last executing test programs: 1m15.143963906s ago: executing program 0: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[], 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf253100000008000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf253100000008000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @dev}, @dev}}) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="f10f0465b8c0a0b72cce909d2ff6935ae65e0564a0a6f64298a858f202bbd0070d9146074bf2c2c4e7916ac44a2abf3fb3c5d18d086bcc677568fdfc47b966ac398f409b412ee798f888418107f9d2fb0da4a4e3ea8496576e483b9c444056f7ec94f2e497971ab55e981bbd5dfbc98c2a8bbce608549f3d342bf324b88d9634987622262f2719e2e0b3ff544f34494fa2736f23b56a0407d0da1e2abfe7e3b4454e4cbcb482e7b7529b4b677c020def0dfcc81c4a", @ANYRES8=r2, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x0, 0x28, 0x0, 0x200, 0x400003}, 0xfffffffffffffcaa) socket(0x10, 0x0, 0x0) (async) socket(0x10, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000080000018000000140030801000018008000100000000f4030003800c"], 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000080000018000000140030801000018008000100000000f4030003800c"], 0x34}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_QUERY(0xa, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0xa, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x15, 0x0, 0x0, "701916572366"}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x15, 0x0, 0x0, "701916572366"}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="14010000310001000000000000000000010100800c000700000000000000000014000800fe8000000000000000000000000000bb50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126017dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe8101000000010000008b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4ee22bb82ce8f65842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd000000"], 0x114}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x2}}) 1m1.920645842s ago: executing program 0: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[], 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf253100000008000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf253100000008000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @dev}, @dev}}) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="f10f0465b8c0a0b72cce909d2ff6935ae65e0564a0a6f64298a858f202bbd0070d9146074bf2c2c4e7916ac44a2abf3fb3c5d18d086bcc677568fdfc47b966ac398f409b412ee798f888418107f9d2fb0da4a4e3ea8496576e483b9c444056f7ec94f2e497971ab55e981bbd5dfbc98c2a8bbce608549f3d342bf324b88d9634987622262f2719e2e0b3ff544f34494fa2736f23b56a0407d0da1e2abfe7e3b4454e4cbcb482e7b7529b4b677c020def0dfcc81c4a", @ANYRES8=r2, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x0, 0x28, 0x0, 0x200, 0x400003}, 0xfffffffffffffcaa) socket(0x10, 0x0, 0x0) (async) socket(0x10, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000080000018000000140030801000018008000100000000f4030003800c"], 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000080000018000000140030801000018008000100000000f4030003800c"], 0x34}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_QUERY(0xa, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0xa, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x15, 0x0, 0x0, "701916572366"}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x15, 0x0, 0x0, "701916572366"}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x2}}) 49.361081253s ago: executing program 0: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[], 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf253100000008000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf253100000008000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @dev}, @dev}}) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="f10f0465b8c0a0b72cce909d2ff6935ae65e0564a0a6f64298a858f202bbd0070d9146074bf2c2c4e7916ac44a2abf3fb3c5d18d086bcc677568fdfc47b966ac398f409b412ee798f888418107f9d2fb0da4a4e3ea8496576e483b9c444056f7ec94f2e497971ab55e981bbd5dfbc98c2a8bbce608549f3d342bf324b88d9634987622262f2719e2e0b3ff544f34494fa2736f23b56a0407d0da1e2abfe7e3b4454e4cbcb482e7b7529b4b677c020def0dfcc81c4a", @ANYRES8=r2, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x0, 0x28, 0x0, 0x200, 0x400003}, 0xfffffffffffffcaa) socket(0x10, 0x0, 0x0) (async) socket(0x10, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000080000018000000140030801000018008000100000000f4030003800c"], 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000080000018000000140030801000018008000100000000f4030003800c"], 0x34}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_QUERY(0xa, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0xa, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x15, 0x0, 0x0, "701916572366"}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x15, 0x0, 0x0, "701916572366"}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x2}}) 33.406509972s ago: executing program 0: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[], 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf253100000008000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf253100000008000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @dev}, @dev}}) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="f10f0465b8c0a0b72cce909d2ff6935ae65e0564a0a6f64298a858f202bbd0070d9146074bf2c2c4e7916ac44a2abf3fb3c5d18d086bcc677568fdfc47b966ac398f409b412ee798f888418107f9d2fb0da4a4e3ea8496576e483b9c444056f7ec94f2e497971ab55e981bbd5dfbc98c2a8bbce608549f3d342bf324b88d9634987622262f2719e2e0b3ff544f34494fa2736f23b56a0407d0da1e2abfe7e3b4454e4cbcb482e7b7529b4b677c020def0dfcc81c4a", @ANYRES8=r2, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x0, 0x28, 0x0, 0x200, 0x400003}, 0xfffffffffffffcaa) socket(0x10, 0x0, 0x0) (async) socket(0x10, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000080000018000000140030801000018008000100000000f4030003800c"], 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000080000018000000140030801000018008000100000000f4030003800c"], 0x34}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_QUERY(0xa, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0xa, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x15, 0x0, 0x0, "701916572366"}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x15, 0x0, 0x0, "701916572366"}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x2}}) 19.550979308s ago: executing program 0: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[], 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf253100000008000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf253100000008000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @dev}, @dev}}) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="f10f0465b8c0a0b72cce909d2ff6935ae65e0564a0a6f64298a858f202bbd0070d9146074bf2c2c4e7916ac44a2abf3fb3c5d18d086bcc677568fdfc47b966ac398f409b412ee798f888418107f9d2fb0da4a4e3ea8496576e483b9c444056f7ec94f2e497971ab55e981bbd5dfbc98c2a8bbce608549f3d342bf324b88d9634987622262f2719e2e0b3ff544f34494fa2736f23b56a0407d0da1e2abfe7e3b4454e4cbcb482e7b7529b4b677c020def0dfcc81c4a", @ANYRES8=r2, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x0, 0x28, 0x0, 0x200, 0x400003}, 0xfffffffffffffcaa) socket(0x10, 0x0, 0x0) (async) socket(0x10, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000080000018000000140030801000018008000100000000f4030003800c"], 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000080000018000000140030801000018008000100000000f4030003800c"], 0x34}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_QUERY(0xa, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0xa, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x15, 0x0, 0x0, "701916572366"}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x15, 0x0, 0x0, "701916572366"}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x2}}) 6.603085232s ago: executing program 0: sendmsg$IEEE802154_LLSEC_DEL_KEY(0xffffffffffffffff, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000780)=ANY=[], 0x34}}, 0x0) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf253100000008000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) (async) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="040028bd7000fbdbdf253100000008000200", @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB], 0x34}, 0x1, 0x0, 0x0, 0x40000}, 0x8041) r0 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6_vti0\x00', &(0x7f0000000000)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, @ipv4={'\x00', '\xff\xff', @dev}, @dev}}) socket$alg(0x26, 0x5, 0x0) (async) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={&(0x7f0000000e40)=ANY=[@ANYBLOB="f10f0465b8c0a0b72cce909d2ff6935ae65e0564a0a6f64298a858f202bbd0070d9146074bf2c2c4e7916ac44a2abf3fb3c5d18d086bcc677568fdfc47b966ac398f409b412ee798f888418107f9d2fb0da4a4e3ea8496576e483b9c444056f7ec94f2e497971ab55e981bbd5dfbc98c2a8bbce608549f3d342bf324b88d9634987622262f2719e2e0b3ff544f34494fa2736f23b56a0407d0da1e2abfe7e3b4454e4cbcb482e7b7529b4b677c020def0dfcc81c4a", @ANYRES8=r2, @ANYRES32=r0, @ANYRES8=r0, @ANYRES64, @ANYRESOCT=r1, @ANYRESOCT=r0], 0x0, 0x28, 0x0, 0x200, 0x400003}, 0xfffffffffffffcaa) socket(0x10, 0x0, 0x0) (async) socket(0x10, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, 0x0, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) connect$inet6(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MON_GET(0xffffffffffffffff, 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESHEX=r0], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffdb0, 0x0, 0x0, 0x10, 0x1}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='block_bio_remap\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='cgroup.kill\x00', 0x275a, 0x0) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000080000018000000140030801000018008000100000000f4030003800c"], 0x34}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_KEY(0xffffffffffffffff, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16, @ANYBLOB="0100000000000080000018000000140030801000018008000100000000f4030003800c"], 0x34}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) bpf$BPF_PROG_QUERY(0xa, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_QUERY(0xa, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x15, 0x0, 0x0, "701916572366"}}) (async) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x15, 0x0, 0x0, "701916572366"}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000340)) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x114}], 0x1}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000480)={'syztnl1\x00', 0x0, 0x2b, 0x0, 0x0, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x3, 0x2}}) 3.433698632s ago: executing program 4: r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0xe4}, 0x10) socketpair$unix(0x1, 0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000040), 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r2, 0x0, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000004a00010000000000000000000a0080"], 0x1c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000002c0)='sock_rcvqueue_full\x00', r3}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000200)={'ip6gre0\x00', 0x0, 0x4, 0x4, 0x1e, 0x5e80, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}, @loopback, 0x80, 0x80, 0x2, 0x9ea7}}) bind$packet(r4, &(0x7f0000000300)={0x11, 0x10, r5, 0x1, 0x6, 0x6, @broadcast}, 0x14) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r6, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8822d55593a2179}, 0xc) r7 = socket$inet6(0xa, 0x3, 0x2f) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@multicast1, 0x0, 0x6c}, 0x0, @in6=@empty, 0x0, 0x0, 0x0, 0x42}}, 0xe8) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) socket$inet(0x2, 0x4, 0x20) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f00000022c0)=@mangle={'mangle\x00', 0x1f, 0x6, 0x458, 0x290, 0x328, 0x328, 0x328, 0x1a8, 0x290, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @empty, 0x0, 0x0, 'batadv0\x00', 'netdevsim0\x00'}, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @ECN={0x28}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'ip_vti0\x00', 'nicvf0\x00'}, 0x0, 0xb8, 0xe8, 0x0, {}, [@common=@socket0={{0x20}}, @inet=@rpfilter={{0x28}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x0, 0x0, @remote}}}, {{@ip={@rand_addr, @multicast2, 0x0, 0x0, 'batadv_slave_1\x00', 'veth0_to_bridge\x00'}, 0x0, 0x70, 0x98}, @TTL={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4b8) socket$netlink(0x10, 0x3, 0x0) gettid() r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000c002b8008000100e3239dc29dc459", @ANYRES32=r9, @ANYBLOB], 0x2c}}, 0x0) 3.180797607s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0x0, 0x10, &(0x7f0000000080)=ANY=[], 0x0}, 0x90) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x4c, 0x0, "01deaba05ccc4fa00711be66bd584ecd190428efc9e569f4b222158b227692cebc00924f2deea371bafa061b8f2959b4b696b22e4881f40a0d8f4c2fdea78893bc2c160df3e41db4153cfd9221d01c79"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000480)={@in6={{0xa, 0x4e20, 0x5, @remote}}, 0x0, 0x0, 0x10, 0x0, "178a4bc4480f488e1fd71f0ecb1d0e10408d3a23b0ce93802a4ce190df4fde8e154950ff73dccc4822c4cc5deaffce06a86feb3ec1c6f0e6cd71ed961490cee0ae304f92759fa371e400"}, 0xd8) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000580)) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r3, 0x84, 0x22, &(0x7f0000000080), &(0x7f00000000c0)=0x10) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r4, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000080)=r1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000100), &(0x7f0000000180)=r1}, 0x20) close(r1) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r5}, &(0x7f0000000140), &(0x7f0000000280)=r1}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, 0x0, 0xda00) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000100)=0x5, 0x4a) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) listen(r0, 0x788b) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) openat$cgroup_ro(r4, &(0x7f0000000340)='memory.events.local\x00', 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_CAP_ACK(r8, 0x10e, 0xa, &(0x7f0000000380)=0x7, 0x4) connect$bt_l2cap(r7, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xa) 2.393572737s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x83, &(0x7f0000000080)={r1}, &(0x7f00000001c0)=0x8) 2.313921885s ago: executing program 4: r0 = accept4(0xffffffffffffffff, &(0x7f0000000000)=@isdn, &(0x7f0000000080)=0x80, 0x80000) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f0000000180)=@mpls_getroute={0x54, 0x1a, 0x4, 0x70bd27, 0x25dfdbfd, {0x1c, 0x80, 0x80, 0x1, 0xfd, 0x1, 0xc8, 0x1, 0x1400}, [@RTA_MULTIPATH={0xc, 0x9, {0x3, 0x1, 0xe6}}, @RTA_DST={0x8, 0x1, {0x7}}, @RTA_OIF={0x8, 0x4, r1}, @RTA_VIA={0x14, 0x12, {0x18, "e4ff853b014413eed25871c69cb5"}}, @RTA_OIF={0x8, 0x4, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x48010) setsockopt$MRT_DONE(r0, 0x0, 0xc9, 0x0, 0x0) read$alg(r0, &(0x7f0000000280)=""/226, 0xe2) pselect6(0x40, &(0x7f0000000380)={0x0, 0x0, 0x9327, 0x20, 0x8000, 0x80000000, 0xc1, 0x6}, &(0x7f00000003c0)={0x8, 0x0, 0x7fffffff, 0x8000000000000001, 0x20, 0x6, 0x3, 0x80}, &(0x7f0000000400)={0x8000000000000000, 0x100000000, 0x1, 0x71, 0x0, 0xf234, 0xffffffff00000001, 0x7}, &(0x7f0000000440)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000480)={[0x4]}, 0x8}) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000540), r0) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000640)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r3, 0x300, 0x70bd2d, 0x25dfdbff, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_vlan\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0xfff}]}, 0x44}, 0x1, 0x0, 0x0, 0x20008000}, 0x4008800) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000006c0)=@filter={'filter\x00', 0xe, 0x4, 0x3e8, 0xffffffff, 0x220, 0x120, 0x120, 0xffffffff, 0xffffffff, 0x318, 0x318, 0x318, 0xffffffff, 0x4, &(0x7f0000000680), {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @empty}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', [0xffffff00, 0xff000000, 0x0, 0xffffffff], [0xff, 0xff, 0xffffffff, 0xff], 'ipvlan0\x00', 'wg0\x00', {0xff}, {0xff}, 0x33, 0x80, 0x5, 0x64}, 0x0, 0xf0, 0x120, 0x0, {}, [@common=@dst={{0x48}, {0x1, 0x2, 0x0, [0x8, 0x7, 0x1, 0xffff, 0x9e7e, 0x4, 0x4, 0x0, 0x6, 0x2, 0x8, 0x1, 0x6, 0x3ae, 0x7], 0x1}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{0x0, 0x3, 0x5}, {0x0, 0x6, 0x4}, 