last executing test programs: 31.796511668s ago: executing program 2: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x2, 0x4) write$binfmt_script(r0, &(0x7f0000000300), 0xfe7f) recvmmsg(r0, &(0x7f0000010bc0)=[{{0x0, 0x0, &(0x7f0000001100)=[{&(0x7f0000001040)=""/191, 0xbf}], 0x1}}], 0x1, 0x10002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5}, 0x38) bpf$MAP_LOOKUP_ELEM(0x2, 0x0, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000240), r1) sendmsg$NLBL_CIPSOV4_C_ADD(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000100000008000100040000002c000480050003ed80ffffff050003000200000005000300050000000500030080ffffff0500030080ffffff0800020002"], 0x50}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005700000095"], 0x0}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r3], 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000380)='ext4_ext_handle_unwritten_extents\x00', r4}, 0x9) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x6, &(0x7f0000000140)=@raw=[@exit, @initr0={0x18, 0x0, 0x0, 0x0, 0xa303, 0x0, 0x0, 0x0, 0x10001}, @map_idx={0x18, 0x1, 0x5, 0x0, 0x2}, @generic={0x40, 0x6, 0x0, 0x9, 0x20}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 31.422168829s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/24, 0x18) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x2000000, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff053}], 0x1, 0x0, 0x8, 0x7000000}}], 0x1, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 31.3900993s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000003c0)=[{&(0x7f0000000200)="ab", 0x1}, {&(0x7f0000000580)="db", 0x1}], 0x2, 0x0) r3 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r3, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8000, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x19, 0x4, 0x4, 0xa}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000100)) write$ppp(r4, &(0x7f0000000140)="1627", 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000000640)=ANY=[@ANYBLOB="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"/4140], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) getsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000080), &(0x7f0000000340)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r5, 0x400452c8, &(0x7f0000000100)) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0xd4}}, 0x0) 31.331919304s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x8, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x40}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d00)=@broute={'broute\x00', 0x20, 0x5, 0x686, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001640], 0x0, &(0x7f0000001600), &(0x7f0000001640)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x24, 0x9100, 'ip6_vti0\x00', 'wg1\x00', 'vxcan1\x00', 'pimreg\x00', @remote, [0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xa6, 0xd6, 0x11e, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x0, 0xf6c6, 0x800}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}], @common=@ERROR={'ERROR\x00', 0x20, {"9d8d826ff59fa30994f8aa7f5b3de02bcd640d63d47067e1da6d86082aeb"}}}, {0x5, 0x40, 0xe8e1, 'pimreg1\x00', 'erspan0\x00', 'team0\x00', 'veth0\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @random="d4db78e25f32", [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x9, 0xb, 0xa00, 'team_slave_0\x00', 'pim6reg0\x00', 'bridge_slave_0\x00', 'ip_vti0\x00', @random="90c860cb85aa", [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @random="72cd6e3d6bdb", [0xff, 0x0, 0xff, 0xff, 0xff], 0x11e, 0x186, 0x1be, [@stp={{'stp\x00', 0x0, 0x48}, {{0x3f, {0x1, 0x0, 0x5, @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x2, 0x0, 0x0, 0x0, @local, [0x0, 0xff, 0x0, 0xff, 0xff], 0x4e24, 0x4e20, 0x7, 0xffff, 0x80, 0x7, 0x5, 0x3ff, 0xb04, 0x7}, 0x200}}}, @time={{'time\x00', 0x0, 0x18}, {{0x5, 0x6, 0xe972, 0x11c3d, 0x2, 0x3, 0x1}}}], [@common=@dnat={'dnat\x00', 0x10, {{@empty, 0xaf6468539b9c8e2f}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xc03b}}}], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}}, {0x3, 0x7, 0x2f6, 'dvmrp1\x00', 'tunl0\x00', 'macvlan1\x00', 'ip6gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, [0x0, 0xff], @multicast, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0xde, 0xde, 0x156, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x0, 0x0, 0xcfb7, 0x7, {0x4}}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x71, 0x1}}}], [], @common=@nflog={'nflog\x00', 0x50, {{0x3, 0x8, 0x2, 0x0, 0x0, "659a472f88843617e88c1d8a4f186036cbc43ed0e2528e7c32d2b7fed3e8fa3383efe2d82f35eae30eb31baa6ecda5cb228d3cf7596e5d4eaba3d6ed8db7590a"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x3, 0x0, 0x88f5, 'dvmrp1\x00', 'ip6tnl0\x00', 'netpci0\x00', 'xfrm0\x00', @local, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="691c2333d548", [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xd6, 0x126, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0x10}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x40000000, 'syz0\x00', {0x6}}}}}]}]}, 0x6fe) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025642531010000000900010073797a300000000008"], 0xc4}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000001580)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @rand_addr, {[@ssrr={0x89, 0x13, 0xd0, [@private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback]}]}}}}}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}]}}}]}, 0x50}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/90, 0x5a}], 0x3, 0x80, 0x95e9) 31.175325871s ago: executing program 1: r0 = socket$inet_smc(0x2b, 0x1, 0x0) r1 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000080)=@o_path={&(0x7f0000000040)='./file0\x00', 0x0, 0x4008, r0}, 0x18) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000140)=[0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], 0x0, 0xad, &(0x7f00000001c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000200), &(0x7f0000000240), 0x8, 0x89, 0x8, 0x8, &(0x7f0000000280)}}, 0x10) (async, rerun: 32) ioctl$int_in(r0, 0x5421, &(0x7f0000000000)=0x4) (async, rerun: 32) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) (async) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x17, &(0x7f00000005c0)=ANY=[], 0x78) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000100)={0x1, 0xffffffffffffffff}, 0x4) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1, 0xffffffffffffffff}, &(0x7f0000000440), &(0x7f0000000480)=r1}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000580)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000500), &(0x7f0000000540)=r1}, 0x20) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000780)={'syztnl1\x00', &(0x7f00000006c0)={'sit0\x00', r2, 0x80, 0x7800, 0x101, 0x0, {{0x21, 0x4, 0x0, 0x9, 0x84, 0x65, 0x0, 0x6, 0x4, 0x0, @broadcast, @dev={0xac, 0x14, 0x14, 0x25}, {[@ssrr={0x89, 0x17, 0x49, [@dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1, @broadcast]}, @timestamp_addr={0x44, 0x4c, 0x23, 0x1, 0x5, [{@loopback, 0xd7}, {@private=0xa010101}, {@multicast1, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@rand_addr=0x64010100, 0x1}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x2}, {@empty, 0x9}, {@broadcast, 0x8001}, {@rand_addr=0x64010102, 0x3}]}, @lsrr={0x83, 0xb, 0xac, [@empty, @remote]}]}}}}}) (async, rerun: 64) r8 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000007c0)=r3, 0x4) (async, rerun: 64) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000900)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000880), &(0x7f00000008c0)='%pI4 \x00'}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@bloom_filter={0x1e, 0x8, 0x4, 0xfffffffe, 0x24, 0xffffffffffffffff, 0x4, '\x00', r2, 0xffffffffffffffff, 0x4, 0x1, 0x2, 0x4}, 0x48) (async) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a00)=@o_path={&(0x7f00000009c0)='./file0\x00', 0x0, 0x4008, r1}, 0x18) (async) r12 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000a80)=@generic={&(0x7f0000000a40)='./file0\x00', 0x0, 0x8}, 0x18) (async, rerun: 32) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000ac0)={r1, 0xffffffffffffffff}, 0x4) (async, rerun: 32) r14 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b40)=@o_path={&(0x7f0000000b00)='./file0\x00', 0x0, 0x8, r0}, 0x18) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c00)=@bpf_tracing={0x1a, 0x18, &(0x7f00000005c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}, @map_val={0x18, 0x9, 0x2, 0x0, r5, 0x0, 0x0, 0x0, 0xe0b0}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}}], &(0x7f0000000680)='syzkaller\x00', 0x7, 0x0, 0x0, 0xc1100, 0x20, '\x00', r7, 0x19, r8, 0x8, &(0x7f0000000800)={0x8, 0x5}, 0x8, 0x10, &(0x7f0000000840)={0x1, 0xb, 0xd35, 0xfff}, 0x10, 0xbae5, r1, 0x2, &(0x7f0000000b80)=[0x1, r9, r10, r11, r12, r13, 0xffffffffffffffff, r14], &(0x7f0000000bc0)=[{0x0, 0x5, 0x1, 0x4}, {0x1, 0x3, 0xc, 0xa}], 0x10, 0x7}, 0x90) 31.153430755s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x1e, 0x0, 0x7, 0x1, 0x0, 0x1}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000000880)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0x8, 0x10, &(0x7f0000000040)={0x0, 0x80000}, 0x10}, 0x90) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(0xffffffffffffffff, &(0x7f0000001980)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x40000804}, 0xc, &(0x7f0000001940)={&(0x7f0000001900)={0x14, 0x0, 0x4, 0x70bd2d, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x2400c011) sendto$packet(0xffffffffffffffff, &(0x7f0000000380)="33d77eba35f630b01c337fae16c536430539260e441cd4ed72abcc20b6892c2a593ab4624794b027ff102e6ad1ecd98d58148037be2a2b7862550d63c3c2ff75422d0e4b2529501b13fdff26d4d93d68bd4c8fd65dc6a7564d0d573d00d8d7318bba50618d067621046f5eda7667c21e1d48e62e2c3b7989e18449c5fd5bcbab7f13ce450a693db4e528671f583bd60cdbda37a91a4945cad35929df018c4e863fcb5637e226f80882affe2040be55d08d59f404ba3811065ac5f9ce47d5b97ca3a1d37440e95b3d592d29372f", 0xcd, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x20010, r1, 0x45687000) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='memory.events.local\x00', 0x26e1, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x9, 0x40022, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000040)=0xe5, 0x4) listen(0xffffffffffffffff, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000840)={r4, &(0x7f0000000240), &(0x7f0000000080)=@tcp}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000900)={r4, &(0x7f00000008c0)}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'veth0_to_bridge\x00', 0x0}) r6 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000440), 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xc, 0x10001, 0x4, 0x7, 0x2000, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x5}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x20, 0x5, 0x80, 0xfae, 0x200, 0x1, 0x3ff, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001a40)={0x18, 0x24, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000005000000000000000400000018110000", @ANYRES32=0x1, @ANYBLOB="0000000000000000d70200001c000000b7030000005000008500000083000000bf0900000000000055090100000000877f0200002b00000018e95ca35f3d88390b500c29f2a0682e1900fb2204b2681ea236b702f876d00562698cc506b776c2458f48ae0600000000000000c88b44efe71156a08d5b2f9fa1917357c67a86895594d8edddbf78bbb20ca9a23d8fceef76a23e1f52820ebe267fceb0985657ef464c176b93bd5692523d1013550c96a93ce4", @ANYRES32=r2, @ANYBLOB='\x00'/12, @ANYRES32=r6, @ANYBLOB="0000000000000000b703000000000000850000000c000000b70000000000000085100000f9ffffffb7080000000000007b8af8ff00000000b708", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f00000001c0)='syzkaller\x00', 0x900000, 0x0, 0x0, 0x40f00, 0x24, '\x00', r5, 0x0, r6, 0x8, &(0x7f0000000480)={0x0, 0x4}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f00000018c0)=[r7, r8], &(0x7f0000000600)=[{0x4, 0x3, 0x10000, 0x8}, {0x0, 0x4, 0x5, 0xb}, {0x5, 0x9, 0x6, 0x6}, {0x4, 0x2001, 0x10, 0x6}, {0x3, 0x4, 0xe, 0x4}, {0x1, 0x4, 0x10, 0x4}, {0x5, 0x4, 0x4, 0x2}, {0x4, 0x3, 0x3, 0xb}, {0x0, 0x4, 0x7, 0xa}, {0x5, 0x1, 0x0, 0x7}], 0x10, 0xffff}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r3, 0x89f8, &(0x7f0000000300)={'tunl0\x00', &(0x7f00000006c0)={'tunl0\x00', 0x0, 0x700, 0x40, 0x2, 0xf3, {{0x7, 0x4, 0x0, 0x1f, 0x1c, 0x66, 0x0, 0x1, 0x29, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_prespec={0x44, 0x4, 0xa6, 0x3, 0xa}, @ra={0x94, 0x4}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000004c0)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000580)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=r12, @ANYBLOB="00000000000000003c001a80380002802500018021"], 0x64}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000580)={r8, 0x58, &(0x7f00000019c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$ETHTOOL_MSG_PAUSE_GET(r3, &(0x7f0000001600)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000015c0)={&(0x7f0000001640)=ANY=[@ANYBLOB="5c020000", @ANYRES16=r9, @ANYBLOB="01002bbd7000fbdbdf2515000000280001801400020073797a6b616c6c65723000000000000008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="500001801400020070696d726567300000000000000000001400020076657468305f746f5f62726964676500140002006e657470636930000000000000000000080003000300000008000100", @ANYRES32=0x0, @ANYRES32=r4, @ANYRES32=r12, @ANYBLOB="140002007663616e300000000000000000000000500001801400020064756d6d7930000000000000000000001400020076657468305f766972745f776966690008000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="140002006261746164765f736c6176655f3000008000018008000300030000000800030002000000140002006970766c616e310000000000000000001400020076657468305f766972745f7769666900140002006e696376663000000000000000000000140002006d6163767461703000000000000000001400020064756d6d7930000000000000000000000800030002000000040001804000018014000200627269646765300000000000000000001400020069705f767469300000000000000000001400020076657468315f746f5f7465616d0000005000018008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r12, @ANYBLOB="080003000100000008000100", @ANYRES32=0x0, @ANYBLOB="0800030001000000140002006261746164765f736c6176655f31000008000100", @ANYRES32=r14, @ANYBLOB="08000100", @ANYRES32=r14, @ANYBLOB="440001800800030002000000080003000100000008df45a749d3191f6f250003001f0000001400020000001400020067726530000000"], 0x25c}, 0x1, 0x0, 0x0, 0x80010}, 0x0) r15 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r15) 31.138145176s ago: executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="240000060f140100000080000000000008000100000000000c0045"], 0x24}}, 0x0) 31.028507863s ago: executing program 1: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)={0x104, 0x2, 0x6, 0x0, 0x0, 0x0, {0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_DATA={0x8c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @empty}}, @IPSET_ATTR_MAXELEM={0x8}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x9304e71c}, @IPSET_ATTR_PORT_TO={0x6}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_NETMASK={0x5}, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0xffffff11}, @IPSET_ATTR_NETMASK={0x5}]}]}, 0x104}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0xa, 0x3, 0x3a) getsockopt$sock_buf(r1, 0x1, 0x4b, 0x0, &(0x7f00000002c0)) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000fb65000000000000001d8500000007000000850000000500000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000040)='sys_exit\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000011c0)={0xffffffffffffffff, 0x18000000000002a0, 0x12, 0x0, &(0x7f0000000180)="b9ff03076804268c989e14f088a8657986dd", 0x0, 0xb000000, 0x60000000, 0x0, 0x58, 0x0, 0x0, 0x1, 0x0, 0x5}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)={0x2c, 0x3a, 0xb, 0x0, 0x0, {0x2}, [@nested={0xfffffffffffffec1, 0x0, 0x0, 0x1, [@typed={0x13, 0x3, 0x0, 0x0, @str='\r4\xd8\x02j,'}]}]}, 0x2c}}, 0x0) 30.993366697s ago: executing program 0: socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="9c01000039000900000000000000000001000000040000000c0001804a52b37852cb0000080002"], 0x19c}}, 0x0) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r1 = socket(0x1f, 0x800, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000005c0)={'gre0\x00', 0x0}) bind$packet(r1, &(0x7f0000000180)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @dev}, 0x14) (async) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000240)=0xe9, 0x4) (async) sendmsg$netlink(r1, &(0x7f0000002ac0)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="02011400012918000e3580009f0001140000002f0600ac141414e0000003808a8972bd0b72e41082b1a3d2061fd7fdfe4b88942a31f48597e36e039b1c599db6e466749c2d4c8303a0f7fbda34fb8825f80200e3c0aba61f6304000000ffffca88faca"], 0xdd12}, {&(0x7f00000000c0)=ANY=[], 0x22f8}], 0x2}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.effective_mems\x00', 0x275a, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) close(0xffffffffffffffff) (async) socket$inet6(0xa, 0x3, 0x8000000003c) bpf$ENABLE_STATS(0x20, 0x0, 0x0) getsockname$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0xfffffe4d) (async) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xbb}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) (async) listen(r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000adc000000060a0104000000000000000002000000b00004804800018008000100647570003c0002800800014000000011080001400000001308000140000000120800024000000022080001400000008a08000240000000090800014000000000540001800a0001006c696d6974000000440002800c000140000000000000034b08000400000000010800054000000000080005400000000108000340000000060c00024000000000000000060800054000000001100001800900010068617368000000000900010073797a30000000000900020073797a32"], 0x104}}, 0x0) (async) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a9646", 0x28, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@generic={0x13, 0xb, "dd102d73819b3d13ec"}, @exp_smc={0xfe, 0x6}]}}}}}}}}, 0x0) 30.973961555s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="c7", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400), 0xb) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x0, 0x0, 0x0, 0x7ff, 0xa5, &(0x7f00000004c0)=""/165, 0x40f00, 0x1, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x6, 0x4, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000b40)={0x0, 0x8800, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x801, 0x5000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 