][T21193] netlink: zone id is out of range [ 549.358648][T21193] netlink: zone id is out of range [ 549.397566][T21193] netlink: zone id is out of range [ 549.609265][T21200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5145'. [ 549.647471][T21200] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5145'. [ 549.721570][T21222] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 550.179487][T21060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 550.196805][T21060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 550.221346][T21060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 550.243441][T21060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 550.472446][T21060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.519520][T21060] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.573351][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.580577][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.602536][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.609734][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.726917][T21060] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 550.900414][ T4495] Bluetooth: hci4: command tx timeout [ 550.931561][T21262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5162'. [ 551.273595][T21060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.313875][T21280] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5168'. [ 551.450252][T21284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5167'. [ 551.574382][T21290] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 551.654217][T21060] veth0_vlan: entered promiscuous mode [ 551.707446][T21060] veth1_vlan: entered promiscuous mode [ 551.853516][T21060] veth0_macvtap: entered promiscuous mode [ 551.899878][T21060] veth1_macvtap: entered promiscuous mode [ 551.986492][T21060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.024415][T21060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.056218][T21060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.077467][T21293] can: request_module (can-proto-4) failed. [ 552.090260][T21060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.115883][T21060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.127801][T21060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.138853][T21060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.149713][T21060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.174150][T21060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.185177][T21060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.207635][T21060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 552.218492][T21060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.242227][T21060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 552.281757][T21060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.306505][T21060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.346844][T21060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.382883][T21060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.414790][T21060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.448088][T21060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.474705][T21060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.494022][T21060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.508145][T21060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.518916][T21060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.529040][T21060] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 552.554185][T21060] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 552.592610][T21060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 552.629762][T21060] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.642175][T21060] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.658983][T21060] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.680070][T21060] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.758581][T21320] sock: sock_timestamping_bind_phc: sock not bind to device [ 552.827851][T21324] netlink: 52 bytes leftover after parsing attributes in process `syz.3.5180'. [ 552.988919][ T4495] Bluetooth: hci4: command tx timeout [ 553.005101][T21331] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5181'. [ 553.009604][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.022388][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.172041][ T2837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.193294][ T2837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.407970][T21346] can: request_module (can-proto-4) failed. [ 553.582262][T21355] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5185'. [ 553.884939][T21360] netlink: 'syz.1.5189': attribute type 1 has an invalid length. [ 553.932668][T21360] netlink: 'syz.1.5189': attribute type 2 has an invalid length. [ 553.971022][T21360] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5189'. [ 554.215499][T21374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.281701][T21374] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.324341][T21370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.345042][T21370] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 554.559552][T21391] netlink: 8 bytes leftover after parsing attributes in process `syz.4.5198'. [ 554.805809][T21404] net_ratelimit: 60 callbacks suppressed [ 554.805831][T21404] netlink: zone id is out of range [ 554.833023][T21404] netlink: zone id is out of range [ 554.845888][T21404] netlink: zone id is out of range [ 554.860368][T21404] netlink: zone id is out of range [ 554.877124][T21404] netlink: zone id is out of range [ 554.903698][T21404] netlink: zone id is out of range [ 554.923981][T21404] netlink: zone id is