last executing test programs: 48.944064495s ago: executing program 4: sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) socket$packet(0x11, 0x0, 0x300) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='ext4_mballoc_prealloc\x00', r1}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r2, &(0x7f0000000180), 0x2000) 48.724971123s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000140)=""/42, &(0x7f0000000180)=0x2a) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000040), &(0x7f0000000080)=0xc) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet(0x2, 0x3, 0x2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000013c0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r4, &(0x7f0000001ec0)={0x0, 0x0, &(0x7f0000001e80)={&(0x7f0000000000)={0x30, 0x0, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_TAGLST={0x14, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}]}]}, 0x30}}, 0x0) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000200)={@multicast2, @local, @dev}, 0xc) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x2}}) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000280)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) socket$netlink(0x10, 0x3, 0x4) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'tunl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x4, 0x5, {{0x1d, 0x4, 0x3, 0x5, 0x74, 0x0, 0x0, 0x1, 0x4, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x1c, 0x6f, 0x1, 0x9, [{@broadcast, 0x6}, {@dev={0xac, 0x14, 0x14, 0x27}, 0x80}, {@initdev={0xac, 0x1e, 0x0, 0x0}}]}, @end, @timestamp={0x44, 0xc, 0xb2, 0x0, 0x0, [0xbab9, 0x0]}, @timestamp_prespec={0x44, 0xc, 0x2d, 0x3, 0x0, [{@multicast1, 0x7fffffff}]}, @timestamp={0x44, 0x1c, 0x9e, 0x0, 0x0, [0x8, 0x1, 0x1, 0x3, 0x1, 0x93]}, @timestamp_addr={0x44, 0xc, 0x0, 0x1, 0x5, [{@empty, 0x2}]}]}}}}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{0x1}, &(0x7f0000000580), &(0x7f00000005c0)='%+9llu \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x0, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000500), 0x8, 0x10, &(0x7f0000000540)={0x0, 0x0, 0x100}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000640)=[0xffffffffffffffff], &(0x7f0000000680)=[{0x0, 0x0, 0x0, 0x8}, {}, {0x2, 0x4}]}, 0x90) r5 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) sendmsg$netlink(r0, 0x0, 0x0) 46.79196762s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) socketpair(0xa, 0x1, 0x0, &(0x7f0000002d00)) 46.679451348s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x20, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 31.592061969s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x20, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 12.680001513s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x61, 0x54}}, &(0x7f0000281ffc)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r0, 0x0, 0x20, 0x0, &(0x7f00000000c0)="5cdd3086ddffff6633c9bbac88a8862608dffd00139fb7a884bdfc14f4870800", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.049333886s ago: executing program 0: socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x1cc0}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 3.7673027s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000540)="8b", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) close(r2) 3.499314254s ago: executing program 0: socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0xe, &(0x7f00000001c0), 0x4) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000003c0)={0x0, 0x80000001, @status={[0x0, 0x1000, 0x2, 0x3, 0x7, 0xbea9]}, [0x4d8, 0x100000001, 0xfff, 0x2, 0x4, 0xcda, 0xf3a, 0x1ff, 0x4, 0x6fa6, 0x24, 0x20, 0x1, 0x8000000000000000, 0x2, 0x4, 0x3, 0x9, 0x7fff, 0xa41, 0x0, 0x287d, 0x1, 0x2, 0x0, 0x9, 0x7, 0x9, 0x400000ffff, 0x0, 0x4, 0x5, 0x5acc, 0x6, 0x2, 0x2, 0x80000001, 0x8, 0x20000000200, 0x5, 0x8, 0x6, 0x3b, 0x736, 0x2, 0x71, 0x5a, 0x4, 0x8, 0x4, 0x8, 0x1, 0x5, 0x20, 0x5, 0x2, 0x3, 0x1, 0x1, 0xffffffffffffff4b, 0x2, 0x7, 0x1c00000000000000, 0x7]}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000e00)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaa00080045000028000000000002907800000000ffffffff11e090780000000000010000000000000000000063fe072df3c2d1dca06758704b3634a02d217e425c46c553d686a544d20622cde64df5784e2cda39b6e0b1772359b313cc14dadffe19a6d2e925dfcc7993a7fd2ca0240ddd5102b36cb4e9f0bb7b105839e65f8b131a0a37ce00000000b684ef89732ce012e1342c25a4bdc8"], 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r3, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000380)={&(0x7f0000001040)=ANY=[@ANYRES8=r1, @ANYRES8=r0], 0x12c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="54010000100033060000000000000000ffffffff000000dfff00000000000000e000000200"/64, @ANYRES64, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000032000000ac1e000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700"/268], 0x154}}, 0x0) getsockname$packet(r5, &(0x7f0000001080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x72) r8 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1}, 0xc) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, r9}, 0xc) connect$can_j1939(r5, &(0x7f00000001c0)={0x1d, r9, 0x0, {0x0, 0xf0, 0x2}, 0xfe}, 0x18) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000507000000000007000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000580)=@newtfilter={0x30, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x4}}]}, 0x30}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$MRT6_DEL_MFC_PROXY(0xffffffffffffffff, 0x29, 0xd3, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r5, 0x29, 0x37, &(0x7f0000000180)=ANY=[@ANYBLOB="5c001993b04e5c5ef9fc017e0732e400"], 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x4, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000062014a00000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) socket$can_bcm(0x1d, 0x2, 0x2) 3.196302108s ago: executing program 1: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020d00000a00000000000000000000000000000000000000000000000000000000000000000000000000000000fc02000000000000000000000000000089eb3416ce32945c5c804cc6989c45c47efb55d235522199db95e7c45c1949646debdbc53fed301378e997c0fc39356d4ac79ba80f800c804e8a385e90dbfaece879692542ca95a8a0d9d2105cb8a8951ac4d47d81036779940b4f64921fdeab004a5477b9afef60e40e4cb0b287a5611a99e4ca4f05164905e545589d7d09a7cd19ad5e09c5057f03d60d678a6a6a0c8f4f96a8b42c30075d0c9d4e5f2790d146c20133"], 0x50}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r2, 0x89e3, &(0x7f0000000000)="2be2f13a21a66c50aaf5ee0d3c281df005528650") getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRES8, @ANYBLOB="1800"/15, @ANYRES64=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r7, 0x0, 0x0, 0x20010004, 0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @local, @loopback}}}], 0x20}, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r10, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000010003000000000800040001000000", 0x24) socket$inet6_sctp(0xa, 0x5, 0x84) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400ff00", @ANYRES16=r11, @ANYBLOB="0100000000000000000004000000"], 0x14}, 0x1, 0xfcffffff00000000}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xbaace339fe693467, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.839790271s ago: executing program 3: socket$packet(0x11, 0x3, 0x300) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) pselect6(0x40, &(0x7f0000000040)={0x1cc0}, 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) 2.81786903s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffffffffffffffff}}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}}, 0xe8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='rcu_utilization\x00', r3}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={0x0, &(0x7f0000000040)=""/155, 0x1000000, 0x9b, 0x1}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00'}, 0x10) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x800443d3, 0x20000002) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r4, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) 2.636790324s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$bt_hci_HCI_DATA_DIR(0xffffffffffffffff, 0x0, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, 0x0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x670, 0x0, 0x428, 0x300, 0x428, 0x0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x5a0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@loopback, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @private2, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x100, 0x128, 0x0, {}, [@common=@frag={{0x30}}, @inet=@rpfilter={{0x28}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6d0) recvmsg(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000007c0)=""/237, 0xed}, {&(0x7f00000008c0)=""/105, 0x69}, {&(0x7f0000000940)=""/185, 0xb9}, {&(0x7f0000000a00)=""/4096, 0x1000}], 0x4, &(0x7f0000001a80)=""/242, 0xf2}, 0x10000) 2.438256435s ago: executing program 3: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000280)={0x51, 0x18, [0x0, 0x899e, 0xef], &(0x7f0000000240)=[0x0, 0x0, 0x0]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000611029000000000095000000000000000000000000000000af7552adc18828c50d363aa3f2c2e7df154c653a8c4e5af4dba2b995a9be24279727c405e6f554010ebd52c8b77cdb4a8b10a7d47e0ec7ab609532fb85fd74301de2c1df9044c3da4c19e1e003489e2e7ace0c24e269540117b9c58ad80839dd7a80016afcafee033080512f9e63"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x40}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r2, 0x0, 0x1}, 0x48) openat$cgroup_ro(r1, &(0x7f00000002c0)='cgroup.freeze\x00', 0x7a05, 0x1700) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r3, 0x8905, &(0x7f0000000080)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f34125", 0x18, 0x3a, 0xff, @private2, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x0, "2ddd"}]}}}}}}, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup(r4, &(0x7f0000000340)='syz0\x00', 0x1ff) openat$cgroup_procs(r4, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) sendfile(r5, r5, 0x0, 0x401) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000001000000000000000000000079120e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo}}}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f0000000480)={0x89, 0x4, 0x1, 0x80, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private1]}, 0x28) setsockopt$inet6_opts(r6, 0x29, 0x37, &(0x7f0000000040)=ANY=[], 0x18) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 2.387507023s ago: executing program 0: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x40, 0x0, 0x189f4c11598f3cd7, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syz_tun\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x40}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x2c}}, 0x0) 2.142842964s ago: executing program 0: unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000080)={0x34, r1, 0xf1aad47e89fb43b5, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 2.118868088s ago: executing program 3: socket$kcm(0x10, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x90, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x60, 0x2, {{}, [@TCA_NETEM_LOSS={0x44, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14, 0x3}, @NETEM_LOSS_GE={0x14}]}]}}}]}, 0x90}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000001000", @ANYRES32, @ANYBLOB="000000000000000004"], 0x28}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1, 0xf, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$kcm(0x11, 0x200000000000002, 0x300) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) r7 = socket$kcm(0x29, 0x2, 0x0) sendmsg(r7, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000580)}, {&(0x7f0000000ac0)="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", 0xfffffd6b}, {&(0x7f0000000640)="74a892e6122d0e9da29a40f6060049f3ab51554d", 0x14}], 0x3, &(0x7f00000005c0)=ANY=[], 0x158}, 0x0) setsockopt$SO_BINDTODEVICE(r7, 0x1, 0x19, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x9, @remote}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_RECVNXTINFO(r6, 0x84, 0x21, &(0x7f0000000180), &(0x7f00000002c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r8 = socket$rds(0x15, 0x5, 0x0) bind$rds(r8, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r8, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000540)=[@fadd={0x58, 0x114, 0x6, {{0x0, 0x1ff}, &(0x7f0000000400)=0x1, &(0x7f00000001c0)=0x3, 0x2, 0x4, 0x9, 0x5, 0x8, 0x800}}], 0x58}, 0x26008001) write(0xffffffffffffffff, &(0x7f0000000040)="0a03000019002551075c01", 0xb) sendmsg$key(0xffffffffffffffff, &(0x7f00005f5000)={0x0, 0x0, 0x0}, 0x0) accept$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) setsockopt$inet6_IPV6_PKTINFO(r6, 0x29, 0x32, &(0x7f0000000100)={@mcast2, r9}, 0x14) 2.108537442s ago: executing program 1: socket$inet6(0xa, 0x2, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r3) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r5, 0x8982, &(0x7f0000000180)={0x2, 'veth0\x00', {0x8}, 0xff}) sendmsg$inet(r1, &(0x7f0000000800)={&(0x7f0000000400)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000540)="7ccd505eecb9c26418bae2c74a1d9aa0e621450beb96eb5be9a29d5eb83bb66f775ec747ad07c7a9e13979a35a504108c209322d5ffb71e405d311df8409c7ced59d7175fa6b1c38a762f3b69696183a369e298d62c8e8bafd3515809cbbc09144de765ae37c665742b5bb0f34e2186a60b2a120", 0x74}, {&(0x7f00000005c0)="f1ba6207bba952c37115be03bf7b4480f4e1358a2be6361c0331776888168820a38538e2f2800b6d0f761aa9d388a306719785ad619b8a0022446a04a34ec676880978d6b0c0f91c938c185af33836f6c11d82f9a6af674cfc1ce1f4ffd304907d82c4ab36db593f1330b1e7dcad210f2af3b5bdd274d07ccae1b12706678c8536ab80daa0264256d53661faf873ebdb6ec85b5ee9be7e9163d2826868a8b6622445ee5c1c7a3456f7e01a33f49eeabb88a041b18aaff7387d41f2d2740c823f8ec6e4a96b", 0xc5}], 0x2, &(0x7f00000006c0)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0a010100ac1414aa00000000"], 0x108}, 0x2004c000) connect$pppl2tp(r4, &(0x7f0000000380)=@pppol2tpin6={0x18, 0x1, {0x0, r0, 0x0, 0x0, 0x1, 0x2, {0xa, 0x4e22, 0x9, @remote, 0x7}}}, 0x32) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000840)="c99b57381801238c8bd6ef0aa7ad72a3cc47f6b109d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x2c) r7 = accept4(r5, 0x0, 0x0, 0x800) sendmmsg(r7, &(0x7f0000000ec0)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000500)="b8bdf3a9bcce18f717496c3e08b802000000000000003f66d8d81c7ca5b1fb0081", 0x21}], 0x1}}], 0x1, 0x0) recvmsg$can_j1939(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000000c0)=""/24, 0x18}, {&(0x7f0000000200)=""/204, 0xcc}], 0x2}, 0x0) getpeername$qrtr(r3, 0x0, &(0x7f00000001c0)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x12) r9 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="1400000035000b00000980643ddb455a0c6e7436", 0x14}], 0x1}, 0x0) sendmmsg$unix(r2, &(0x7f0000011100), 0x1, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4800000058dd000026bd7000ffdbdf251c947320fc00ff0000330042cc45c3eb6e1d391b03c825b928909baeb405001a000800000005081e010000000000"], 0x48}, 0x1, 0x0, 0x0, 0x20000001}, 0x90) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000340)=0x14) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f00000000c0), 0x12) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) 1.786675283s ago: executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCSACTIVE(r0, 0x40047459, &(0x7f0000000080)={0xfffffffffffffe43, 0x0}) r1 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) write$ppp(r0, &(0x7f0000000440)=')z', 0x2) ppoll(&(0x7f0000000140)=[{r1}], 0x1, 0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000180)='illinois\x00', 0x9) r3 = socket$kcm(0x10, 0x2, 0x0) recvmsg$kcm(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000a40)=""/4072, 0xfe8}], 0x1}, 0x0) write$cgroup_subtree(r3, &(0x7f0000001ec0)=ANY=[@ANYBLOB="004000003a00913a74067388481f9c0e0a"], 0xfe33) r4 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f92724fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x30, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x64}]}], {0x14}}, 0xa4}}, 0x0) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) r6 = socket$inet6(0x10, 0x2, 0x4) sendto$inet6(r6, &(0x7f0000000080)="4c00000012001f15b9409b849ac00a00a5784004000000000000030038c88cc055c5ac27a6c5b068d0bf46d323452536005ad94a461cdbfee9bdb942352359a351d1ec0cffc8792cd8000080", 0x4c, 0x0, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) unshare(0x6020400) 1.695253854s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, 0x0) write$tun(r0, &(0x7f0000000140)={@val={0x8, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x2, 0x0, @private=0xa010100, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @local, @loopback}}}}, 0xfdef) 1.159205219s ago: executing program 2: socket$tipc(0x1e, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x485) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7b, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000180)='cdg\x00', 0x9) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600), 0x4) r1 = socket(0x0, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x48f, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x0, 'lblcr\x00'}, 0x2c) sendto$inet(r0, &(0x7f0000000340)="8e490a22f724551baad363a5e1706c5fef3f8f25b94b879d24695630fc5c1e45c442d8d03a7afa46c6851d34bebffbc0a25047d9b3259a0943ff66a14abce6322acc8c757af995a3d08cee4d065d3eeab174a67ff65c5ca5b59af6228f03aa4da619be87ca595a9794cdb9857c54862aafd708d7fc1d9149c4848ed7565d29813e99a7b2d24104779a7d4ec417dd730bc4d801943461f2fa57fb80b67fb08c8cf0508b0f72ae46f36ad4a97979fa94733c02583c5e00970c6caa6faf4287e02a589e7476a4b62c5aa88c9812491b5efd32d9be", 0xd3, 0x4004040, 0x0, 0x0) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) recvmsg(r0, &(0x7f0000001500)={0x0, 0xa, &(0x7f0000002200)=[{&(0x7f00000035c0)=""/4106, 0x200045ca}], 0xa, 0x0, 0x46, 0x407006}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x1, &(0x7f0000000200)=@raw=[@call], 0x0}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x1, 