30.898476865s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x8, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x40}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d00)=@broute={'broute\x00', 0x20, 0x5, 0x686, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001640], 0x0, &(0x7f0000001600), &(0x7f0000001640)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x24, 0x9100, 'ip6_vti0\x00', 'wg1\x00', 'vxcan1\x00', 'pimreg\x00', @remote, [0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xa6, 0xd6, 0x11e, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x0, 0xf6c6, 0x800}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}], @common=@ERROR={'ERROR\x00', 0x20, {"9d8d826ff59fa30994f8aa7f5b3de02bcd640d63d47067e1da6d86082aeb"}}}, {0x5, 0x40, 0xe8e1, 'pimreg1\x00', 'erspan0\x00', 'team0\x00', 'veth0\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @random="d4db78e25f32", [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x9, 0xb, 0xa00, 'team_slave_0\x00', 'pim6reg0\x00', 'bridge_slave_0\x00', 'ip_vti0\x00', @random="90c860cb85aa", [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @random="72cd6e3d6bdb", [0xff, 0x0, 0xff, 0xff, 0xff], 0x11e, 0x186, 0x1be, [@stp={{'stp\x00', 0x0, 0x48}, {{0x3f, {0x1, 0x0, 0x5, @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x2, 0x0, 0x0, 0x0, @local, [0x0, 0xff, 0x0, 0xff, 0xff], 0x4e24, 0x4e20, 0x7, 0xffff, 0x80, 0x7, 0x5, 0x3ff, 0xb04, 0x7}, 0x200}}}, @time={{'time\x00', 0x0, 0x18}, {{0x5, 0x6, 0xe972, 0x11c3d, 0x2, 0x3, 0x1}}}], [@common=@dnat={'dnat\x00', 0x10, {{@empty, 0xaf6468539b9c8e2f}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xc03b}}}], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}}, {0x3, 0x7, 0x2f6, 'dvmrp1\x00', 'tunl0\x00', 'macvlan1\x00', 'ip6gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, [0x0, 0xff], @multicast, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0xde, 0xde, 0x156, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x0, 0x0, 0xcfb7, 0x7, {0x4}}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x71, 0x1}}}], [], @common=@nflog={'nflog\x00', 0x50, {{0x3, 0x8, 0x2, 0x0, 0x0, "659a472f88843617e88c1d8a4f186036cbc43ed0e2528e7c32d2b7fed3e8fa3383efe2d82f35eae30eb31baa6ecda5cb228d3cf7596e5d4eaba3d6ed8db7590a"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x3, 0x0, 0x88f5, 'dvmrp1\x00', 'ip6tnl0\x00', 'netpci0\x00', 'xfrm0\x00', @local, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="691c2333d548", [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xd6, 0x126, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0x10}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x40000000, 'syz0\x00', {0x6}}}}}]}]}, 0x6fe) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025642531010000000900010073797a30000000000800054000"], 0xc4}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000001580)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @rand_addr, {[@ssrr={0x89, 0x13, 0xd0, [@private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback]}]}}}}}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}]}}}]}, 0x50}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/90, 0x5a}], 0x3, 0x80, 0x95e9) 30.876885721s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08040e000000000d01a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4094000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3ff}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0200000061d5b7d9424c8a3ff82885221c15e4cf4021c102ee37ff0864cf05a78d3a64457ae0cc9739f5670900000047cc410378b536203d5629fc5b780fc5429906f7788345ad27a3a636564234c4952ef8a962e7fa273224b995484ac3c20d8c9f3cc613cea51c753628cb037865b690773ae48ce22296f63803be9ef20d415be080f7f9c64dd3cadb6d9ef305a96be1c2c9c54935d1efce3a58c79cf4462b5cf68f76e1a48003561d727a5c78b002b83f3b805203d89aea277cb38dc97adc059f7b0ccecdf455cbc3e5de89e13fcfd30fa3d8930699234e7ec0b7130d5b6c708433a849d405ea54291cf6c5b10000000000000000"], 0x8) 30.867587445s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/24, 0x18) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x2000000, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff053}], 0x1, 0x0, 0x8, 0x7000000}}], 0x1, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 30.795451015s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) 30.749882928s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000002"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0x4c}}, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01050000000000000000020000000c00040000000000000000000c0002000000000000000000040007800c0008000000000000000000080001"], 0x90}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2}, 0x10) socket$l2tp6(0x2, 0x2, 0x73) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)={0x88, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x800, @private1, 0x1}}}}]}]}, 0x88}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000002"], &(0x7f0000003ff6)='GPL\x00', 0x0, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$IPVS_CMD_NEW_DAEMON(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000900)={0x4c, r3, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x38, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth1_to_hsr\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @multicast2}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6}]}]}, 0x4c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r1, @ANYBLOB="01050000000000000000020000000c00040000000000000000000c0002000000000000000000040007800c0008000000000000000000080001"], 0x90}}, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2}, 0x10) (async) socket$l2tp6(0x2, 0x2, 0x73) (async) sendmsg$TIPC_NL_MEDIA_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000140)={0x88, r5, 0x1, 0x0, 0x0, {0x3}, [@TIPC_NLA_BEARER={0x74, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e20, @loopback}}, {0x20, 0x2, @in6={0xa, 0x0, 0x0, @mcast1}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @remote}}, {0x20, 0x2, @in6={0xa, 0x4e23, 0x800, @private1, 0x1}}}}]}]}, 0x88}}, 0x0) (async) 30.653182683s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x3, 0x9, 0x6, 0xbaa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r2}, 0x38) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x0, 0x30}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r4, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r6, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_timeval(r7, 0x1, 0x43, &(0x7f0000000040), 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x7000) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x80000000000002, &(0x7f00000005c0)=0x169, 0x4) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000300)="d800000018008111e00212ba0d8105040a020000030f000b067c55a1bc000900b8000699030000000500160002008178a8001500090001400200000901ac040000d67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe04000000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad809d5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92307f27260e970300000000000000000000000000000000000000008dc5fb510162", 0xd8}], 0x1}, 0x0) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000140)=@o_path={0x0}, 0x18) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08041100000000000aa1180002000600142603600e1208000f0000810401a8001605200001400200000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) 30.613984608s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$packet(r1, &(0x7f0000000100)="40f0868f615eb09ac2916c23e91d11cc1c02bcd2ed8906960d33fc06db910153f56828859e1c63252184099df34317ac44cba08681f239aa", 0x38, 0x8005, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000100000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x0, 0x2}, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r7, 0x400452c8, &(0x7f0000000100)) sendmsg$nl_xfrm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=ANY=[@ANYBLOB="040100001a0001000000000000000000e000000200000000000000000000000020010000000000000000ba07c37300010000000000000000000000000000000020b751175548a7bf50f1304058e884b500000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa000000012b000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000000000000000000014000e00"/188], 0x104}}, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, r4, 0x12ca589fdb765487, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) r8 = socket(0x11, 0x800000003, 0x0) socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="e4da16d4bf530c05f92ca536b351c399cd968321249c5293d20998e1564c7c49eb007662dde841fc74d7b5fefb8a079debc873723ab72e9ef0063cc6075481b706d77cb25092bbf28ba6bebd15269ea1631f3f6e3a68315bd5801c9dde68e0d22fd9aac9d7a16f420650dd097c2511b9dbe2e6c678545d5df4be35721f10c4917b8697002513c6ba579ff3efbb7c430539d9e066bf2d950ac7c08010308886dcdb3cb31f97a1c793b774b107857fb858a06764467d466275cf04029fbfc2ee9daa80b19a7889cd1763f5a826b7cfebb88ff0547b5830313fe19c1bfdb2e5bd7da2ae4044eaac5d1ef793afae11ad660d1154cf", @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r10}, 0x10) write$cgroup_type(r2, &(0x7f0000000140), 0x9) sendmsg$kcm(r1, &(0x7f0000002480)={0x0, 0x0, 0x0}, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f0000000000)=@framed={{}, [@ldst, @ldst={0x0, 0x0, 0x3, 0x0, 0x0, 0x2}]}, 0x0}, 0x90) close(r11) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r11, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) 30.595599358s ago: executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002680)={&(0x7f00000001c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x7a, [@union={0x4, 0x0, 0x0, 0x5, 0x1, 0x9}, @ptr={0x1, 0x0, 0x0, 0x2, 0x41}, @ptr={0x2, 0x0, 0x0, 0x2, 0x3}]}}, 0x0, 0x1a}, 0x20) (async) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='xen_mc_flush\x00', r0}, 0x4f) (async) r1 = socket(0xf, 0xe3def083006d5baa, 0x5) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x500000a, 0x3032, 0xffffffffffffffff, 0x0) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x5, 0x1ff002, 0x7f, 0x7f, 0x1}, 0x48) (async, rerun: 64) r3 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f0000000040)={@remote, r4}, 0x14) (async) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800010010000000080003000200000008000500", @ANYRES32=r4], 0x4c}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x13, &(0x7f0000000940)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x3, 0xc6, &(0x7f00000004c0)=""/198, 0x40f00, 0x4f, '\x00', r4, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000005c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x2, 0x4, 0x401, 0xff}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000640)=[0x1, 0x1, 0x1], &(0x7f0000000680), 0x10, 0x100}, 0x90) (async) sendto(r1, &(0x7f0000000000)="8f40accf10bbf4bf172c5b60899ecb4062d7be6d66e462948feb39158bfb20918b4c64332abc74b159a00048157d8eec2a", 0x31, 0x4040, &(0x7f0000000040)=@xdp={0x2c, 0x4, r4, 0x12}, 0x80) (async) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r2, &(0x7f0000000800), 0x0}, 0x20) 30.503143165s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x1c) socket$inet6(0xa, 0x3, 0xff) socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$inet6(0xa, 0x0, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) bind$inet6(r2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x10, &(0x7f00000000c0), 0x8) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x89a1, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) 30.475463759s ago: executing program 2: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00'}) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='veno\x00', 0x5) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) write$binfmt_aout(r0, &(0x7f00000001c0)=ANY=[], 0x420) 30.400872924s ago: executing program 2: socket(0x28, 0x5, 0x0) socket(0x10, 0x803, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000019440)={&(0x7f00000193c0)={0x70, 0x41, 0x107, 0xffffffff, 0x0, {0x1, 0x7c}, [@generic="0548726688eb4b9b006cead7bd2bb0c033945836ba42c56a4baab47d9e9584dd9fde517c18e7062236a84e75f5a5fd37242a9ead4e51f90feb744e15c7033d3007f794ba0f31007407967c1bfae34df6c14881c735cf87779a"]}, 0x70}}, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000040)=0xa92, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000850000002a0000009500"/27], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) recvmmsg(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="4600030007"], 0xd) socket(0x40000000015, 0x5, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x10, 0x1}]}}, 0x0, 0x26}, 0x20) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) setsockopt$inet_msfilter(0xffffffffffffffff, 0x0, 0x29, 0x0, 0x1c) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000019380)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r3}, 0x10) r4 = socket(0x40000000015, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, 0x0, 0x0) r5 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r5, 0x89a2, &(0x7f0000000000)='bridge0\x00') syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r5) r6 = socket(0x21, 0x5, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x4e20, @loopback}, 0x10) getsockopt(r6, 0x200000000114, 0x2716, &(0x7f0000000340)=""/102400, &(0x7f0000000240)=0x19000) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000180)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x5, &(0x7f0000019340)=@framed={{}, [@map_val={0x18, 0x3, 0x2, 0x0, r7, 0x0, 0x0, 0x0, 0x7}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff26}, 0x90) 30.252011332s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000080)="c7", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback}, 0x1c) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000400), 0xb) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{}, 0x0, &(0x7f0000000080)}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000b80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x3, 0x0, 0x0, 0x0, 0x7ff, 0xa5, &(0x7f00000004c0)=""/165, 0x40f00, 0x1, '\x00', 0x0, 0x33, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x5, 0x2}, 0x8, 0x10, &(0x7f00000005c0)={0x3, 0x6, 0x4, 0x401}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) r0 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r0, 0x65, 0x7, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000b40)={0x0, 0x8800, &(0x7f0000000040)={&(0x7f0000000100)={0x1c, 0x7, 0x6, 0x801, 0x5000000, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) 30.203671268s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x40, 0x20}, 0xc) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)='4', 0x1}], 0x1}}], 0x1, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f00000000c0)={0x0, 0x40, 0x20}, 0xc) (async) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendmmsg$inet6(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)='4', 0x1}], 0x1}}], 0x1, 0x0) (async) 30.09815079s ago: executing program 3: getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r0, &(0x7f0000000040)=ANY=[], 0xffe6) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) (async, rerun: 32) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$cgroup_subtree(r0, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x9) pwrite64(r0, &(0x7f0000000280)='j', 0x1, 0x0) (async, rerun: 64) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000000)={0x0, 0x2, 0xffaf, 0x10001}) (async, rerun: 64) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async, rerun: 32) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (rerun: 32) ioctl$SIOCSIFHWADDR(r2, 0x40305839, &(0x7f0000000540)={'\x00', @link_local={0x1, 0x80, 0xc2, 0x5}}) write$cgroup_int(r1, &(0x7f0000000200), 0x42400) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010012000000000000000000000a20000000000a03000000000000000000070000000900010073797a300000000068000000090a010400000000000000000700000008000a40000000fa0900020073797a31000000000900010073797a3000000000080005400000000c2c001180090001006d657461000000001c0002800800014000000000080002"], 0xb0}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) (rerun: 64) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r4, &(0x7f0000000180)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="32b4295c9541b9aa98fd6b59c39c2f1363e7e0249fe87ed67d35f185875b78ec292d74573f1b0a1fa70f371a5f390708ccbbdee8", @ANYRES16=r5, @ANYBLOB="00042cbd7000fddbdf2506000000060028000200000008002c00080000000800320006000000050038000000000005002d0001000000"], 0x3c}, 0x1, 0x0, 0x0, 0x20000010}, 0x1) 30.052967889s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x8, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x10, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR={0xa}]}}}]}, 0x40}}, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000001540), 0xffffffffffffffff) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r2, 0x0, 0x80, &(0x7f0000001d00)=@broute={'broute\x00', 0x20, 0x5, 0x686, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20001640], 0x0, &(0x7f0000001600), &(0x7f0000001640)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, [{0x5, 0x24, 0x9100, 'ip6_vti0\x00', 'wg1\x00', 'vxcan1\x00', 'pimreg\x00', @remote, [0xff, 0xff], @empty, [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0xa6, 0xd6, 0x11e, [@cluster={{'cluster\x00', 0x0, 0x10}, {{0x0, 0xf6c6, 0x800}}}], [@common=@NFQUEUE0={'NFQUEUE\x00', 0x8}], @common=@ERROR={'ERROR\x00', 0x20, {"9d8d826ff59fa30994f8aa7f5b3de02bcd640d63d47067e1da6d86082aeb"}}}, {0x5, 0x40, 0xe8e1, 'pimreg1\x00', 'erspan0\x00', 'team0\x00', 'veth0\x00', @broadcast, [0xff, 0xff, 0xff, 0x0, 0xff, 0xff], @random="d4db78e25f32", [0x0, 0x0, 0xff, 0xff, 0xff, 0xff], 0x6e, 0x6e, 0x9e, [], [], @common=@CLASSIFY={'CLASSIFY\x00', 0x8, {{0xffffffff}}}}]}, {0x0, '\x00', 0x2, 0xfffffffffffffffc, 0x2, [{0x9, 0xb, 0xa00, 'team_slave_0\x00', 'pim6reg0\x00', 'bridge_slave_0\x00', 'ip_vti0\x00', @random="90c860cb85aa", [0x0, 0x0, 0x0, 0x0, 0xff, 0xff], @random="72cd6e3d6bdb", [0xff, 0x0, 0xff, 0xff, 0xff], 0x11e, 0x186, 0x1be, [@stp={{'stp\x00', 0x0, 0x48}, {{0x3f, {0x1, 0x0, 0x5, @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff, 0xff], 0x2, 0x0, 0x0, 0x0, @local, [0x0, 0xff, 0x0, 0xff, 0xff], 0x4e24, 0x4e20, 0x7, 0xffff, 0x80, 0x7, 0x5, 0x3ff, 0xb04, 0x7}, 0x200}}}, @time={{'time\x00', 0x0, 0x18}, {{0x5, 0x6, 0xe972, 0x11c3d, 0x2, 0x3, 0x1}}}], [@common=@dnat={'dnat\x00', 0x10, {{@empty, 0xaf6468539b9c8e2f}}}, @common=@NFQUEUE0={'NFQUEUE\x00', 