0x287, 0x3}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, [0xff, 0xff, 0xffffff00, 0xff], [0x0, 0xff000000, 0xffffffff, 0xff], 'team_slave_1\x00', 'ip6tnl0\x00', {0xff}, {0xff}, 0x71, 0x0, 0x4}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x11da, 0x2], 0x1, 0x26, 0x2}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x7}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, @local, [0xff000000, 0xffffff00, 0xff, 0xffffff00], [0xffffff00, 0xffffff00], 'caif0\x00', 'veth1_to_bond\x00', {}, {}, 0x3a, 0xd, 0x2, 0x5a}, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"0590", 0x1}}]}, @common=@unspec=@CONNSECMARK={0x28, 'CONNSECMARK\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r4, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x2, 0x1, 0x201, 0x0, 0x0, {0x7, 0x0, 0x5}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x1004}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40800}, 0x800) getsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000c40)={{{@in=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@loopback}}, &(0x7f0000000d40)=0xe8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000e00)={0xffffffffffffffff, 0x58, &(0x7f0000000d80)={0x0, 0x0}}, 0x10) r7 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e40)={r6, 0x7fff, 0x10}, 0xc) vmsplice(r7, &(0x7f0000002440)=[{&(0x7f0000000e80)="3bd7cab6cdfe32e5aef7ecf753feaa2e1d4e02836c8d1f457ed96a659e992d84ec83e9ccb430e79efe6211a9113d2ab7978376803db3e5464470ac83c55073e5a19df54f0b7520467a771f57b42d122fda23db57e363da6e0c7f86e5921cb3e18d276662a47817547da81dd6cc68b5b532c90f3619d6b546499b180673fbd49dac29f45236525c353098ef1a8345d3690eadf3c263d0823285be41924a4856af8e62aeabdf08c9412b5d2925a97158d89137d860bea2a10ea2ac9de8ce4d25f4cb5a96e97630e151ddcffefa82115336c9a783", 0xd3}, {&(0x7f0000000f80)="39950f3e39453d925fa5c515fc735591cab35a70afb62bda99ae8c723192f639e9b2f1489e8802653dc1333b0330345e508d3a2d087ab9afae22593d9c84e63fac8bee720f7240a871036d25f20d0e31a6890ad314bc3581e540fc833f416ff47a1a91a3a521ca9aa44f3785f007b056f831fb0ad2175cf56e13a6c765e001e91630c246b6aef928794dc481885104ca6e72137fe98dce3449081306d4bd9552903ada07eced5ba7cbb54f75", 0xac}, {&(0x7f0000001040)="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", 0x1000}, {&(0x7f0000002040)="52f0fde191e0e03061f77cf3a582fa1abdd66ce87a23ed12a6ec1dd0092d2b1d16620ff44e57b483d77c5d83ddecde8f24de1090d4f9c52125cd416b825b11446166a745e1e2966380ba6ce8f4cd72547760424db50d2389d416afcf282854d629a49e86f69fcf4e68c272bce02369687e07841f547751e6af1152f8e4f01f6ac359e95bff2b3ea5", 0x88}, {&(0x7f0000002100)="c09e644630d32c", 0x7}, {&(0x7f0000002140)="79f00752524a1a0102b94ec26bddeb3d3c2821797214044b01e86eb98de4f30f68cd1c035977e2fda4d6a2ce34492747f40d276addd97179b0521ebdd6ca4c484ce9dc3533c83a03f4dfdcc739199f1a5331f175589ccc78c55d113f1d8b9766da923309d54e26740848b49cfbf364202dac5efe58cd40ae59caeb8b2eb3a41b3f4d365e06e1ed6d868a1bf6d0913abd721bfb48411c7e36", 0x98}, {&(0x7f0000002200)="d192efa22911c48ba8f9e65e796d2c2be9c03b1d5f441deda8b7971cf8daf88968b9e5a30c3fd14f2acbe380c0c8e8c42dfadc7f704ce811671d09a7a095c3476df02f3e922264053ff50646bb14fb653f2ee683454d592acf5a7de6c5a401e213ea4266d189c87a815065f244ac3af9c17ea5ba92a0cafe3a6c0200804f14e1e682490b0e1477453a0373df0e2d83d83a8ca8dba13950a7f8a7ca492517ea6a41d8f1fd7c1f6df3aceb05298960fcd06b090d31c322a5f36f9329d4a3f4f3ed6ae164ee4820b6c5d3cd0222c1ec2b21890b22c1254d7d0112aea000f3a92c39ecf0f15039", 0xe5}, {&(0x7f0000002300)}, {&(0x7f0000002340)="81a2950a2aebb0d2543602b6b547713b0cd3e9cae6f3bd4ff84c10c841d2afa5b4679c17d5dda04a55c0b6c0b28213e99a7775ecf22b1133ba9bed40a7112801ef2ece634a7a669a7784ec6f3247a7be8903bbe2a69a9ae257a35e5e8efd84ed12d5ccb2daa97ce47d9646a53b819c79e4339aa41f434fbeba7c0b6e7ff711c5ff41d7e86249ba2f244967ec4935ed3859c0b600b25a04cb5ac7b6299e14e93c2a29d4263d85850840aadd62e007acbf5403789602e0beabfc52f32000b94aa0af3a4582adc32a33f028bac4d1f9b3aba38dcf91cffd9cafa6abb32af745baad2bd75d43b55847cca22a71423038e7d24e24a95ae4af6dfe32", 0xf9}], 0x9, 0x6) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000002540)={'vcan0\x00', 0x0}) getsockname$packet(r0, &(0x7f0000002580)={0x11, 0x0, 0x0}, &(0x7f00000025c0)=0x14) sendmsg$ETHTOOL_MSG_RINGS_SET(r8, &(0x7f0000002740)={&(0x7f0000002500)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002700)={&(0x7f0000002600)={0xe4, r3, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@ETHTOOL_A_RINGS_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'sit0\x00'}]}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x8}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x20}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x80000001}, @ETHTOOL_A_RINGS_RX_JUMBO={0x8, 0x8, 0x7f}, @ETHTOOL_A_RINGS_HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_RINGS_RX={0x8, 0x6, 0x9}, @ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x9}]}, 0xe4}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000002780)=0xee94, 0x4) socket$pppl2tp(0x18, 0x1, 0x1) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ASSOCIATE_REQ(r11, &(0x7f00000028c0)={&(0x7f00000027c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000002880)={&(0x7f0000002800)={0x6c, 0x0, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa3}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xfffe}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa2}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x5}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x77}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x11}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}]}, 0x6c}, 0x1, 0x0, 0x0, 0x20004080}, 0x8f0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000002900)={r7, 0xffffffffffffffff}, 0x4) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002b00)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c00)={0x18, 0xd, &(0x7f0000002940)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r12}}], &(0x7f00000029c0)='syzkaller\x00', 0x0, 0xc3, &(0x7f0000002a00)=""/195, 0x41000, 0x12, '\x00', r1, 0x0, r13, 0x8, &(0x7f0000002b40)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000002b80)={0x3, 0x10, 0x7500, 0x8}, 0x10, 0x0, 0x0, 0x4, 0xfffffffffffffffc, &(0x7f0000002bc0)=[{0x5, 0x3, 0x9, 0x5}, {0x5, 0x2, 0x6}, {0x1, 0x5, 0x5, 0x6}, {0x5, 0x5, 0xe, 0x5}], 0x10, 0x41}, 0x90) r14 = socket$nl_generic(0x10, 0x3, 0x10) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000002d00), r8) sendmsg$TIPC_CMD_SET_NETID(r14, &(0x7f0000002dc0)={&(0x7f0000002cc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002d80)={&(0x7f0000002d40)={0x24, r15, 0x100, 0x70bd27, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x4}}, ["", "", ""]}, 0x24}}, 0x8080) 2.205363276s ago: executing program 3: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x9) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r1, 0x10d, 0x800000000d, &(0x7f00001c9fff)="03", 0x1) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) sendmmsg$inet(r1, &(0x7f0000003500)=[{{0x0, 0x7, &(0x7f0000000500)=[{&(0x7f00000001c0)="e7", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000240)="f9", 0x1}], 0x218}}], 0x2, 0x0) 2.133170455s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x371, &(0x7f0000000380)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x80}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="8b3300000000000000001500000008000300305ce2b807eca1d6027a031f20243060a7f41e0403da2f4a9952d88e41616d4b0b31538f61ea32a2fa7d26e9bb7b5b965cede7066f5b5b2321c3a18a8df96f8155ac4510547ab61a9c13c102f583fccdcab0ee712f1f6651a25ac1e554c0c52cbf8bc75ba2dea07ddfd8268bea", @ANYRES32=0x0, @ANYBLOB="0800178004000280"], 0x24}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d843090a306c5b4d986037", 0x10}], 0x1, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005200)={0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0xa9, 0x0, 0x0, 0x0, @binary="4c29ef4f7a96f263b46c720abe53d401cbc43a36f31a4354d5a9924f4360deec07340942c7dea7e10076d90019c18708463ab4442355a6955ffa816cc6c314fa8d3cf4e5661397df386d83ba4b1ab4b9876ccd6826e7e7be419f0e907360f799e83d9786f0e65e0ce1ba8cb79f906e375b5079320e149b43ae44d0315ede375b75b11c8a4210c3a00c24f330385c19aade2d43aeb2f63f18b46746c9b857b8f382a8c2b29a"}, @nested={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0xd0}}, 0x0) 2.090191967s ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000005c0)=ANY=[], 0x8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local}, 0x1c) r1 = socket$inet6(0xa, 0x1, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @local, 0x61844529}, 0x1c) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000080)=0x9, 0x4) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000008c0)={'filter\x00', 0x6001, 0x4, 0x410, 0x240, 0x240, 0x130, 0x328, 0x328, 0x328, 0x4, 0x0, {[{{@uncond, 0xc0, 0x130}, @unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "81bef90cac9eefdb69381fea88eb84c2a41045b786fd0e44b3da4f4734c128dba969309a9161e795a0057e17b4de122c8534fa15d5180793535f687585b4aa49"}}}, {{@arp={@dev, @remote, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth1_vlan\x00', 'team_slave_0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @multicast2, @private}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) recvmmsg(r2, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000580)=""/23, 0x17}}], 0x400000000000078, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x0) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x6, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_CT_DIRECTION={0x5}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xf}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11feffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xc, 0x1, 0x0, 0x0, {{0x0, 0x1c}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1df}}]}]}}]}, 0x50}}, 0x0) 1.56344072s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) 1.535298897s ago: executing program 4: write$binfmt_script(0xffffffffffffffff, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) sendmsg$ETHTOOL_MSG_EEE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\b\x00', @ANYRES16=0x0, @ANYBLOB="00000000000000000000180000000500050000000000050006000000000005000600000000000800070000000000100002800c0005002641e9569a3767f7"], 0x44}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r1, 0x84, 0x1a, &(0x7f0000000300), 0x0) r2 = socket(0x2, 0x806, 0x0) close(r2) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) unshare(0x20000400) sendmmsg$inet(r2, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, 0x0, 0x0) setsockopt$inet_int(r0, 0x0, 0x21, &(0x7f0000000240)=0xfdfffdfd, 0x4) connect$inet(r4, 0x0, 0x0) setsockopt$inet_int(r4, 0x0, 0x19, 0x0, 0x0) listen(r3, 0x3) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(r3, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r6) bpf$PROG_LOAD(0x5, 0x0, 0x11) close(0xffffffffffffffff) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000100)=ANY=[@ANYBLOB="000100006d00010000000000fbdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001400350064756d6d793000000000000000000000cc003480140035"], 0x100}}, 0x0) 1.511367769s ago: executing program 3: syz_genetlink_get_family_id$nl802154(&(0x7f00000001c0), 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={0x0, 0x28}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$netlink(r2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x40, 0x0, 0x0, r5}, [@IFA_LOCAL={0x14, 0x2, @ipv4}, @IFA_FLAGS={0x8, 0x8, 0x100}]}, 0x34}}, 0x0) r6 = socket(0x1, 0x803, 0x0) r7 = socket(0x10, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@ipv6_newaddr={0x2c, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r8}, [@IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000340)={@cgroup, 0xffffffffffffffff, 0x1d, 0x2000}, 0x20) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x5}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="c58e00000000000000001a00000008000300", @ANYRES32, @ANYBLOB], 0x28}}, 0x0) gettid() syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = socket(0x840000000002, 0x3, 0x100) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_encap(r11, 0x11, 0x64, &(0x7f0000000700)=0x1, 0x4) connect$inet(r10, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r10, &(0x7f0000005240), 0x4000095, 0x0) 1.475488942s ago: executing program 1: socket$inet6_udplite(0xa, 0x2, 0x88) r0 = socket(0x10, 0x2, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000c40)="c10e020022003505d25a806f8c6394f90435fc60040011000a740100053582c137153e37024801", 0x27}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x0, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000080)={0x8}, 0x10) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket(0x1d, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0xf0, 0x10, 0x0, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@mcast1}, {@in, 0x0, 0x32}, @in6=@empty}}, 0xf0}}, 0x0) setsockopt$MRT_DEL_MFC_PROXY(r3, 0x0, 0xd3, &(0x7f00000002c0)={@empty, @rand_addr=0x64010100, 0x1, "8e5de09579f25eac4f4efa5cc21143a7156d74a6f63420790a7ad48a0cf55772", 0x1, 0x1f, 0x7, 0xfe5}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) write(r0, &(0x7f0000000040)="1c0000001a009b8a140000003b9b301f00"/28, 0x1c) recvmmsg(r0, &(0x7f0000002ec0), 0x400000000000154, 0x2, &(0x7f00000001c0)={0x77359400}) 1.278914221s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x83, &(0x7f0000000080)={r1}, &(0x7f00000001c0)=0x8) 1.212296691s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0xf0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010300000000000000000000000a20000000000a01030000000000000000030000000900010073797a300000000020000000000a0104000000050000000900010073797a3100402088e58b00000014000000020a010100000000000000000000000020000000030a01040000000000000000030000000900010073797a30"], 0x9c}}, 0x0) 1.101700865s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0xc0241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="034888fb02008a00030030000000600000000028290081e949b93897bc3b0000000000007d01ff020000000000000000000000000001"], 0xfdef) 952.74ms ago: executing program 1: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000580)={'team0\x00', 0x0}) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, 0x0, &(0x7f0000000040)) listen(0xffffffffffffffff, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) socket(0x10, 0x0, 0x0) ioctl$FS_IOC_SETFSLABEL(0xffffffffffffffff, 0x41009432, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB], 0x10}}, 0x0) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x8100, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0xd0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18}}}]}, 0x48}, 0x1, 0x8100000000000000}, 0x0) 717.656431ms ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0xfad2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffe72, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f00000001c0)=ANY=[@ANYBLOB="a4c1e605030919e3ac7820"], &(0x7f0000000680)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x6, 0x2, 0x0, 0x5}, 0x48) socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6}]}, 0x10) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000500)='X', 0x1, 0x0, &(0x7f0000000080)={0xa, 0x4e1d, 0x400, @mcast1}, 0xffffffffffffffb1) getsockopt$bt_hci(r1, 0x84, 0x9, &(0x7f0000001f00)=""/4062, &(0x7f00000004c0)=0x744) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0xa, &(0x7f0000000140)=0x4, 0x4) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f00000002c0)={&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff90, 0x0, 0x0}, &(0x7f0000000300)=0x40) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) ioctl$AUTOFS_IOC_ASKUMOUNT(r2, 0x80049370, &(0x7f00000025c0)) r4 = accept4(r2, 0x0, 0x0, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x3d}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22}, 0x90) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "378c0593388856b6", "a6784cf38d0decb53c5c83c20e62182a", "4811e039", "6b2376d7739ba5f1"}, 0x28) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b, 0x25, 0x0, 0x7b}, 0x49d32d254ae22f79}}, 0x0) syz_emit_ethernet(0x1f, &(0x7f00000005c0)=ANY=[@ANYBLOB], 0x0) sendmsg$qrtr(r4, &(0x7f0000002580)={0x0, 0x0, &(0x7f0000002500)=[{&(0x7f0000000080)}, {&(0x7f0000000500)}, {&(0x7f0000000240)="59b19a959fd82b6a57f81443ea824193ddaee26c61a16ab20ae2a9d27ba546a2be8266593a21aa84bc7db11d4aca2a5824eea1897272820a73490e534081b1f70bc68fe3b5b7fde9ab", 0x49}, {&(0x7f0000001500)="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", 