out of range [ 554.942643][T21404] netlink: zone id is out of range [ 554.947894][T21404] netlink: zone id is out of range [ 555.003323][T21404] netlink: zone id is out of range [ 555.204928][T21408] can: request_module (can-proto-4) failed. [ 555.666141][T21449] netlink: 'syz.3.5216': attribute type 1 has an invalid length. [ 555.924212][ T963] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.504830][ T963] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.567169][ T963] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.663180][ T963] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.766014][ T963] bridge_slave_1: left allmulticast mode [ 556.771981][ T963] bridge_slave_1: left promiscuous mode [ 556.777727][ T963] bridge0: port 2(bridge_slave_1) entered disabled state [ 556.788957][ T963] bridge_slave_0: left allmulticast mode [ 556.795047][ T963] bridge_slave_0: left promiscuous mode [ 556.802454][ T963] bridge0: port 1(bridge_slave_0) entered disabled state [ 557.233546][ T963] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 557.246695][ T963] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 557.257990][ T963] bond0 (unregistering): Released all slaves [ 557.690150][ T963] hsr_slave_0: left promiscuous mode [ 557.749249][ T963] hsr_slave_1: left promiscuous mode [ 557.768631][ T963] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 557.788262][ T963] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 557.819471][T21470] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5220'. [ 557.844168][ T963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 557.859352][T21470] xt_TPROXY: Can be used only with -p tcp or -p udp [ 557.867280][ T963] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 557.948136][ T963] veth1_macvtap: left promiscuous mode [ 557.965267][ T963] veth0_macvtap: left promiscuous mode [ 557.975697][ T963] veth1_vlan: left promiscuous mode [ 557.987687][ T963] veth0_vlan: left promiscuous mode [ 558.227043][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 558.239887][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 558.253996][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 558.265684][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 558.275374][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 558.284290][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 558.935011][ T963] team0 (unregistering): Port device team_slave_1 removed [ 558.987665][ T963] team0 (unregistering): Port device team_slave_0 removed [ 559.474828][T21477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5220'. [ 559.510986][T21499] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5226'. [ 559.601590][T21489] lo speed is unknown, defaulting to 1000 [ 559.787214][T21513] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5230'. [ 560.264532][T21541] netlink: 120 bytes leftover after parsing attributes in process `syz.1.5239'. [ 560.275590][T21541] xt_TPROXY: Can be used only with -p tcp or -p udp [ 560.346239][ T4495] Bluetooth: hci4: command tx timeout [ 560.478228][T21548] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5239'. [ 560.513129][T21550] netlink: 88 bytes leftover after parsing attributes in process `syz.3.5242'. [ 560.561036][T21550] netlink: 'syz.3.5242': attribute type 4 has an invalid length. [ 560.668005][T21561] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5246'. [ 560.698458][T21489] chnl_net:caif_netlink_parms(): no params data found [ 560.867125][T21575] netlink: 'syz.4.5250': attribute type 1 has an invalid length. [ 560.875352][T21575] netlink: 224 bytes leftover after parsing attributes in process `syz.4.5250'. [ 560.896091][T21576] netlink: 'syz.1.5248': attribute type 3 has an invalid length. [ 560.920454][T21576] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5248'. [ 560.981215][T21489] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.988457][T21489] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.997635][T21489] bridge_slave_0: entered allmulticast mode [ 561.005371][T21489] bridge_slave_0: entered promiscuous mode [ 561.018402][T21489] bridge0: port 2(bridge_slave_1) entered blocking state [ 561.026060][T21489] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.034225][T21489] bridge_slave_1: entered allmulticast mode [ 561.044880][T21489] bridge_slave_1: entered promiscuous mode [ 561.142685][T21489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.164027][T21489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.245653][T21489] team0: Port device team_slave_0 added [ 561.266410][T21489] team0: Port device team_slave_1 added [ 561.356312][T21489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 561.363389][T21592] xt_TPROXY: Can be used only with -p tcp or -p udp [ 561.386807][T21489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.433818][T21489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 561.462078][T21489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 561.482735][T21489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 561.550217][T21489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.809975][T21615] vlan0: entered promiscuous mode [ 561.820586][T21615] vlan0: entered allmulticast mode [ 561.843861][T21489] hsr_slave_0: entered promiscuous mode [ 561.880703][T21489] hsr_slave_1: entered promiscuous mode [ 562.017508][T21619] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 562.067499][T21619] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 562.228273][T21630] "syz.2.5271" (21630) uses obsolete ecb(arc4) skcipher [ 562.413977][ T29] audit: type=1804 audit(1719630560.129:57): pid=21634 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.5273" name="/root/syzkaller.ZMsWUb/261/cgroup.controllers" dev="sda1" ino=2009 