0x1, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x0, 0x701, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) shutdown(r0, 0x1) 959.585193ms ago: executing program 2: recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) ioctl$sock_inet_SIOCSIFNETMASK(0xffffffffffffffff, 0x891c, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfecc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xf, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 576.705774ms ago: executing program 1: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@empty, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffffffffffffffff}}, {{@in=@loopback, 0x0, 0x2b}, 0x0, @in6=@initdev={0xfe, 0x88, '\x00', 0x2, 0x0}}}, 0xe8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) setsockopt$ALG_SET_AEAD_AUTHSIZE(r1, 0x117, 0x5, 0x0, 0xc) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000001500000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000001b00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000001c0)='rcu_utilization\x00', r3}, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000440)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f00000002c0)='contention_end\x00', r4}, 0x10) ioctl$AUTOFS_IOC_CATATONIC(0xffffffffffffffff, 0x800443d3, 0x20000002) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r5, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r5, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) 467.826242ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000000)='sys_enter\x00', r0}, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r1, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000540)="8b", 0x1}], 0x1}, 0x0) recvmsg(r1, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x0) close(r2) 366.363883ms ago: executing program 1: sendmsg$DEVLINK_CMD_TRAP_SET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x14, 0x0, 0x800, 0x0, 0x25dfdbff}, 0x14}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.events\x00', 0x26e1, 0x0) close(r0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x1a1282, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001400) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r2}, 0x10) write$cgroup_pid(r0, &(0x7f0000000400), 0x20000412) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f00000000c0), 0x10) sendmmsg$inet(r3, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}, {{0x0, 0x0, &(0x7f0000000100), 0x1}}], 0x40000000000003a, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = socket(0x200000100000011, 0x803, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r6, &(0x7f0000000000)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @broadcast}, 0x14) write$binfmt_aout(r6, &(0x7f0000002180)=ANY=[@ANYBLOB="90020ee7ff072d2200000e210806000108000604000180b572da3e9647000000ae5156694871", @ANYRES8], 0x120) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r5, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r5, &(0x7f0000000240)="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", 0x17c, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) sendto$inet6(r5, &(0x7f0000000140)='I', 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000b40), 0x8) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008001f001f000000"], 0x3c}}, 0x0) 349.008477ms ago: executing program 2: setsockopt$packet_fanout_data(0xffffffffffffffff, 0x107, 0x16, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000002880)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, 0x0, 0x0, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x0, &(0x7f0000003700)={0x77359400}) socket$inet_tcp(0x2, 0x1, 0x0) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)={0x40, 0x0, 0x189f4c11598f3cd7, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syz_tun\x00'}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}]}]]}, 0x40}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r3, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)={0x2c, r2, 0x1, 0x0, 0x0, {{0xa}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x10, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_IDX={0x5}]}]}, 0x2c}}, 0x0) 204.827327ms ago: executing program 2: bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_INO_PATHS(r0, 0xc0389423, &(0x7f0000000280)={0x51, 0x18, [0x0, 0x899e, 0xef], &(0x7f0000000240)=[0x0, 0x0, 0x0]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000611029000000000095000000000000000000000000000000af7552adc18828c50d363aa3f2c2e7df154c653a8c4e5af4dba2b995a9be24279727c405e6f554010ebd52c8b77cdb4a8b10a7d47e0ec7ab609532fb85fd74301de2c1df9044c3da4c19e1e003489e2e7ace0c24e269540117b9c58ad80839dd7a80016afcafee033080512f9e63"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x4, [@func={0x2, 0x0, 0x0, 0xc, 0x3}, @enum, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}]}, {0x0, [0x0, 0x5f]}}, 0x0, 0x40}, 0x20) socket$kcm(0x2, 0x3, 0x2) openat$cgroup_ro(r1, &(0x7f00000002c0)='cgroup.freeze\x00', 0x7a05, 0x1700) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_tcp_SIOCATMARK(r2, 0x8905, &(0x7f0000000080)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000000c0)={@broadcast, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f34125", 0x18, 0x3a, 0xff, @private2, @mcast2, {[], @ndisc_ns={0x87, 0x0, 0x0, @empty, [{0x0, 0x0, "2ddd"}]}}}}}}, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup(r3, &(0x7f0000000340)='syz0\x00', 0x1ff) openat$cgroup_procs(r3, &(0x7f0000000300)='tasks\x00', 0x2, 0x0) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) sendfile(r4, r4, 0x0, 0x401) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="1800000001000000000000000000000079120e000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$l2tp6(0xa, 0x2, 0x73) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @echo}}}}, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f0000000480)={0x89, 0x4, 0x1, 0x80, 0x0, [@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private1]}, 0x28) setsockopt$inet6_opts(r5, 0x29, 0x37, &(0x7f0000000040)=ANY=[], 0x18) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0x40305829, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 135.056798ms ago: executing program 3: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="020d00000a00000000000000000000000000000000000000000000000000000000000000000000000000000000fc02000000000000000000000000000089eb3416ce32945c5c804cc6989c45c47efb55d235522199db95e7c45c1949646debdbc53fed301378e997c0fc39356d4ac79ba80f800c804e8a385e90dbfaece879692542ca95a8a0d9d2105cb8a8951ac4d47d81036779940b4f64921fdeab004a5477b9afef60e40e4cb0b287a5611a99e4ca4f05164905e545589d7d09a7cd19ad5e09c5057f03d60d678a6a6a0c8f4f96a8b42c30075d0c9d4e5f2790d146c20133"], 0x50}}, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) getsockopt(r1, 0x200000000114, 0x0, 0x0, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_proto_private(r2, 0x89e3, &(0x7f0000000000)="2be2f13a21a66c50aaf5ee0d3c281df005528650") getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000100)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x25, &(0x7f0000000000)={r5, @in={{0x2, 0x0, @empty}}}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x1, &(0x7f0000000340)=ANY=[@ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095", @ANYRES8, @ANYBLOB="1800"/15, @ANYRES64=r3], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r7, 0x0, 0x0, 0x20010004, 0x0, 0x0) r8 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r8, &(0x7f0000000600)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000400)='\b\x00', 0x2}, {&(0x7f0000000180)="96bc1480bb58", 0x6}], 0x2, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x34, {0x0, @local, @loopback}}}], 0x20}, 0x0) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @empty}, 0x1c) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x4, &(0x7f0000000100)=""/146, &(0x7f00000001c0)=0x92) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r10, &(0x7f0000000000)="240000001a005f0214f9f407000904001f00000000010003000000000800040001000000", 0x24) socket$inet6_sctp(0xa, 0x5, 0x84) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_REMOVE(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1400ff00", @ANYRES16=r11, @ANYBLOB="0100000000000000000004000000"], 0x14}, 0x1, 0xfcffffff00000000}, 0x0) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0xbaace339fe693467, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r12, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 95.386169ms ago: executing program 2: unshare(0x68040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=@setneightbl={0x24, 0x43, 0x1, 0x0, 0x0, {}, [@NDTA_NAME={0xf, 0x1, '\xaa\xaa\xaa\xaa\xaa\xc47\xa5m\"0'}]}, 0x24}}, 0x0) (async) socket$inet(0x2, 0x0, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000000c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3f, '\x00', 0x0, 0xffffffffffffffff, 0x5}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='memory.events.local\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0xc, 0xfffff001, 0x9, 0x2, 0x1408, r2, 0x1, '\x00', 0x0, r3, 0x2, 0x1}, 0x48) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000016c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r1, &(0x7f0000001780)={0x0, 0x0, &(0x7f0000001740)={&(0x7f0000000080)={0x34, r4, 0xf1aad47e89fb43b5, 0x0, 0x0, {0x26}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}}, 0x0) 0s ago: executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000140)=0x2958, 0x4) sendmmsg$sock(r0, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x10040) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r1, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) r2 = socket$inet6(0xa, 0x3, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000340)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0xd8, 0xffffffff, 0xffffffff, 0xd8, 0xffffffff, 0x1f0, 0xffffffff, 0xffffffff, 0x1f0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@mcast2, @local, [], [], 'vlan0\x00', 'wlan1\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@remote, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], 'hsr0\x00', 'veth1_to_hsr\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'pptp\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x320) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x5b, &(0x7f0000000180)={&(0x7f00000004c0)=@newtfilter={0x8c, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0x2}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x5c, 0x2, [@TCA_CGROUP_ACT={0x58}]}}]}, 0x8c}}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000001580)="0d6e7a5da30ad545ed65a5f481ccc2ab10e0d582cf26b512a7ce135c57225700e559dd2a34473e7b54a90246ec0892e0a007279abc8e304d3a2cc5c22e13e0cb69ec5f644575addebbca7cdfc350db1ee3cc73994dc19cf8a434faa48b73e53d0b56a28b2d76140d4567ef826bc05f9a27ce2fb122aabdbbb08258984be58ac8b61fde06101a62154093c927ff89578b9a69ddf1467fe09976968adc0f226b20773ba9dd087f25fd42a27a609fb46d98043eef3db5fdfb54a206", 0xba, 0x0, &(0x7f00000014c0)={0x11, 0xc, 0x0, 0x1, 0x7f, 0x6, @remote}, 0x14) syz_extract_tcp_res$synack(&(0x7f0000000000)={0x41424344, 0x41424344}, 0x1, 0x0) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r6, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0xffffffff, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x58, 0x0}}], 0x6c00, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) setsockopt$packet_int(r8, 0x107, 0x14, &(0x7f0000000480)=0x102, 0x4) setsockopt$packet_int(r8, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x2, 0x4, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000007000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000fdffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r11}, 0x10) sendto$packet(r8, &(0x7f00000000c0)="3f033608260812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c152bfdf9435e3ffe46", 0xe90c, 0xa0c4, &(0x7f0000000540)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{&(0x7f0000000440)="ff915a45d7c5f7c8568ebdc57386a19e302e55f53d1b2a9388fd12ad903c29d3e976d8100612cd0800000000000000d7a274b8c2401413676458fa504e09e887ef6ff0cdd758010df00f564a11c1713dbcabd72ba811021faee1ac8d79bebdc3fe43f43c66e89dd70c176a25738767a6a417a9ef94cf1b85c3d2", 0x7a}, {&(0x7f0000000500)="06bab072b09e636fc7e486e1c1f30ed7b8376c131e7753d31930827e07d44a4c06c3a6a3630fbb1ed4b84bb6e674968e67310078013dc9f2503bf09b4c93ba0f48a556bae048a362dd2f", 0x4a}, {&(0x7f0000000c40)="ec32075af1322e1c7e56eb9fcbba3252033944c118ac35c5373bec014f4bdb6c4de024a1b6565077626daaac314db078b7568221bd5e8259c1e32a3af2c680a86a67ff0df9", 0x45}, {&(0x7f0000000600)="a9ef4d07e893054155829967a251655a0f074e8c92d77db90c391c6fc8e119ad2021b5aa814e26805a1de486be6a34e7d46dfe23ed511e7c803b84272cbef991ce0b0b6600e9c680beae8e6bf430ebfdfd9c807862ef45320caf34c60f7b2083256d2d5e91ca2ceb9d2492c2f507bbf77adbfffda6b088582edb495fb2526892750995e30868b8c897cc972329a6ddef3ba1922141981efdd51c2a495a181d1de8a9d0b3", 0xa4}, {&(0x7f00000006c0)="057fd08656a165bd0dccb631c436c81971cae814c374abb2401493d87b7ecdf51e98b91c95c1d78878911c02c326cec93b8bfa168428fce1e9eeed0444eacbe8a3c5992f844221b9651a50fbe693675fcdbabc590979027e059bf227e65108bbb0a9f337a3f110fd12cb4141d126d600cd4b5aeed5019bb1d589523b61ef61cde70d51f84d9d719b300084552c3ba2d9c799de1c75e1049889dc118828b7764e30291077aefb1535d1a1d51dd8beb2435713b5eff84397a4a4c03db093dfc74840835bb91d4dffea1051fdc62f6b81da8336aee50300b2b2922323ed021d", 0xde}, {&(0x7f00000007c0)="a854f23e82daddef695070a2506f0bfc18f4a49b377f160b7037122633343c67302980e5bb01c03eb16e705487c7399acc513292", 0x34}, {&(0x7f0000000b80)="5e87b031fe712e8de6bb10501abd040060cf15164380fca4eec08f765031d040208cf6f3b5cc", 0x26}], 0x7, &(0x7f0000002700)=ANY=[@ANYRESOCT, @ANYBLOB="e5ed14094a0e6f740d432ae7053ed04f4f603d65b010e931230f99380e94e84464691d5d75f137d40cf8e95735dcee504a79af29f1ba170e768af3670ef647cc0f634223572b481b3560187c7725db45122d4722de29084760bd34e8ca51a27a6e4eb98b3cf4b7d16c89dcae7b000000000000c8ee563bc5094e06055c8b602ceac730966188507118e91688be5afe953706a4c3a2449e0bf429374d3e6c1062e93b8919f26ba39467132c67fe2150bdae54fb1b5bbc4a26463e8cd14575e2ce693db2cc7449921778403184f7690d117f9415716478dddc1b09c5fa288f62379d7343e2c14b0d622b2ac05ee45f9952287318345cbd0e4148b0bb208fe670bbbefcef11a431e372aa68e222ec69acb0f40b1d472e15c98e1657ab5b373bff5de95dccdbce4a8b3b1d23c10acb661e8e83cc6f3d3b6f7e6c5b8af32caab37e5f22b74f1538994e97c8bd91f1ed4aab4eb87cb0f9fc507c19b9683edf20d1ca6ee8db", @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRESHEX=r5, @ANYRES64, @ANYRES32=r2, @ANYRES32=0x0, @ANYRESHEX=r4, @ANYBLOB="0047b1d19bec420fd311bb340000001cf8fe961a0000000000000000000000fa044b2c5e7c3a0b065800af3c89e24cfc0318ca42b01a2f329923aa3d89753fcb54", @ANYRES32=0x0, @ANYRES8=r6, @ANYRESDEC, @ANYRESOCT=r7], 0xffffffa1}, 0x0) r12 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010000100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32=r4, @ANYBLOB="0a001b000000000000000000"], 0x2c}, {&(0x7f0000004200)=ANY=[@ANYRES32, @ANYRESDEC, @ANYBLOB="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", @ANYRESOCT=r6, @ANYBLOB="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", @ANYRES32, @ANYRESOCT=r4, @ANYRESOCT, @ANYRES64], 0x200}, {&(0x7f00000030c0)=ANY=[@ANYRES8, @ANYRES32, @ANYRESHEX, @ANYRES32=0x0, @ANYBLOB="0400f6fffffffffffffc0000f00000000000000000040000140056002001cf2800000000000000000000ff00d2008a80080020000000", @ANYRES32=r6, @ANYRESOCT], 0x3b0}, {&(0x7f0000000f00)=ANY=[@ANYBLOB="6c01001b4971e6a35656afe75d074b437887acc9122b08edd78735e40b661dd47fc0f89658c722f59db7bd4dad9ca2890116a08e9c9ca6738208f4e7a27883e5afd65490249f56e14f14e985f9ba36ed68113473eaefae72d7913631fa71dd4501140025000000000000000000001000000000000108006d000000000000002ff4c2d9191cff1e8278785bba7d1c96b602f08f431b373dbdca7e4a00f7963d7de2a456310d3e43aa2b365a1ca7d01636ee1fc6af39fd3f187495cb7de55a0ac64304c97fc2008df4c66356038cd7801f60a400", @ANYRES32, @ANYRESHEX], 0x16c}], 0x4}, 0x0) getsockname$packet(r1, &(0x7f0000000d40)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000d80)=0x14) sendmsg$nl_route(r12, &(0x7f0000001540)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001500)={&(0x7f0000000800)=ANY=[@ANYBLOB="640000001500000028bd7000fcdbdf25024089c88df84aa547f38d2f7f0478f6dccd91913f7edb47478b54994bb2847182e44f2ef22ea89d323d060873c7f9f95bb5c9b0f0cb46e3e980aaef2127fe0c78edf562cae265ad0803dd0a13443c47ba", @ANYRES32=r13, @ANYBLOB="0800040064010101140003006d6163766c616e310000000000000000140006000000000014000000030000000800000008000a00020000001400030076657468315f6d616376746170000000"], 0x64}, 0x1, 0x0, 0x0, 0x40000080}, 0x80) kernel console output (not intermixed with test programs): 116.436043][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.470892][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.482244][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.500918][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.521292][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.531940][ T6081] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 116.544779][ T6081] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 116.552548][ T29] audit: type=1804 audit(1717637994.679:3): pid=6302 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1366804247/syzkaller.l5l3B2/97/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 116.578129][ T6081] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 116.688307][ T6081] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.712163][ T6081] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.732184][ T6081] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 116.745468][ T6081] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.021375][ T6284] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.058144][ T6284] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.102639][ T5122] Bluetooth: hci5: command tx timeout [ 117.156388][ T6325] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 117.181626][ T6279] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 117.191751][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.204903][ T6329] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.212502][ T6279] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 117.282894][ T6330] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.400710][ T6335] openvswitch: ɶƣ0GC¦: Dropping previously announced user features [ 117.535825][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.578483][ T6342] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.637249][ T6344] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 117.646370][ T29] audit: type=1800 audit(1717637995.779:4): pid=6350 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 117.722825][ T29] audit: type=1804 audit(1717637995.849:5): pid=6344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1366804247/syzkaller.l5l3B2/100/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 117.757147][ T6344] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.783056][ T6354] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.800667][ T6354] netlink: 124 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.874726][ T6344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.063418][ T6364] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 118.308118][ T6379] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 118.309764][ T6381] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 118.327106][ T11] wlan1: Trigger new scan to find an IBSS to join [ 118.365049][ T6379] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.375273][ T6379] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 118.392509][ T6381] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 118.445396][ T6381] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 118.688431][ T6391] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.193748][ T5122] Bluetooth: hci5: command 0x0419 tx timeout [ 119.270299][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.760715][ T6441] tipc: Started in network mode [ 119.774039][ T6441] tipc: Node identity 6, cluster identity 4711 [ 119.789773][ T6441] tipc: Node number set to 6 [ 119.978767][ T6450] dccp_invalid_packet: P.Data Offset(0) too small [ 120.293627][ T6463] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 120.355033][ T6463] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 120.543939][ T6474] syzkaller0: refused to change device tx_queue_len [ 121.145714][ T6505] macsec0: left promiscuous mode [ 121.181722][ T6505] macsec0: left allmulticast mode [ 121.272838][ T5120] Bluetooth: hci5: command 0x0419 tx timeout [ 121.375868][ T6509] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 121.502438][ T6509] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 121.555150][ T6525] veth2: entered allmulticast mode [ 121.597234][ T6528] syzkaller1: entered promiscuous mode [ 121.603129][ T6528] syzkaller1: entered allmulticast mode [ 122.567184][ T6567] __nla_validate_parse: 16 callbacks suppressed [ 122.567208][ T6567] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.789115][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 122.820056][ T6575] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 122.838304][ T6575] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.144363][ T6591] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.189223][ T6593] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.231758][ T6593] Bluetooth: MGMT ver 1.22 [ 123.542143][ T6604] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.445520][ T5122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.455842][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.464916][ T5122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.478916][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.490350][ T5122] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 124.498005][ T5122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.909122][ T6630] chnl_net:caif_netlink_parms(): no params data found [ 125.262786][ T5120] Bluetooth: hci0: command tx timeout [ 125.307482][ T6630] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.340205][ T6630] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.371871][ T6630] bridge_slave_0: entered allmulticast mode [ 125.388887][ T6630] bridge_slave_0: entered promiscuous mode [ 125.442861][ T6664] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 125.462576][ T6664] vlan2: entered promiscuous mode [ 125.485863][ T6671] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.509424][ T6630] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.526669][ T6630] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.534662][ T6630] bridge_slave_1: entered allmulticast mode [ 125.542813][ T6630] bridge_slave_1: entered promiscuous mode [ 125.658988][ T6630] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.706654][ T6630] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 125.821698][ T6681] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 125.851744][ T6681] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 125.873028][ T6680] team0: entered promiscuous mode [ 125.880665][ T6680] team_slave_0: entered promiscuous mode [ 125.893920][ T6680] team_slave_1: entered promiscuous mode [ 125.909018][ T6680] dummy0: entered promiscuous mode [ 125.927803][ T6680] team0: left promiscuous mode [ 125.936593][ T6680] team_slave_0: left promiscuous mode [ 125.943090][ T6680] team_slave_1: left promiscuous mode [ 125.948904][ T6680] dummy0: left promiscuous mode [ 126.001741][ T6630] team0: Port device team_slave_0 added [ 126.025307][ T6630] team0: Port device team_slave_1 added [ 126.167629][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.189224][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.273166][ T6701] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 126.277032][ T6630] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.314298][ T6703] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.326929][ T6630] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.338101][ T6630] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.364856][ T6630] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.459048][ T1054] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.514319][ T6710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.542693][ T5120] Bluetooth: hci1: command tx timeout [ 126.563660][ T6703] wg2: entered promiscuous mode [ 126.575345][ T6703] wg2: entered allmulticast mode [ 126.655669][ T1054] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.821258][ T1054] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.841754][ T6716] bridge0: entered allmulticast mode [ 126.860444][ T6630] hsr_slave_0: entered promiscuous mode [ 126.879153][ T6630] hsr_slave_1: entered promiscuous mode [ 126.889043][ T6630] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 126.908975][ T6630] Cannot create hsr debugfs directory [ 127.014741][ T1054] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 127.286186][ T6741] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 127.484811][ T1054] bridge_slave_1: left allmulticast mode [ 127.490531][ T1054] bridge_slave_1: left promiscuous mode [ 127.512767][ T1054] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.539503][ T1054] bridge_slave_0: left allmulticast mode [ 127.556409][ T1054] bridge_slave_0: left promiscuous mode [ 127.566049][ T1054] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.045450][ T1054] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 128.062116][ T1054] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 128.075138][ T1054] bond0 (unregistering): Released all slaves [ 128.089927][ T6748] __nla_validate_parse: 2 callbacks suppressed [ 128.089950][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 128.176540][ T1054] ɶƣ0GC¦: left promiscuous mode [ 128.303299][ T6758] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.368282][ T1054] tipc: Left network mode [ 128.525923][ T6768] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.632890][ T5120] Bluetooth: hci1: command tx timeout [ 128.748781][ T6779] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.829838][ T1054] hsr_slave_0: left promiscuous mode [ 128.875376][ T1054] hsr_slave_1: left promiscuous mode [ 128.893032][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.902104][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.917520][ T1054] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.931471][ T1054] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.968445][ T1054] veth1_macvtap: left promiscuous mode [ 128.977592][ T1054] veth0_macvtap: left promiscuous mode [ 128.987527][ T1054] veth1_vlan: left promiscuous mode [ 128.995673][ T1054] veth0_vlan: left promiscuous mode [ 129.221895][ T1054] team0 (unregistering): Port device macvlan2 removed [ 129.648137][ T1054] team0 (unregistering): Port device team_slave_1 removed [ 129.714641][ T1054] team0 (unregistering): Port device team_slave_0 removed [ 130.151428][ T6781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.341591][ T6630] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.406660][ T6630] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.447426][ T6630] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.494116][ T6630] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.541817][ T6801] veth1_macvtap: left promiscuous mode [ 130.568103][ T6801] macsec0: entered promiscuous mode [ 130.704814][ T5122] Bluetooth: hci1: command tx timeout [ 130.990989][ T6630] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.075137][ T6630] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.114779][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.122056][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.168065][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.175446][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.393518][ T6832] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.648163][ T6843] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.659571][ T6843] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 131.709383][ T6630] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.873773][ T6850] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.193138][ T6630] veth0_vlan: entered promiscuous mode [ 132.208158][ T6630] veth1_vlan: entered promiscuous mode [ 132.255051][ T6630] veth0_macvtap: entered promiscuous mode [ 132.272187][ T6630] veth1_macvtap: entered promiscuous mode [ 132.295667][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.311828][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.321883][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.336345][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.346527][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.379865][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.400882][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.421533][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.433945][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.451653][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.465571][ T6630] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.487124][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.552396][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.565685][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.588842][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.608059][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.619080][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.636118][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.647570][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.658724][ T6630] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.670299][ T6630] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.684210][ T6630] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.753444][ T6630] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.767789][ T6630] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.778839][ T6630] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.783073][ T5122] Bluetooth: hci1: command tx timeout [ 132.789046][ T6630] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.813785][ T6875] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.039563][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.071355][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.143669][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.157600][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.270341][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.284387][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.524337][ T6901] Cannot find add_set index 0 as target [ 133.685537][ T6906] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.785940][ T6912] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 133.926306][ T29] audit: type=1804 audit(1717638012.059:6): pid=6912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2592265086/syzkaller.EaMGnc/2/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 134.078524][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.120192][ T6920] vlan0: entered promiscuous mode [ 134.139828][ T6920] bond0: entered promiscuous mode [ 134.156312][ T6920] bond_slave_0: entered promiscuous mode [ 134.196267][ T6920] bond_slave_1: entered promiscuous mode [ 134.228607][ T6920] bond0: left promiscuous mode [ 134.237709][ T6920] bond_slave_0: left promiscuous mode [ 134.249046][ T6920] bond_slave_1: left promiscuous mode [ 134.633296][ T6946] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.646018][ T6940] Cannot find add_set index 0 as target [ 134.809075][ T6955] Bluetooth: MGMT ver 1.22 [ 134.822640][ T6955] Bluetooth: hci3: too big key_count value 7943 [ 135.350807][ T6981] Cannot find add_set index 0 as target [ 135.716063][ T7000] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.724256][ T7000] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.731045][ T7000] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.737605][ T7000] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.744235][ T7000] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.750735][ T7000] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.757369][ T7000] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.763898][ T7000] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.770475][ T7000] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 135.777005][ T7000] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 135.797474][ T7004] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.186675][ T7022] xt_HMARK: spi-set and port-set can't be combined [ 136.665618][ T7043] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.094343][ T7063] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.118753][ T7063] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 137.147954][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.401310][ T7074] delete_channel: no stack [ 137.520831][ T7083] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 138.153544][ T7109] delete_channel: no stack [ 138.464781][ T7116] sctp: [Deprecated]: syz-executor.0 (pid 7116) Use of int in max_burst socket option deprecated. [ 138.464781][ T7116] Use struct sctp_assoc_value instead [ 138.726654][ T7134] tipc: Failed to obtain node identity [ 138.747271][ T7134] tipc: Enabling of bearer rejected, failed to enable media [ 138.960867][ T7144] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.476567][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 139.491959][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 139.515292][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 139.525506][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 139.535944][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 139.545778][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 139.564091][ T11] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.798485][ T11] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.837260][ T7169] sctp: [Deprecated]: syz-executor.4 (pid 7169) Use of int in max_burst socket option deprecated. [ 139.837260][ T7169] Use struct sctp_assoc_value instead [ 139.999685][ T11] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.092481][ T7190] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.134617][ T7177] can: request_module (can-proto-0) failed. [ 140.158542][ T7192] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 140.257600][ T11] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.293167][ T7197] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.316988][ T7197] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 140.336834][ T7199] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 140.682613][ T11] bridge_slave_1: left allmulticast mode [ 140.688334][ T11] bridge_slave_1: left promiscuous mode [ 140.695027][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.708625][ T11] bridge_slave_0: left allmulticast mode [ 140.714838][ T11] bridge_slave_0: left promiscuous mode [ 140.720719][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.243336][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 141.258024][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 141.270249][ T11] bond0 (unregistering): Released all slaves [ 141.289350][ T7217] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 141.418057][ T11] tipc: Left network mode [ 141.439370][ T7160] chnl_net:caif_netlink_parms(): no params data found [ 141.569247][ T7233] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 7 (only 8 groups) [ 141.584433][ T5122] Bluetooth: hci0: command tx timeout [ 141.693914][ T7160] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.702116][ T7160] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.711285][ T7160] bridge_slave_0: entered allmulticast mode [ 141.719476][ T7160] bridge_slave_0: entered promiscuous mode [ 141.732216][ T7160] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.740636][ T7160] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.750502][ T7160] bridge_slave_1: entered allmulticast mode [ 141.758749][ T7160] bridge_slave_1: entered