0x8, {{0xc03b}}}], @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0xfffffffffffffffe}}}}, {0x3, 0x7, 0x2f6, 'dvmrp1\x00', 'tunl0\x00', 'macvlan1\x00', 'ip6gretap0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3e}, [0x0, 0xff], @multicast, [0x0, 0xff, 0xff, 0x0, 0x0, 0xff], 0xde, 0xde, 0x156, [@statistic={{'statistic\x00', 0x0, 0x18}, {{0x1, 0x0, 0x0, 0xcfb7, 0x7, {0x4}}}}, @cpu={{'cpu\x00', 0x0, 0x8}, {{0x71, 0x1}}}], [], @common=@nflog={'nflog\x00', 0x50, {{0x3, 0x8, 0x2, 0x0, 0x0, "659a472f88843617e88c1d8a4f186036cbc43ed0e2528e7c32d2b7fed3e8fa3383efe2d82f35eae30eb31baa6ecda5cb228d3cf7596e5d4eaba3d6ed8db7590a"}}}}]}, {0x0, '\x00', 0x4, 0xfffffffffffffffc, 0x1, [{0x3, 0x0, 0x88f5, 'dvmrp1\x00', 'ip6tnl0\x00', 'netpci0\x00', 'xfrm0\x00', @local, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @random="691c2333d548", [0x0, 0x0, 0xff, 0x0, 0xff, 0xff], 0x6e, 0xd6, 0x126, [], [@common=@CONNSECMARK={'CONNSECMARK\x00', 0x8, {{0x2}}}, @common=@dnat={'dnat\x00', 0x10, {{@broadcast, 0x10}}}], @common=@IDLETIMER={'IDLETIMER\x00', 0x28, {{0x40000000, 'syz0\x00', {0x6}}}}}]}]}, 0x6fe) getsockopt$sock_buf(r1, 0x1, 0x19, &(0x7f0000002f80)=""/217, &(0x7f0000003080)=0xd9) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000006000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000200900020025642531010000000900010073797a30000000000800054000"], 0xc4}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f3, &(0x7f0000000280)={'ip_vti0\x00', &(0x7f0000001580)={'\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0xa, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr, @rand_addr, {[@ssrr={0x89, 0x13, 0xd0, [@private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, @loopback]}]}}}}}) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000300)=@newlink={0x50, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @sit={{0x8}, {0x24, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8}, @IFLA_IPTUN_REMOTE={0x8, 0x3, @remote}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}]}}}]}, 0x50}}, 0x0) preadv(0xffffffffffffffff, &(0x7f0000000240)=[{&(0x7f00000001c0)=""/67, 0x43}, {&(0x7f0000000540)=""/4096, 0x1000}, {&(0x7f00000003c0)=""/90, 0x5a}], 0x3, 0x80, 0x95e9) 738.339981ms ago: executing program 1: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08040e000000000d01a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4094000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0xbc, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x90) socketpair$unix(0x1, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x3ff}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r1, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f00000005c0)=ANY=[@ANYRES32=0x0, @ANYBLOB="0200000061d5b7d9424c8a3ff82885221c15e4cf4021c102ee37ff0864cf05a78d3a64457ae0cc9739f5670900000047cc410378b536203d5629fc5b780fc5429906f7788345ad27a3a636564234c4952ef8a962e7fa273224b995484ac3c20d8c9f3cc613cea51c753628cb037865b690773ae48ce22296f63803be9ef20d415be080f7f9c64dd3cadb6d9ef305a96be1c2c9c54935d1efce3a58c79cf4462b5cf68f76e1a48003561d727a5c78b002b83f3b805203d89aea277cb38dc97adc059f7b0ccecdf455cbc3e5de89e13fcfd30fa3d8930699234e7ec0b7130d5b6c708433a849d405ea54291cf6c5b10000000000000000"], 0x8) 635.361224ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)=ANY=[@ANYBLOB="1c00000022000106"], 0x1c}], 0x1}, 0x0) 592.146927ms ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0x3af4701e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x28012, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000180)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha12-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000001280)="b7f2288d3aaea2bc0000def1260a00"/28, 0x1c) r3 = accept$alg(r2, 0x0, 0x0) recvmmsg(r3, &(0x7f00000005c0)=[{{0x0, 0x2000000, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff053}], 0x1, 0x0, 0x8, 0x7000000}}], 0x1, 0x0, 0x0) sendfile(r3, r1, 0x0, 0x10000a006) 388.660458ms ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newlink={0x20, 0x10, 0xffffff1f}, 0x20}}, 0x0) 0s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18020000000000000000000000000030850000002c00000095000000000000002b4003fe37a077ae55f52c0d80a2649baca85309be96d5a45bbbdb5ff7ffffffd075b3eee14473f51be98db7efbb059842ba4470e8e04acb807fbbabc68abdcce9f672b6bb61c302dfd5c11071adac29fd64d33a3502fbeb1ed99dd0e792f24c420bfcc2635421d339ad521d6953b1137850d9e9ebf65ee988ea2dbee528678eb47efb7b3f19046c6f1bd1bf56e5853ed96137f95b3a11954ed1c8a8676468cf2405e48723d4b1ff"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000001400)=""/4106}, 0x18) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r4}}, 0x20}}, 0x0) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x24, &(0x7f0000000400)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x4}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x0, 0x2e0}, @alu={0x3, 0x0, 0xc, 0x1, 0x0, 0x6, 0xffffffffffffffff}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3b7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @btf_id={0x18, 0xb, 0x3, 0x0, 0x1}, @printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400}}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x40f00, 0x78, '\x00', 0x0, 0x1a, r0, 0x8, &(0x7f0000000240)={0x8, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x5, 0x6, 0xea3, 0x400}, 0x10, 0x1c9f5, 0xffffffffffffffff, 0x4, &(0x7f00000002c0)=[0x1, 0xffffffffffffffff, r0], &(0x7f0000000540)=[{0x5, 0x4, 0x0, 0x5}, {0x2, 0x5, 0x4, 0x6}, {0x3, 0x1, 0x9, 0xa}, {0x3, 0x4, 0xe}], 0x10, 0xf7ce}, 0x90) r6 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000640)={0xffffffffffffffff}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=@bridge_setlink={0x0, 0x13, 0x10, 0x70bd25, 0x25dfdbfe, {0x7, 0x0, 0x0, r4, 0x4200, 0x10000}, [@IFLA_XDP={0x0, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x0, 0x1, r1}, @IFLA_XDP_EXPECTED_FD={0x0, 0x8, r5}, @IFLA_XDP_FD={0x0, 0x1, r6}, @IFLA_XDP_FLAGS]}, @IFLA_MAP={0x0, 0xe, {0x7fff, 0x8000000000000000, 0x3ff, 0x1, 0x69, 0xa}}, @IFLA_IFNAME={0x0, 0x3, 'geneve1\x00'}, @IFLA_EVENT={0x0, 0x2c, 0x8001}]}, 0x44}}, 0x0) kernel console output (not intermixed with test programs): 89802][T11549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 227.697211][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.723873][T11549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 227.753449][T11549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 227.760416][T11549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 227.830274][T11549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.032408][T11549] hsr_slave_0: entered promiscuous mode [ 228.052453][T11549] hsr_slave_1: entered promiscuous mode [ 228.066406][T11549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.076888][T11614] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 228.082759][T11549] Cannot create hsr debugfs directory [ 228.110150][T11614] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.199884][T11621] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.342258][T11621] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.351614][T11628] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.390815][T11621] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 228.406337][T11623] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.522932][ T53] Bluetooth: hci0: command tx timeout [ 228.621395][T11549] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.655115][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 228.668579][T11635] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 228.683178][T11635] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.757057][T11549] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.789928][ T29] audit: type=1804 audit(1717670850.039:34): pid=11637 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/558/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 228.902306][T11549] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.002054][T11549] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.174216][T11656] syz_tun: entered promiscuous mode [ 229.179783][T11656] macvtap1: entered promiscuous mode [ 229.185542][T11656] macvtap1: entered allmulticast mode [ 229.191141][T11656] syz_tun: entered allmulticast mode [ 229.199862][T11656] syz_tun: left allmulticast mode [ 229.205414][T11656] syz_tun: left promiscuous mode [ 229.249673][T11549] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 229.262099][T11549] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 229.278984][T11549] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 229.304376][T11549] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 229.511821][T11549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.559473][T11549] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.605022][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.612162][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.657869][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.665035][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.747521][T11673] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.848187][T11549] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.952490][T11686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.074925][T11691] syz_tun: entered promiscuous mode [ 230.087856][T11691] macvtap1: entered promiscuous mode [ 230.101787][T11691] macvtap1: entered allmulticast mode [ 230.126139][T11691] syz_tun: entered allmulticast mode [ 230.149397][T11691] syz_tun: left allmulticast mode [ 230.162877][T11691] syz_tun: left promiscuous mode [ 230.218030][T11695] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 230.230454][T11695] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.500007][T11549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.604561][ T53] Bluetooth: hci0: command tx timeout [ 231.228581][T11549] veth0_vlan: entered promiscuous mode [ 231.235116][ T29] audit: type=1804 audit(1717670852.479:35): pid=11716 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3011239068/syzkaller.8kLmdx/600/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 231.279655][T11549] veth1_vlan: entered promiscuous mode [ 231.374211][T11736] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 231.396549][T11549] veth0_macvtap: entered promiscuous mode [ 231.436187][T11737] syz_tun: entered promiscuous mode [ 231.441486][T11737] macvtap1: entered promiscuous mode [ 231.456653][T11737] macvtap1: entered allmulticast mode [ 231.465785][T11737] syz_tun: entered allmulticast mode [ 231.478511][T11737] syz_tun: left allmulticast mode [ 231.485428][T11737] syz_tun: left promiscuous mode [ 231.532875][T11549] veth1_macvtap: entered promiscuous mode [ 231.559024][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.571650][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.582356][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.593245][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.604195][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.615067][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.630724][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.641494][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.656267][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 231.667382][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.680827][T11549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 231.705115][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.719371][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.772860][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.785945][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.812003][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.826511][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.844461][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.861607][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.873147][T11549] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.895026][T11549] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.920861][T11549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.990948][T11549] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.008487][T11549] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.059476][T11549] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.073665][T11549] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.188632][T11744] syzkaller0: entered promiscuous mode [ 232.199923][T11744] syzkaller0: entered allmulticast mode [ 232.265352][T11757] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 232.292826][T11751] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 232.301542][T11751] __nla_validate_parse: 2 callbacks suppressed [ 232.301557][T11751] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 232.682844][ T53] Bluetooth: hci0: command tx timeout [ 233.360685][ T29] audit: type=1804 audit(1717670854.609:36): pid=11778 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1220208848/syzkaller.x9cRQH/183/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 233.918733][T11764] pimreg: entered allmulticast mode [ 233.928377][T11767] pimreg: left allmulticast mode [ 233.985293][T11768] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.070353][T11781] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 234.084195][T11781] pim6reg0: linktype set to 270 [ 234.106025][T11781] pim6reg0: tun_chr_ioctl cmd 3288372251 [ 234.137327][T11781] pim6reg0: tun_chr_ioctl cmd 1342215231 [ 234.331192][ T2448] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.351757][T11788] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 234.361164][ T2448] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.437924][ T1106] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 234.447925][ T1106] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 234.452196][T11794] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 234.470539][T11794] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.646330][T11804] netlink: 211388 bytes leftover after parsing attributes in process `syz-executor.0'. [ 234.742397][T11814] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.3'. [ 234.763273][ T53] Bluetooth: hci0: command tx timeout [ 235.035963][T11829] trusted_key: syz-executor.0 sent an empty control message without MSG_MORE. [ 235.122091][ T29] audit: type=1804 audit(1717670856.369:37): pid=11828 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/573/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 235.334477][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.430147][T11839] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 235.451791][T11839] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.669015][T11847] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.077661][T11872] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 236.094673][T11873] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 237.043872][ T29] audit: type=1804 audit(1717670858.299:38): pid=11901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/576/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 237.279434][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 237.420987][T11911] Bluetooth: MGMT ver 1.22 [ 237.758004][T11928] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 237.768717][T11928] __nla_validate_parse: 1 callbacks suppressed [ 237.768733][T11928] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 237.892264][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 237.965342][ T4489] Bluetooth: hci0: command 0x0405 tx timeout [ 238.448843][T11959] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.810923][ T29] audit: type=1804 audit(1717670860.059:39): pid=11963 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3011239068/syzkaller.8kLmdx/632/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 239.049096][T11979] Dead loop on virtual device ip6_vti0, fix it urgently! [ 239.198608][T11990] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.223163][T11990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.233894][T11997] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 239.242826][T11997] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.802505][T12033] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 239.811740][T12033] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.849382][T12034] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.879558][T12034] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 239.952000][T12034] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.201770][ T29] audit: type=1804 audit(1717670861.449:40): pid=12043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3011239068/syzkaller.8kLmdx/637/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 240.314202][T12058] netlink: 542 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.348915][T12054] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 240.479230][T12066] openvswitch: netlink: Message has 4 unknown bytes. [ 240.669404][T12072] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 241.226766][T12098] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 241.235450][T12098] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 241.262591][T12100] openvswitch: netlink: Message has 4 unknown bytes. [ 241.345806][T12104] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 241.361124][T12104] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 241.749721][ T29] audit: type=1804 audit(1717670862.989:41): pid=12120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1220208848/syzkaller.x9cRQH/197/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 242.041039][T12132] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 242.068617][T12139] openvswitch: netlink: Message has 4 unknown bytes. [ 242.220302][T12148] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 243.202097][T12182] __nla_validate_parse: 8 callbacks suppressed [ 243.202118][T12182] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.239163][T12182] openvswitch: netlink: Message has 4 unknown bytes. [ 243.308681][T12180] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.338610][T12180] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 243.654588][ T29] audit: type=1804 audit(1717670864.899:42): pid=12198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276495880/syzkaller.EOkz5B/162/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 