0x1000}, {&(0x7f0000000340)="b252aca2e984a77c23175615cc5c12f256eedabb1e6356a85883c48f516b1f1db29299b188661e297029784b18d018f957701bdc5dae76576db93f29dce0ce7c4a05d348aef7e161f8885e2daa40e94185fc6bedc1", 0x55}, {&(0x7f00000003c0)="b5b5c429c62b130758d7aa691b3d9952dd9aed3b96c232b5ea40ce335d2ddf6ba3a49a3c89d36a5abc6102841be8e01fff39157c7c241c6dc0521b3f78d882251a528c1b31d57d82e266df9196ab90bdb376f18adb4f1318b009c242971b4084c77d2b4ee4d67215456bed346ae88e09f9a5314743414228bd", 0x79}, {&(0x7f00000001c0)="31d37a53de1ce3d6a9b6f2880db6efe2e9615fdb101fdc961ff490f05a4a7d56b0dcc83d030880afb5e3d9adf26c", 0x2e}], 0x7, 0x0, 0x0, 0x8080}, 0x38) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) 658.65108ms ago: executing program 4: r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$BTRFS_IOC_WAIT_SYNC(r0, 0x40089416, &(0x7f0000000000)) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x9) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000000040)={{{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@private}}, &(0x7f0000000140)=0xe8) ioctl$SIOCAX25DELUID(r1, 0x89e2, &(0x7f0000000180)={0x3, @default, r2}) writev(0xffffffffffffffff, &(0x7f0000001600)=[{&(0x7f0000000500)="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", 0x329}], 0x1) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000680)=@raw={'raw\x00', 0x4001, 0x3, 0x238, 0x0, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@loopback, @local, 0x0, 0x0, 'ip6gretap0\x00', 'netdevsim0\x00'}, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00'}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@mcast1, 'vxcan1\x00'}}}, {{@ip={@local, @loopback, 0x0, 0x0, 'veth0_vlan\x00', 'macvtap0\x00'}, 0x0, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) r3 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x41, &(0x7f0000000200)=0x632a, 0x4) setsockopt$inet6_int(r3, 0x29, 0x31, &(0x7f0000000000)=0xb2, 0x4) sendmmsg$inet6(r3, &(0x7f0000000e00)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}], 0x1, 0x0) recvmmsg(r3, &(0x7f0000000800), 0x62, 0x12141, 0x0) r4 = socket$netlink(0x10, 0x3, 0x12) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r4, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000940)=ANY=[@ANYBLOB="dc000000", @ANYRES16=r5, @ANYBLOB="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"], 0xdc}, 0x1, 0x0, 0x0, 0x80}, 0x4000) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x19, &(0x7f00000003c0)=@bpq0, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r6, 0x117, 0x5, 0x0, 0x40) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f00000004c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, 0x0, 0x300, 0x70bd2d, 0x25dfdbfb, {}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10040000}, 0x14) syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r4, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x50, 0x140c, 0x8, 0x70bd27, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}, @RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x3}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x4}, @RDMA_NLDEV_ATTR_RES_CQN={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}]}, 0x50}, 0x1, 0x0, 0x0, 0x40}, 0x80) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000640)={0x1f, 0x0, 0x2}, 0x6) r7 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netdev_private(r7, 0x89f7, &(0x7f0000000680)="ecfb3a4f3bfaf8c9fa9269373e269cbec35cc3eece26eca22ff5ee8d6b77ed2932486c7122fcb84ff20711a1970e841b149392929924a9657fe50e404525d02c7a90ae98d48de9b7f3bfe124a6f6f646bb913a5170fccdd765193f36aa53bb4b27273da54ac75af9e4339b5f735534b65959c499b6f9f7219a0072e42c80de9fa5f138bd0f699ffef59bb096613e2c94e158b8c6eb0f73682b2e5ab96f95dfa1d25c28246229e0367edd9401e85cfb477a1d3ae152fc474ce0814042ebc60b97ec81e6d2d9b50bdd7fcea957031f590a5a8c7f848775b8a602b41711a08f") r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_INTERFACE(r8, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x20, r9, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x4000004) syz_genetlink_get_family_id$nl802154(&(0x7f00000008c0), r8) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r10, &(0x7f0000000900)={0x1f, 0x2}, 0x6) 335.580103ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="180054a1089b0000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00'}) socket$pppoe(0x18, 0x1, 0x0) r2 = socket$inet(0x2, 0x1, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000b80)=ANY=[], 0x60) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYRES16=r3, @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d000000001400028008000200912150200000f0cb728fda6fe8235000074c432d0000140003007866936d30afe880dc7a1af22d63dfe7a53fd1fdb1a36dff070000000000001a772cd2000000002d8975e070335d6424232bdb7ed93b33a2e4f1280d52b2f9206981a9819ca10a8b3b37553ea241c1f48530"], 0x58}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f00000006c0)=ANY=[@ANYRESOCT, @ANYRES8=r4, @ANYBLOB="f46422e6c23b7bb19c6d821e2d05a7cf44a0b4042193e2942a522a8020afef1f5b3ac7729c33ff7a6f6e5c14900ed5568fc6f8007b325d9c44dc8b17be0df35d9588631ebbf5ee49c59b1e1884931dcc6cdcfbb9db87cdc1d70208150c194a4c56aadc45", @ANYBLOB="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", @ANYRES16=r2, @ANYRES16, @ANYRES64=0xffffffffffffffff, @ANYRES64=r6], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x61, '\x00', 0x0, 0x2}, 0x90) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r10, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r13, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYRESOCT=r5, @ANYRES64=r7, @ANYRES32, @ANYRES64=r0], 0x128}, 0x0) recvmsg$unix(r12, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r15, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r14, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) socket$packet(0x11, 0x0, 0x300) 334.296338ms ago: executing program 1: bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$team(0x0, 0xffffffffffffffff) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x371, &(0x7f0000000380)={&(0x7f0000000040)={0x20, r1, 0x301, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x3000000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r0) socket$igmp6(0xa, 0x3, 0x2) setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={0x2, 0xe, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_address={0x3, 0x6}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in6=@mcast2, @in=@empty}}]}, 0x80}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)={0x58, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x44, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'vlan0\x00'}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @mcast1}]}]}, 0x58}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="8b3300000000000000001500000008000300305ce2b807eca1d6027a031f20243060a7f41e0403da2f4a9952d88e41616d4b0b31538f61ea32a2fa7d26e9bb7b5b965cede7066f5b5b2321c3a18a8df96f8155ac4510547ab61a9c13c102f583fccdcab0ee712f1f6651a25ac1e554c0c52cbf8bc75ba2dea07ddfd8268bea", @ANYRES32=0x0, @ANYBLOB="0800178004000280"], 0x24}}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) sendmsg$alg(0xffffffffffffffff, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d843090a306c5b4d986037", 0x10}], 0x1, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000005200)={0xd0, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@typed={0xa9, 0x0, 0x0, 0x0, @binary="4c29ef4f7a96f263b46c720abe53d401cbc43a36f31a4354d5a9924f4360deec07340942c7dea7e10076d90019c18708463ab4442355a6955ffa816cc6c314fa8d3cf4e5661397df386d83ba4b1ab4b9876ccd6826e7e7be419f0e907360f799e83d9786f0e65e0ce1ba8cb79f906e375b5079320e149b43ae44d0315ede375b75b11c8a4210c3a00c24f330385c19aade2d43aeb2f63f18b46746c9b857b8f382a8c2b29a"}, @nested={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, 0xd0}}, 0x0) 263.072263ms ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x83, &(0x7f00000000c0)={r1}, &(0x7f0000000100)=0x8) 178.475851ms ago: executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @private=0xa010101}}, 0x1c) 102.481953ms ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r0, &(0x7f0000000080)={0x0, 0xd, &(0x7f00000000c0)={&(0x7f0000000200)="893d3dff04811da3e0070000000200000000", 0x12}}, 0x0) 46.691408ms ago: executing program 2: connect$inet6(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100)={'#! ', './file0'}, 0xb) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1, 0xfffffffd}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r1, 0x0, 0x0}, 0x10) 0s ago: executing program 2: r0 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000100)=0x10, 0x800) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000180), &(0x7f0000000240)=0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x14}, 0x14}}, 0x0) (async) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) r3 = socket$inet_dccp(0x2, 0x6, 0x0) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r4) sendmsg$NLBL_MGMT_C_ADD(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x3c, r5, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @remote}, @NLBL_MGMT_A_DOMAIN={0xc, 0x1, '*+#-x@]\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8}]}, 0x3c}}, 0x0) (async, rerun: 64) getsockopt$inet_int(r3, 0x10d, 0xd3, 0x0, &(0x7f00000000c0)) (rerun: 64) kernel console output (not intermixed with test programs): 67.715167][ T9249] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 168.312915][ T9284] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 168.364219][ T9288] SET target dimension over the limit! [ 168.396628][ T5114] Bluetooth: hci3: command tx timeout [ 168.595598][ T961] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.705104][ T961] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.742424][ T9310] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 168.833148][ T961] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.072271][ T961] bridge_slave_1: left allmulticast mode [ 169.082081][ T961] bridge_slave_1: left promiscuous mode [ 169.088143][ T961] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.102004][ T961] bridge_slave_0: left allmulticast mode [ 169.111885][ T961] bridge_slave_0: left promiscuous mode [ 169.120907][ T961] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.597950][ T961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.609272][ T961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.620031][ T961] bond0 (unregistering): Released all slaves [ 169.645556][ T9327] __nla_validate_parse: 1 callbacks suppressed [ 169.645574][ T9327] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.684693][ T9332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.982328][ T9338] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.027403][ T9343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.185053][ T9361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 170.472950][ T9193] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 170.475906][ T5114] Bluetooth: hci3: command tx timeout [ 170.513758][ T9193] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 170.544444][ T961] hsr_slave_0: left promiscuous mode [ 170.552613][ T961] hsr_slave_1: left promiscuous mode [ 170.569173][ T961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.594463][ T961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.616729][ T961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.624167][ T961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.650767][ T9342] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 170.689840][ T961] veth1_macvtap: left promiscuous mode [ 170.705450][ T961] veth0_macvtap: left promiscuous mode [ 170.715329][ T961] veth1_vlan: left promiscuous mode [ 170.732430][ T961] veth0_vlan: left promiscuous mode [ 171.555562][ T961] team0 (unregistering): Port device team_slave_1 removed [ 171.604046][ T961] team0 (unregistering): Port device team_slave_0 removed [ 172.093162][ T9193] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 172.111042][ T9193] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 172.124776][ T9379] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.485004][ T9193] 8021q: adding VLAN 0 to HW filter on device bond0 [ 172.555967][ T5114] Bluetooth: hci3: command tx timeout [ 172.579851][ T9193] 8021q: adding VLAN 0 to HW filter on device team0 [ 172.603217][ T9386] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 172.628726][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.635926][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.711697][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.718904][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 173.142833][ T9193] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.179429][ T9428] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 173.200723][ T9193] veth0_vlan: entered promiscuous mode [ 173.228813][ T9193] veth1_vlan: entered promiscuous mode [ 173.273880][ T9193] veth0_macvtap: entered promiscuous mode [ 173.292239][ T9193] veth1_macvtap: entered promiscuous mode [ 173.304647][ T9431] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.324163][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.357193][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.370008][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.381433][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.391977][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.402497][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.416705][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.433350][ T9433] veth0Wvlan: renamed from geneve0 (while UP) [ 173.468914][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.496983][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.516473][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.535888][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.549114][ T9193] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.560071][ T9193] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.583901][ T9193] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.608518][ T9193] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.643472][ T9193] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.657943][ T9193] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.683669][ T9193] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.697159][ T9444] netlink: 199356 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.718970][ T9444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.897827][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.930048][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.964271][ T9457] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 174.013515][ T961] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.038946][ T961] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.338809][ T9476] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 174.546416][ T9492] macvlan3: entered promiscuous mode [ 174.855568][ T9502] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 175.040067][ T9521] __nla_validate_parse: 10 callbacks suppressed [ 175.040087][ T9521] netlink: 199356 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.051524][ T9523] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.071825][ T9521] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.088898][ T9521] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.330154][ T9540] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.552918][ T9554] lo speed is unknown, defaulting to 1000 [ 175.571142][ T9552] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 175.744220][ T9557] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.183365][ T9576] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.209562][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.628368][ T9589] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.821094][ T9593] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 176.989240][ T4491] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 176.999448][ T4491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 177.008642][ T4491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 177.025972][ T4491] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 177.040119][ T4491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 177.048083][ T4491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 177.152331][ T9605] lo speed is unknown, defaulting to 1000 [ 177.279837][ T9619] Bluetooth: MGMT ver 1.22 [ 177.293819][ T9619] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 177.347871][ T9619] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.393545][ T9626] SET target dimension over the limit! [ 177.757028][ T9605] chnl_net:caif_netlink_parms(): no params data found [ 177.920079][ T9605] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.928310][ T9605] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.936784][ T9605] bridge_slave_0: entered allmulticast mode [ 177.944523][ T9605] bridge_slave_0: entered promiscuous mode [ 177.958464][ T9605] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.968838][ T9605] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.978002][ T9605] bridge_slave_1: entered allmulticast mode [ 177.985523][ T9605] bridge_slave_1: entered promiscuous mode [ 178.025068][ T9605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.031835][ T9662] IPVS: set_ctl: invalid protocol: 103 172.20.20.170:20002 [ 178.039262][ T9605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.094658][ T9605] team0: Port device team_slave_0 added [ 178.105397][ T9605] team0: Port device team_slave_1 added [ 178.149620][ T9605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.158126][ T9605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.187249][ T9666] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 178.198306][ T9605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.273174][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.313354][ T9605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.340696][ T9605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.375434][ T9605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.481555][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.598367][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.737420][ T9687] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 178.759437][ T9605] hsr_slave_0: entered promiscuous mode [ 178.782328][ T9605] hsr_slave_1: entered promiscuous mode [ 178.803975][ T9605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.820060][ T9605] Cannot create hsr debugfs directory [ 178.903491][ T9696] SET target dimension over the limit! [ 178.968252][ T9698] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 179.071913][ T35] bridge_slave_1: left allmulticast mode [ 179.080015][ T35] bridge_slave_1: left promiscuous mode [ 179.092357][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.112002][ T35] bridge_slave_0: left allmulticast mode [ 179.117890][ T4491] Bluetooth: hci3: command tx timeout [ 179.124498][ T35] bridge_slave_0: left promiscuous mode [ 179.138177][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.522942][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 179.544763][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 179.556794][ T35] bond0 (unregistering): Released all slaves [ 180.015211][ T9716] syzkaller0: entered promiscuous mode [ 180.029644][ T9716] syzkaller0: entered allmulticast mode [ 180.122959][ T11] syzkaller0: tun_net_xmit 48 [ 180.209534][ T29] audit: type=1800 audit(1718196221.103:17): pid=9729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name=04 dev="sda1" ino=1947 res=0 errno=0 [ 180.375021][ T9740] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 180.499684][ T9744] __nla_validate_parse: 6 callbacks suppressed [ 180.499704][ T9744] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.111276][ T9759] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 181.199338][ T4491] Bluetooth: hci3: command tx timeout [ 181.286440][ T4491] Bluetooth: hci4: command 0x0406 tx timeout [ 182.201979][ T35] hsr_slave_0: left promiscuous mode [ 182.208850][ T35] hsr_slave_1: left promiscuous mode [ 182.217126][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 182.224617][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 182.246811][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 182.254468][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.286822][ T35] veth1_macvtap: left promiscuous mode [ 182.292474][ T35] veth0_macvtap: left promiscuous mode [ 182.298754][ T35] veth1_vlan: left promiscuous mode [ 182.304091][ T35] veth0_vlan: left promiscuous mode [ 182.782986][ T35] team0 (unregistering): Port device team_slave_1 removed [ 182.832739][ T35] team0 (unregistering): Port device team_slave_0 removed [ 183.277317][ T5114] Bluetooth: hci3: command tx timeout [ 183.402926][ T9773] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 183.470204][ T9605] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 183.512006][ T9773] batman_adv: batadv1: Adding interface: netdevsim0 [ 183.533573][ T9773] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 183.613362][ T9773] batman_adv: batadv1: Interface activated: netdevsim0 [ 183.644400][ T9605] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 183.652278][ T9786] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 183.692797][ T9605] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 183.736821][ T9605] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 183.781081][ T9793] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.082719][ T9815] netlink: 199356 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.152129][ T9819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.182708][ T9821] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 184.224766][ T9815] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.262058][ T9605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 184.330726][ T9605] 8021q: adding VLAN 0 to HW filter on device team0 [ 184.384395][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.391599][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 184.435320][ T1651] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.442530][ T1651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 184.942104][ T9605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.061263][ T9605] veth0_vlan: entered promiscuous mode [ 185.098722][ T9605] veth1_vlan: entered promiscuous mode [ 185.190548][ T9605] veth0_macvtap: entered promiscuous mode [ 185.232791][ T9605] veth1_macvtap: entered promiscuous mode [ 185.252827][ T9850] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 185.283369][ T9854] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.300297][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.332834][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.335866][ T9856] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.357460][ T5114] Bluetooth: hci3: command tx timeout [ 185.364252][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.376427][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.397473][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.412535][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.439745][ T9605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.450741][ T9863] netlink: 199356 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.472309][ T29] audit: type=1804 audit(1718196226.373:18): pid=9858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1872443521/syzkaller.HbxvHw/341/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 185.474979][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.519268][ T9864] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.533067][ T29] audit: type=1804 audit(1718196226.413:19): pid=9858 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1872443521/syzkaller.HbxvHw/341/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 185.542707][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.569674][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.582083][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.600352][ T9605] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 185.617622][ T9605] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.632897][ T9605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.640956][ T9863] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.669625][ T9867] tipc: Enabling of bearer rejected, failed to enable media [ 185.694341][ T9605] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.720287][ T9605] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.732499][ T9605] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.742139][ T9605] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.761725][ T9869] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.782063][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.797477][ T9869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.821752][ T9871] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 185.854082][ T9871] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 185.866659][ T9871] team0: Failed to send options change via netlink (err -105) [ 185.874388][ T9871] team0: Port device netdevsim0 added [ 186.004204][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.016856][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.092051][ T9878] lo speed is unknown, defaulting to 1000 [ 186.098651][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.114055][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.174777][ T9879] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.277947][ T9884] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.297939][ T9884] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.315256][ T9884] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.338363][ T9879] batman_adv: batadv1: Adding interface: netdevsim0 [ 186.345923][ T9879] batman_adv: batadv1: The MTU of interface netdevsim0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.400614][ T9879] batman_adv: batadv1: Interface activated: netdevsim0 [ 186.707336][ T9899] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.085131][ T9957] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 188.378430][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.560552][ T9976] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 188.906148][ T9994] unsupported nla_type 768 [ 189.046697][T10000] netlink: 'syz-executor.4': attribute type 14 has an invalid length. [ 189.092563][ T4491] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 189.114294][ T4491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 189.123649][ T4491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 189.144260][ T4491] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.153057][ T4491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 189.161893][ T4491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.253390][T10007] lo speed is unknown, defaulting to 1000 [ 189.259285][ T29] audit: type=1804 audit(1718196230.143:20): pid=10017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1872443521/syzkaller.HbxvHw/353/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 189.694305][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.866627][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.027792][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.250612][T10057] lo speed is unknown, defaulting to 1000 [ 190.319826][T10065] Bluetooth: MGMT ver 1.22 [ 190.532515][T10074] Bluetooth: hci3: unsupported parameter 64512 [ 190.556703][T10074] Bluetooth: hci3: invalid length 0, exp 2 for type 16 [ 190.588638][ T12] bridge_slave_1: left allmulticast mode [ 190.594325][ T12] bridge_slave_1: left promiscuous mode [ 190.600810][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.627449][ T12] bridge_slave_0: left allmulticast mode [ 190.633309][ T12] bridge_slave_0: left promiscuous mode [ 190.640725][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.092322][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.104681][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.115481][ T12] bond0 (unregistering): Released all slaves [ 191.128378][T10082] __nla_validate_parse: 17 callbacks suppressed [ 191.128396][T10082] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.156416][T10082] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 191.180465][T10082] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.189794][T10082] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.198651][ T5114] Bluetooth: hci3: command tx timeout [ 191.204846][T10082] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.215670][T10082] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 191.231751][T10082] vxlan0: entered promiscuous mode [ 191.369830][T10007] chnl_net:caif_netlink_parms(): no params data found [ 191.394210][T10089] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 191.406664][T10089] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.748924][T10007] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.762878][T10007] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.770555][T10007] bridge_slave_0: entered allmulticast mode [ 191.806695][T10007] bridge_slave_0: entered promiscuous mode [ 191.831835][T10007] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.893512][T10007] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.924044][T10007] bridge_slave_1: entered allmulticast mode [ 191.944546][T10007] bridge_slave_1: entered promiscuous mode [ 191.997876][ T12] hsr_slave_0: left promiscuous mode [ 192.011943][ T12] hsr_slave_1: left promiscuous mode [ 192.019758][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.031246][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.054977][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.071790][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.110995][T10123] Bluetooth: hci3: unsupported parameter 64512 [ 192.111926][ T12] veth1_macvtap: left promiscuous mode [ 192.117854][T10123] Bluetooth: hci3: invalid length 0, exp 2 for type 16 [ 192.131075][ T12] veth0_macvtap: left promiscuous mode [ 192.145368][ T12] veth1_vlan: left promiscuous mode [ 192.152503][ T12] veth0_vlan: left promiscuous mode [ 192.250679][T10125] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.713082][ T12] team0 (unregistering): Port device team_slave_1 removed [ 192.770089][ T12] team0 (unregistering): Port device team_slave_0 removed [ 193.250627][T10007] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.286492][ T5114] Bluetooth: hci3: command tx timeout [ 193.311241][T10007] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.416181][T10147] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.555134][T10007] team0: Port device team_slave_0 added [ 193.599596][T10007] team0: Port device team_slave_1 added [ 193.717742][T10007] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.732184][T10007] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.765551][T10007] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.782308][T10007] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.791117][T10007] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.832114][T10007] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.924908][T10165] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 193.959919][T10168] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 194.024151][T10007] hsr_slave_0: entered promiscuous mode [ 194.042862][T10007] hsr_slave_1: entered promiscuous mode [ 194.056854][T10007] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 194.064564][T10007] Cannot create hsr debugfs directory [ 194.157342][T10171] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.368023][T10184] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.592791][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.631258][T10200] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 194.693245][T10200] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 194.951499][T10007] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 194.977440][T10007] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 195.024094][T10007] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 195.069107][T10007] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.232180][T10007] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.302521][T10007] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.356358][ T5114] Bluetooth: hci3: command tx timeout [ 195.364474][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.371661][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.393267][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.400464][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.695492][T10248] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 195.942598][T10261] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 195.964615][T10263] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 