promiscuous mode [ 141.856746][ T7160] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 141.901942][ T7160] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.977772][ T11] hsr_slave_0: left promiscuous mode [ 141.992635][ T11] hsr_slave_1: left promiscuous mode [ 142.005682][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 142.020279][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 142.031981][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.053240][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.121117][ T11] veth1_macvtap: left promiscuous mode [ 142.129679][ T11] veth0_macvtap: left promiscuous mode [ 142.138411][ T11] veth1_vlan: left promiscuous mode [ 142.145196][ T11] veth0_vlan: left promiscuous mode [ 142.248968][ T7257] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.278533][ T7257] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 142.300884][ T7257] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 142.321541][ T7257] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 142.332198][ T7257] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.848907][ T11] team0 (unregistering): Port device team_slave_1 removed [ 142.914428][ T11] team0 (unregistering): Port device team_slave_0 removed [ 143.471565][ T7160] team0: Port device team_slave_0 added [ 143.568092][ T7269] net_ratelimit: 47 callbacks suppressed [ 143.568114][ T7269] team_slave_1: mtu greater than device maximum [ 143.604994][ T7269] team0: Device team_slave_1 failed to change mtu [ 143.616865][ T7160] team0: Port device team_slave_1 added [ 143.672941][ T5122] Bluetooth: hci0: command tx timeout [ 143.864069][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 143.871168][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 143.972672][ T7160] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.029302][ T7160] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.067174][ T7160] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.134620][ T7160] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.200423][ T7285] macvlan2: entered allmulticast mode [ 144.294550][ T7294] bond0: entered promiscuous mode [ 144.303899][ T7294] bond_slave_0: entered promiscuous mode [ 144.324925][ T7294] bond_slave_1: entered promiscuous mode [ 144.528462][ T7160] hsr_slave_0: entered promiscuous mode [ 144.549009][ T7160] hsr_slave_1: entered promiscuous mode [ 144.572682][ T7160] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.584047][ T7160] Cannot create hsr debugfs directory [ 144.778194][ T7301] syz-executor.2[7301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.778364][ T7301] syz-executor.2[7301] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 144.816095][ T7301] xt_CT: You must specify a L4 protocol and not use inversions on it [ 145.086656][ T7310] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 145.282865][ T7325] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 145.621911][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.753667][ T5122] Bluetooth: hci0: command tx timeout [ 145.821590][ T7160] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 145.835618][ T7160] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 145.859428][ T7160] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 145.907695][ T7160] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 146.182826][ T7160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.294385][ T7160] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.316072][ T4872] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.323320][ T4872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.394354][ T4872] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.401565][ T4872] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.556472][ T7160] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 146.946800][ T7393] Bluetooth: MGMT ver 1.22 [ 147.035381][ T7160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.158031][ T7160] veth0_vlan: entered promiscuous mode [ 147.200531][ T7160] veth1_vlan: entered promiscuous mode [ 147.244217][ T7160] veth0_macvtap: entered promiscuous mode [ 147.270162][ T7160] veth1_macvtap: entered promiscuous mode [ 147.320573][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.338054][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.359062][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.370030][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.382791][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.398147][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.408675][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.419712][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.430632][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 147.447144][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.460128][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 147.491589][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.516914][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.537931][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.554419][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.571030][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.592494][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.605136][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.619291][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.632560][ T7160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 147.644346][ T7160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 147.657302][ T7160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 147.675980][ T7160] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.690215][ T7160] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.700369][ T7160] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.710575][ T7160] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.823418][ T5122] Bluetooth: hci0: command tx timeout [ 147.934903][ T6279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.962581][ T6279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.025866][ T1054] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 148.034579][ T1054] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.043711][ T7426] GUP no longer grows the stack in syz-executor.0 (7426): 20006000-2000a000 (20005000) [ 148.089812][ T7426] CPU: 0 PID: 7426 Comm: syz-executor.0 Not tainted 6.10.0-rc1-syzkaller-00179-gf8f0de9d58d9 #0 [ 148.100310][ T7426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 148.110417][ T7426] Call Trace: [ 148.113733][ T7426] [ 148.116702][ T7426] dump_stack_lvl+0x241/0x360 [ 148.121438][ T7426] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.126686][ T7426] ? __pfx__printk+0x10/0x10 [ 148.131319][ T7426] ? find_vma+0xf9/0x170 [ 148.132054][ T7429] sctp: [Deprecated]: syz-executor.4 (pid 7429) Use of int in maxseg socket option. [ 148.132054][ T7429] Use struct sctp_assoc_value instead [ 148.135613][ T7426] __get_user_pages+0x10e3/0x1590 [ 148.135746][ T7426] ? __gup_longterm_locked+0x1ec9/0x2a80 [ 148.135781][ T7426] ? __pfx___get_user_pages+0x10/0x10 [ 148.166786][ T7426] ? __lock_acquire+0x1346/0x1fd0 [ 148.171866][ T7426] __gup_longterm_locked+0x1ff6/0x2a80 [ 148.177405][ T7426] ? __pfx___gup_longterm_locked+0x10/0x10 [ 148.183240][ T7426] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 148.189262][ T7426] ? sanity_check_pinned_pages+0x12bb/0x13c0 [ 148.195278][ T7426] gup_fast_fallback+0x2732/0x2b40 [ 148.200439][ T7426] ? __pfx_gup_fast_fallback+0x10/0x10 [ 148.206003][ T7426] ? __pfx_validate_chain+0x10/0x10 [ 148.211222][ T7426] ? unwind_get_return_address+0x91/0xc0 [ 148.216876][ T7426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.222968][ T7426] ? arch_stack_walk+0x16d/0x1b0 [ 148.227960][ T7426] ? __lock_acquire+0x1346/0x1fd0 [ 148.233008][ T7426] ? is_valid_gup_args+0x124/0x200 [ 148.238146][ T7426] pin_user_pages_fast+0xcc/0x160 [ 148.243185][ T7426] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 148.248838][ T7426] iov_iter_extract_pages+0x3db/0x720 [ 148.254243][ T7426] bio_iov_iter_get_pages+0x541/0x1930 [ 148.259730][ T7426] ? bio_associate_blkg+0x6c/0x230 [ 148.264868][ T7426] ? bio_associate_blkg_from_css+0xb0c/0xc70 [ 148.270872][ T7426] ? bio_associate_blkg_from_css+0xa4/0xc70 [ 148.276790][ T7426] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 148.282711][ T7426] ? bio_alloc_bioset+0x6d7/0x1130 [ 148.287845][ T7426] iomap_dio_bio_iter+0xc8e/0x1670 [ 148.293004][ T7426] __iomap_dio_rw+0x1295/0x2370 [ 148.297872][ T7426] ? do_syscall_64+0xf3/0x230 [ 148.302568][ T7426] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.308697][ T7426] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 148.314800][ T7426] ? __pfx___iomap_dio_rw+0x10/0x10 [ 148.320125][ T7426] ? jbd2_journal_stop+0x902/0xd80 [ 148.325268][ T7426] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 148.330746][ T7426] ? __pfx_ext4_orphan_add+0x10/0x10 [ 148.336066][ T7426] iomap_dio_rw+0x46/0xa0 [ 148.340430][ T7426] ext4_file_write_iter+0x15e5/0x1a10 [ 148.345843][ T7426] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 148.351585][ T7426] vfs_write+0xa72/0xc90 [ 148.355852][ T7426] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 148.361585][ T7426] ? __pfx_vfs_write+0x10/0x10 [ 148.366403][ T7426] ? do_futex+0x33b/0x560 [ 148.370761][ T7426] ksys_write+0x1a0/0x2c0 [ 148.375112][ T7426] ? __pfx_ksys_write+0x10/0x10 [ 148.380242][ T7426] ? do_syscall_64+0x100/0x230 [ 148.385026][ T7426] ? do_syscall_64+0xb6/0x230 [ 148.389720][ T7426] do_syscall_64+0xf3/0x230 [ 148.394239][ T7426] ? clear_bhb_loop+0x35/0x90 [ 148.398936][ T7426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.404877][ T7426] RIP: 0033:0x7f11cda7cf69 [ 148.409307][ T7426] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 148.429019][ T7426] RSP: 002b:00007f11cd5ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.437561][ T7426] RAX: ffffffffffffffda RBX: 00007f11cdbb3f80 RCX: 00007f11cda7cf69 [ 148.445547][ T7426] RDX: 0000000000043400 RSI: 0000000020000200 RDI: 0000000000000006 [ 148.453526][ T7426] RBP: 00007f11cdada6fe R08: 0000000000000000 R09: 0000000000000000 [ 148.461502][ T7426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.469485][ T7426] R13: 000000000000000b R14: 00007f11cdbb3f80 R15: 00007ffc5d1ec568 [ 148.477571][ T7426] [ 148.694213][ T7440] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 148.705493][ T7440] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.827844][ T7438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.844139][ T7441] sctp: [Deprecated]: syz-executor.0 (pid 7441) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.844139][ T7441] Use struct sctp_sack_info instead [ 149.058959][ T7446] veth0_vlan: left promiscuous mode [ 150.300749][ T7495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.119318][ T7520] veth0_vlan: left promiscuous mode [ 152.225040][ T7559] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 152.237106][ T7559] batman_adv: batadv0: Adding interface: wlan0 [ 152.269540][ T7559] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.308357][ T7559] batman_adv: batadv0: Interface activated: wlan0 [ 152.318138][ T7566] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.466961][ T7575] delete_channel: no stack [ 153.373828][ T7610] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 153.412267][ T7610] ipvlan2: entered promiscuous mode [ 153.454238][ T7610] ipvlan2: entered allmulticast mode [ 153.757400][ T7633] veth0_vlan: entered allmulticast mode [ 154.269150][ T7655] delete_channel: no stack [ 154.877806][ T7673] syzkaller0: entered allmulticast mode [ 155.234374][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.259999][ T7689] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.694362][ T29] audit: type=1804 audit(1717638033.829:7): pid=7703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir96392225/syzkaller.MnZZ5l/15/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 156.270492][ T7714] delete_channel: no stack [ 156.317165][ T7715] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 156.396756][ T7720] siw: device registration error -23 [ 156.749523][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 156.830807][ T7735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 156.869938][ T7735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 157.245277][ T7754] unknown channel width for channel at 907000KHz? [ 157.662249][ T29] audit: type=1804 audit(1717638035.789:8): pid=7783 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1366804247/syzkaller.l5l3B2/191/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 157.692415][ T7784] delete_channel: no stack [ 157.799302][ T7788] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 157.981985][ T7798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 158.401713][ T7817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.447033][ T7824] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 158.460897][ T7817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.488106][ T7817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 158.508930][ T7826] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 158.518849][ T7826] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 158.530973][ T7826] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 158.942847][ T5122] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 158.951607][ T5122] Bluetooth: hci0: command 0x0c1a tx timeout [ 159.191565][ T29] audit: type=1804 audit(1717638037.319:9): pid=7845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1366804247/syzkaller.l5l3B2/194/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 159.845226][ T7877] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 160.326799][ T7898] xt_TCPMSS: Only works on TCP SYN packets [ 160.350230][ T7900] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.450912][ T7900] bridge3: port 1(gretap1) entered blocking state [ 160.478402][ T7900] bridge3: port 1(gretap1) entered disabled state [ 160.499279][ T7900] gretap1: entered allmulticast mode [ 160.538801][ T7897] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 160.551312][ T7900] gretap1: entered promiscuous mode [ 160.624820][ T7897] File: /root/syzkaller-testdir2592265086/syzkaller.EaMGnc/83/memory.events PID: 7897 Comm: syz-executor.4 [ 160.730064][ T7913] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 160.842241][ T7914] bridge2: port 1(gretap1) entered blocking state [ 160.856446][ T7914] bridge2: port 1(gretap1) entered disabled state [ 160.869288][ T7914] gretap1: entered allmulticast mode [ 160.885173][ T7914] gretap1: entered promiscuous mode [ 160.991189][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.235267][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.383581][ T7945] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 161.473921][ T7945] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.950081][ T7975] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 162.051290][ T7979] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 162.577746][ T8006] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 162.737444][ T8006] bridge1: port 1(gretap1) entered blocking state [ 162.755037][ T8006] bridge1: port 1(gretap1) entered disabled state [ 162.762017][ T8006] gretap1: entered allmulticast mode [ 162.794010][ T8006] gretap1: entered promiscuous mode [ 163.414058][ T8042] ieee802154 phy0 wpan0: encryption failed: -22 [ 163.556527][ T8046] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 163.725441][ T8057] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 164.085352][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.221583][ T8075] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.546203][ T8097] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 164.695436][ T8100] xt_TCPMSS: Only works on TCP SYN packets [ 164.713691][ T8103] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.118714][ T8113] ieee802154 phy0 wpan0: encryption failed: -22 [ 165.558600][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.930060][ T8199] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 167.170910][ T8214] MD5 Hash not found for [fe80::bb].0->[ff02::1].20002 [FS]L3 index 0 [ 167.181363][ T8215] Cannot find map_set index 0 as target [ 167.659361][ T8237] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.671908][ T8237] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.015587][ T8255] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 168.245356][ T8263] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 168.605001][ T8277] TCP: Unexpected MD5 Hash found for [fe88::3].0->[fe80::aa].20002 [S] [ 168.751032][ T8280] pimreg: entered allmulticast mode [ 169.018363][ T8298] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 169.636267][ T8323] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.671760][ T8323] mac80211_hwsim hwsim21 wlan1: entered promiscuous mode [ 170.040647][ T8331] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.102670][ T8336] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.121678][ T8334] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 170.134277][ T8336] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.166815][ T8337] x_tables: duplicate underflow at hook 1 [ 170.170683][ T8336] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.240663][ T8336] skbuff: bad partial csum: csum=65489/0 headroom=64 headlen=65491 [ 171.058354][ T8363] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.271978][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.437078][ T8377] vxcan1: tx drop: invalid sa for name 0x000000000000003f [ 171.513956][ T8385] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 171.542275][ T8385] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 172.666018][ T8414] batadv0: entered promiscuous mode [ 172.962230][ T8429] netlink: 'syz-executor.2': attribute type 24 has an invalid length. [ 173.016661][ T8432] netlink: 'syz-executor.2': attribute type 24 has an invalid length. [ 173.123989][ T8428] netlink: 'syz-executor.2': attribute type 322 has an invalid length. [ 173.623227][ T8453] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.667247][ T8454] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 174.169612][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.190718][ T8464] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 175.063934][ T8492] ipvlan2: entered promiscuous mode [ 175.069444][ T8492] ipvlan2: entered allmulticast mode [ 175.092592][ T8492] bond0: entered allmulticast mode [ 175.097930][ T8492] bond_slave_0: entered allmulticast mode [ 175.119223][ T8492] bond_slave_1: entered allmulticast mode [ 175.130560][ T8492] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 175.150078][ T8492] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 175.211846][ T8497] netlink: 576 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.455158][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.483753][ T8508] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.848865][ T8525] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.158726][ T8539] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.799104][ T8558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.836419][ T8558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.732830][ T8595] dccp_invalid_packet: pskb_may_pull failed [ 178.043445][ T8608] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.084759][ T8608] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.570467][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.661918][ T8631] bridge_slave_0 (unregistering): left allmulticast mode [ 178.675799][ T8631] bridge_slave_0 (unregistering): left promiscuous mode [ 178.685888][ T8631] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.747804][ T8630] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.773610][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.802569][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.121993][ T8659] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 179.370336][ T8671] ieee802154 phy0 wpan0: encryption failed: -90 [ 179.436835][ T8674] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 179.834681][ T8694] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 [SP.]L3 index 0 [ 180.130801][ T8713] vlan0: entered promiscuous mode [ 180.136568][ T8713] bond0: entered promiscuous mode [ 180.141892][ T8713] bond_slave_0: entered promiscuous mode [ 180.149933][ T8713] bond_slave_1: entered promiscuous mode [ 180.161331][ T8717] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 180.165031][ T8713] vlan0: entered allmulticast mode [ 180.186122][ T8713] bond0: entered allmulticast mode [ 180.191408][ T8713] bond_slave_0: entered allmulticast mode [ 180.202674][ T8713] bond_slave_1: entered allmulticast mode [ 180.218628][ T8713] bond0: left allmulticast mode [ 180.226839][ T8713] bond_slave_0: left allmulticast mode [ 180.241075][ T8713] bond_slave_1: left allmulticast mode [ 180.247738][ T8722] tipc: Failed to remove unknown binding: 66,1,1/0:3060094793/3060094795 [ 180.252501][ T8713] bond0: left promiscuous mode [ 180.261753][ T8713] bond_slave_0: left promiscuous mode [ 180.268208][ T8713] bond_slave_1: left promiscuous mode [ 180.277204][ T8722] tipc: Failed to remove unknown binding: 66,1,1/0:3060094793/3060094795 [ 180.460224][ T8727] raw_sendmsg: syz-executor.4 forgot to set AF_INET. Fix it! [ 180.577158][ T8736] __nla_validate_parse: 2 callbacks suppressed [ 180.577180][ T8736] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.603690][ T8736] bridge_slave_1: left allmulticast mode [ 180.609662][ T8736] bridge_slave_1: left promiscuous mode [ 180.620512][ T8736] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.651358][ T8735] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 180.862037][ T8748] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.880784][ T8748] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 180.915911][ T8751] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.975498][ T8751] 8021q: adding VLAN 0 to HW filter on device bond2 [ 181.015727][ T8751] bond0: (slave bond2): Enslaving as an active interface with an up link [ 181.101614][ T8761] Cannot find add_set index 0 as target [ 181.223034][ T8767] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.250688][ T8766] Bluetooth: hci3: unsupported parameter 64512 [ 181.266719][ T8766] Bluetooth: hci3: invalid len left 4, exp >= 133 [ 181.459358][ T8776] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 181.850374][ T8799] netlink: 542 bytes leftover after parsing attributes in process `syz-executor.2'. [ 182.097799][ T8809] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.110927][ T8812] nftables ruleset with unbound chain [ 182.249494][ T8821] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.381468][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.443467][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 183.790425][ T8889] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 183.898377][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 185.048646][ T8928] vlan0: entered promiscuous mode [ 185.058987][ T8928] bridge0: entered promiscuous mode [ 185.072603][ T8928] vlan0: entered allmulticast mode [ 185.090728][ T8928] bridge0: left promiscuous mode [ 185.305547][ T8943] geneve2: entered promiscuous mode [ 185.310984][ T8943] geneve2: entered allmulticast mode [ 185.330513][ T8940] netdevsim netdevsim4 netdevsim0: Caught tx_queue_len zero misconfig [ 185.605493][ T8958] __nla_validate_parse: 4 callbacks suppressed [ 185.605512][ T8958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.731462][ T8963] sock: sock_timestamping_bind_phc: sock not bind to device [ 185.757873][ T8963] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.076152][ T8978] geneve2: entered promiscuous mode [ 186.090512][ T8978] geneve2: entered allmulticast mode [ 186.318647][ T8985] netdevsim netdevsim2 netdevsim0: Caught tx_queue_len zero misconfig [ 186.371506][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.460868][ T8989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 187.030523][ C1] IPv4: Oversized IP packet from 127.0.0.1 [ 187.381708][ T9033] syz_tun: entered promiscuous mode [ 187.401392][ T9033] syz_tun: left promiscuous mode [ 187.937388][ T9049] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 187.950872][ T9049] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 187.976997][ T9049] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 188.133633][ T9061] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.230994][ T9063] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.536924][ T9071] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.552944][ T9071] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 188.561463][ T9071] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.747887][ T9075] vxcan0: Master is either lo or non-ether device [ 188.783428][ T9076] vxcan0: Master is either lo or non-ether device [ 188.821377][ T9075] x_tables: ip_tables: udp match: only valid for protocol 17 [ 188.984825][ T9089] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.463862][ T9109] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 189.474162][ T9109] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 189.484358][ T9109] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 189.789633][ T9122] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.330805][ T9144] sctp: [Deprecated]: syz-executor.4 (pid 9144) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.330805][ T9144] Use struct sctp_sack_info instead [ 190.713433][ T9151] __nla_validate_parse: 1 callbacks suppressed [ 190.713453][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.734280][ T9151] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.086723][ T9167] xt_TPROXY: Can be used only with -p tcp or -p udp [ 191.653074][ T9198] xt_NFQUEUE: number of total queues is 0 [ 192.451639][ T9220] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 192.460238][ T9220] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.836014][ T9229] xt_NFQUEUE: number of total queues is 0 [ 192.988323][ T9231] batadv0: entered promiscuous mode [ 193.016849][ T5122] Bluetooth: hci0: link tx timeout [ 193.023711][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.035861][ T5122] Bluetooth: hci0: link tx timeout [ 193.042119][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.052100][ T5122] Bluetooth: hci0: link tx timeout [ 193.057609][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.070153][ T5122] Bluetooth: hci0: link tx timeout [ 193.075758][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.083707][ T5122] Bluetooth: hci0: link tx timeout [ 193.089161][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.098390][ T5122] Bluetooth: hci0: link tx timeout [ 193.103730][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.111521][ T5122] Bluetooth: hci0: link tx timeout [ 193.116835][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.125890][ T5122] Bluetooth: hci0: link tx timeout [ 193.131454][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.139511][ T5122] Bluetooth: hci0: link tx timeout [ 193.145007][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.156749][ T5122] Bluetooth: hci0: link tx timeout [ 193.162088][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.170313][ T5122] Bluetooth: hci0: link tx timeout [ 193.175696][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.183750][ T5122] Bluetooth: hci0: link tx timeout [ 193.189195][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.197079][ T5122] Bluetooth: hci0: link tx timeout [ 193.202236][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.211225][ T5122] Bluetooth: hci0: link tx timeout [ 193.216445][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.224230][ T5122] Bluetooth: hci0: link tx timeout [ 193.229366][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.237771][ T5122] Bluetooth: hci0: link tx timeout [ 193.243037][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.250735][ T5122] Bluetooth: hci0: link tx timeout [ 193.257461][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.884795][ T9265] xt_NFQUEUE: number of total queues is 0 [ 193.900670][ T9267] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.975661][ T9271] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.017540][ T9274] delete_channel: no stack [ 194.101633][ T9277] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 194.121603][ T25] IPVS: starting estimator thread 0... [ 194.132831][ T9277] IPVS: nq: SCTP 172.20.20.170:0 - no destination available [ 194.232753][ T9280] IPVS: using max 18 ests per chain, 43200 per kthread [ 194.328709][ T9285] batadv0: entered promiscuous mode [ 194.372597][ T5122] Bluetooth: hci0: link tx timeout [ 194.377864][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.387386][ T5122] Bluetooth: hci0: link tx timeout [ 194.392789][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.400588][ T5122] Bluetooth: hci0: link tx timeout [ 194.407135][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.415265][ T5122] Bluetooth: hci0: link tx timeout [ 194.420503][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.429571][ T5122] Bluetooth: hci0: link tx timeout [ 194.434867][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.442773][ T5122] Bluetooth: hci0: link tx timeout [ 194.448016][ T5122] Bluetooth: hci0: killing stalled connection 11:aa:aa:aa:aa:aa [ 194.566665][ T9291] tap0: tun_chr_ioctl cmd 2147767507 [ 194.713671][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.720076][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.101264][ T9307] dccp_invalid_packet: pskb_may_pull failed [ 195.107586][ T5129] Bluetooth: hci0: command 0x0c1a tx timeout [ 195.316771][ T9320] syzkaller1: entered promiscuous mode [ 195.322282][ T9320] syzkaller1: entered allmulticast mode [ 195.467347][ T9324] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.586094][ T9332] delete_channel: no stack [ 195.947080][ T9340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.118225][ T9343] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 196.311737][ T9349] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 196.385945][ T9351] syzkaller1: entered promiscuous mode [ 196.391593][ T9351] syzkaller1: entered allmulticast mode [ 196.623734][ T6282] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 196.723868][ T9358] delete_channel: no stack [ 196.785115][ T5120] Bluetooth: hci3: command 0x0406 tx timeout [ 196.785162][ T5129] Bluetooth: hci4: command 0x0406 tx timeout [ 196.791173][ T5120] Bluetooth: hci2: command 0x0406 tx timeout [ 196.917809][ T9366] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.085472][ T9372] ɶƣ0GC¦: entered promiscuous mode [ 197.341014][ T9382] syzkaller1: entered promiscuous mode [ 197.349182][ T9382] syzkaller1: entered allmulticast mode [ 197.547450][ T9391] delete_channel: no stack [ 197.663440][ T9390] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.174697][ T9408] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.476215][ T9414] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.508970][ T9414] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.143278][ T9447] delete_channel: no stack [ 199.333655][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.855655][ T9476] delete_channel: no stack [ 200.157621][ T9479] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.086194][ T9510] delete_channel: no stack [ 202.452206][ T9550] netlink: zone id is out of range [ 202.718962][ T9555] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.762524][ T9555] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.479355][ T9596] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 204.492853][ T9599] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.817972][ T9615] xt_TPROXY: Can be used only with -p tcp or -p udp [ 204.863379][ T5127] Bluetooth: hci0: command 0x0c1a tx timeout [ 205.288282][ T9627] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.350268][ T9629] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 205.822451][ T9642] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 206.488536][ T9671] netlink: 75 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.743057][ T9679] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.105422][ T9733] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 208.138774][ T9733] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.175355][ T9733] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 208.643375][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 209.070691][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:2. Sending cookies. [ 209.298787][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 210.002107][ T9832] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 210.686829][ T9857] syzkaller0: entered promiscuous mode [ 210.692716][ T9857] syzkaller0: entered allmulticast mode [ 210.923137][ T9871] sctp: [Deprecated]: syz-executor.0 (pid 9871) Use of struct sctp_assoc_value in delayed_ack socket option. [ 210.923137][ T9871] Use struct sctp_sack_info instead [ 213.021978][ T9896] tun0: tun_chr_ioctl cmd 1074025692 [ 213.086978][ T9900] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.100049][ T9898] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.233779][ T6272] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.279679][ T9902] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.401548][ T6272] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.440066][ T9904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.452382][ T9904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.486957][ T9904] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 213.696274][ T6272] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.899858][ T6272] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.996831][ T9914] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 214.180952][ T5127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 214.195189][ T5127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 214.204106][ T5127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 214.222707][ T5127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 214.235044][ T5127] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 214.243760][ T5127] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 214.344699][ T6272] bridge_slave_0: left allmulticast mode [ 214.359054][ T6272] bridge_slave_0: left promiscuous mode [ 214.371930][ T6272] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.141236][ T6272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.157712][ T6272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.171396][ T6272] bond0 (unregistering): (slave bond2): Releasing backup interface [ 215.180943][ T6272] bond0 (unregistering): Released all slaves [ 215.210899][ T6272] bond1 (unregistering): Released all slaves [ 215.332130][ T6272] bond2 (unregistering): Released all slaves [ 215.368581][ T9922] batman_adv: batadv0: Interface deactivated: wlan0 [ 215.484987][ T9922] batman_adv: batadv0: Removing interface: wlan0 [ 216.004773][ T6272] hsr_slave_0: left promiscuous mode [ 216.030424][ T6272] hsr_slave_1: left promiscuous mode [ 216.043735][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.051449][ T6272] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.076760][ T6272] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.088163][ T6272] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.139072][ T6272] veth1_macvtap: left promiscuous mode [ 216.149408][ T6272] veth0_macvtap: left promiscuous mode [ 216.156693][ T6272] veth1_vlan: left promiscuous mode [ 216.304578][ T5122] Bluetooth: hci1: command tx timeout [ 216.729640][ T6272] team0 (unregistering): Port device team_slave_1 removed [ 216.778306][ T6272] team0 (unregistering): Port device team_slave_0 removed [ 217.444623][ T9950] dccp_invalid_packet: pskb_may_pull failed [ 217.499396][ T9915] chnl_net:caif_netlink_parms(): no params data found [ 217.691264][ T9955] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 217.864246][ T9915] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.873743][ T9915] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.881052][ T9915] bridge_slave_0: entered allmulticast mode [ 217.903648][ T9915] bridge_slave_0: entered promiscuous mode [ 217.969258][ T9915] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.996315][ T6272] IPVS: stop unused estimator thread 0... [ 218.003281][ T9915] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.023268][ T9915] bridge_slave_1: entered allmulticast mode [ 218.032542][ T9915] bridge_slave_1: entered promiscuous mode [ 218.159930][ T9915] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.183217][ T9915] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.236966][ T9982] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 218.250126][ T9978] openvswitch: netlink: Unknown nsh attribute 0 [ 218.250539][ T9982] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.295198][ T9978] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.339473][ T9915] team0: Port device team_slave_0 added [ 218.393461][ T5122] Bluetooth: hci1: command tx timeout [ 218.505124][ T9915] team0: Port device team_slave_1 added [ 218.629773][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.662591][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.731062][ T9915] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.748332][ T9997] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.833412][ T9915] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.840432][ T9915] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.902377][ T9915] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 219.067420][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.086637][T10007] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.187577][ T9915] hsr_slave_0: entered promiscuous mode [ 219.215046][ T9915] hsr_slave_1: entered promiscuous mode [ 219.231262][ T9915] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.255494][ T9915] Cannot create hsr debugfs directory [ 220.055374][T10024] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 220.274480][ T5127] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 220.289561][ T5127] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 220.308830][ T5127] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 220.344475][T10034] ieee802154 phy0 wpan0: encryption failed: -22 [ 220.344579][ T5120] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 220.375181][ T5120] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 220.390698][ T5120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 220.475535][ T5120] Bluetooth: hci1: command tx timeout [ 221.015704][T10052] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 221.029192][T10052] bond0: (slave netdevsim0): Releasing backup interface [ 221.040375][T10052] netdevsim netdevsim0 netdevsim0: left allmulticast mode [ 221.055514][T10052] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 221.068877][T10052] team0: Failed to send options change via netlink (err -105) [ 221.093902][T10052] team0: Port device netdevsim0 added [ 221.116886][T10031] chnl_net:caif_netlink_parms(): no params data found [ 221.262997][ T9915] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 221.339833][ T9915] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.394981][ T9915] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.417372][ T9915] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.530193][T10031] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.538142][T10031] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.545885][T10031] bridge_slave_0: entered allmulticast mode [ 221.554831][T10031] bridge_slave_0: entered promiscuous mode [ 221.625078][T10031] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.641283][T10031] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.649352][T10031] bridge_slave_1: entered allmulticast mode [ 221.658183][T10031] bridge_slave_1: entered promiscuous mode [ 221.750346][T10031] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.765249][T10031] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 221.917813][T10031] team0: Port device team_slave_0 added [ 221.936467][T10031] team0: Port device team_slave_1 added [ 222.047195][T10031] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.062975][T10031] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.113444][T10031] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.145046][T10031] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.152126][T10031] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.191063][T10031] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.419414][ T9915] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.462687][ T5120] Bluetooth: hci6: command tx timeout [ 222.487126][T10081] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.542883][ T5120] Bluetooth: hci1: command tx timeout [ 222.591176][T10031] hsr_slave_0: entered promiscuous mode [ 222.633287][T10031] hsr_slave_1: entered promiscuous mode [ 222.658870][T10031] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.675269][T10031] Cannot create hsr debugfs directory [ 222.790967][ T9915] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.904630][T10093] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 223.014309][T10098] syzkaller1: entered promiscuous mode [ 223.020283][T10098] syzkaller1: entered allmulticast mode [ 223.050616][ T5171] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.057944][ T5171] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.072948][ T5171] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.080220][ T5171] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.477527][T10031] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.520122][T10105] netlink: 'syz-executor.0': attribute type 26 has an invalid length. [ 223.686308][T10031] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 223.750265][T10109] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 223.787031][T10109] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 223.822723][T10109] team0: Failed to send options change via netlink (err -105) [ 223.831693][T10109] team0: Port device netdevsim0 added [ 223.937931][T10031] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.236961][T10031] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.543119][ T5120] Bluetooth: hci6: command tx timeout [ 224.565306][ T9915] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.707507][T10146] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 224.778048][T10031] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.838766][T10031] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.870029][T10031] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 224.919760][T10149] syzkaller1: entered promiscuous mode [ 224.933308][T10149] syzkaller1: entered allmulticast mode [ 224.969460][T10031] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 225.077355][T10155] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.225785][T10157] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 225.270961][T10157] netlink: 80220 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.496683][ T9915] veth0_vlan: entered promiscuous mode [ 225.580647][T10031] 8021q: adding VLAN 0 to HW filter on device bond0 [ 225.601469][ T9915] veth1_vlan: entered promiscuous mode [ 225.700969][T10031] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.748326][ T9915] veth0_macvtap: entered promiscuous mode [ 225.786186][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.793545][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 225.869145][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.876425][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.915377][ T9915] veth1_macvtap: entered promiscuous mode [ 226.040456][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.058731][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.088188][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.122588][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.146253][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.162916][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.179603][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.194937][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.207031][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.256214][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.289640][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.302109][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.342875][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.372725][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.392520][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.412455][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.440771][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.451512][ T9915] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.482402][ T9915] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.500950][ T9915] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.544638][ T9915] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.576102][ T9915] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.602402][ T9915] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.611175][ T9915] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.622831][ T5120] Bluetooth: hci6: command tx timeout [ 226.661347][T10181] tipc: Started in network mode [ 226.671606][T10181] tipc: Node identity , cluster identity 4711 [ 226.686462][T10181] tipc: Failed to set node id, please configure manually [ 226.701678][T10181] tipc: Enabling of bearer rejected, failed to enable media [ 226.946116][T10202] syzkaller1: entered promiscuous mode [ 226.953173][T10202] syzkaller1: entered allmulticast mode [ 227.035147][ T6279] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.067380][ T6279] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.143942][ T6268] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 227.162635][T10031] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.162671][ T6268] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 227.425249][T10031] veth0_vlan: entered promiscuous mode [ 227.463931][T10031] veth1_vlan: entered promiscuous mode [ 227.535797][T10031] veth0_macvtap: entered promiscuous mode [ 227.551764][T10031] veth1_macvtap: entered promiscuous mode [ 227.594001][T10031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.610686][T10031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.644080][T10031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.662984][T10031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.692610][T10031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.712458][T10031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.734464][T10031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.754616][T10031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.782389][T10031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 227.793286][T10031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 227.806339][T10031] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.012219][ T6268] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.065735][T10031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.086536][T10031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.127258][T10031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.163976][T10031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.194817][T10031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.207064][T10031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.225396][T10031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.236544][T10031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.246661][T10031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.257611][T10031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.268252][T10031] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 228.280022][T10031] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.292852][T10031] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 228.395917][ T6268] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.483455][T10031] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.503510][T10031] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.513699][T10031] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.522742][T10031] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 228.597892][ T6268] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.636392][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 228.702610][ T5120] Bluetooth: hci6: command tx timeout [ 228.758731][T10241] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 228.778112][ T6268] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.953765][ T6277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 228.977936][ T6277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 228.989376][ T5122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 229.002035][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 229.018925][ T5122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 229.033060][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 229.041253][ T5122] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 229.049323][ T5122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 229.201487][ T6268] bridge_slave_1: left allmulticast mode [ 229.210292][ T6268] bridge_slave_1: left promiscuous mode [ 229.216793][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.233416][ T6268] bridge_slave_0: left allmulticast mode [ 229.239238][ T6268] bridge_slave_0: left promiscuous mode [ 229.246304][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.820900][ T6268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 229.838047][ T6268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 229.851259][ T6268] bond0 (unregistering): Released all slaves [ 229.866569][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 229.897470][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.596234][ T6268] hsr_slave_0: left promiscuous mode [ 230.649244][ T6268] hsr_slave_1: left promiscuous mode [ 230.683477][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.713878][ T6268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.760905][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.799168][ T6268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.911649][ T6268] veth1_macvtap: left promiscuous mode [ 230.933755][ T6268] veth0_macvtap: left promiscuous mode [ 230.955635][ T6268] veth1_vlan: left promiscuous mode [ 230.977269][ T6268] veth0_vlan: left promiscuous mode [ 231.114270][ T5122] Bluetooth: hci1: command tx timeout [ 231.469972][ T5120] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 231.479285][ T5120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 231.489038][ T5120] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 231.503675][ T5120] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 231.511944][ T5120] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 231.519656][ T5120] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 231.937121][ T6268] team0 (unregistering): Port device team_slave_1 removed [ 231.982388][ T6268] team0 (unregistering): Port device team_slave_0 removed [ 232.615636][T10243] chnl_net:caif_netlink_parms(): no params data found [ 232.657392][T10313] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 232.711589][T10316] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.726350][T10313] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 232.749576][T10313] team0: Failed to send options change via netlink (err -105) [ 232.758868][T10313] team0: Port device netdevsim0 added [ 233.176317][T10243] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.184571][ T5120] Bluetooth: hci1: command tx timeout [ 233.200839][T10243] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.211817][T10243] bridge_slave_0: entered allmulticast mode [ 233.219671][T10243] bridge_slave_0: entered promiscuous mode [ 233.238306][T10243] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.246277][T10243] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.253759][T10243] bridge_slave_1: entered allmulticast mode [ 233.261299][T10243] bridge_slave_1: entered promiscuous mode [ 233.341212][T10243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.394329][T10243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.468259][T10243] team0: Port device team_slave_0 added [ 233.482087][T10243] team0: Port device team_slave_1 added [ 233.594817][ T5120] Bluetooth: hci4: command tx timeout [ 233.661255][T10243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.691380][T10243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.725046][T10243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.738018][T10310] chnl_net:caif_netlink_parms(): no params data found [ 233.853869][ T6268] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.903391][T10243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.911808][T10243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.938487][T10243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.126721][ T6268] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.340227][ T6268] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.363830][T10243] hsr_slave_0: entered promiscuous mode [ 234.371008][T10243] hsr_slave_1: entered promiscuous mode [ 234.380302][T10243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.405745][T10243] Cannot create hsr debugfs directory [ 234.423943][T10310] bridge0: port 1(bridge_slave_0) entered blocking state [ 234.431135][T10310] bridge0: port 