243.740473][T12206] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 243.757809][T12206] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 243.843916][T12212] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.912820][T12216] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.066799][T12225] bridge0: port 3(team0) entered blocking state [ 244.086888][T12225] bridge0: port 3(team0) entered disabled state [ 244.099829][T12225] team0: entered allmulticast mode [ 244.108645][T12225] team_slave_0: entered allmulticast mode [ 244.124898][T12225] team_slave_1: entered allmulticast mode [ 244.130662][T12225] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 244.166267][T12225] team0: entered promiscuous mode [ 244.171729][T12225] team_slave_0: entered promiscuous mode [ 244.191371][T12225] team_slave_1: entered promiscuous mode [ 244.214313][T12225] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 244.229682][T12225] bridge0: port 3(team0) entered blocking state [ 244.236084][T12225] bridge0: port 3(team0) entered forwarding state [ 244.245349][T12227] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 244.256458][T12227] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 244.634729][T12244] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 244.755608][T12249] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1 [ 244.793013][T12252] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 244.804851][T12252] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.921370][T12258] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 244.963837][T12259] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 245.107033][ T29] audit: type=1804 audit(1717670866.359:43): pid=12265 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3011239068/syzkaller.8kLmdx/647/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 245.167919][T12263] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 245.188795][T12263] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 245.402027][T12275] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 245.864087][T12297] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.142286][T12309] dccp_invalid_packet: P.Data Offset(0) too small [ 246.150857][T12313] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 246.498190][ T29] audit: type=1804 audit(1717670867.749:44): pid=12324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/605/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 246.561842][ T29] audit: type=1804 audit(1717670867.809:45): pid=12321 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276495880/syzkaller.EOkz5B/171/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 247.867074][T12380] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 248.082555][ T29] audit: type=1804 audit(1717670869.329:46): pid=12392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276495880/syzkaller.EOkz5B/175/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 248.158131][ T29] audit: type=1804 audit(1717670869.409:47): pid=12395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2755533636/syzkaller.25QWP6/43/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 248.769369][ T29] audit: type=1804 audit(1717670870.019:48): pid=12400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/609/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 248.819648][T12403] __nla_validate_parse: 3 callbacks suppressed [ 248.819666][T12403] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 249.332601][T12427] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 249.341539][T12427] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 249.594065][ T29] audit: type=1804 audit(1717670870.839:49): pid=12433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276495880/syzkaller.EOkz5B/179/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 249.661000][ T29] audit: type=1804 audit(1717670870.909:50): pid=12436 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2755533636/syzkaller.25QWP6/46/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 249.680792][T12440] veth4: entered allmulticast mode [ 250.155211][ T29] audit: type=1804 audit(1717670871.409:51): pid=12447 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/613/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 250.654063][T12466] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 250.677503][T12466] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 250.832221][T12475] tipc: Failed to remove unknown binding: 66,1,1/0:3115061902/3115061904 [ 250.870917][T12473] tipc: Failed to remove unknown binding: 66,1,1/0:3115061902/3115061904 [ 250.883201][T12473] tipc: Failed to remove unknown binding: 66,1,1/0:3115061902/3115061904 [ 250.952329][ T29] audit: type=1804 audit(1717670872.199:52): pid=12472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3011239068/syzkaller.8kLmdx/661/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 251.141413][T12488] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.366864][ T29] audit: type=1804 audit(1717670872.619:53): pid=12495 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/615/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 251.821632][ T29] audit: type=1804 audit(1717670873.069:54): pid=12499 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1220208848/syzkaller.x9cRQH/222/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 252.191899][T12505] batadv0: entered promiscuous mode [ 252.222899][T12505] macsec1: entered promiscuous mode [ 252.239761][T12506] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.264032][T12505] macsec1: entered allmulticast mode [ 252.278790][T12505] batadv0: entered allmulticast mode [ 252.291157][T12511] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.322386][T12505] batadv0: left allmulticast mode [ 252.333326][T12505] batadv0: left promiscuous mode [ 252.511191][T12514] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 252.545668][T12514] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.580731][T12514] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.649636][T12530] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 252.663301][T12530] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.751025][ T29] audit: type=1804 audit(1717670873.999:55): pid=12526 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276495880/syzkaller.EOkz5B/186/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 253.315622][ T29] audit: type=1804 audit(1717670874.569:56): pid=12543 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/617/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 253.639175][ T29] audit: type=1804 audit(1717670874.889:57): pid=12546 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1220208848/syzkaller.x9cRQH/224/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 253.705297][T12550] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.269058][T12574] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 254.393320][T12580] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 254.419274][T12580] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.644600][ T29] audit: type=1804 audit(1717670875.889:58): pid=12585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3011239068/syzkaller.8kLmdx/667/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 254.753397][ T29] audit: type=1804 audit(1717670875.969:59): pid=12584 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2755533636/syzkaller.25QWP6/58/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 254.867035][T12595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 255.275610][T12618] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 255.284370][T12618] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 255.390485][T12621] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.443510][ T29] audit: type=1804 audit(1717670876.689:60): pid=12617 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1220208848/syzkaller.x9cRQH/233/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 255.482370][T12621] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.601165][T12630] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.880638][ T29] audit: type=1804 audit(1717670877.129:61): pid=12636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2755533636/syzkaller.25QWP6/61/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 255.966501][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.973056][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.508213][T12657] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 256.569086][T12657] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 256.614587][T12664] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 256.642306][T12664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.696619][T12665] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 256.755934][T12665] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.846607][T12665] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.019219][T12680] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 257.192753][ T29] audit: type=1804 audit(1717670878.439:62): pid=12687 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/624/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 257.274814][T12695] dccp_invalid_packet: P.Data Offset(0) too small [ 257.980461][T12725] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 258.165118][ T29] audit: type=1804 audit(1717670879.419:63): pid=12727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276495880/syzkaller.EOkz5B/197/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 258.637172][T12750] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 258.787722][T12760] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 258.974628][ T29] audit: type=1804 audit(1717670880.229:64): pid=12762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/628/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 259.037581][ T29] audit: type=1804 audit(1717670880.289:65): pid=12768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2755533636/syzkaller.25QWP6/74/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 259.410093][T12783] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 259.427998][T12783] __nla_validate_parse: 6 callbacks suppressed [ 259.428016][T12783] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 259.739018][T12804] tipc: Started in network mode [ 259.751576][T12804] tipc: Node identity 5, cluster identity 4711 [ 259.769913][T12804] tipc: Node number set to 5 [ 259.867558][ T29] audit: type=1804 audit(1717670881.119:66): pid=12802 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1220208848/syzkaller.x9cRQH/246/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 259.988345][ T29] audit: type=1804 audit(1717670881.239:67): pid=12810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2755533636/syzkaller.25QWP6/79/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 260.141710][T12826] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 260.185229][T12826] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 260.597419][T12856] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.611459][T12858] tap0: tun_chr_ioctl cmd 1074025673 [ 260.619048][ T29] audit: type=1804 audit(1717670881.869:68): pid=12848 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/632/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 260.647046][T12852] tap0: tun_chr_ioctl cmd 1074025677 [ 260.672561][T12852] tap0: linktype set to 773 [ 260.743349][ T29] audit: type=1804 audit(1717670881.999:69): pid=12853 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2755533636/syzkaller.25QWP6/82/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 260.939941][T12873] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 260.959726][T12873] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 261.308184][T12895] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 261.329183][ T29] audit: type=1804 audit(1717670882.569:70): pid=12887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3011239068/syzkaller.8kLmdx/687/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 261.363426][T12895] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.381635][T12895] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 261.531382][T12909] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 261.562799][T12909] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.143658][ T29] audit: type=1804 audit(1717670883.389:71): pid=12934 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1220208848/syzkaller.x9cRQH/256/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 262.500812][T12948] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 262.518553][T12948] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.738230][T12960] xt_TCPMSS: Only works on TCP SYN packets [ 262.922035][ T29] audit: type=1804 audit(1717670884.169:72): pid=12968 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2755533636/syzkaller.25QWP6/88/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 263.198713][T12986] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 263.207361][T12986] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 263.828716][ T29] audit: type=1804 audit(1717670885.079:73): pid=13006 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/647/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 263.850915][T13014] xt_hashlimit: max too large, truncated to 1048576 [ 263.906503][ T29] audit: type=1804 audit(1717670885.139:74): pid=13010 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3011239068/syzkaller.8kLmdx/699/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 264.162104][T13023] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 264.192298][T13023] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.633467][ T29] audit: type=1804 audit(1717670885.879:75): pid=13046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1220208848/syzkaller.x9cRQH/263/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 264.683349][ T4489] Bluetooth: hci0: command 0x0405 tx timeout [ 264.693762][T13038] team0 (unregistering): Port device team_slave_0 removed [ 264.715189][T13038] team0 (unregistering): Port device team_slave_1 removed [ 265.059348][T13070] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 265.087146][T13070] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 265.492466][T13089] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.518440][T13089] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.547820][ T29] audit: type=1804 audit(1717670886.799:76): pid=13085 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276495880/syzkaller.EOkz5B/214/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 265.583287][T13089] Êü: entered promiscuous mode [ 265.675582][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.744909][T13093] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.935299][T13108] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 265.968822][T13108] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.994646][T13106] vlan2: entered promiscuous mode [ 266.014317][T13106] bond0: entered promiscuous mode [ 266.021197][T13106] bond_slave_0: entered promiscuous mode [ 266.029059][T13106] bond_slave_1: entered promiscuous mode [ 266.037132][T13106] vlan2: entered allmulticast mode [ 266.044075][T13106] bond0: entered allmulticast mode [ 266.049411][T13106] bond_slave_0: entered allmulticast mode [ 266.055483][T13106] bond_slave_1: entered allmulticast mode [ 266.075748][T13106] bond0: left allmulticast mode [ 266.084165][T13106] bond_slave_0: left allmulticast mode [ 266.098676][T13106] bond_slave_1: left allmulticast mode [ 266.107996][T13106] bond0: left promiscuous mode [ 266.124214][T13106] bond_slave_0: left promiscuous mode [ 266.142549][T13106] bond_slave_1: left promiscuous mode [ 266.341152][T13128] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 266.360280][T13128] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 266.386576][T13122] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 266.402799][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.424660][T13122] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 266.453366][T13122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.960195][T13148] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 267.570097][T13171] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 267.629756][T13181] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 268.099995][T13203] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 268.292971][ T4489] Bluetooth: hci4: command 0x0406 tx timeout [ 268.318717][T13224] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 268.365411][T13224] tc_dump_action: action bad kind [ 268.956604][T13263] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 269.051809][T13263] tc_dump_action: action bad kind [ 269.196615][T13280] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 269.242288][T13259] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 269.561855][T13299] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 269.582358][T13299] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 269.791244][T13313] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 269.809907][T13316] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 269.844016][T13314] veth0_vlan: entered allmulticast mode [ 269.859828][ T29] audit: type=1804 audit(1717670891.109:77): pid=13273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1220208848/syzkaller.x9cRQH/282/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 269.939248][T13318] veth0_vlan: left promiscuous mode [ 269.949317][T13318] veth0_vlan: entered promiscuous mode [ 269.961219][T13319] tc_dump_action: action bad kind [ 270.267458][T13322] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 270.547820][T13351] __nla_validate_parse: 9 callbacks suppressed [ 270.547839][T13351] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.581705][T13357] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 270.616833][T13357] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 270.876928][T13374] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 270.915715][T13374] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.996075][T13374] tc_dump_action: action bad kind [ 