res=1 errno=0 [ 562.455067][ T4495] Bluetooth: hci4: command tx timeout [ 562.745967][T21489] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 562.770274][T21648] xt_TCPMSS: Only works on TCP SYN packets [ 562.776819][T21489] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 562.814509][T21489] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 562.841738][T21489] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 562.933004][T21659] __nla_validate_parse: 6 callbacks suppressed [ 562.933026][T21659] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5282'. [ 563.227380][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.235422][T21664] net_ratelimit: 29 callbacks suppressed [ 563.235435][T21664] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 563.292995][T21672] netlink: 120 bytes leftover after parsing attributes in process `syz.3.5288'. [ 563.304981][T21672] xt_TPROXY: Can be used only with -p tcp or -p udp [ 563.403840][T21672] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5288'. [ 563.514858][T21489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 563.573462][T21489] 8021q: adding VLAN 0 to HW filter on device team0 [ 563.605739][ T5146] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.612979][ T5146] bridge0: port 1(bridge_slave_0) entered forwarding state [ 563.653072][ T5146] bridge0: port 2(bridge_slave_1) entered blocking state [ 563.660502][ T5146] bridge0: port 2(bridge_slave_1) entered forwarding state [ 563.728554][T21696] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5294'. [ 564.182592][T21489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 564.231221][T21720] vlan3: entered promiscuous mode [ 564.266668][T21720] veth0_to_hsr: entered promiscuous mode [ 564.284430][T21720] veth0_to_hsr: left promiscuous mode [ 564.440218][T21734] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20003 [ 564.459611][T21489] veth0_vlan: entered promiscuous mode [ 564.470535][T21734] IPVS: set_ctl: invalid protocol: 2 127.0.0.1:20003 [ 564.493075][T21737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5307'. [ 564.502010][ T4495] Bluetooth: hci4: command tx timeout [ 564.511700][T21735] netlink: 20 bytes leftover after parsing attributes in process `syz.1.5306'. [ 564.525316][T21734] IPVS: set_ctl: invalid protocol: 4544 0.0.0.0:22528 [ 564.544102][T21734] IPVS: set_ctl: invalid protocol: 4544 0.0.0.0:22528 [ 564.566346][T21489] veth1_vlan: entered promiscuous mode [ 564.721292][T21489] veth0_macvtap: entered promiscuous mode [ 564.735765][T21489] veth1_macvtap: entered promiscuous mode [ 564.765322][T21749] netlink: zone id is out of range [ 564.780554][T21749] netlink: zone id is out of range [ 564.807026][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.813576][T21749] netlink: zone id is out of range [ 564.842216][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.862133][T21749] netlink: zone id is out of range [ 564.867854][T21749] netlink: zone id is out of range [ 564.876309][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.884844][T21749] netlink: zone id is out of range [ 564.904771][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.937175][T21749] netlink: zone id is out of range [ 564.937307][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 564.949638][T21749] netlink: zone id is out of range [ 564.971340][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 564.975318][T21749] netlink: zone id is out of range [ 564.993482][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.029779][T21753] can: request_module (can-proto-4) failed. [ 565.038091][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.048675][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.059706][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.071842][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 565.082819][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.097377][T21489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.166057][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.200265][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.247703][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.280273][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.306032][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.320249][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.330394][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.341248][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.355941][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.369586][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.380001][T21489] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 565.391417][T21489] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 565.406546][T21489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.452718][T21489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.500248][T21489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.530132][T21489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.547473][T21489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 565.597999][T21787] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5319'. [ 565.948020][T21791] syzkaller0: entered promiscuous mode [ 565.970578][T21791] syzkaller0: entered allmulticast mode [ 565.978829][ T963] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.005616][ T963] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.265680][T21810] can: request_module (can-proto-4) failed. [ 566.580318][ T4495] Bluetooth: hci4: command tx timeout [ 568.218230][ T6813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.261440][ T6813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.575312][T21839] netlink: 