195.997984][T10007] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.131271][T10007] veth0_vlan: entered promiscuous mode [ 196.154786][T10276] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.177848][T10007] veth1_vlan: entered promiscuous mode [ 196.211536][T10279] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.1'. [ 196.270677][T10007] veth0_macvtap: entered promiscuous mode [ 196.307419][T10007] veth1_macvtap: entered promiscuous mode [ 196.348426][T10282] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.382386][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.419826][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.453516][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.483558][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.496970][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.510095][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.539648][T10007] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.558730][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.572774][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.584458][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.599681][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.610714][T10007] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.621877][T10007] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.659757][T10007] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.695383][T10292] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 196.711469][T10007] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.741835][T10007] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.756444][T10295] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 196.772692][T10295] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 196.781462][T10007] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.793772][T10007] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.995968][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.023856][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.112503][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.133435][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.400917][T10318] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 198.190637][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.204610][T10352] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.239678][T10356] syzkaller1: entered promiscuous mode [ 198.251153][T10356] syzkaller1: entered allmulticast mode [ 198.561590][T10362] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 199.478186][T10396] can: request_module (can-proto-0) failed. [ 199.551007][T10400] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 199.874476][T10418] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.960468][T10417] pim6reg1: entered promiscuous mode [ 199.973165][T10417] pim6reg1: entered allmulticast mode [ 200.188246][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 200.273750][ T961] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.418649][T10431] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 201.010890][ T29] audit: type=1804 audit(1718196241.913:21): pid=10459 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1872443521/syzkaller.HbxvHw/391/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 201.100254][T10467] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 201.127137][T10458] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 201.138899][ T4491] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 201.156886][T10467] bond0: (slave bond_slave_0): Releasing backup interface [ 201.164357][ T4491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 201.174020][ T4491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 201.194936][ T4491] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 201.207132][ T4491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 201.215544][ T4491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 201.255500][T10472] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 201.363657][T10468] lo speed is unknown, defaulting to 1000 [ 201.424382][T10482] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 201.794743][T10510] netlink: 199356 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.836853][ T961] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.864432][T10510] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.879610][T10513] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.928870][T10510] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.932930][ T961] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.011612][T10516] x_tables: duplicate underflow at hook 3 [ 202.014026][T10521] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.032433][T10520] Bluetooth: MGMT ver 1.22 [ 202.103241][ T961] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.153762][T10529] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 202.168777][T10523] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 202.523955][ T961] bridge_slave_1: left allmulticast mode [ 202.546809][ T961] bridge_slave_1: left promiscuous mode [ 202.563055][ T961] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.586872][ T961] bridge_slave_0: left allmulticast mode [ 202.592974][ T961] bridge_slave_0: left promiscuous mode [ 202.616811][ T961] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.672445][T10558] rdma_rxe: rxe_newlink: failed to add lo [ 203.178534][ T961] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.191912][ T961] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.204037][ T961] bond0 (unregistering): Released all slaves [ 203.239443][T10549] bridge0: port 1(vlan2) entered blocking state [ 203.246165][T10549] bridge0: port 1(vlan2) entered disabled state [ 203.252620][T10549] vlan2: entered allmulticast mode [ 203.260836][T10549] vlan2: left allmulticast mode [ 203.285469][T10558] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 203.294949][ T5114] Bluetooth: hci3: command tx timeout [ 203.377468][T10579] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 203.563672][T10468] chnl_net:caif_netlink_parms(): no params data found [ 203.629613][T10587] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.644623][T10587] openvswitch: netlink: Tunnel attr 110 out of range max 16 [ 203.683358][T10587] netlink: 592 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.096986][ T961] hsr_slave_0: left promiscuous mode [ 204.116827][ T961] hsr_slave_1: left promiscuous mode [ 204.127883][ T961] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.135336][ T961] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.175005][ T961] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.190821][ T961] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.223168][ T961] veth1_macvtap: left promiscuous mode [ 204.229544][ T961] veth0_macvtap: left promiscuous mode [ 204.246630][ T961] veth1_vlan: left promiscuous mode [ 204.252099][ T961] veth0_vlan: left promiscuous mode [ 204.845316][ T961] team0 (unregistering): Port device team_slave_1 removed [ 204.895118][ T961] team0 (unregistering): Port device team_slave_0 removed [ 205.357021][ T4491] Bluetooth: hci3: command tx timeout [ 205.412495][T10468] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.420296][T10468] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.427703][T10468] bridge_slave_0: entered allmulticast mode [ 205.434520][T10468] bridge_slave_0: entered promiscuous mode [ 205.447682][T10468] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.454831][T10468] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.462295][T10468] bridge_slave_1: entered allmulticast mode [ 205.477289][T10468] bridge_slave_1: entered promiscuous mode [ 205.499462][T10633] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 205.534602][T10633] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 205.563239][T10633] batman_adv: batadv1: Removing interface: netdevsim0 [ 205.597151][T10633] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 205.786602][T10468] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 205.868016][T10468] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.059844][T10468] team0: Port device team_slave_0 added [ 206.103034][T10468] team0: Port device team_slave_1 added [ 206.276069][T10468] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.283059][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.334976][T10468] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.351518][T10468] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.359563][T10468] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.385667][T10468] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.575564][T10468] hsr_slave_0: entered promiscuous mode [ 206.591479][T10468] hsr_slave_1: entered promiscuous mode [ 206.598791][T10468] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.607290][T10468] Cannot create hsr debugfs directory [ 206.775313][T10698] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 206.885342][ T4491] Bluetooth: hci2: command 0x0406 tx timeout [ 206.912639][T10710] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 206.980104][T10717] netlink: 199356 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.018137][T10710] bond2: (slave bridge3): Enslaving as an active interface with an up link [ 207.099886][T10727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.140110][T10717] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.162601][T10710] bridge0: port 3(bond2) entered blocking state [ 207.177068][T10710] bridge0: port 3(bond2) entered disabled state [ 207.200907][T10710] bond2: entered allmulticast mode [ 207.212688][T10710] bridge3: entered allmulticast mode [ 207.223840][T10710] bond2: entered promiscuous mode [ 207.238833][T10710] bridge3: entered promiscuous mode [ 207.255468][T10731] team_slave_1: entered promiscuous mode [ 207.264482][T10731] team_slave_1: entered allmulticast mode [ 207.286710][T10731] syzkaller0: entered allmulticast mode [ 207.436559][ T5114] Bluetooth: hci3: command tx timeout [ 207.677948][T10755] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.899086][T10760] lo speed is unknown, defaulting to 1000 [ 207.998409][T10468] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.041011][T10468] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.138281][T10763] netlink: 199356 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.179861][T10468] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.234071][T10763] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.301349][T10468] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.321633][T10763] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.586112][ T5114] Bluetooth: hci3: command tx timeout [ 209.782616][T10468] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.806858][T10468] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.820636][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.827930][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.855613][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.862902][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.016623][T10812] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.094660][T10468] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.167894][T10468] veth0_vlan: entered promiscuous mode [ 210.186908][T10816] hsr_slave_0: left promiscuous mode [ 210.192924][T10816] hsr_slave_1: left promiscuous mode [ 210.245205][T10468] veth1_vlan: entered promiscuous mode [ 210.315454][T10468] veth0_macvtap: entered promiscuous mode [ 210.335651][T10468] veth1_macvtap: entered promiscuous mode [ 210.362753][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.373861][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.398570][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.423957][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.445237][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.465789][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.484752][T10468] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.492136][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805db50000: rx timeout, send abort [ 210.492531][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805db51000: rx timeout, send abort [ 210.501240][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805db50000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 210.502748][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88805db51000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 210.603913][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.657732][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.675608][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.687194][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.702897][T10468] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.723990][T10468] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.747580][T10468] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.778880][T10468] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.824435][T10468] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.844724][T10468] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.857764][T10468] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.240486][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.288323][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.443964][ T2811] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 211.498365][ T2811] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.048752][T10887] __nla_validate_parse: 4 callbacks suppressed [ 212.048773][T10887] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.080648][T10888] netlink: 199356 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.105977][T10888] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.164857][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 212.267629][T10894] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 212.285796][T10894] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.523684][T10903] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 212.682380][T10909] xt_TPROXY: Can be used only with -p tcp or -p udp [ 213.082278][T10941] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.096212][T10941] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.193350][T10949] x_tables: ip_tables: socket match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT [ 213.418477][ T2811] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.697894][T10974] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.053709][T10989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.106255][T10989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.124429][T10994] sctp: [Deprecated]: syz-executor.1 (pid 10994) Use of int in max_burst socket option. [ 214.124429][T10994] Use struct sctp_assoc_value instead [ 214.205375][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 214.236289][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 214.244694][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 214.253024][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 214.262138][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 214.269740][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 214.335904][T11001] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.374116][T10997] lo speed is unknown, defaulting to 1000 [ 214.379781][T11003] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 214.714728][T10982] delete_channel: no stack [ 214.873096][T11025] syzkaller1: entered promiscuous mode [ 214.878968][T11025] syzkaller1: entered allmulticast mode [ 215.196900][ T5118] Bluetooth: hci1: command 0x0405 tx timeout [ 215.230037][ T2811] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.263382][T10997] chnl_net:caif_netlink_parms(): no params data found [ 215.366757][ T2811] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.396766][T11075] syz-executor.3[11075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.396922][T11075] syz-executor.3[11075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 215.499305][ T2811] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.578033][T10997] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.585258][T10997] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.592759][T10997] bridge_slave_0: entered allmulticast mode [ 215.600893][T10997] bridge_slave_0: entered promiscuous mode [ 215.617274][T10997] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.624801][T10997] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.632223][T10997] bridge_slave_1: entered allmulticast mode [ 215.652683][T10997] bridge_slave_1: entered promiscuous mode [ 215.720030][T10997] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.766141][T10997] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.922743][T10997] team0: Port device team_slave_0 added [ 215.948954][T10997] team0: Port device team_slave_1 added [ 215.980746][ T2811] bridge_slave_1: left allmulticast mode [ 216.000946][ T2811] bridge_slave_1: left promiscuous mode [ 216.026083][ T2811] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.069358][ T2811] bridge_slave_0: left allmulticast mode [ 216.094384][ T2811] bridge_slave_0: left promiscuous mode [ 216.100804][ T2811] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.300474][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 216.329059][ T5118] Bluetooth: hci3: command tx timeout [ 216.513876][ T2811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 216.528815][ T2811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 216.539595][ T2811] bond0 (unregistering): Released all slaves [ 216.735190][T10997] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.745338][T10997] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.773065][T10997] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.956965][T10997] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.964005][T10997] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.997925][T10997] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.063319][T11126] netlink: 'syz-executor.4': attribute type 14 has an invalid length. [ 217.081159][T11126] __nla_validate_parse: 5 callbacks suppressed [ 217.081180][T11126] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.236312][T11142] netlink: 399 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.282847][ T5118] Bluetooth: hci1: command 0x0405 tx timeout [ 217.384804][T10997] hsr_slave_0: entered promiscuous mode [ 217.409942][T10997] hsr_slave_1: entered promiscuous mode [ 217.422781][T10997] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 217.434638][T10997] Cannot create hsr debugfs directory [ 217.445112][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 217.461373][T11155] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 217.832332][ T2811] hsr_slave_0: left promiscuous mode [ 217.847534][ T2811] hsr_slave_1: left promiscuous mode [ 217.859308][ T2811] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 217.872639][ T2811] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 217.880936][ T2811] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 217.888631][ T2811] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 217.943581][ T2811] veth1_macvtap: left promiscuous mode [ 217.959578][ T2811] veth0_macvtap: left promiscuous mode [ 217.965366][ T2811] veth1_vlan: left promiscuous mode [ 217.988449][ T2811] veth0_vlan: left promiscuous mode [ 218.401640][ T5114] Bluetooth: hci3: command tx timeout [ 218.446959][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.803552][ T2811] team0 (unregistering): Port device team_slave_1 removed [ 218.866910][ T2811] team0 (unregistering): Port device team_slave_0 removed [ 219.330080][T11176] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.349202][T11169] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 219.773586][T11212] batadv2: entered allmulticast mode [ 219.897452][T11224] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 220.142231][T11231] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 220.403386][T10997] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.443896][T10997] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.465067][T10997] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.476022][ T5114] Bluetooth: hci3: command tx timeout [ 220.502038][T10997] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.621017][T11256] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.828261][T10997] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.905544][T10997] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.989249][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.996462][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.053636][T11274] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 221.072764][T11274] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.090220][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.097421][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.126074][T11279] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.178207][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.234875][T11283] bridge3: port 1(bridge_slave_1) entered blocking state [ 221.269985][T11288] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.288647][T11283] bridge3: port 1(bridge_slave_1) entered disabled state [ 221.306248][T11283] bridge_slave_1: entered allmulticast mode [ 221.313621][T11283] bridge_slave_1: entered promiscuous mode [ 221.693256][T11313] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 221.815493][T10997] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.896886][T11332] batadv_slave_1: entered promiscuous mode [ 221.993555][T11325] batadv_slave_1: left promiscuous mode [ 222.083032][T10997] veth0_vlan: entered promiscuous mode [ 222.112228][T11339] __nla_validate_parse: 4 callbacks suppressed [ 222.112248][T11339] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.175598][T10997] veth1_vlan: entered promiscuous mode [ 222.216031][T11339] bridge3: port 1(bridge_slave_1) entered blocking state [ 222.223196][T11339] bridge3: port 1(bridge_slave_1) entered disabled state [ 222.259940][T11339] bridge_slave_1: entered allmulticast mode [ 222.276660][T11347] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.286058][T11339] bridge_slave_1: entered promiscuous mode [ 222.325062][T11348] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 222.360348][T11348] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.388016][T10997] veth0_macvtap: entered promiscuous mode [ 222.429284][T10997] veth1_macvtap: entered promiscuous mode [ 222.494596][T10997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.526143][T10997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.546630][T10997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.557860][ T5114] Bluetooth: hci3: command tx timeout [ 222.573204][T10997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.587117][T10997] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.625160][T10997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.650113][T10997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.672081][T10997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.683088][T10997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.713220][T10997] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.745781][T10997] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.762767][T10997] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.808256][T10997] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.842071][T10997] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.865795][T10997] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.874540][T10997] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 223.079911][T11382] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.094940][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.124287][T11382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.151363][T11384] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.182459][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.213204][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.303429][T11387] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 223.320785][T11387] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.333857][T11387] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 223.344323][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.363517][T11029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 223.405800][T11029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.672444][T11403] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 223.810307][T11406] syzkaller0: entered promiscuous mode [ 223.831550][T11406] syzkaller0: entered allmulticast mode [ 224.104974][T11437] nftables ruleset with unbound chain [ 225.455139][T11424] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 225.465526][T11424] bridge0: port 4(syz_tun) entered blocking state [ 225.472623][T11424] bridge0: port 4(syz_tun) entered disabled state [ 225.479503][T11424] syz_tun: entered allmulticast mode [ 225.486869][T11424] syz_tun: entered promiscuous mode [ 225.493080][T11424] bridge0: port 4(syz_tun) entered blocking state [ 225.499668][T11424] bridge0: port 4(syz_tun) entered forwarding state [ 225.890728][T11471] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 226.093014][ T2442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.414206][T11498] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 226.852351][ T2442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.858493][ T5118] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 226.873511][ T5118] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 226.884433][ T5118] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 226.892890][T11517] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 226.914384][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 226.928440][ T5118] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 226.947741][ T5118] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 226.995933][ T2442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.131850][ T2442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 227.174409][T11531] syz-executor.3 uses old SIOCAX25GETINFO [ 227.200594][T11520] lo speed is unknown, defaulting to 1000 [ 227.223967][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 227.237493][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 227.245518][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 227.257800][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 227.277252][ T5118] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 227.284633][ T5118] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 227.329069][T11540] __nla_validate_parse: 9 callbacks suppressed [ 227.329087][T11540] netlink: 199356 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.348297][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.418450][T11541] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.472506][ T2442] bridge_slave_1: left allmulticast mode [ 227.496488][ T2442] bridge_slave_1: left promiscuous mode [ 227.502292][ T2442] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.535360][ T2442] bridge_slave_0: left allmulticast mode [ 227.541964][ T2442] bridge_slave_0: left promiscuous mode [ 227.548032][ T2442] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.997432][ T2442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.009897][ T2442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.021349][ T2442] bond0 (unregistering): Released all slaves [ 228.035548][T11543] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 228.046922][T11543] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.086727][T11534] lo speed is unknown, defaulting to 1000 [ 228.500728][T11578] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 228.546147][T11578] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 228.786994][T11520] chnl_net:caif_netlink_parms(): no params data found [ 228.825677][ T2442] hsr_slave_0: left promiscuous mode [ 228.837153][ T2442] hsr_slave_1: left promiscuous mode [ 228.844948][ T2442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.856335][ T2442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.886703][ T2442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.894485][ T2442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.925565][ T2442] veth1_macvtap: left promiscuous mode [ 228.931414][ T2442] veth0_macvtap: left promiscuous mode [ 228.937391][ T2442] veth1_vlan: left promiscuous mode [ 228.942827][ T2442] veth0_vlan: left promiscuous mode [ 229.002419][T11590] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.036630][ T5114] Bluetooth: hci2: command tx timeout [ 229.358424][ T5114] Bluetooth: hci3: command tx timeout [ 229.481107][ T2442] team0 (unregistering): Port device team_slave_1 removed [ 229.523414][ T2442] team0 (unregistering): Port device team_slave_0 removed [ 230.134823][T11520] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.154206][T11520] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.170494][T11520] bridge_slave_0: entered allmulticast mode [ 230.195346][T11520] bridge_slave_0: entered promiscuous mode [ 230.271504][T11520] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.285095][T11520] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.292640][T11520] bridge_slave_1: entered allmulticast mode [ 230.302203][T11520] bridge_slave_1: entered promiscuous mode [ 230.435681][T11520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 230.485414][T11520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 230.536316][T11624] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 230.598529][T11534] chnl_net:caif_netlink_parms(): no params data found [ 230.638193][T11520] team0: Port device team_slave_0 added [ 230.655014][T11520] team0: Port device team_slave_1 added [ 230.748589][T11640] xt_CT: You must specify a L4 protocol and not use inversions on it [ 230.819684][T11642] ipt_REJECT: TCP_RESET invalid for non-tcp [ 230.860765][T11520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.870053][T11520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.899328][T11520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.914933][T11642] infiniband syz0: set active [ 230.925242][T11642] gretap0: refused to change device tx_queue_len [ 230.931907][T11642] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 231.004769][T11647] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 231.027873][T11520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.034833][T11520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.070204][T11520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.102352][ T5161] lo speed is unknown, defaulting to 1000 [ 231.121315][ T5114] Bluetooth: hci2: command tx timeout [ 231.173822][ T2442] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.192517][ T2442] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.284741][T11534] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.301062][T11534] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.314137][T11534] bridge_slave_0: entered allmulticast mode [ 231.327278][T11534] bridge_slave_0: entered promiscuous mode [ 231.346787][T11534] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.365916][T11534] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.373205][T11534] bridge_slave_1: entered allmulticast mode [ 231.394726][T11534] bridge_slave_1: entered promiscuous mode [ 231.436158][ T5114] Bluetooth: hci3: command tx timeout [ 231.479007][ T2442] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.499465][ T2442] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.574663][T11520] hsr_slave_0: entered promiscuous mode [ 231.583034][T11520] hsr_slave_1: entered promiscuous mode [ 231.594233][T11520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.603117][T11520] Cannot create hsr debugfs directory [ 231.669932][ T2442] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.691453][ T2442] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.728582][T11534] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.744128][T11534] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.801488][ T2442] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 231.852202][ T2442] batman_adv: batadv1: Removing interface: netdevsim0 [ 231.871680][ T2442] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 231.891096][ T2442] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 231.907996][ T2442] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.008722][T11534] team0: Port device team_slave_0 added [ 232.042490][T11534] team0: Port device team_slave_1 added [ 