271.160348][T13387] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 49 (only 8 groups) [ 271.219454][T13391] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 271.403648][T13403] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 271.473627][T13409] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 271.501834][T13409] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 271.517578][T13410] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 271.561067][ T29] audit: type=1804 audit(1717670892.809:78): pid=13368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1220208848/syzkaller.x9cRQH/285/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 271.650671][ T29] audit: type=1800 audit(1717670892.809:79): pid=13368 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="cgroup.controllers" dev="sda1" ino=1959 res=0 errno=0 [ 272.150869][T13451] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 272.174183][T13451] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.192836][T13452] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 272.219610][T13452] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 272.264200][T13452] 0ªX¹¦Dö»: entered allmulticast mode [ 272.299492][T13463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.313159][T13463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.324247][T13463] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 272.546462][T13471] bridge0: port 3(geneve1) entered blocking state [ 272.573997][T13471] bridge0: port 3(geneve1) entered disabled state [ 272.587047][T13471] geneve1: entered allmulticast mode [ 272.604357][T13471] geneve1: entered promiscuous mode [ 272.617621][T13471] bridge0: port 3(geneve1) entered blocking state [ 272.625173][T13471] bridge0: port 3(geneve1) entered forwarding state [ 272.819318][T13489] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 272.956976][ T29] audit: type=1804 audit(1717670894.199:80): pid=13450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/680/cgroup.controllers" dev="sda1" ino=1934 res=1 errno=0 [ 273.061391][ T29] audit: type=1800 audit(1717670894.199:81): pid=13450 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1934 res=0 errno=0 [ 273.490078][T13528] bridge0: port 4(geneve1) entered blocking state [ 273.510541][T13528] bridge0: port 4(geneve1) entered disabled state [ 273.524516][T13528] geneve1: entered allmulticast mode [ 273.532064][T13528] geneve1: entered promiscuous mode [ 273.538858][T13528] bridge0: port 4(geneve1) entered blocking state [ 273.545478][T13528] bridge0: port 4(geneve1) entered forwarding state [ 273.957875][T13560] nft_compat: unsupported protocol 5 [ 274.190396][T13571] bridge_slave_1: left allmulticast mode [ 274.217053][T13571] bridge_slave_1: left promiscuous mode [ 274.236341][T13571] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.273211][T13571] validate_nla: 4 callbacks suppressed [ 274.273227][T13571] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 274.301891][T13571] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 274.711054][T13613] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 275.128300][T13641] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 275.148279][T13641] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 275.183079][T13641] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 275.200586][T13641] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 275.210346][T13641] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 275.404299][T13652] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 275.730660][T13669] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 275.845206][T13672] caif0: entered allmulticast mode [ 275.869245][T13671] bridge0: port 3(geneve1) entered blocking state [ 275.882419][T13671] bridge0: port 3(geneve1) entered disabled state [ 275.889355][T13671] geneve1: entered allmulticast mode [ 275.897178][T13671] geneve1: entered promiscuous mode [ 275.904960][T13671] bridge0: port 3(geneve1) entered blocking state [ 275.911535][T13671] bridge0: port 3(geneve1) entered forwarding state [ 276.076011][T13680] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 276.094821][T13680] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 276.102396][T13685] Cannot find add_set index 0 as target [ 276.203860][T13690] __nla_validate_parse: 19 callbacks suppressed [ 276.203880][T13690] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.288212][T13696] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 276.346492][T13696] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 276.536793][T13707] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 276.916497][T13731] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.141636][T13744] sch_tbf: burst 0 is lower than device ipvlan0 mtu (1514) ! [ 277.166816][T13749] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.174504][T13750] xt_CT: You must specify a L4 protocol and not use inversions on it [ 277.498616][T13773] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 278.058726][T13811] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 278.168510][T13818] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 278.283984][T13828] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 279.461044][T13887] bridge0: port 4(macvlan2) entered blocking state [ 279.470577][T13887] bridge0: port 4(macvlan2) entered disabled state [ 279.486555][T13887] macvlan2: entered allmulticast mode [ 279.497006][T13887] macvlan2: entered promiscuous mode [ 279.507343][T13890] validate_nla: 6 callbacks suppressed [ 279.507359][T13890] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 280.626151][T13949] atomic_op ffff88806682d998 conn xmit_atomic 0000000000000000 [ 280.803830][T13963] atomic_op ffff888027039198 conn xmit_atomic 0000000000000000 [ 280.815863][T13952] vxcan2: entered promiscuous mode [ 280.821009][T13952] vxcan2: entered allmulticast mode [ 280.841879][T13962] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 280.856662][T13966] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 280.869904][T13962] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 280.904607][T13961] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 281.100796][T13982] GUP no longer grows the stack in syz-executor.4 (13982): 20006000-2000a000 (20005000) [ 281.111465][T13982] CPU: 1 PID: 13982 Comm: syz-executor.4 Not tainted 6.10.0-rc1-syzkaller-00179-gf8f0de9d58d9 #0 [ 281.121986][T13982] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 281.132059][T13982] Call Trace: [ 281.135342][T13982] [ 281.138266][T13982] dump_stack_lvl+0x241/0x360 [ 281.142959][T13982] ? __pfx_dump_stack_lvl+0x10/0x10 [ 281.148156][T13982] ? __pfx__printk+0x10/0x10 [ 281.152738][T13982] ? find_vma+0xf9/0x170 [ 281.156993][T13982] __get_user_pages+0x10e3/0x1590 [ 281.162031][T13982] ? __gup_longterm_locked+0x1ec9/0x2a80 [ 281.167668][T13982] ? __pfx___get_user_pages+0x10/0x10 [ 281.173058][T13982] ? __lock_acquire+0x1346/0x1fd0 [ 281.178082][T13982] __gup_longterm_locked+0x1ff6/0x2a80 [ 281.183562][T13982] ? __pfx___gup_longterm_locked+0x10/0x10 [ 281.189369][T13982] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.195351][T13982] ? sanity_check_pinned_pages+0x12bb/0x13c0 [ 281.201338][T13982] gup_fast_fallback+0x2732/0x2b40 [ 281.206478][T13982] ? __pfx_gup_fast_fallback+0x10/0x10 [ 281.211931][T13982] ? __pfx_validate_chain+0x10/0x10 [ 281.217134][T13982] ? unwind_get_return_address+0x91/0xc0 [ 281.222773][T13982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.228848][T13982] ? arch_stack_walk+0x16d/0x1b0 [ 281.233805][T13982] ? __lock_acquire+0x1346/0x1fd0 [ 281.238827][T13982] ? is_valid_gup_args+0x124/0x200 [ 281.243939][T13982] pin_user_pages_fast+0xcc/0x160 [ 281.248960][T13982] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 281.254593][T13982] iov_iter_extract_pages+0x3db/0x720 [ 281.259976][T13982] bio_iov_iter_get_pages+0x541/0x1930 [ 281.265438][T13982] ? bio_associate_blkg+0x6c/0x230 [ 281.270550][T13982] ? bio_associate_blkg_from_css+0xb0c/0xc70 [ 281.276532][T13982] ? bio_associate_blkg_from_css+0xa4/0xc70 [ 281.282424][T13982] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 281.288322][T13982] ? bio_alloc_bioset+0x6d7/0x1130 [ 281.293436][T13982] iomap_dio_bio_iter+0xc8e/0x1670 [ 281.298569][T13982] __iomap_dio_rw+0x1295/0x2370 [ 281.303414][T13982] ? do_syscall_64+0xf3/0x230 [ 281.308080][T13982] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.314165][T13982] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 281.320143][T13982] ? __pfx___iomap_dio_rw+0x10/0x10 [ 281.325358][T13982] ? jbd2_journal_stop+0x902/0xd80 [ 281.330479][T13982] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 281.335937][T13982] ? __pfx_ext4_orphan_add+0x10/0x10 [ 281.341221][T13982] iomap_dio_rw+0x46/0xa0 [ 281.345551][T13982] ext4_file_write_iter+0x15e5/0x1a10 [ 281.350937][T13982] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 281.356656][T13982] vfs_write+0xa72/0xc90 [ 281.360896][T13982] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 281.366605][T13982] ? __pfx_vfs_write+0x10/0x10 [ 281.371357][T13982] ? do_futex+0x33b/0x560 [ 281.375699][T13982] ksys_write+0x1a0/0x2c0 [ 281.380031][T13982] ? __pfx_ksys_write+0x10/0x10 [ 281.384876][T13982] ? do_syscall_64+0x100/0x230 [ 281.389634][T13982] ? do_syscall_64+0xb6/0x230 [ 281.394318][T13982] do_syscall_64+0xf3/0x230 [ 281.398814][T13982] ? clear_bhb_loop+0x35/0x90 [ 281.403497][T13982] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 281.409400][T13982] RIP: 0033:0x7faf5287cf69 [ 281.413810][T13982] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 281.433421][T13982] RSP: 002b:00007faf535dc0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 281.441843][T13982] RAX: ffffffffffffffda RBX: 00007faf529b3f80 RCX: 00007faf5287cf69 [ 281.449818][T13982] RDX: 0000000000043400 RSI: 0000000020000200 RDI: 0000000000000006 [ 281.457789][T13982] RBP: 00007faf528da6fe R08: 0000000000000000 R09: 0000000000000000 [ 281.465767][T13982] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 281.473742][T13982] R13: 000000000000000b R14: 00007faf529b3f80 R15: 00007ffc94ba1f68 [ 281.481726][T13982] [ 281.531281][T13984] __nla_validate_parse: 30 callbacks suppressed [ 281.531300][T13984] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 281.556519][T13984] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 281.615996][T13986] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 281.626988][ T1106] bridge_slave_1: left allmulticast mode [ 281.647077][ T1106] bridge_slave_1: left promiscuous mode [ 281.658823][ T1106] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.681616][ T1106] bridge_slave_0: left allmulticast mode [ 281.722900][ T1106] bridge_slave_0: left promiscuous mode [ 281.729277][ T1106] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.910439][ T1106] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.924992][ T1106] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.938336][ T1106] bond0 (unregistering): Released all slaves [ 282.959262][ T1106] bond1 (unregistering): Released all slaves [ 282.980116][T13986] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 283.136628][T14021] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 283.160469][T14021] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 283.184273][T14025] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 283.416592][T14029] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 283.462356][T14029] bond3: (slave batadv3): Enslaving as a backup interface with an up link [ 283.517916][T14025] bond3 (unregistering): (slave batadv3): Releasing backup interface [ 283.538464][T14025] bond3 (unregistering): Released all slaves [ 283.559215][T14042] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 283.680197][ T1106] hsr_slave_0: left promiscuous mode [ 283.699194][ T1106] hsr_slave_1: left promiscuous mode [ 283.712105][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.726329][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.746690][ T1106] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.761088][ T1106] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.811847][ T1106] veth1_macvtap: left promiscuous mode [ 283.826068][ T1106] veth0_macvtap: left promiscuous mode [ 283.838938][ T1106] veth1_vlan: left promiscuous mode [ 283.849345][ T1106] veth0_vlan: left promiscuous mode [ 283.853865][T14059] ieee802154 phy0 wpan0: encryption failed: -22 [ 284.051813][ T1106] team0 (unregistering): Port device macvlan2 removed [ 284.484946][ T1106] team0 (unregistering): Port device team_slave_1 removed [ 284.527595][ T1106] team0 (unregistering): Port device team_slave_0 removed [ 284.991210][T14072] sch_tbf: burst 0 is lower than device lo mtu (14) ! [ 285.219697][T14088] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 285.350519][T14096] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 285.372936][T14096] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 285.382891][T14104] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 285.461849][T14101] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 285.496526][T14101] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 285.576467][T14088] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 285.606297][T14088] bond1 (unregistering): Released all slaves [ 285.646950][T14115] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 285.682149][T14118] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 285.795141][T14125] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 285.927807][T14134] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 285.968886][T14138] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 286.461910][T14168] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 286.614068][T14179] sctp: [Deprecated]: syz-executor.1 (pid 14179) Use of int in max_burst socket option deprecated. [ 286.614068][T14179] Use struct sctp_assoc_value instead [ 286.649723][T14168] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 286.682129][T14172] sctp: [Deprecated]: syz-executor.1 (pid 14172) Use of int in max_burst socket option deprecated. [ 286.682129][T14172] Use struct sctp_assoc_value instead [ 286.714799][T14168] bond1: (slave batadv1): Enslaving as a backup interface with an up link [ 286.749747][T14176] bond1 (unregistering): (slave batadv1): Releasing backup interface [ 286.864022][T14176] bond1 (unregistering): Released all slaves [ 286.928862][T14197] sctp: [Deprecated]: syz-executor.1 (pid 14197) Use of int in max_burst socket option deprecated. [ 286.928862][T14197] Use struct sctp_assoc_value instead [ 286.944508][T14199] __nla_validate_parse: 2 callbacks suppressed [ 286.944523][T14199] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.964336][T14168] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.967014][ T25] IPVS: starting estimator thread 0... [ 287.071075][T14204] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 287.083372][T14202] IPVS: using max 22 ests per chain, 52800 per kthread [ 287.096998][T14206] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 287.101532][T14204] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 287.123713][T14206] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 287.130148][T14204] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 287.181184][T14204] vlan0: entered promiscuous mode [ 287.198718][T14204] vlan0: entered allmulticast mode [ 287.328327][T14219] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.425068][T14221] team0: Port device team_slave_0 removed [ 287.436204][T14221] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 287.463686][T14224] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 287.472803][T14224] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.485875][T14225] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.932333][T14246] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 287.942589][T14246] bond1: (slave batadv2): Enslaving as a backup interface with an up link [ 287.968215][T14237] bond1 (unregistering): (slave batadv2): Releasing backup interface [ 288.004442][T14237] bond1 (unregistering): Released all slaves [ 288.038718][T14246] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.220183][T14265] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 288.262549][ T29] audit: type=1804 audit(1717670909.509:82): pid=14262 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/731/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 288.325665][T14262] netlink: 4068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 288.332397][T14271] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 288.356589][T14268] vlan2: entered promiscuous mode [ 288.361643][T14268] dummy0: entered promiscuous mode [ 288.376708][T14268] vlan2: entered allmulticast mode [ 288.381897][T14268] dummy0: entered allmulticast mode [ 288.391502][T14268] dummy0: left allmulticast mode [ 288.396699][T14268] dummy0: left promiscuous mode [ 289.081661][T14283] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 289.551652][T14288] delete_channel: no stack [ 289.645021][ T53] Bluetooth: hci0: command 0x0405 tx timeout [ 289.940038][T14313] syzkaller0: entered promiscuous mode [ 289.975159][T14313] syzkaller0: entered allmulticast mode [ 290.252159][T14339] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 290.272882][T14339] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 290.794886][T14366] validate_nla: 8 callbacks suppressed [ 290.794906][T14366] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 291.188351][T14387] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 291.402066][T14406] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 292.254011][T14449] x_tables: duplicate underflow at hook 1 [ 292.284009][ T29] audit: type=1804 audit(1717670913.529:83): pid=14452 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2755533636/syzkaller.25QWP6/206/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 292.486970][T14467] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 292.526632][T14467] bridge0: port 3(team0) entered disabled state [ 292.546066][T14467] team0: left allmulticast mode [ 292.551158][T14467] team_slave_0: left allmulticast mode [ 292.577578][T14467] team_slave_1: left allmulticast mode [ 292.603031][T14467] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 