40 bytes leftover after parsing attributes in process `syz.4.5332'. [ 568.607112][T21825] xt_CT: You must specify a L4 protocol and not use inversions on it [ 568.791971][T21851] net_ratelimit: 19 callbacks suppressed [ 568.791995][T21851] netlink: zone id is out of range [ 568.813644][T21851] netlink: zone id is out of range [ 568.823526][T21853] tipc: Enabling of bearer rejected, failed to enable media [ 568.834699][T21851] netlink: zone id is out of range [ 568.840371][T21851] netlink: zone id is out of range [ 568.846825][T21853] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5339'. [ 568.856648][T21851] netlink: zone id is out of range [ 568.905920][T21851] netlink: zone id is out of range [ 568.927381][T21851] netlink: zone id is out of range [ 568.943538][T21851] netlink: zone id is out of range [ 568.953602][T21851] netlink: zone id is out of range [ 568.964745][T21851] netlink: zone id is out of range [ 568.978330][T21862] netlink: 'syz.3.5341': attribute type 7 has an invalid length. [ 569.002313][T21862] netlink: 'syz.3.5341': attribute type 8 has an invalid length. [ 569.010888][T21862] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5341'. [ 569.443897][T21883] netlink: 'syz.1.5349': attribute type 1 has an invalid length. [ 569.464258][T21883] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5349'. [ 569.598813][T21883] netlink: 'syz.1.5349': attribute type 32 has an invalid length. [ 569.717868][ T2906] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.843625][ T2906] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.912431][ T2906] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.966556][ T2906] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 570.071271][ T2906] bridge_slave_1: left allmulticast mode [ 570.076967][ T2906] bridge_slave_1: left promiscuous mode [ 570.083097][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state [ 570.093151][ T2906] bridge_slave_0: left allmulticast mode [ 570.098825][ T2906] bridge_slave_0: left promiscuous mode [ 570.106248][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.516262][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.529454][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.541089][ T2906] bond0 (unregistering): Released all slaves [ 570.987132][ T2906] hsr_slave_0: left promiscuous mode [ 571.012549][ T2906] hsr_slave_1: left promiscuous mode [ 571.018611][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 571.026116][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 571.039902][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 571.047756][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.077359][ T2906] veth1_macvtap: left promiscuous mode [ 571.083076][ T2906] veth0_macvtap: left promiscuous mode [ 571.088770][ T2906] veth1_vlan: left promiscuous mode [ 571.094277][ T2906] veth0_vlan: left promiscuous mode [ 571.777734][ T2906] team0 (unregistering): Port device team_slave_1 removed [ 571.945758][ T2906] team0 (unregistering): Port device team_slave_0 removed [ 572.228887][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 572.248414][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 572.276259][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 572.285890][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 572.309225][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 572.323807][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 572.758504][T21918] lo speed is unknown, defaulting to 1000 [ 573.011581][T21932] netlink: 'syz.2.5365': attribute type 4 has an invalid length. [ 573.019380][T21932] netlink: 'syz.2.5365': attribute type 1 has an invalid length. [ 573.091423][T21932] netlink: 88156 bytes leftover after parsing attributes in process `syz.2.5365'. [ 573.930991][T21918] chnl_net:caif_netlink_parms(): no params data found [ 574.063225][T21979] net_ratelimit: 32 callbacks suppressed [ 574.063246][T21979] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 574.420631][ T4495] Bluetooth: hci4: command tx timeout [ 574.460968][T21918] bridge0: port 1(bridge_slave_0) entered blocking state [ 574.468146][T21918] bridge0: port 1(bridge_slave_0) entered disabled state [ 574.514648][T21918] bridge_slave_0: entered allmulticast mode [ 574.539636][T21918] bridge_slave_0: entered promiscuous mode [ 574.569453][ T29] audit: type=1800 audit(1719630572.279:58): pid=21970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5373" name="cgroup.controllers" dev="sda1" ino=2012 res=0 errno=0 [ 574.592213][T21995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5381'. [ 574.615454][T21995] netlink: 24 bytes leftover after parsing attributes in process `syz.4.5381'. [ 574.631936][ T29] audit: type=1800 audit(1719630572.279:59): pid=21964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5373" name="cgroup.controllers" dev="sda1" ino=2012 res=0 errno=0 [ 574.661804][T21918] bridge0: port 2(bridge_slave_1) entered blocking state [ 574.691173][T21918] bridge0: port 2(bridge_slave_1) entered disabled state [ 574.700395][T21918] bridge_slave_1: entered allmulticast mode [ 574.721785][T21918] bridge_slave_1: entered promiscuous mode [ 574.936407][T21918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 574.991639][T21918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.088507][T21918] team0: Port device team_slave_0 added [ 575.107753][T21918] team0: Port device team_slave_1 added [ 575.185064][T22018] netlink: zone id is out of range [ 575.196442][T21918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 575.208442][T22018] netlink: zone id is out of range [ 575.213934][T21918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.221070][T22018] netlink: zone id