1(bridge_slave_0) entered disabled state [ 234.447196][T10310] bridge_slave_0: entered allmulticast mode [ 234.458169][T10310] bridge_slave_0: entered promiscuous mode [ 234.587432][ T6268] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.649451][T10310] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.657406][T10310] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.665096][T10310] bridge_slave_1: entered allmulticast mode [ 234.678043][T10310] bridge_slave_1: entered promiscuous mode [ 235.268339][ T5120] Bluetooth: hci1: command tx timeout [ 235.667338][ T5120] Bluetooth: hci4: command tx timeout [ 236.824396][T10366] sock: sock_timestamping_bind_phc: sock not bind to device [ 236.856918][T10310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 236.909321][T10310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 237.094682][T10310] team0: Port device team_slave_0 added [ 237.115866][T10310] team0: Port device team_slave_1 added [ 237.252227][ T6268] hsr0: left allmulticast mode [ 237.265274][ T6268] hsr_slave_0: left allmulticast mode [ 237.270875][ T6268] hsr_slave_1: left allmulticast mode [ 237.277055][ T6268] hsr0: left promiscuous mode [ 237.282779][ T6268] bridge0: port 3(hsr0) entered disabled state [ 237.301335][ T6268] bridge_slave_1: left allmulticast mode [ 237.307409][ T6268] bridge_slave_1: left promiscuous mode [ 237.316705][ T6268] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.336318][ T6268] bridge_slave_0: left allmulticast mode [ 237.343657][ T5120] Bluetooth: hci1: command tx timeout [ 237.362063][ T6268] bridge_slave_0: left promiscuous mode [ 237.368129][ T6268] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.396225][ T6268] gretap1: left allmulticast mode [ 237.401333][ T6268] gretap1: left promiscuous mode [ 237.406842][ T6268] bridge3: port 1(gretap1) entered disabled state [ 237.747703][ T5120] Bluetooth: hci5: command 0x0419 tx timeout [ 237.749121][ T5127] Bluetooth: hci4: command tx timeout [ 238.200917][ T6268] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.216664][ T6268] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 238.230369][ T6268] bond0 (unregistering): Released all slaves [ 238.245607][ T6268] bond1 (unregistering): Released all slaves [ 238.258719][T10310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 238.266322][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.297990][T10310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 238.317594][T10310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 238.332351][T10310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 238.367939][T10310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 238.498417][ T6268] tipc: Left network mode [ 238.644716][T10391] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.746391][T10310] hsr_slave_0: entered promiscuous mode [ 238.760652][T10310] hsr_slave_1: entered promiscuous mode [ 238.768544][T10310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 238.776724][T10310] Cannot create hsr debugfs directory [ 238.930249][T10398] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.946363][T10398] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 238.955970][T10398] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.998624][T10400] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 239.007012][T10400] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.061532][T10398] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 239.178174][T10400] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 239.514199][ T6268] hsr_slave_0: left promiscuous mode [ 239.550005][ T6268] hsr_slave_1: left promiscuous mode [ 239.564294][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 239.573859][ T6268] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 239.591205][ T6268] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 239.598985][ T6268] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 239.675218][ T6268] veth0_macvtap: left promiscuous mode [ 239.693959][ T6268] veth1_vlan: left promiscuous mode [ 239.822435][ T5122] Bluetooth: hci4: command tx timeout [ 240.339094][ T6268] team0 (unregistering): Port device team_slave_1 removed [ 240.398811][ T6268] team0 (unregistering): Port device team_slave_0 removed [ 240.740624][ T6268] team0 (unregistering): Port device dummy0 removed [ 241.135110][T10243] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 241.230250][T10439] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147483648 (only 8 groups) [ 241.241997][T10243] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 241.263302][T10243] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 241.330803][T10243] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 241.609211][T10243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 241.721684][T10243] 8021q: adding VLAN 0 to HW filter on device team0 [ 241.785607][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.792856][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 241.884379][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.891563][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 241.905464][T10456] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.931516][T10456] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.153959][T10460] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 242.185259][T10460] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.221542][T10310] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 242.259181][T10310] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 242.314288][T10310] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 242.351953][T10310] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 242.531040][ T5127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 242.541614][ T5127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 242.554280][ T5127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 242.576071][ T5127] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 242.585152][ T5127] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 242.596771][ T5127] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 242.980746][T10310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.998976][T10243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.151739][T10310] 8021q: adding VLAN 0 to HW filter on device team0 [ 243.238967][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.246270][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.277527][T10495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.308429][T10468] chnl_net:caif_netlink_parms(): no params data found [ 243.358541][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.365793][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.676841][T10468] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.684329][T10468] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.694088][T10468] bridge_slave_0: entered allmulticast mode [ 243.701677][T10468] bridge_slave_0: entered promiscuous mode [ 243.767625][T10310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 243.791104][T10468] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.798832][T10468] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.807532][T10468] bridge_slave_1: entered allmulticast mode [ 243.815696][T10468] bridge_slave_1: entered promiscuous mode [ 243.846254][T10243] veth0_vlan: entered promiscuous mode [ 243.944716][T10468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.961138][T10468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.087397][T10468] team0: Port device team_slave_0 added [ 244.099746][T10243] veth1_vlan: entered promiscuous mode [ 244.115121][T10468] team0: Port device team_slave_1 added [ 244.158170][T10468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.165484][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.193295][T10468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.231592][T10468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.239037][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.268123][T10468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.290580][T10310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.407234][T10468] hsr_slave_0: entered promiscuous mode [ 244.424116][T10468] hsr_slave_1: entered promiscuous mode [ 244.433176][T10243] veth0_macvtap: entered promiscuous mode [ 244.446823][T10243] veth1_macvtap: entered promiscuous mode [ 244.691413][T10243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.702775][ T5127] Bluetooth: hci0: command tx timeout [ 244.717774][T10243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.728377][T10243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.739197][T10243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.749979][T10243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.767512][T10243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.778854][T10243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.792090][T10243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.804401][T10243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.879388][T10243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.890491][T10243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.901712][T10243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.915251][T10243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.925388][T10243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.936124][T10243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.946627][T10243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.957242][T10243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.968289][T10243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 244.979190][T10243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.991766][T10243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.081681][T10468] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.112275][T10243] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.129373][T10243] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.139823][T10243] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.149098][T10243] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.189963][T10468] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.235132][T10536] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 245.261294][T10536] batman_adv: batadv0: Adding interface: team0 [ 245.286637][T10536] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.312107][T10536] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 245.391453][T10468] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.411438][T10535] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 245.419893][T10535] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.430139][T10535] team0: entered promiscuous mode [ 245.436588][T10535] team_slave_0: entered promiscuous mode [ 245.447770][T10535] team_slave_1: entered promiscuous mode [ 245.454310][T10535] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 245.464981][T10535] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.482820][T10535] batman_adv: batadv0: Interface activated: team0 [ 245.502850][T10535] batman_adv: batadv0: Interface deactivated: team0 [ 245.522133][T10535] batman_adv: batadv0: Removing interface: team0 [ 245.531240][T10535] bridge0: port 3(team0) entered blocking state [ 245.538775][T10535] bridge0: port 3(team0) entered disabled state [ 245.547316][T10535] team0: entered allmulticast mode [ 245.554014][T10535] team_slave_0: entered allmulticast mode [ 245.559905][T10535] team_slave_1: entered allmulticast mode [ 245.565956][T10535] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 245.577476][T10535] bridge0: port 3(team0) entered blocking state [ 245.584964][T10535] bridge0: port 3(team0) entered forwarding state [ 245.662214][T10468] team0: Port device netdevsim0 removed [ 245.684086][T10468] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 245.719888][T10310] veth0_vlan: entered promiscuous mode [ 245.795674][T10310] veth1_vlan: entered promiscuous mode [ 245.962180][ T6272] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 245.982125][T10310] veth0_macvtap: entered promiscuous mode [ 245.989252][ T6272] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 245.999520][T10310] veth1_macvtap: entered promiscuous mode [ 246.068709][ T6275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.102342][ T6275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.114761][T10468] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 246.149820][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.169191][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.180237][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.205211][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.216407][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.227737][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.239095][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.250826][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.260915][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.271611][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.287410][T10310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 246.310608][T10468] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 246.336684][T10468] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 246.359333][T10468] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 246.385480][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.396570][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.408975][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.420350][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.430330][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.441224][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.451230][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.461804][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.473503][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.484786][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.494690][T10310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 246.508695][T10310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.520422][T10310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 246.621894][T10310] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.641617][T10310] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.652500][T10310] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.661249][T10310] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.783840][ T5127] Bluetooth: hci0: command tx timeout [ 246.936162][ T6275] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.089858][ T6268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.124201][ T6268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.177107][ T6275] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.413719][ T6275] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.508436][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.542591][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.549550][T10468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 247.709928][ T6275] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 247.777934][T10468] 8021q: adding VLAN 0 to HW filter on device team0 [ 247.842943][ T4872] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.850111][ T4872] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.899186][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.906464][ T5240] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.920775][ T5122] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.942627][ T5122] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.962534][ T5122] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.975602][ T5122] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.984585][ T5122] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 247.992260][ T5122] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 248.022042][T10588] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 248.225059][T10595] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 248.325125][ T6275] bridge_slave_1: left allmulticast mode [ 248.339761][ T6275] bridge_slave_1: left promiscuous mode [ 248.356544][ T6275] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.380811][ T6275] bridge_slave_0: left allmulticast mode [ 248.389215][ T6275] bridge_slave_0: left promiscuous mode [ 248.396499][ T6275] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.865006][ T5127] Bluetooth: hci0: command tx timeout [ 249.101747][ T6275] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 249.117641][ T6275] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 249.130270][ T6275] bond0 (unregistering): Released all slaves [ 249.813352][ T6275] hsr_slave_0: left promiscuous mode [ 249.838424][ T6275] hsr_slave_1: left promiscuous mode [ 249.906699][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 249.917224][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 249.949040][ T6275] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 249.978000][ T6275] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 250.035405][ T6275] veth1_macvtap: left promiscuous mode [ 250.041022][ T6275] veth0_macvtap: left promiscuous mode [ 250.061842][ T6275] veth1_vlan: left promiscuous mode [ 250.067738][ T5127] Bluetooth: hci1: command tx timeout [ 250.085119][ T6275] veth0_vlan: left promiscuous mode [ 250.883409][ T6275] team0 (unregistering): Port device team_slave_1 removed [ 250.934157][ T6275] team0 (unregistering): Port device team_slave_0 removed [ 250.942915][ T5127] Bluetooth: hci0: command tx timeout [ 251.479831][T10627] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 251.493895][T10627] geneve0: entered promiscuous mode [ 251.528728][T10627] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 251.602448][T10585] chnl_net:caif_netlink_parms(): no params data found [ 251.646031][T10468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 