292.629917][T14467] team0: left promiscuous mode [ 292.660329][T14467] team_slave_0: left promiscuous mode [ 292.682762][T14467] team_slave_1: left promiscuous mode [ 292.691727][T14467] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 292.729507][T14467] bridge0: port 3(team0) entered disabled state [ 292.790015][T14467] 8021q: adding VLAN 0 to HW filter on device team0 [ 292.813585][T14467] bond0: (slave team0): Enslaving as an active interface with an up link [ 292.826382][T14480] __nla_validate_parse: 6 callbacks suppressed [ 292.826398][T14480] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 292.843919][T14469] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 293.074899][T14487] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 293.103485][T14487] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 293.370574][ T783] IPVS: starting estimator thread 0... [ 293.396813][T14498] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.472863][T14499] IPVS: using max 18 ests per chain, 43200 per kthread [ 293.493178][T14504] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.738128][T14519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 294.071869][T14527] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 294.525946][ T29] audit: type=1800 audit(1717670915.779:84): pid=14521 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="cgroup.controllers" dev="sda1" ino=1964 res=0 errno=0 [ 294.610627][ T4489] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 294.624585][ T4489] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 294.652902][ T4489] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 294.695597][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880669fb000: rx timeout, send abort [ 294.705809][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff8880669fb000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 294.721433][ T4489] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 294.730747][ T4489] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 294.745757][ T4489] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 294.837714][ T2448] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.078899][ T2448] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.134017][T14537] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 295.188209][ T2448] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.383243][T14548] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 295.418628][ T2448] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.487966][T14550] vlan3: entered allmulticast mode [ 295.518535][T14550] bridge0: port 4(vlan3) entered blocking state [ 295.550911][T14550] bridge0: port 4(vlan3) entered disabled state [ 295.605099][T14552] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 295.625197][T14552] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.022985][ T2448] macvlan2: left allmulticast mode [ 296.034049][ T2448] macvlan2: left promiscuous mode [ 296.046631][ T2448] bridge0: port 4(macvlan2) entered disabled state [ 296.066749][ T2448] geneve1: left allmulticast mode [ 296.077453][ T2448] geneve1: left promiscuous mode [ 296.088791][ T2448] bridge0: port 3(geneve1) entered disabled state [ 296.111192][ T2448] bridge_slave_1: left allmulticast mode [ 296.126509][ T2448] bridge_slave_1: left promiscuous mode [ 296.139216][ T2448] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.165754][ T2448] bridge_slave_0: left allmulticast mode [ 296.180135][ T2448] bridge_slave_0: left promiscuous mode [ 296.194384][ T2448] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.570237][ T29] audit: type=1804 audit(1717670917.819:85): pid=14567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1220208848/syzkaller.x9cRQH/352/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 296.842812][ T4489] Bluetooth: hci0: command tx timeout [ 297.001922][ T2448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.018000][ T2448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.028644][ T2448] bond0 (unregistering): Released all slaves [ 297.039871][T14528] chnl_net:caif_netlink_parms(): no params data found [ 297.051950][T14573] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 297.065316][T14573] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.3'. [ 297.075329][T14574] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 297.104710][T14574] team0: Device ipvlan1 failed to register rx_handler [ 297.366481][T14584] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 297.410641][ T29] audit: type=1804 audit(1717670918.649:86): pid=14591 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3011239068/syzkaller.8kLmdx/820/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 297.516196][T14588] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 297.530051][T14588] team0: Device ipvlan1 failed to register rx_handler [ 297.811950][T14604] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 297.842705][T14604] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.923962][ T2448] hsr_slave_0: left promiscuous mode [ 297.986321][ T2448] hsr_slave_1: left promiscuous mode [ 298.005842][ T2448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.030381][ T2448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.063544][ T2448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.070955][ T2448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.110348][ T2448] veth1_macvtap: left promiscuous mode [ 298.123078][ T2448] veth0_macvtap: left promiscuous mode [ 298.135260][ T2448] veth1_vlan: left promiscuous mode [ 298.146288][ T2448] veth0_vlan: left promiscuous mode [ 298.923460][ T4489] Bluetooth: hci0: command tx timeout [ 299.040917][ T29] audit: type=1804 audit(1717670920.289:87): pid=14614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276495880/syzkaller.EOkz5B/303/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 299.683404][ T5161] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 299.709578][T14528] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.728787][T14528] bridge0: port 1(bridge_slave_0) entered disabled state [ 299.743970][T14528] bridge_slave_0: entered allmulticast mode [ 299.764880][T14528] bridge_slave_0: entered promiscuous mode [ 299.824328][T14528] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.843190][T14528] bridge0: port 2(bridge_slave_1) entered disabled state [ 299.851646][T14528] bridge_slave_1: entered allmulticast mode [ 299.866470][T14528] bridge_slave_1: entered promiscuous mode [ 300.018759][T14528] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.105352][T14528] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.205104][T14632] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 300.229461][T14632] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.311415][T14528] team0: Port device team_slave_0 added [ 300.332244][T14644] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 300.411348][T14528] team0: Port device team_slave_1 added [ 300.443387][ T5161] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 300.493774][T14650] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 300.502830][T14650] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 300.645306][T14528] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 300.656170][T14528] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.745519][T14528] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 300.814699][T14528] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 300.844108][T14528] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 300.870354][T14528] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.015829][ T4489] Bluetooth: hci0: command tx timeout [ 301.027356][T14528] hsr_slave_0: entered promiscuous mode [ 301.056046][T14528] hsr_slave_1: entered promiscuous mode [ 301.094443][T14528] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.132263][T14528] Cannot create hsr debugfs directory [ 301.276341][T14659] sch_tbf: burst 0 is lower than device team0 mtu (1514) ! [ 301.760455][T14668] batadv0: entered promiscuous mode [ 301.834374][T14668] batadv0: left promiscuous mode [ 301.882849][ T29] audit: type=1800 audit(1717670923.129:88): pid=14656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="cgroup.controllers" dev="sda1" ino=1960 res=0 errno=0 [ 302.384867][T14683] sock: sock_set_timeout: `syz-executor.0' (pid 14683) tries to set negative timeout [ 302.435337][T14686] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 302.463515][T14686] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 302.529358][T14691] Unsupported ieee802154 address type: 0 [ 302.562091][T14528] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 302.611104][T14691] bridge0: port 4(team0) entered blocking state [ 302.620322][T14691] bridge0: port 4(team0) entered disabled state [ 302.633397][T14691] team0: entered allmulticast mode [ 302.642949][T14691] team_slave_1: entered allmulticast mode [ 302.649901][T14691] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 302.671468][T14691] team0: entered promiscuous mode [ 302.682528][T14691] team_slave_1: entered promiscuous mode [ 302.703313][T14691] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 302.737350][T14691] bridge0: port 4(team0) entered blocking state [ 302.743899][T14691] bridge0: port 4(team0) entered forwarding state [ 302.782849][T14528] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 302.802481][T14528] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 302.823045][T14528] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 303.083277][ T4489] Bluetooth: hci0: command tx timeout [ 303.147797][T14528] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.248038][T14528] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.287155][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.294337][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.344750][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.351905][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.458418][T14528] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.517741][ T29] audit: type=1804 audit(1717670924.769:89): pid=14698 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/758/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 303.581745][T14715] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 303.629939][T14715] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 303.886853][T14528] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.011486][T14731] veth0: entered promiscuous mode [ 304.018993][T14731] macvlan2: entered allmulticast mode [ 304.026696][T14731] veth0: entered allmulticast mode [ 304.035210][T14731] veth0: left allmulticast mode [ 304.040135][T14731] veth0: left promiscuous mode [ 304.207423][T14741] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 304.222832][T14741] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 304.367327][T14528] veth0_vlan: entered promiscuous mode [ 304.396286][T14528] veth1_vlan: entered promiscuous mode [ 304.478225][T14750] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 304.491027][T14528] veth0_macvtap: entered promiscuous mode [ 304.513681][T14528] veth1_macvtap: entered promiscuous mode [ 304.565732][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.586909][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.611682][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.623091][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.650672][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.672581][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.692375][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.722890][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.740444][T14528] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.786514][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.811385][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.832976][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.843828][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.863976][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.890361][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.912250][T14528] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.926228][T14528] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.956912][T14528] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.993513][T14528] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.002242][T14528] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.012826][T14528] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.021654][T14528] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.408891][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.434144][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.442008][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.444543][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.778398][T14793] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 305.794064][T14793] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.252457][ T5172] IPVS: starting estimator thread 0... [ 306.260929][T14814] bridge0: port 2(team0) entered blocking state [ 306.276737][T14814] bridge0: port 2(team0) entered disabled state [ 306.291586][T14814] team0: entered allmulticast mode [ 306.297221][T14814] team_slave_0: entered allmulticast mode [ 306.310910][T14814] team_slave_1: entered allmulticast mode [ 306.321999][T14814] team0: entered promiscuous mode [ 306.332927][T14814] team_slave_0: entered promiscuous mode [ 306.339159][T14814] team_slave_1: entered promiscuous mode [ 306.359253][T14814] bridge0: port 2(team0) entered blocking state [ 306.365720][T14814] bridge0: port 2(team0) entered forwarding state [ 306.384288][T14816] IPVS: using max 22 ests per chain, 52800 per kthread [ 306.387269][T14818] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.644189][T14840] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 306.668278][T14836] can: request_module (can-proto-0) failed. [ 306.690705][T14840] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 306.765287][T14840] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 306.787501][T14843] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 307.304037][T14866] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 307.363264][T14866] Bluetooth: MGMT ver 1.22 [ 307.727863][T14846] syz-executor.0 (14846) used greatest stack depth: 15576 bytes left [ 307.871963][T14881] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 307.898885][T14881] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 308.182844][ T29] audit: type=1800 audit(1717670929.429:90): pid=14869 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=1966 res=0 errno=0 [ 308.697735][T14906] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 308.725325][T14899] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 308.740852][T14910] IPv6: Can't replace route, no match found [ 308.741903][T14899] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 309.024181][T14921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 309.299404][T14926] __nla_validate_parse: 2 callbacks suppressed [ 309.299424][T14926] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 309.581148][T14945] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 309.611953][T14945] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 310.292546][ T29] audit: type=1804 audit(1717670931.539:91): pid=14966 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1220208848/syzkaller.x9cRQH/381/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 310.331092][T14971] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.343341][T14971] nbd: nbd0 already in use [ 310.483525][T14982] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.667511][T14990] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 310.744561][T14990] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 310.934458][T14997] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 311.156422][T15006] tipc: Started in network mode [ 311.167829][T15006] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 311.187496][T15006] tipc: Enabled bearer , priority 10 [ 311.230562][ T29] audit: type=1804 audit(1717670932.479:92): pid=15011 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276495880/syzkaller.EOkz5B/329/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 311.627874][T15021] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 311.637190][T15021] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.808984][T15030] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 312.025381][T15037] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.057654][T15037] nbd: nbd0 already in use [ 312.193055][ T5172] tipc: Node number set to 10005162 [ 312.210963][T15056] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.236824][ T29] audit: type=1804 audit(1717670933.479:93): pid=15049 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/778/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 312.750593][T15074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 312.880387][T15075] tc_dump_action: action bad kind [ 313.439828][T15098] macvlan0: entered promiscuous mode [ 313.463995][T15098] ipvlan0: entered promiscuous mode [ 313.495073][T15098] ipvlan0: left promiscuous mode [ 313.510913][T15098] macvlan0: left promiscuous mode [ 313.574635][T15103] nbd: nbd0 already in use [ 313.734218][T15109] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 313.743472][ T29] audit: type=1804 audit(1717670934.979:94): pid=15101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir411520427/syzkaller.0d1LbF/22/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 313.932470][T15119] bond_slave_0: entered promiscuous mode [ 313.938257][T15119] bond_slave_1: entered promiscuous mode [ 313.944030][T15119] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 313.990436][T15119] macvtap1: entered promiscuous mode [ 314.003546][T15119] bond0: entered promiscuous mode [ 314.025139][T15119] macvtap1: entered allmulticast mode [ 314.047043][T15119] bond0: entered allmulticast mode [ 314.063100][T15119] bond_slave_0: entered allmulticast mode [ 314.081140][T15119] bond_slave_1: entered allmulticast mode [ 314.098650][T15119] mac80211_hwsim hwsim21 wlan1: entered allmulticast mode [ 