is out of range [ 575.292608][T21918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 575.297922][T22018] netlink: zone id is out of range [ 575.338272][T21918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 575.341505][T22018] netlink: zone id is out of range [ 575.355030][T21918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 575.373535][T22018] netlink: zone id is out of range [ 575.415453][T21918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 575.429193][T22018] netlink: zone id is out of range [ 575.470228][T22018] netlink: zone id is out of range [ 575.476058][T22018] netlink: zone id is out of range [ 575.544987][ T4495] Bluetooth: hci5: command 0x0406 tx timeout [ 575.600220][T21918] hsr_slave_0: entered promiscuous mode [ 575.641448][T21918] hsr_slave_1: entered promiscuous mode [ 575.732646][ T29] audit: type=1804 audit(1719630573.449:60): pid=22034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5394" name="/root/syzkaller.AXkTY8/750/memory.events" dev="sda1" ino=1993 res=1 errno=0 [ 575.923128][T22044] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5395'. [ 576.034873][T22032] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 576.240374][T22054] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 576.419832][T22067] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5406'. [ 576.517348][ T5102] Bluetooth: hci4: command tx timeout [ 576.784655][T21918] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 576.808704][T21918] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 576.841622][T21918] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 576.872576][T21918] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 577.036014][T22091] ip6tnl0: Master is either lo or non-ether device [ 577.108511][T21918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 577.118215][T22094] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5418'. [ 577.136327][T21918] 8021q: adding VLAN 0 to HW filter on device team0 [ 577.167688][ T928] bridge0: port 1(bridge_slave_0) entered blocking state [ 577.174961][ T928] bridge0: port 1(bridge_slave_0) entered forwarding state [ 577.223617][ T928] bridge0: port 2(bridge_slave_1) entered blocking state [ 577.230847][ T928] bridge0: port 2(bridge_slave_1) entered forwarding state [ 577.607920][T22115] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5424'. [ 577.739658][T21918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 577.913361][T21918] veth0_vlan: entered promiscuous mode [ 577.997135][T21918] veth1_vlan: entered promiscuous mode [ 578.123849][T21918] veth0_macvtap: entered promiscuous mode [ 578.153908][T21918] veth1_macvtap: entered promiscuous mode [ 578.217834][T21918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.234429][T21918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.246744][T21918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.278163][T21918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.310196][T21918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.323685][T21918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.350118][T21918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.373718][T21918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.384345][T21918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.395947][T21918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.408030][T21918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 578.418771][T21918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.433618][T22157] Cannot find set identified by id 0 to match [ 578.458467][T21918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 578.583405][ T5102] Bluetooth: hci4: command tx timeout [ 578.698483][T22158] syzkaller0: entered promiscuous mode [ 578.707622][T22158] syzkaller0: entered allmulticast mode [ 578.734157][T21918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.762377][T22168] can: request_module (can-proto-4) failed. [ 578.798265][T21918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.815023][T21918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.848098][T21918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.890754][T21918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.920468][T21918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.939436][T21918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.952677][T21918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.962895][T21918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.973616][T21918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 578.985285][T21918] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 578.995820][T21918] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 579.007448][T21918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 579.015795][T22161] netlink: 'syz.1.5438': attribute type 64 has an invalid length. [ 579.025269][T22167] bridge_slave_0: left allmulticast mode [ 579.039934][T22167] bridge_slave_0: left promiscuous mode [ 579.045968][T22167] bridge0: port 1(bridge_slave_0) entered disabled state [ 580.660639][ T5102] Bluetooth: hci4: command tx timeout [ 581.285232][T22209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5447'. [ 581.318731][T21918] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.354708][T21918] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.381286][T21918] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.406293][T21918] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 581.508502][T22219] net_ratelimit: 36 callbacks suppressed [ 581.508524][T22219] netlink: zone id is out of range [ 581.539462][T22219] netlink: zone id is out of range [ 581.586778][T22219] netlink: zone id is out of range [ 