252.011578][T10585] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.030288][T10585] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.083628][T10585] bridge_slave_0: entered allmulticast mode [ 252.118398][T10585] bridge_slave_0: entered promiscuous mode [ 252.142708][ T5127] Bluetooth: hci1: command tx timeout [ 252.191148][T10585] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.198911][T10585] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.206655][T10585] bridge_slave_1: entered allmulticast mode [ 252.214638][T10585] bridge_slave_1: entered promiscuous mode [ 252.395978][T10585] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 252.422464][T10685] geneve1: entered promiscuous mode [ 252.458562][T10585] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 252.511032][T10468] veth0_vlan: entered promiscuous mode [ 252.565517][T10692] dccp_invalid_packet: pskb_may_pull failed [ 252.610713][T10585] team0: Port device team_slave_0 added [ 252.620191][T10685] geneve1: left promiscuous mode [ 252.697914][T10585] team0: Port device team_slave_1 added [ 252.813685][T10468] veth1_vlan: entered promiscuous mode [ 252.841273][T10585] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.854281][T10585] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.891787][T10585] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.940435][T10585] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.951899][T10585] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.997928][T10585] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.233596][T10585] hsr_slave_0: entered promiscuous mode [ 253.241918][T10585] hsr_slave_1: entered promiscuous mode [ 253.253535][T10585] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.263197][T10585] Cannot create hsr debugfs directory [ 253.486092][T10715] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.516006][T10468] veth0_macvtap: entered promiscuous mode [ 253.559322][T10468] veth1_macvtap: entered promiscuous mode [ 253.688527][T10721] dccp_invalid_packet: pskb_may_pull failed [ 253.988500][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.033697][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.045456][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.065619][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.088770][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.111391][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.129820][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.141556][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.163756][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 254.184409][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.205461][T10468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 254.223408][ T5127] Bluetooth: hci1: command tx timeout [ 254.316202][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.328364][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.342381][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.363348][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.377061][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.415034][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.434336][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.479351][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.498022][T10747] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.504564][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.512866][T10747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.519625][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.556534][T10750] dccp_invalid_packet: pskb_may_pull failed [ 254.562809][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 254.580897][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 254.623037][T10468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 254.687307][T10754] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.699543][T10754] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.716990][T10468] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.740103][T10468] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.751768][T10468] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.761238][T10757] dccp_invalid_packet: pskb_may_pull failed [ 254.768670][T10468] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 254.998531][ T6277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.025351][ T6277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.077288][T10585] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 255.097706][ T6275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 255.099009][T10585] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 255.110847][ T6275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 255.145723][T10762] netem: unknown loss type 3 [ 255.150983][T10762] netem: change failed [ 255.173499][T10585] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 255.200859][T10762] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 255.224175][T10585] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 255.456966][T10585] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.520706][T10585] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.539201][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.546662][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.724629][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.731840][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.999842][T10786] dccp_invalid_packet: pskb_may_pull failed [ 256.083307][T10789] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.149655][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.156325][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.195655][T10789] pim6reg: entered allmulticast mode [ 256.211137][T10796] vxcan1: entered allmulticast mode [ 256.238186][T10798] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.292912][T10789] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 256.335072][ T5127] Bluetooth: hci1: command tx timeout [ 256.443345][T10585] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.160045][T10585] veth0_vlan: entered promiscuous mode [ 257.192723][T10830] dccp_invalid_packet: pskb_may_pull failed [ 257.210553][T10585] veth1_vlan: entered promiscuous mode [ 257.355956][T10585] veth0_macvtap: entered promiscuous mode [ 257.409879][T10585] veth1_macvtap: entered promiscuous mode [ 257.494661][T10841] netem: unknown loss type 3 [ 257.514710][T10841] netem: change failed [ 257.539534][T10841] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.757958][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.792729][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.830328][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.853011][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.877686][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.913741][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.951388][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.975606][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 257.997573][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.021268][T10856] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 258.023803][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.049154][T10856] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 258.086105][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.116694][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.147705][T10585] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.404091][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.433609][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.449921][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.469864][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.493205][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.514327][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.538616][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.549446][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.561564][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.594112][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.614126][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.638828][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.663417][T10585] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.685175][T10585] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.719304][T10585] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.763900][T10585] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.798433][T10585] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.819118][T10585] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.830395][T10585] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.231078][ T6277] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.275963][ T6277] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.321116][T10884] dccp_invalid_packet: pskb_may_pull failed [ 259.525250][ T6275] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.559831][ T6275] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.708427][T10894] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 259.755784][T10892] ------------[ cut here ]------------ [ 259.761754][T10892] WARNING: CPU: 1 PID: 10892 at kernel/workqueue.c:2281 __queue_work+0xc5e/0xee0 [ 259.770946][T10892] Modules linked in: [ 259.774991][T10892] CPU: 1 PID: 10892 Comm: syz-executor.1 Not tainted 6.10.0-rc1-syzkaller-00179-gf8f0de9d58d9 #0 [ 259.785530][T10892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 259.795632][T10892] RIP: 0010:__queue_work+0xc5e/0xee0 2024/06/06 01:42:17 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 259.800967][T10892] Code: ff e8 46 83 36 00 90 0f 0b 90 e9 20 fd ff ff e8 38 83 36 00 eb 13 e8 31 83 36 00 eb 0c e8 2a 83 36 00 eb 05 e8 23 83 36 00 90 <0f> 0b 90 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 259.820656][T10892] RSP: 0018:ffffc900031ff4b0 EFLAGS: 00010087 [ 259.826775][T10892] RAX: ffffffff815f934f RBX: ffff888058859e00 RCX: 0000000000040000 [ 259.834821][T10892] RDX: ffffc90009519000 RSI: 000000000002d2ae RDI: 000000000002d2af [ 259.842839][T10892] RBP: 0000000000000000 R08: ffffffff815f8823 R09: 0000000000000000 [ 259.851288][T10892] R10: ffffc900031ff580 R11: fffff5200063feb1 R12: ffff88805ea049c0 [ 259.859305][T10892] R13: dffffc0000000000 R14: ffff88805ea04800 R15: 0000000000000008 [ 259.867313][T10892] FS: 00007fa1366966c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 259.876259][T10892] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 259.882869][T10892] CR2: 00007fd78ae9ed58 CR3: 0000000024dd6000 CR4: 00000000003506f0 [ 259.890871][T10892] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 259.898875][T10892] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 259.906959][T10892] Call Trace: [ 259.910360][T10892] [ 259.913419][T10892] ? __warn+0x163/0x4e0 [ 259.917634][T10892] ? __queue_work+0xc5e/0xee0 [ 259.922342][T10892] ? report_bug+0x2b3/0x500 [ 259.926888][T10892] ? __queue_work+0xc5e/0xee0 [ 259.931618][T10892] ? handle_bug+0x3e/0x70 [ 259.935966][T10892] ? exc_invalid_op+0x1a/0x50 [ 259.940661][T10892] ? asm_exc_invalid_op+0x1a/0x20 [ 259.945715][T10892] ? __queue_work+0x123/0xee0 [ 259.950407][T10892] ? __queue_work+0xc4f/0xee0 [ 259.955101][T10892] ? __queue_work+0xc5e/0xee0 [ 259.959883][T10892] ? lockdep_hardirqs_on+0x99/0x150 [ 259.965206][T10892] queue_work_on+0x1c2/0x380 [ 259.969813][T10892] ? __pfx_queue_work_on+0x10/0x10 [ 259.974945][T10892] ? l2cap_do_send+0x155/0x2c0 [ 259.979734][T10892] l2cap_chan_send+0x3d6/0x2680 [ 259.984612][T10892] ? trace_contention_end+0x3c/0x120 [ 259.990114][T10892] ? __mutex_lock+0x2ef/0xd70 [ 259.994852][T10892] ? __pfx_l2cap_chan_send+0x10/0x10 [ 260.000181][T10892] ? do_raw_spin_unlock+0x13c/0x8b0 [ 260.005684][T10892] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 260.010756][T10892] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 260.016505][T10892] __sock_sendmsg+0x221/0x270 [ 260.021230][T10892] ____sys_sendmsg+0x525/0x7d0 [ 260.026049][T10892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.031401][T10892] ? __might_fault+0xaa/0x120 [ 260.036173][T10892] __sys_sendmmsg+0x3b2/0x740 [ 260.040876][T10892] ? __pfx___sys_sendmmsg+0x10/0x10 [ 260.046137][T10892] ? __pfx___might_resched+0x10/0x10 [ 260.051440][T10892] ? __might_fault+0xaa/0x120 [ 260.056144][T10892] ? __pfx_lock_release+0x10/0x10 [ 260.061184][T10892] ? do_futex+0x33b/0x560 [ 260.065544][T10892] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 260.071658][T10892] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 260.077759][T10892] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 260.084120][T10892] ? do_syscall_64+0x100/0x230 [ 260.088910][T10892] __x64_sys_sendmmsg+0xa0/0xb0 [ 260.093777][T10892] do_syscall_64+0xf3/0x230 [ 260.098295][T10892] ? clear_bhb_loop+0x35/0x90 [ 260.102988][T10892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.108902][T10892] RIP: 0033:0x7fa13587cf69 [ 260.113330][T10892] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 260.132972][T10892] RSP: 002b:00007fa1366960c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 260.141433][T10892] RAX: ffffffffffffffda RBX: 00007fa1359b3f80 RCX: 00007fa13587cf69 [ 260.149422][T10892] RDX: 00000000ffffff80 RSI: 0000000020004100 RDI: 0000000000000004 [ 260.157426][T10892] RBP: 00007fa1358da6fe R08: 0000000000000000 R09: 0000000000000000 [ 260.165421][T10892] R10: 0000000000010040 R11: 0000000000000246 R12: 0000000000000000 [ 260.173401][T10892] R13: 000000000000000b R14: 00007fa1359b3f80 R15: 00007ffc4fda4d98 [ 260.181399][T10892] [ 260.184429][T10892] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 260.191712][T10892] CPU: 1 PID: 10892 Comm: syz-executor.1 Not tainted 6.10.0-rc1-syzkaller-00179-gf8f0de9d58d9 #0 [ 260.202310][T10892] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 260.212389][T10892] Call Trace: [ 260.215678][T10892] [ 260.218616][T10892] dump_stack_lvl+0x241/0x360 [ 260.223315][T10892] ? __pfx_dump_stack_lvl+0x10/0x10 [ 260.228546][T10892] ? __pfx__printk+0x10/0x10 [ 260.233206][T10892] ? _printk+0xd5/0x120 [ 260.237399][T10892] ? vscnprintf+0x5d/0x90 [ 260.241747][T10892] panic+0x349/0x860 [ 260.245667][T10892] ? __warn+0x172/0x4e0 [ 260.249849][T10892] ? __pfx_panic+0x10/0x10 [ 260.254273][T10892] ? show_trace_log_lvl+0x4e6/0x520 [ 260.259529][T10892] __warn+0x346/0x4e0 [ 260.263544][T10892] ? __queue_work+0xc5e/0xee0 [ 260.268247][T10892] report_bug+0x2b3/0x500 [ 260.272591][T10892] ? __queue_work+0xc5e/0xee0 [ 260.277291][T10892] handle_bug+0x3e/0x70 [ 260.281461][T10892] exc_invalid_op+0x1a/0x50 [ 260.286072][T10892] asm_exc_invalid_op+0x1a/0x20 [ 260.290949][T10892] RIP: 0010:__queue_work+0xc5e/0xee0 [ 260.296340][T10892] Code: ff e8 46 83 36 00 90 0f 0b 90 e9 20 fd ff ff e8 38 83 36 00 eb 13 e8 31 83 36 00 eb 0c e8 2a 83 36 00 eb 05 e8 23 83 36 00 90 <0f> 0b 90 48 83 c4 58 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 260.316238][T10892] RSP: 0018:ffffc900031ff4b0 EFLAGS: 00010087 [ 260.322409][T10892] RAX: ffffffff815f934f RBX: ffff888058859e00 RCX: 0000000000040000 [ 260.330471][T10892] RDX: ffffc90009519000 RSI: 000000000002d2ae RDI: 000000000002d2af [ 260.338457][T10892] RBP: 0000000000000000 R08: ffffffff815f8823 R09: 0000000000000000 [ 260.346457][T10892] R10: ffffc900031ff580 R11: fffff5200063feb1 R12: ffff88805ea049c0 [ 260.354527][T10892] R13: dffffc0000000000 R14: ffff88805ea04800 R15: 0000000000000008 [ 260.362521][T10892] ? __queue_work+0x123/0xee0 [ 260.367209][T10892] ? __queue_work+0xc4f/0xee0 [ 260.371904][T10892] ? lockdep_hardirqs_on+0x99/0x150 [ 260.377119][T10892] queue_work_on+0x1c2/0x380 [ 260.381724][T10892] ? __pfx_queue_work_on+0x10/0x10 [ 260.386883][T10892] ? l2cap_do_send+0x155/0x2c0 [ 260.391668][T10892] l2cap_chan_send+0x3d6/0x2680 [ 260.396546][T10892] ? trace_contention_end+0x3c/0x120 [ 260.401845][T10892] ? __mutex_lock+0x2ef/0xd70 [ 260.406545][T10892] ? __pfx_l2cap_chan_send+0x10/0x10 [ 260.411851][T10892] ? do_raw_spin_unlock+0x13c/0x8b0 [ 260.417078][T10892] l2cap_sock_sendmsg+0x1b4/0x2c0 [ 260.422125][T10892] ? __pfx_l2cap_sock_sendmsg+0x10/0x10 [ 260.427688][T10892] __sock_sendmsg+0x221/0x270 [ 260.432391][T10892] ____sys_sendmsg+0x525/0x7d0 [ 260.437208][T10892] ? __pfx_____sys_sendmsg+0x10/0x10 [ 260.442529][T10892] ? __might_fault+0xaa/0x120 [ 260.447239][T10892] __sys_sendmmsg+0x3b2/0x740 [ 260.451932][T10892] ? __pfx___sys_sendmmsg+0x10/0x10 [ 260.457186][T10892] ? __pfx___might_resched+0x10/0x10 [ 260.462493][T10892] ? __might_fault+0xaa/0x120 [ 260.467203][T10892] ? __pfx_lock_release+0x10/0x10 [ 260.472241][T10892] ? do_futex+0x33b/0x560 [ 260.476589][T10892] ? __rseq_handle_notify_resume+0x353/0x14e0 [ 260.482690][T10892] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 260.489204][T10892] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 260.495551][T10892] ? do_syscall_64+0x100/0x230 [ 260.500333][T10892] __x64_sys_sendmmsg+0xa0/0xb0 [ 260.505197][T10892] do_syscall_64+0xf3/0x230 [ 260.509709][T10892] ? clear_bhb_loop+0x35/0x90 [ 260.514402][T10892] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 260.520331][T10892] RIP: 0033:0x7fa13587cf69 [ 260.524759][T10892] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 260.544394][T10892] RSP: 002b:00007fa1366960c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 260.552823][T10892] RAX: ffffffffffffffda RBX: 00007fa1359b3f80 RCX: 00007fa13587cf69 [ 260.560807][T10892] RDX: 00000000ffffff80 RSI: 0000000020004100 RDI: 0000000000000004 [ 260.568796][T10892] RBP: 00007fa1358da6fe R08: 0000000000000000 R09: 0000000000000000 [ 260.576786][T10892] R10: 0000000000010040 R11: 0000000000000246 R12: 0000000000000000 [ 260.584767][T10892] R13: 000000000000000b R14: 00007fa1359b3f80 R15: 00007ffc4fda4d98 [ 260.592769][T10892] [ 260.595924][T10892] Kernel Offset: disabled [ 260.600337][T10892] Rebooting in 86400 seconds..