314.133272][T15119] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 314.359867][T15138] __nla_validate_parse: 7 callbacks suppressed [ 314.359885][T15138] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 314.432398][T15141] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 314.764544][T15159] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 314.884537][ T29] audit: type=1804 audit(1717670936.129:95): pid=15157 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/789/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 315.183423][T15175] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 315.205333][T15175] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 315.269742][T15177] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 315.303740][T15177] nbd: nbd0 already in use [ 315.320769][T15179] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.456670][T15191] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 315.585607][T15195] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.684632][ T29] audit: type=1804 audit(1717670936.939:96): pid=15199 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir411520427/syzkaller.0d1LbF/26/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 315.832564][T15208] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 316.504614][T15237] ipip0: entered promiscuous mode [ 316.822766][ T29] audit: type=1804 audit(1717670938.069:97): pid=15244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir411520427/syzkaller.0d1LbF/30/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 316.927926][T15257] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 316.951334][T15257] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 317.290593][T15277] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 317.433235][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.440763][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.120198][ T29] audit: type=1804 audit(1717670939.369:98): pid=15302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276495880/syzkaller.EOkz5B/348/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 318.449734][T15312] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 318.610681][T15318] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 318.797848][T15331] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 318.844756][T15333] bond1: entered promiscuous mode [ 318.901928][T15333] bridge3: entered promiscuous mode [ 318.913293][T15333] bond1: (slave bridge3): Enslaving as an active interface with an up link [ 319.033293][T15334] bond1 (unregistering): (slave bridge3): Releasing backup interface [ 319.085098][ T29] audit: type=1804 audit(1717670940.339:99): pid=15338 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/801/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 319.093410][T15334] bridge3: left promiscuous mode [ 319.219235][T15334] bond1 (unregistering): Released all slaves [ 319.482824][ T5119] Bluetooth: hci2: command 0x0406 tx timeout [ 320.038075][T15379] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 320.124808][T15383] __nla_validate_parse: 9 callbacks suppressed [ 320.124826][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 320.170285][T15383] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 320.187551][ T29] audit: type=1804 audit(1717670941.439:100): pid=15384 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276495880/syzkaller.EOkz5B/356/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 320.307619][T15388] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 320.417766][T15395] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 320.462706][T15395] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 321.108827][ T29] audit: type=1804 audit(1717670942.359:101): pid=15423 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir411520427/syzkaller.0d1LbF/40/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 321.370906][T15433] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 321.433302][T15436] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 321.525685][T15439] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 321.562193][T15437] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 321.595437][T15437] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 321.639594][T15437] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 321.647048][T15442] dccp_invalid_packet: P.Data Offset(0) too small [ 321.691795][T15437] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.4'. [ 322.370864][T15457] ªªªªªª: renamed from vlan0 (while UP) [ 322.402558][T15457] netlink: 368 bytes leftover after parsing attributes in process `syz-executor.4'. [ 322.428347][ T29] audit: type=1804 audit(1717670943.679:102): pid=15459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1490182737/syzkaller.NLDIsP/806/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 322.883088][T15469] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.918388][T15471] openvswitch: netlink: Key 3 has unexpected len 2 expected 4 [ 322.986575][T15473] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 323.019046][T15473] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 323.464510][ T29] audit: type=1804 audit(1717670944.719:103): pid=15488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276495880/syzkaller.EOkz5B/365/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 324.195703][ T29] audit: type=1804 audit(1717670945.449:104): pid=15523 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir276495880/syzkaller.EOkz5B/369/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 324.387109][T15535] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 324.413346][T15536] tipc: Started in network mode [ 324.424106][T15536] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 324.448995][T15536] tipc: Enabled bearer , priority 10 [ 325.091783][ T29] audit: type=1804 audit(1717670946.339:105): pid=15560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3011239068/syzkaller.8kLmdx/882/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 325.180101][T15569] __nla_validate_parse: 4 callbacks suppressed [ 325.180122][T15569] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 325.434871][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 325.518367][T15580] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.575300][ T4507] tipc: Node number set to 4269801488 [ 326.251344][T15600] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 326.281403][T15600] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.328622][ T29] audit: type=1804 audit(1717670947.579:106): pid=15605 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1220208848/syzkaller.x9cRQH/408/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 326.436976][T15603] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 326.471584][T15614] sctp: [Deprecated]: syz-executor.0 (pid 15614) Use of int in maxseg socket option. [ 326.471584][T15614] Use struct sctp_assoc_value instead [ 326.484930][T15616] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 326.505357][T15612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.703742][T15630] sctp: [Deprecated]: syz-executor.1 (pid 15630) Use of int in max_burst socket option deprecated. [ 326.703742][T15630] Use struct sctp_assoc_value instead [ 326.756025][T15624] sctp: [Deprecated]: syz-executor.1 (pid 15624) Use of int in max_burst socket option deprecated. [ 326.756025][T15624] Use struct sctp_assoc_value instead [ 326.794087][T15634] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 326.804508][T15624] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 326.928228][T15647] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 326.959878][T15647] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 326.969788][ T29] audit: type=1804 audit(1717670948.229:107): pid=15640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1220208848/syzkaller.x9cRQH/412/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 327.166880][T15659] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 327.400479][T15676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 327.810906][T15664] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 327.851867][T15664] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 327.876524][T15664] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 328.395192][T15733] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 328.415350][T15733] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.545579][ T29] audit: type=1804 audit(1717670949.799:108): pid=15736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir411520427/syzkaller.0d1LbF/65/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 329.214131][ T29] audit: type=1804 audit(1717670950.469:109): pid=15781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3011239068/syzkaller.8kLmdx/896/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 329.638444][T15812] JR³xRË: entered promiscuous mode [ 329.700913][T15824] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 329.806848][ T29] audit: type=1804 audit(1717670951.059:110): pid=15823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1220208848/syzkaller.x9cRQH/425/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 329.854558][T15833] block nbd0: NBD_DISCONNECT [ 329.867202][T15833] block nbd0: Send disconnect failed -32 [ 329.878099][T15833] block nbd0: Disconnected due to user request. [ 329.884659][T15833] block nbd0: shutting down sockets [ 330.269729][T15864] Bluetooth: hci3: expected 2263 bytes, got 7 bytes [ 330.300101][T15861] bridge0: port 5(ip6gretap0) entered blocking state [ 330.311906][T15861] bridge0: port 5(ip6gretap0) entered disabled state [ 330.319909][T15861] ip6gretap0: entered allmulticast mode [ 330.329085][T15861] ip6gretap0: entered promiscuous mode [ 330.335702][T15861] bridge0: port 5(ip6gretap0) entered blocking state [ 330.342489][T15861] bridge0: port 5(ip6gretap0) entered forwarding state [ 360.093558][ T5119] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 360.104340][ T5119] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 360.112127][ T5119] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 360.139922][ T5119] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 360.148155][ T5119] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 360.155634][ T5119] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 360.397675][T15879] chnl_net:caif_netlink_parms(): no params data found [ 360.447730][ T5119] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 360.456928][ T5119] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 360.465983][ T5119] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 360.479093][ T5119] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 360.487840][ T5119] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 360.501239][ T5119] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 360.720177][ T53] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 360.733417][ T53] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 360.741144][ T53] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 360.773197][ T53] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 360.783441][ T53] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 360.790982][ T53] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 360.798369][T15879] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.820064][ T5125] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 360.832354][T15879] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.846861][T15895] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 360.855266][T15879] bridge_slave_0: entered allmulticast mode [ 360.861888][T15879] bridge_slave_0: entered promiscuous mode [ 360.868592][T15895] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 360.876995][T15879] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.884456][T15895] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 360.892294][T15879] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.893021][T15895] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 360.906614][T15879] bridge_slave_1: entered allmulticast mode [ 360.907209][T15895] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 360.935463][T15879] bridge_slave_1: entered promiscuous mode [ 361.066730][T15879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.067243][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 361.086117][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 361.096109][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 361.106643][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 361.114370][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 361.121721][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 361.126177][T15879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.256150][T15879] team0: Port device team_slave_0 added [ 361.277578][T15879] team0: Port device team_slave_1 added [ 361.381302][T15885] chnl_net:caif_netlink_parms(): no params data found [ 361.404176][T15879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.411134][T15879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.442552][T15879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.455541][T15879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.462478][T15879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.488569][T15879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.647740][T15879] hsr_slave_0: entered promiscuous mode [ 361.655737][T15879] hsr_slave_1: entered promiscuous mode [ 361.661973][T15879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.669581][T15879] Cannot create hsr debugfs directory [ 361.777249][T15885] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.784976][T15885] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.792079][T15885] bridge_slave_0: entered allmulticast mode [ 361.799753][T15885] bridge_slave_0: entered promiscuous mode [ 361.865998][T15885] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.878251][T15885] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.888489][T15885] bridge_slave_1: entered allmulticast mode [ 361.900784][T15885] bridge_slave_1: entered promiscuous mode [ 362.011911][T15885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.074437][T15891] chnl_net:caif_netlink_parms(): no params data found [ 362.087869][T15885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 362.110273][T15898] chnl_net:caif_netlink_parms(): no params data found [ 362.168569][T15885] team0: Port device team_slave_0 added [ 362.209238][T15895] Bluetooth: hci5: command tx timeout [ 362.238100][T15885] team0: Port device team_slave_1 added [ 362.328903][T15893] chnl_net:caif_netlink_parms(): no params data found [ 362.342586][T15885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 362.349621][T15885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.378893][T15885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 362.439480][T15879] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.471815][T15885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 362.479023][T15885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 362.507078][T15885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 362.522939][T15895] Bluetooth: hci6: command tx timeout [ 362.570148][T15898] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.585756][T15898] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.593334][T15898] bridge_slave_0: entered allmulticast mode [ 362.600884][T15898] bridge_slave_0: entered promiscuous mode [ 362.663250][T15879] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.688525][T15898] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.701049][T15898] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.708406][T15898] bridge_slave_1: entered allmulticast mode [ 362.721364][T15898] bridge_slave_1: entered promiscuous mode [ 362.815203][T15879] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.843924][T15895] Bluetooth: hci7: command tx timeout [ 362.844504][T15891] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.856774][T15891] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.864075][T15891] bridge_slave_0: entered allmulticast mode [ 362.870793][T15891] bridge_slave_0: entered promiscuous mode [ 362.891029][T15891] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.901851][T15891] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.913721][T15891] bridge_slave_1: entered allmulticast mode [ 362.920356][T15891] bridge_slave_1: entered promiscuous mode [ 362.952195][T15898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 362.994032][T15879] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.004402][T15895] Bluetooth: hci8: command tx timeout [ 363.026884][T15885] hsr_slave_0: entered promiscuous mode [ 363.033624][T15885] hsr_slave_1: entered promiscuous mode [ 363.039886][T15885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.047472][T15885] Cannot create hsr debugfs directory [ 363.119729][T15893] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.127322][T15893] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.134633][T15893] bridge_slave_0: entered allmulticast mode [ 363.141471][T15893] bridge_slave_0: entered promiscuous mode [ 363.151722][T15898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.163757][T15895] Bluetooth: hci9: command tx timeout [ 363.205255][T15891] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.214712][T15893] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.221874][T15893] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.232862][T15893] bridge_slave_1: entered allmulticast mode [ 363.240212][T15893] bridge_slave_1: entered promiscuous mode [ 363.269466][T15898] team0: Port device team_slave_0 added [ 363.294436][T15898] team0: Port device team_slave_1 added [ 363.303789][T15891] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.349607][T15893] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 363.369791][T15893] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 363.458086][T15898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.470411][T15898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.496501][ C0] ip6_tunnel: ip6gretap0 xmit: Local address not yet configured! [ 