581.629374][T22219] netlink: zone id is out of range [ 581.669067][T22219] netlink: zone id is out of range [ 581.681661][T22219] netlink: zone id is out of range [ 581.700689][T22219] netlink: zone id is out of range [ 581.726382][T22219] netlink: zone id is out of range [ 581.742386][T22219] netlink: zone id is out of range [ 581.770975][T22219] netlink: zone id is out of range [ 581.776654][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.793524][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 581.866567][ T6813] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 581.899469][ T6813] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 582.107386][T22245] netlink: 16 bytes leftover after parsing attributes in process `syz.3.5456'. [ 582.151600][T22242] netlink: 'syz.1.5458': attribute type 3 has an invalid length. [ 582.162179][T22242] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.5458'. [ 582.192103][T22252] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5461'. [ 582.200202][T22242] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5458'. [ 582.243918][T22254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5462'. [ 582.482541][T22264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.5467'. [ 583.035741][T22291] netlink: 60 bytes leftover after parsing attributes in process `syz.4.5476'. [ 583.036308][T22285] netlink: 'syz.2.5474': attribute type 3 has an invalid length. [ 583.072525][T22285] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.5474'. [ 583.099220][T22297] netlink: 16 bytes leftover after parsing attributes in process `syz.2.5474'. [ 583.446186][T22315] xt_TPROXY: Can be used only with -p tcp or -p udp [ 583.729031][ T2906] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.169311][ T2906] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.266487][ T2906] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.358844][ T2906] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 584.470035][ T2906] bridge_slave_1: left allmulticast mode [ 584.475776][ T2906] bridge_slave_1: left promiscuous mode [ 584.481949][ T2906] bridge0: port 2(bridge_slave_1) entered disabled state [ 584.492529][ T2906] bridge_slave_0: left allmulticast mode [ 584.498207][ T2906] bridge_slave_0: left promiscuous mode [ 584.504543][ T2906] bridge0: port 1(bridge_slave_0) entered disabled state [ 584.932889][ T2906] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 584.946587][ T2906] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 584.959589][ T2906] bond0 (unregistering): Released all slaves [ 585.347297][ T2906] hsr_slave_0: left promiscuous mode [ 585.354858][ T2906] hsr_slave_1: left promiscuous mode [ 585.370971][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 585.378399][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 585.389589][ T2906] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 585.397135][ T2906] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 585.424431][ T2906] veth1_macvtap: left promiscuous mode [ 585.429976][ T2906] veth0_macvtap: left promiscuous mode [ 585.435743][ T2906] veth1_vlan: left promiscuous mode [ 585.441284][ T2906] veth0_vlan: left promiscuous mode [ 585.904345][T22340] netlink: 'syz.2.5491': attribute type 3 has an invalid length. [ 586.319834][ T4495] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 586.342885][ T4495] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 586.355195][ T4495] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 586.363612][ T4495] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 586.364266][ T2906] team0 (unregistering): Port device team_slave_1 removed [ 586.388871][ T4495] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 586.398372][ T4495] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 586.469380][ T2906] team0 (unregistering): Port device team_slave_0 removed [ 587.122222][T22351] lo speed is unknown, defaulting to 1000 [ 587.210973][T22365] __nla_validate_parse: 5 callbacks suppressed [ 587.210994][T22365] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5498'. [ 587.280226][T22365] xt_TPROXY: Can be used only with -p tcp or -p udp [ 587.311470][T22365] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5498'. [ 587.624392][T22379] netlink: 120 bytes leftover after parsing attributes in process `syz.4.5505'. [ 587.661962][T22379] xt_TPROXY: Can be used only with -p tcp or -p udp [ 587.705771][T22379] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5505'. [ 588.056331][T22351] chnl_net:caif_netlink_parms(): no params data found [ 588.201560][T22410] netlink: 125880 bytes leftover after parsing attributes in process `syz.1.5515'. [ 588.242068][T22410] net_ratelimit: 18 callbacks suppressed [ 588.242088][T22410] netlink: zone id is out of range [ 588.286158][T22410] netlink: zone id is out of range [ 588.291982][T22410] netlink: zone id is out of range [ 588.299738][T22410] netlink: zone id is out of range [ 588.321898][T22400] can: request_module (can-proto-4) failed. [ 588.338801][T22410] netlink: zone id is out of range [ 588.365763][T22410] netlink: zone id is out of range [ 588.400336][T22410] netlink: zone id is out of range [ 588.405636][T22410] netlink: zone id is out of range [ 588.414499][T22410] netlink: zone id is out of range [ 588.419757][T22410] netlink: zone id is out of range [ 588.429490][T22419] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5516'. [ 588.502096][ T4495] Bluetooth: hci4: command tx timeout [ 588.539616][T22351] bridge0: port 1(bridge_slave_0) entered blocking state [ 588.564225][T22351] bridge0: port 1(bridge_slave_0) entered disabled state [ 588.579072][T22351] bridge_slave_0: entered allmulticast mode [ 588.587047][T22351] bridge_slave_0: entered promiscuous mode [ 588.621042][T22428] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5516'. [ 588.642771][T22432] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5518'. [ 588.671705][T22351] bridge0: port 2(bridge_slave_1) entered blocking state [ 588.679121][T22351] bridge0: port 2(bridge_slave_1) entered disabled state [ 588.686768][T22351] bridge_slave_1: entered allmulticast mode [ 588.694557][T22351] bridge_slave_1: entered promiscuous mode [ 588.818374][T22351] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 588.839823][T22437] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5521'. [ 588.885765][T22351] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 588.977344][T22437] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 588.985316][T22437] IPv6: NLM_F_CREATE should be set when creating new route [ 589.029894][T22351] team0: Port device team_slave_0 added [ 589.042749][T22351] team0: Port device team_slave_1 added [ 589.140932][T22454] netlink: 125880 bytes leftover after parsing attributes in process `syz.3.5529'. [ 589.184714][T22351] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 589.200138][T22351] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.276714][T22351] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 589.317733][T22457] xt_TPROXY: Can be used only with -p tcp or -p udp [ 589.329531][T22351] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 589.338253][T22351] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 589.367992][T22351] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 589.531968][T22351] hsr_slave_0: entered promiscuous mode [ 589.553475][T22351] hsr_slave_1: entered promiscuous mode [ 589.910882][ T963] ================================================================== [ 589.919007][ T963] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 589.927099][ T963] Read of size 8 at addr ffff88805d5de8b8 by task kworker/u8:5/963 [ 589.935017][ T963] [ 589.937365][ T963] CPU: 0 PID: 963 Comm: kworker/u8:5 Not tainted 6.10.0-rc5-syzkaller-01097-g748e3bbf4721 #0 [ 589.947543][ T963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 589.957621][ T963] Workqueue: l2tp l2tp_tunnel_del_work [ 589.963107][ T963] Call Trace: [ 589.966376][ T963] [ 589.969297][ T963] dump_stack_lvl+0x241/0x360 [ 589.973987][ T963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 589.979209][ T963] ? __pfx__printk+0x10/0x10 [ 589.983838][ T963] ? _printk+0xd5/0x120 [ 589.988027][ T963] ? __virt_addr_valid+0x183/0x520 [ 589.993345][ T963] ? __virt_addr_valid+0x183/0x520 [ 589.998484][ T963] print_report+0x169/0x550 [ 590.003014][ T963] ? __virt_addr_valid+0x183/0x520 [ 590.008151][ T963] ? __virt_addr_valid+0x183/0x520 [ 590.013331][ T963] ? __virt_addr_valid+0x44e/0x520 [ 590.013785][T22494] xt_TPROXY: Can be used only with -p tcp or -p udp [ 590.018555][ T963] ? __phys_addr+0xba/0x170 [ 590.029658][ T963] ? l2tp_tunnel_del_work+0xe5/0x330 [ 590.034954][ T963] kasan_report+0x143/0x180 [ 590.039467][ T963] ? l2tp_tunnel_del_work+0xe5/0x330 [ 590.044799][ T963] l2tp_tunnel_del_work+0xe5/0x330 [ 590.049916][ T963] ? process_scheduled_works+0x945/0x1830 [ 590.055636][ T963] process_scheduled_works+0xa2c/0x1830 [ 590.061215][ T963] ? __pfx_process_scheduled_works+0x10/0x10 [ 590.067200][ T963] ? assign_work+0x364/0x3d0 [ 590.071788][ T963] worker_thread+0x86d/0xd50 [ 590.076380][ T963] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 590.082294][ T963] ? __kthread_parkme+0x169/0x1d0 [ 590.087329][ T963] ? __pfx_worker_thread+0x10/0x10 [ 590.092437][ T963] kthread+0x2f0/0x390 [ 590.096509][ T963] ? __pfx_worker_thread+0x10/0x10 [ 590.101624][ T963] ? __pfx_kthread+0x10/0x10 [ 590.106244][ T963] ret_from_fork+0x4b/0x80 [ 590.110667][ T963] ? __pfx_kthread+0x10/0x10 [ 590.115263][ T963] ret_from_fork_asm+0x1a/0x30 [ 590.120051][ T963] [ 590.123069][ T963] [ 590.125387][ T963] Allocated by task 22486: [ 590.129794][ T963] kasan_save_track+0x3f/0x80 [ 590.134475][ T963] __kasan_kmalloc+0x98/0xb0 [ 590.139068][ T963] __kmalloc_noprof+0x1f9/0x400 [ 590.143918][ T963] l2tp_session_create+0x3b/0xc20 [ 590.148945][ T963] pppol2tp_connect+0xca3/0x17a0 [ 590.153882][ T963] __sys_connect+0x2df/0x310 [ 590.158477][ T963] __x64_sys_connect+0x7a/0x90 [ 590.163267][ T963] do_syscall_64+0xf3/0x230 [ 590.167791][ T963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.173684][ T963] [ 590.176191][ T963] Freed by task 24: [ 590.179995][ T963] kasan_save_track+0x3f/0x80 [ 590.184689][ T963] kasan_save_free_info+0x40/0x50 [ 590.189714][ T963] poison_slab_object+0xe0/0x150 [ 590.194661][ T963] __kasan_slab_free+0x37/0x60 [ 590.199426][ T963] kfree+0x149/0x360 [ 590.203342][ T963] __sk_destruct+0x58/0x5f0 [ 590.207855][ T963] rcu_core+0xafd/0x1830 [ 590.212101][ T963] handle_softirqs+0x2c4/0x970 [ 590.216863][ T963] run_ksoftirqd+0xca/0x130 [ 590.221367][ T963] smpboot_thread_fn+0x544/0xa30 [ 590.226324][ T963] kthread+0x2f0/0x390 [ 590.230398][ T963] ret_from_fork+0x4b/0x80 [ 590.234825][ T963] ret_from_fork_asm+0x1a/0x30 [ 590.239594][ T963] [ 590.241910][ T963] Last potentially related work creation: [ 590.247613][ T963] kasan_save_stack+0x3f/0x60 [ 590.252290][ T963] __kasan_record_aux_stack+0xac/0xc0 [ 590.257657][ T963] call_rcu+0x167/0xa70 [ 590.261814][ T963] pppol2tp_release+0x24b/0x350 [ 590.266669][ T963] sock_close+0xbc/0x240 [ 590.270912][ T963] __fput+0x406/0x8b0 [ 590.274898][ T963] task_work_run+0x24f/0x310 [ 590.279504][ T963] syscall_exit_to_user_mode+0x168/0x370 [ 590.285147][ T963] do_syscall_64+0x100/0x230 [ 590.289740][ T963] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 590.295637][ T963] [ 590.297959][ T963] The buggy address belongs to the object at