363.523355][T15898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.602328][T15898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.609392][T15898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.637988][T15898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.661570][T15891] team0: Port device team_slave_0 added [ 363.701629][T15893] team0: Port device team_slave_0 added [ 363.729433][T15891] team0: Port device team_slave_1 added [ 363.761074][T15893] team0: Port device team_slave_1 added [ 363.800760][T15891] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 363.807935][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.834100][T15891] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 363.879261][T15891] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 363.886322][T15891] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 363.912518][T15891] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 363.959478][T15898] hsr_slave_0: entered promiscuous mode [ 363.968867][T15898] hsr_slave_1: entered promiscuous mode [ 363.975675][T15898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 363.983436][T15898] Cannot create hsr debugfs directory [ 364.028257][T15885] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.060518][T15893] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 364.067831][T15893] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.103256][T15893] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 364.116766][T15893] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 364.132235][T15893] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 364.158791][T15893] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 364.177497][T15891] hsr_slave_0: entered promiscuous mode [ 364.183830][T15891] hsr_slave_1: entered promiscuous mode [ 364.189871][T15891] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.197530][T15891] Cannot create hsr debugfs directory [ 364.242451][T15885] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.283443][T15895] Bluetooth: hci5: command tx timeout [ 364.358991][T15885] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.393142][T15893] hsr_slave_0: entered promiscuous mode [ 364.399782][T15893] hsr_slave_1: entered promiscuous mode [ 364.406146][T15893] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 364.414024][T15893] Cannot create hsr debugfs directory [ 364.453000][T15885] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.614387][T15895] Bluetooth: hci6: command tx timeout [ 364.636530][T15891] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.728614][T15891] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.824844][T15891] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.909871][T15891] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.938377][T15895] Bluetooth: hci7: command tx timeout [ 365.083885][T15898] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.095036][T15895] Bluetooth: hci8: command tx timeout [ 365.183868][T15898] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.255578][T15895] Bluetooth: hci9: command tx timeout [ 365.263783][T15898] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.348239][T15898] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.471023][T15893] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.557416][T15893] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.628464][T15893] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.680918][T15893] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.362840][T15895] Bluetooth: hci5: command tx timeout [ 366.683796][T15895] Bluetooth: hci6: command tx timeout [ 367.013010][T15895] Bluetooth: hci7: command tx timeout [ 367.173062][T15895] Bluetooth: hci8: command tx timeout [ 367.323356][T15895] Bluetooth: hci9: command tx timeout [ 368.443699][T15895] Bluetooth: hci5: command tx timeout [ 368.762989][T15895] Bluetooth: hci6: command tx timeout [ 369.092795][T15895] Bluetooth: hci7: command tx timeout [ 369.261348][T15895] Bluetooth: hci8: command tx timeout [ 369.402759][T15895] Bluetooth: hci9: command tx timeout [ 378.854653][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.860984][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 421.893092][T15895] Bluetooth: hci0: command 0x0406 tx timeout [ 425.023818][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 425.032873][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 425.040753][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 425.049805][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 425.080941][ T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 425.088972][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 425.336407][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 425.346297][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 425.354169][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 425.363690][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 425.371449][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 425.379395][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 425.530228][T15925] chnl_net:caif_netlink_parms(): no params data found [ 425.579888][T15895] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 425.589207][T15895] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 425.597121][T15895] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 425.624612][T15895] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 425.633832][T15895] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 425.642384][T15895] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 425.848122][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 425.858090][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 425.872915][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 425.894800][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 425.903287][ T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 425.910715][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 425.925717][T15931] chnl_net:caif_netlink_parms(): no params data found [ 425.951491][T15925] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.982948][T15925] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.990251][T15925] bridge_slave_0: entered allmulticast mode [ 426.004139][T15925] bridge_slave_0: entered promiscuous mode [ 426.017168][T15925] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.024571][T15925] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.031769][T15925] bridge_slave_1: entered allmulticast mode [ 426.054454][T15925] bridge_slave_1: entered promiscuous mode [ 426.090330][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 426.099932][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 426.107972][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 426.117836][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 426.126307][ T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 426.133956][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 426.181216][T15925] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.238661][T15925] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.320657][T15925] team0: Port device team_slave_0 added [ 426.332860][T15925] team0: Port device team_slave_1 added [ 426.450523][T15931] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.467323][T15931] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.474847][T15931] bridge_slave_0: entered allmulticast mode [ 426.481756][T15931] bridge_slave_0: entered promiscuous mode [ 426.499129][T15931] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.508111][T15931] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.515546][T15931] bridge_slave_1: entered allmulticast mode [ 426.522251][T15931] bridge_slave_1: entered promiscuous mode [ 426.530018][T15925] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.537344][T15925] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.563713][T15925] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.576596][T15925] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.583731][T15925] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.610086][T15925] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.703985][T15931] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.717454][T15931] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.798196][T15931] team0: Port device team_slave_0 added [ 426.808445][T15931] team0: Port device team_slave_1 added [ 426.897501][T15925] hsr_slave_0: entered promiscuous mode [ 426.904091][T15925] hsr_slave_1: entered promiscuous mode [ 426.910116][T15925] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 426.917826][T15925] Cannot create hsr debugfs directory [ 427.032407][T15931] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 427.043154][T15931] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.069634][T15931] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 427.163272][T15895] Bluetooth: hci10: command tx timeout [ 427.182515][T15931] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 427.198624][T15931] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 427.224947][T15931] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 427.362259][T15931] hsr_slave_0: entered promiscuous mode [ 427.383235][T15931] hsr_slave_1: entered promiscuous mode [ 427.390998][T15931] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.399449][T15931] Cannot create hsr debugfs directory [ 427.409759][T15935] chnl_net:caif_netlink_parms(): no params data found [ 427.416948][T15895] Bluetooth: hci11: command tx timeout [ 427.449247][T15945] chnl_net:caif_netlink_parms(): no params data found [ 427.633652][T15943] chnl_net:caif_netlink_parms(): no params data found [ 427.722888][T15895] Bluetooth: hci12: command tx timeout [ 427.835250][T15935] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.842475][T15935] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.849849][T15935] bridge_slave_0: entered allmulticast mode [ 427.858621][T15935] bridge_slave_0: entered promiscuous mode [ 427.919589][T15935] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.926964][T15935] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.934434][T15935] bridge_slave_1: entered allmulticast mode [ 427.941764][T15935] bridge_slave_1: entered promiscuous mode [ 427.962996][T15895] Bluetooth: hci13: command tx timeout [ 427.985068][T15943] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.992324][T15943] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.001575][T15943] bridge_slave_0: entered allmulticast mode [ 428.009100][T15943] bridge_slave_0: entered promiscuous mode [ 428.035058][T15945] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.042161][T15945] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.049635][T15945] bridge_slave_0: entered allmulticast mode [ 428.064667][T15945] bridge_slave_0: entered promiscuous mode [ 428.072309][T15943] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.082837][T15943] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.090057][T15943] bridge_slave_1: entered allmulticast mode [ 428.097463][T15943] bridge_slave_1: entered promiscuous mode [ 428.145586][T15935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.159670][T15945] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.183073][T15945] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.190283][T15945] bridge_slave_1: entered allmulticast mode [ 428.204068][T15945] bridge_slave_1: entered promiscuous mode [ 428.210290][T15895] Bluetooth: hci14: command tx timeout [ 428.270489][T15943] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.282202][T15935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.311933][T15945] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.325866][T15945] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.337949][T15943] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.372407][T15935] team0: Port device team_slave_0 added [ 428.427040][T15935] team0: Port device team_slave_1 added [ 428.452466][T15945] team0: Port device team_slave_0 added [ 428.484121][T15945] team0: Port device team_slave_1 added [ 428.494931][T15943] team0: Port device team_slave_0 added [ 428.555182][T15943] team0: Port device team_slave_1 added [ 428.561755][T15935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.573086][T15935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.602926][T15935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.616092][T15935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.623438][T15935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.649880][T15935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.674419][T15945] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.681361][T15945] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.716805][T15945] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.729704][T15945] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.736948][T15945] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.763422][T15945] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 428.867097][T15943] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.879360][T15943] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.905661][T15943] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 428.930808][T15943] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 428.947424][T15943] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.974019][T15943] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.019347][T15935] hsr_slave_0: entered promiscuous mode [ 429.026713][T15935] hsr_slave_1: entered promiscuous mode [ 429.033201][T15935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.040764][T15935] Cannot create hsr debugfs directory [ 429.111382][T15945] hsr_slave_0: entered promiscuous mode [ 429.118739][T15945] hsr_slave_1: entered promiscuous mode [ 429.125182][T15945] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.132942][T15945] Cannot create hsr debugfs directory [ 429.163470][T15943] hsr_slave_0: entered promiscuous mode [ 429.170635][T15943] hsr_slave_1: entered promiscuous mode [ 429.177046][T15943] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.185048][T15943] Cannot create hsr debugfs directory [ 429.243066][T15895] Bluetooth: hci10: command tx timeout [ 429.483119][T15895] Bluetooth: hci11: command tx timeout [ 429.803630][T15895] Bluetooth: hci12: command tx timeout [ 430.045473][ T53] Bluetooth: hci13: command tx timeout [ 430.283241][ T53] Bluetooth: hci14: command tx timeout [ 431.323088][ T53] Bluetooth: hci10: command tx timeout [ 431.563155][ T53] Bluetooth: hci11: command tx timeout [ 431.882802][ T53] Bluetooth: hci12: command tx timeout [ 432.122804][ T53] Bluetooth: hci13: command tx timeout [ 432.362847][ T53] Bluetooth: hci14: command tx timeout [ 433.412893][ T53] Bluetooth: hci10: command tx timeout [ 433.642955][ T53] Bluetooth: hci11: command tx timeout [ 433.962733][ T53] Bluetooth: hci12: command tx timeout [ 434.202920][ T53] Bluetooth: hci13: command tx timeout [ 434.443445][ T53] Bluetooth: hci14: command tx timeout [ 440.295024][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.301357][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 483.175352][ T30] INFO: task syz-executor.1:15831 blocked for more than 143 seconds. [ 483.183669][ T30] Not tainted 6.10.0-rc1-syzkaller-00179-gf8f0de9d58d9 #0 [ 483.191304][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 483.200023][ T30] task:syz-executor.1 state:D stack:26032 pid:15831 tgid:15828 ppid:10199 flags:0x00000006 [ 483.210356][ T30] Call Trace: [ 483.213828][ T30] [ 483.216774][ T30] __schedule+0x17e8/0x4a20 2024/06/06 10:51:44 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 483.221318][ T30] ? __pfx___schedule+0x10/0x10 [ 483.226291][ T30] ? __pfx_lock_release+0x10/0x10 [ 483.231524][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 483.256371][ T30] ? schedule+0x90/0x320 [ 483.260651][ T30] schedule+0x14b/0x320 [ 483.265700][ T30] schedule_preempt_disabled+0x13/0x30 [ 483.271187][ T30] __mutex_lock+0x6a4/0xd70 [ 483.276292][ T30] ? __mutex_lock+0x527/0xd70 [ 483.281214][ T30] ? genl_rcv_msg+0x121/0xec0 [ 483.286006][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 483.291066][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 483.297599][ T30] ? radix_tree_lookup+0x238/0x290 [ 483.302858][ T30] genl_rcv_msg+0x121/0xec0 [ 483.307376][ T30] ? mark_lock+0x9a/0x350 [ 483.311716][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 483.316804][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.321870][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 483.327227][T15896] Bluetooth: hci6: command 0x0406 tx timeout [ 483.336190][T15896] Bluetooth: hci9: command 0x0406 tx timeout [ 483.342211][T15896] Bluetooth: hci5: command 0x0406 tx timeout [ 483.348309][T15896] Bluetooth: hci7: command 0x0406 tx timeout [ 483.352989][T15970] Bluetooth: hci8: command 0x0406 tx timeout [ 483.360291][ T30] ? __pfx___might_resched+0x10/0x10 [ 483.365686][ T30] netlink_rcv_skb+0x1e3/0x430 [ 483.370463][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 483.375736][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 483.381053][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 483.402789][ T30] genl_rcv+0x28/0x40 [ 483.406827][ T30] netlink_unicast+0x7ea/0x980 [ 483.411621][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 483.432782][ T30] ? __virt_addr_valid+0x183/0x520 [ 483.437933][ T30] ? __check_object_size+0x49c/0x900 [ 483.443297][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 483.448434][ T30] netlink_sendmsg+0x8db/0xcb0 [ 483.453673][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.458973][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 483.464199][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 483.469491][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 483.482788][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 483.488102][ T30] __sock_sendmsg+0x221/0x270 [ 483.502681][ T30] __sys_sendto+0x3a4/0x4f0 [ 483.507219][ T30] ? __pfx___sys_sendto+0x10/0x10 [ 483.512283][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 483.532888][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 483.539251][ T30] __x64_sys_sendto+0xde/0x100 [ 483.563438][ T30] do_syscall_64+0xf3/0x230 [ 483.567974][ T30] ? clear_bhb_loop+0x35/0x90 [ 483.582