ffff88805d5de800 [ 590.297959][ T963] which belongs to the cache kmalloc-1k of size 1024 [ 590.312012][ T963] The buggy address is located 184 bytes inside of [ 590.312012][ T963] freed 1024-byte region [ffff88805d5de800, ffff88805d5dec00) [ 590.325912][ T963] [ 590.328249][ T963] The buggy address belongs to the physical page: [ 590.334751][ T963] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d5d8 [ 590.343521][ T963] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 590.352014][ T963] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 590.359570][ T963] page_type: 0xffffefff(slab) [ 590.364248][ T963] raw: 00fff00000000040 ffff888015041dc0 ffffea000160a000 dead000000000002 [ 590.372828][ T963] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 590.381412][ T963] head: 00fff00000000040 ffff888015041dc0 ffffea000160a000 dead000000000002 [ 590.390085][ T963] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 590.398754][ T963] head: 00fff00000000003 ffffea0001757601 ffffffffffffffff 0000000000000000 [ 590.407421][ T963] head: ffff888000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 590.416082][ T963] page dumped because: kasan: bad access detected [ 590.422495][ T963] page_owner tracks the page as allocated [ 590.428203][ T963] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 61, tgid 61 (kworker/u8:4), ts 476415521195, free_ts 476372027911 [ 590.448708][ T963] post_alloc_hook+0x1f3/0x230 [ 590.453514][ T963] get_page_from_freelist+0x2e4c/0x2f10 [ 590.459065][ T963] __alloc_pages_noprof+0x256/0x6c0 [ 590.464263][ T963] alloc_slab_page+0x5f/0x120 [ 590.468943][ T963] allocate_slab+0x5a/0x2f0 [ 590.473450][ T963] ___slab_alloc+0xcd1/0x14b0 [ 590.478128][ T963] __slab_alloc+0x58/0xa0 [ 590.482462][ T963] __kmalloc_noprof+0x257/0x400 [ 590.487313][ T963] ieee802_11_parse_elems_full+0xdb/0x2880 [ 590.493131][ T963] ieee80211_ibss_rx_queued_mgmt+0x4c8/0x2d70 [ 590.499344][ T963] ieee80211_iface_work+0x8a5/0xf20 [ 590.504560][ T963] cfg80211_wiphy_work+0x2db/0x490 [ 590.509680][ T963] process_scheduled_works+0xa2c/0x1830 [ 590.515241][ T963] worker_thread+0x86d/0xd50 [ 590.519834][ T963] kthread+0x2f0/0x390 [ 590.523909][ T963] ret_from_fork+0x4b/0x80 [ 590.528336][ T963] page last free pid 19208 tgid 19208 stack trace: [ 590.534836][ T963] free_unref_page+0xd22/0xea0 [ 590.539612][ T963] __put_partials+0xeb/0x130 [ 590.544205][ T963] put_cpu_partial+0x17c/0x250 [ 590.548969][ T963] __slab_free+0x2ea/0x3d0 [ 590.553382][ T963] qlist_free_all+0x9e/0x140 [ 590.558065][ T963] kasan_quarantine_reduce+0x14f/0x170 [ 590.563531][ T963] __kasan_slab_alloc+0x23/0x80 [ 590.568387][ T963] kmem_cache_alloc_noprof+0x135/0x2a0 [ 590.573854][ T963] __anon_vma_prepare+0xc4/0x4a0 [ 590.578793][ T963] handle_pte_fault+0x57d7/0x7090 [ 590.584164][ T963] handle_mm_fault+0x10df/0x1ba0 [ 590.589136][ T963] exc_page_fault+0x459/0x8c0 [ 590.593835][ T963] asm_exc_page_fault+0x26/0x30 [ 590.598688][ T963] [ 590.601011][ T963] Memory state around the buggy address: [ 590.606634][ T963] ffff88805d5de780: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 590.614692][ T963] ffff88805d5de800: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 590.622766][ T963] >ffff88805d5de880: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 590.630838][ T963] ^ [ 590.636721][ T963] ffff88805d5de900: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 590.644778][ T963] ffff88805d5de980: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 590.652862][ T963] ================================================================== [ 590.661001][ T963] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 590.668231][ T963] CPU: 0 PID: 963 Comm: kworker/u8:5 Not tainted 6.10.0-rc5-syzkaller-01097-g748e3bbf4721 #0 [ 590.678401][ T963] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 590.688484][ T963] Workqueue: l2tp l2tp_tunnel_del_work [ 590.693986][ T963] Call Trace: [ 590.697283][ T963] [ 590.700234][ T963] dump_stack_lvl+0x241/0x360 [ 590.704938][ T963] ? __pfx_dump_stack_lvl+0x10/0x10 [ 590.710166][ T963] ? __pfx__printk+0x10/0x10 [ 590.714798][ T963] ? vscnprintf+0x5d/0x90 [ 590.719156][ T963] panic+0x349/0x860 [ 590.723087][ T963] ? check_panic_on_warn+0x21/0xb0 [ 590.728230][ T963] ? __pfx_panic+0x10/0x10 [ 590.732673][ T963] ? mark_lock+0x9a/0x350 [ 590.737030][ T963] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 590.743035][ T963] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 590.748950][ T963] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 590.755303][ T963] ? print_report+0x502/0x550 [ 590.760015][ T963] check_panic_on_warn+0x86/0xb0 [ 590.764987][ T963] ? l2tp_tunnel_del_work+0xe5/0x330 [ 590.770298][ T963] end_report+0x77/0x160 [ 590.774587][ T963] kasan_report+0x154/0x180 [ 590.779229][ T963] ? l2tp_tunnel_del_work+0xe5/0x330 [ 590.784548][ T963] l2tp_tunnel_del_work+0xe5/0x330 [ 590.789691][ T963] ? process_scheduled_works+0x945/0x1830 [ 590.795481][ T963] process_scheduled_works+0xa2c/0x1830 [ 590.801074][ T963] ? __pfx_process_scheduled_works+0x10/0x10 [ 590.807101][ T963] ? assign_work+0x364/0x3d0 [ 590.811699][ T963] worker_thread+0x86d/0xd50 [ 590.816304][ T963] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 590.822212][ T963] ? __kthread_parkme+0x169/0x1d0 [ 590.827435][ T963] ? __pfx_worker_thread+0x10/0x10 [ 590.832578][ T963] kthread+0x2f0/0x390 [ 590.836669][ T963] ? __pfx_worker_thread+0x10/0x10 [ 590.841788][ T963] ? __pfx_kthread+0x10/0x10 [ 590.846400][ T963] ret_from_fork+0x4b/0x80 [ 590.850853][ T963] ? __pfx_kthread+0x10/0x10 [ 590.855485][ T963] ret_from_fork_asm+0x1a/0x30 [ 590.860318][ T963] [ 590.863709][ T963] Kernel Offset: disabled [ 590.868058][ T963] Rebooting in 86400 seconds..