232.160310][T11534] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.168311][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.194926][T11534] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 232.264595][T11534] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 232.281506][T11534] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 232.317476][T11534] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 232.540095][T11691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 232.734111][ T2442] ip6gretap0 (unregistering): left promiscuous mode [ 233.198660][ T5114] Bluetooth: hci2: command tx timeout [ 233.249779][ T2442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 233.268939][ T2442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 233.283535][ T2442] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 233.300006][ T2442] bond0 (unregistering): Released all slaves [ 233.339782][T11534] hsr_slave_0: entered promiscuous mode [ 233.356834][T11534] hsr_slave_1: entered promiscuous mode [ 233.364031][T11534] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.382678][T11534] Cannot create hsr debugfs directory [ 233.515840][ T5114] Bluetooth: hci3: command tx timeout [ 233.721734][T11700] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 234.247293][ T2442] batadv_slave_0: left promiscuous mode [ 234.289272][ T2442] hsr_slave_0: left promiscuous mode [ 234.302277][ T2442] hsr_slave_1: left promiscuous mode [ 234.311842][ T2442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 234.321801][ T2442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 234.327845][T11718] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 234.366236][ T2442] veth1_macvtap: left promiscuous mode [ 234.371824][ T2442] veth0_macvtap: left promiscuous mode [ 234.395465][ T2442] veth1_vlan: left promiscuous mode [ 234.414377][ T2442] veth0_vlan: left promiscuous mode [ 234.486282][T11728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 235.113665][ T2442] team0 (unregistering): Port device team_slave_1 removed [ 235.186092][ T2442] team0 (unregistering): Port device team_slave_0 removed [ 235.275817][ T5114] Bluetooth: hci2: command tx timeout [ 235.596298][ T5114] Bluetooth: hci3: command tx timeout [ 236.017888][T11520] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 236.073838][T11520] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 236.084781][T11520] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 236.124083][T11520] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 236.154470][T11736] tipc: Can't bind to reserved service type 2 [ 236.409316][T11520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.495473][T11520] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.578727][ T5216] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.585943][ T5216] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.608088][ T5216] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.615288][ T5216] bridge0: port 2(bridge_slave_1) entered forwarding state [ 236.678626][ T2442] IPVS: stop unused estimator thread 0... [ 236.708205][T11520] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 236.727707][T11746] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 236.821664][T11534] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 236.881268][T11534] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 236.913009][T11534] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 236.936811][T11534] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 237.191714][T11520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.291977][T11534] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.299932][T11763] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.315248][T11763] syzkaller0: left allmulticast mode [ 237.353140][T11534] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.449413][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.449485][T11770] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 237.456614][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 237.488051][T11520] veth0_vlan: entered promiscuous mode [ 237.499140][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 237.506323][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.578920][T11520] veth1_vlan: entered promiscuous mode [ 237.644462][T11776] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.654321][T11776] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.741063][T11520] veth0_macvtap: entered promiscuous mode [ 237.768987][T11520] veth1_macvtap: entered promiscuous mode [ 237.830571][T11520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.859622][T11520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.894608][T11520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 237.917608][T11520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 237.930290][T11520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 237.947681][T11784] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 237.980704][T11520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.011150][T11520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.035272][T11520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.065793][T11520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.102817][T11520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.123243][T11520] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.163799][T11520] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.173239][T11520] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.189464][T11520] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.314709][T11534] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 238.441475][ T2811] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.465839][ T2811] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.528107][T11029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.576222][T11029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.588292][T11534] veth0_vlan: entered promiscuous mode [ 238.618400][T11534] veth1_vlan: entered promiscuous mode [ 238.692245][T11534] veth0_macvtap: entered promiscuous mode [ 238.714664][T11534] veth1_macvtap: entered promiscuous mode [ 238.782973][T11534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.806878][T11534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.818928][T11534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.829808][T11534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.840380][T11534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 238.853402][T11534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.865002][T11825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 238.876296][T11534] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.891263][T11822] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 238.900424][T11822] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.4'. [ 238.930774][T11534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.945233][T11534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 238.967065][T11534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 238.996018][T11534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.015777][T11534] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 239.041398][T11534] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 239.086558][T11534] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.105481][T11534] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.139720][T11534] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.165792][T11534] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.188083][T11534] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.363770][T11841] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 239.676136][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.727425][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.807035][T11867] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.878719][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.894986][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.244982][T11888] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.250580][T11890] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.303662][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.315636][T11888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.374306][T11896] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 240.396358][T11896] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 240.421119][T11892] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 240.540036][T11907] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 241.253625][T11951] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 241.957150][ T2442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.801816][ T5118] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 242.813439][ T5118] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 242.822107][ T5118] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 242.848318][ T5118] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 242.848995][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.866387][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 242.874088][ T5118] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.874220][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 242.890919][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.912248][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.932396][ T5114] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 242.937346][ T2442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 242.939923][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.961256][T12018] __nla_validate_parse: 4 callbacks suppressed [ 242.961274][T12018] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.085960][ T2442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.122706][T12030] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 243.135594][T12030] vlan1: entered promiscuous mode [ 243.163888][T12022] lo speed is unknown, defaulting to 1000 [ 243.197121][ T2442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.263082][T12040] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.426777][T12044] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 243.476588][T12023] lo speed is unknown, defaulting to 1000 [ 243.518064][ T2442] bridge_slave_1: left allmulticast mode [ 243.523754][ T2442] bridge_slave_1: left promiscuous mode [ 243.556064][ T2442] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.580785][ T2442] bridge_slave_0: left allmulticast mode [ 243.593433][ T2442] bridge_slave_0: left promiscuous mode [ 243.601550][ T2442] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.098284][ T2442] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 244.111617][ T2442] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 244.124490][ T2442] bond0 (unregistering): Released all slaves [ 244.143782][T12053] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.153504][T12059] lo: entered allmulticast mode [ 244.165232][T12060] pimreg: entered allmulticast mode [ 244.338539][T12071] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.821133][T12093] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 244.965819][ T4491] Bluetooth: hci3: command tx timeout [ 245.048914][ T4491] Bluetooth: hci4: command tx timeout [ 245.079398][ T2442] hsr_slave_0: left promiscuous mode [ 245.086505][ T2442] hsr_slave_1: left promiscuous mode [ 245.099481][ T2442] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 245.109518][ T2442] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 245.127504][ T2442] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 245.135177][ T2442] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 245.167593][ T2442] veth1_macvtap: left promiscuous mode [ 245.173177][ T2442] veth0_macvtap: left promiscuous mode [ 245.179791][ T2442] veth1_vlan: left promiscuous mode [ 245.185128][ T2442] veth0_vlan: left promiscuous mode [ 245.243035][T12111] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 245.261732][T12108] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 245.271526][T12108] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 245.779154][ T2442] team0 (unregistering): Port device team_slave_1 removed [ 245.846465][ T2442] team0 (unregistering): Port device team_slave_0 removed [ 246.321228][T12022] chnl_net:caif_netlink_parms(): no params data found [ 246.416868][T12133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 246.451010][T12023] chnl_net:caif_netlink_parms(): no params data found [ 246.499073][T12142] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 246.664122][T12022] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.712080][T12022] bridge0: port 1(bridge_slave_0) entered disabled state [ 246.720820][T12022] bridge_slave_0: entered allmulticast mode [ 246.747181][T12022] bridge_slave_0: entered promiscuous mode [ 246.773995][T12156] Bluetooth: MGMT ver 1.22 [ 246.792436][T12022] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.815338][T12022] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.831271][T12022] bridge_slave_1: entered allmulticast mode [ 246.843525][T12022] bridge_slave_1: entered promiscuous mode [ 246.855540][T12164] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 246.989294][T12170] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 247.006204][T12170] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 247.037680][ T4491] Bluetooth: hci3: command tx timeout [ 247.053758][T12023] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.064142][T12023] bridge0: port 1(bridge_slave_0) entered disabled state [ 247.076181][T12023] bridge_slave_0: entered allmulticast mode [ 247.083672][T12023] bridge_slave_0: entered promiscuous mode [ 247.108520][T12022] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.116856][ T4491] Bluetooth: hci4: command tx timeout [ 247.135422][T12022] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.162211][T12023] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.180393][T12023] bridge0: port 2(bridge_slave_1) entered disabled state [ 247.198391][T12023] bridge_slave_1: entered allmulticast mode [ 247.216215][T12023] bridge_slave_1: entered promiscuous mode [ 247.241794][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 247.342980][T12022] team0: Port device team_slave_0 added [ 247.364567][T12179] delete_channel: no stack [ 247.392664][T12023] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 247.408553][T12022] team0: Port device team_slave_1 added [ 247.436598][T12023] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 247.472869][T12022] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.480072][T12022] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.526811][T12022] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.574855][T12022] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 247.584525][T12022] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.620865][T12022] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 247.634818][T12188] xt_socket: unknown flags 0x8 [ 247.648723][T12023] team0: Port device team_slave_0 added [ 247.666090][T12189] xt_socket: unknown flags 0x8 [ 247.689528][T12023] team0: Port device team_slave_1 added [ 247.869122][T12023] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 247.903166][T12023] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 247.953152][T12023] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 247.994992][T12023] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.002195][T12023] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.043201][T12023] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.113407][T12022] hsr_slave_0: entered promiscuous mode [ 248.140402][T12022] hsr_slave_1: entered promiscuous mode [ 248.249833][T12225] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 248.271270][T12225] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.272268][T12023] hsr_slave_0: entered promiscuous mode [ 248.290205][T12023] hsr_slave_1: entered promiscuous mode [ 248.298529][T12023] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 248.308269][T12023] Cannot create hsr debugfs directory [ 248.554124][T12240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.932196][T12022] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.959332][T12022] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.095440][T12022] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.106454][T12022] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.126171][ T4491] Bluetooth: hci3: command tx timeout [ 249.196179][ T4491] Bluetooth: hci4: command tx timeout [ 249.230149][T12022] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.248776][T12022] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.290746][T12257] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.308185][T12257] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 249.320907][T12257] xt_CT: You must specify a L4 protocol and not use inversions on it [ 249.378910][T12022] netdevsim netdevsim3 € (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.420061][T12022] netdevsim netdevsim3 € (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.545019][T12270] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 249.848878][T12287] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 249.866093][T12022] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.878235][T12022] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.901326][T12022] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.942076][T12022] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 249.975294][T12293] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 250.092088][T12296] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.110890][T12023] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 250.128940][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.143760][T12023] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 250.160527][T12023] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 250.169610][T12296] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.189072][T12023] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 250.381126][T12306] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 250.462614][T12022] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.520176][T12303] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 250.553450][T12023] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.607045][T12022] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.650819][T12312] tipc: Started in network mode [ 250.676444][T12312] tipc: Node identity 1, cluster identity 4711 [ 250.682748][T12312] tipc: Node number set to 1 [ 250.703040][T12312] tipc: Cannot configure node identity twice [ 250.719842][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.727055][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.783320][T12023] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.804272][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.811502][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.880482][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.887749][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.901529][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.908775][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.196553][ T5114] Bluetooth: hci3: command tx timeout [ 251.275789][ T5114] Bluetooth: hci4: command tx timeout [ 251.574832][T12022] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.753409][T12023] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 251.983689][T12022] veth0_vlan: entered promiscuous mode [ 252.055579][T12023] veth0_vlan: entered promiscuous mode [ 252.074228][T12023] veth1_vlan: entered promiscuous mode [ 252.083490][T12022] veth1_vlan: entered promiscuous mode [ 252.154585][T12023] veth0_macvtap: entered promiscuous mode [ 252.203251][T12023] veth1_macvtap: entered promiscuous mode [ 252.278918][T12022] veth0_macvtap: entered promiscuous mode [ 252.318694][T12022] veth1_macvtap: entered promiscuous mode [ 252.336038][T12023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.355588][T12023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.375428][T12023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.386423][T12023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.402945][T12023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.415105][T12023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.434303][T12023] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 252.460267][T12412] macvlan2: entered promiscuous mode [ 252.471842][T12412] macvlan2: entered allmulticast mode [ 252.480675][T12412] bridge0: entered promiscuous mode [ 252.494413][T12412] bridge0: entered allmulticast mode [ 252.520768][T12412] team0: Port device macvlan2 added [ 252.551950][T12023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.580634][T12023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.597536][T12023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.613130][T12023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.623941][T12023] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 252.635034][T12023] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.661881][T12023] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 252.710019][T12023] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.730581][T12023] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.753181][T12023] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.762564][T12023] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.790622][ T29] audit: type=1800 audit(1718196293.693:22): pid=12427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1954 res=0 errno=0 [ 252.840526][ T29] audit: type=1804 audit(1718196293.733:23): pid=12427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2721022764/syzkaller.6YhlBq/53/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 252.890106][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.913407][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.928540][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.944410][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 252.945838][ T29] audit: type=1804 audit(1718196293.733:24): pid=12427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2721022764/syzkaller.6YhlBq/53/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 252.957817][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 252.996530][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.007950][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 253.023375][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.039664][T12022] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 253.068428][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.079876][ T29] audit: type=1804 audit(1718196293.733:25): pid=12427 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2721022764/syzkaller.6YhlBq/53/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 253.080333][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.118550][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.130048][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.140473][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.152053][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.170856][ T29] audit: type=1804 audit(1718196293.813:26): pid=12432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2721022764/syzkaller.6YhlBq/53/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 253.198201][T12022] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 253.215755][T12022] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 253.236280][ T29] audit: type=1804 audit(1718196293.813:27): pid=12432 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2721022764/syzkaller.6YhlBq/53/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 253.267828][T12022] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 253.356793][ T5114] Bluetooth: hci4: command 0x0411 tx timeout [ 253.381553][T12022] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.390980][T12022] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.401267][T12446] bridge0: received packet on syz_tun with own address as source address (addr:aa:aa:aa:aa:aa:aa, vlan:0) [ 253.413481][T12022] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.422464][T12022] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 253.456638][T12444] __nla_validate_parse: 4 callbacks suppressed [ 253.456653][T12444] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.480940][T12444] nbd: socks must be embedded in a SOCK_ITEM attr [ 253.578935][T11029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.594937][T11029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.670202][T12455] xt_NFQUEUE: number of total queues is 0 [ 253.678992][T11037] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.695976][T11037] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.740558][T11029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.760712][T11029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.871032][T11029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.897213][T11029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 254.030205][T12472] netlink: 'syz-executor.1': attribute type 309 has an invalid length. [ 254.040276][T12477] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 254.135376][T12472] macsec0: entered promiscuous mode [ 254.142335][T12472] macsec1: entered promiscuous mode [ 254.237656][T12485] netlink: 199356 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.278130][T12485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.328212][T12485] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 254.468190][T12504] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 254.567511][T12501] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.662970][T12517] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 254.808568][T12523] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 255.254678][T12501] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.317637][T12546] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 255.487684][T12552] xt_CT: You must specify a L4 protocol and not use inversions on it [ 255.497926][T12554] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 255.610781][T12501] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.654451][T12561] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 255.655419][T12559] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 255.730815][T12526] dccp_close: ABORT with 32 bytes unread [ 255.797053][T11030] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.924950][T12501] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.952266][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 255.972797][T12564] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 256.001360][T12564] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.047353][T12570] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.104788][T12570] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.132601][T12501] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.180563][T12501] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.231403][T12501] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.251908][T12578] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 256.275234][T12501] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 256.455108][ T5114] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 256.467208][ T5114] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 256.475395][ T5114] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 256.487342][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 256.495045][ T5114] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 256.509910][ T5114] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 256.543648][T11030] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.580614][T12591] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.661017][T11030] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.684543][T12586] lo speed is unknown, defaulting to 1000 [ 256.790020][T11030] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.042460][T11030] bridge_slave_1: left allmulticast mode [ 257.048416][T11030] bridge_slave_1: left promiscuous mode [ 257.054110][T11030] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.070719][T11030] bridge_slave_0: left allmulticast mode [ 257.076684][T11030] bridge_slave_0: left promiscuous mode [ 257.082405][T11030] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.622450][T11030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.639329][T11030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 257.651131][T11030] bond0 (unregistering): Released all slaves [ 257.707544][T12614] mac80211_hwsim hwsim39 wlan0: entered promiscuous mode [ 257.722889][T12614] macvlan2: entered promiscuous mode [ 258.089931][T12629] netlink: zone id is out of range [ 258.121163][T12629] netlink: zone id is out of range [ 258.147920][T12629] netlink: zone id is out of range [ 258.200932][T12629] netlink: zone id is out of range [ 258.240026][T12629] netlink: zone id is out of range [ 258.245200][T12629] netlink: zone id is out of range [ 258.287892][T12629] netlink: zone id is out of range [ 258.309996][T12634] infiniband syz0: set active [ 258.557210][ T5114] Bluetooth: hci4: command tx timeout [ 258.606409][ T25] lo speed is unknown, defaulting to 1000 [ 258.722563][T12646] __nla_validate_parse: 1 callbacks suppressed [ 258.722582][T12646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 258.805945][T11030] hsr_slave_0: left promiscuous mode [ 258.829675][T11030] hsr_slave_1: left promiscuous mode [ 258.855215][T11030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.866530][T11030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.874692][T11030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.890060][T11030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.952090][T11030] veth1_macvtap: left promiscuous mode [ 258.980784][T11030] veth0_macvtap: left promiscuous mode [ 258.995211][T11030] veth1_vlan: left promiscuous mode [ 259.001911][T11030] veth0_vlan: left promiscuous mode [ 259.866357][T11030] team0 (unregistering): Port device team_slave_1 removed [ 259.913484][T11030] team0 (unregistering): Port device team_slave_0 removed [ 260.466511][T12687] dummy0: entered promiscuous mode [ 260.476553][T12687] dummy0: left promiscuous mode [ 260.494048][T12586] chnl_net:caif_netlink_parms(): no params data found [ 260.636497][ T5114] Bluetooth: hci4: command tx timeout [ 260.656152][T12700] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 260.930100][T12707] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 260.968386][T12707] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 261.153877][T12719] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.2'. [ 261.178259][T12586] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.190686][T12586] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.200443][T12586] bridge_slave_0: entered allmulticast mode [ 261.208437][T12586] bridge_slave_0: entered promiscuous mode [ 261.219692][T12586] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.227989][T12586] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.235425][T12586] bridge_slave_1: entered allmulticast mode [ 261.243741][T12586] bridge_slave_1: entered promiscuous mode [ 261.508091][T12586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 261.557510][T12586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 261.559169][T12742] net_ratelimit: 6 callbacks suppressed [ 261.559183][T12742] netlink: set zone limit has 4 unknown bytes [ 261.580295][T12744] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 261.612046][T12744] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.668973][T12744] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 261.718928][T12744] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.737380][T12586] team0: Port device team_slave_0 added [ 261.759598][T12586] team0: Port device team_slave_1 added [ 261.908316][T12586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 261.935408][T12586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.006235][T12586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.074671][T12586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.110090][T12586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.166271][T12586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.196165][T12757] vlan1: entered promiscuous mode [ 262.442896][T12586] hsr_slave_0: entered promiscuous mode [ 262.469896][T12586] hsr_slave_1: entered promiscuous mode [ 262.494919][T12586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 262.529302][T12586] Cannot create hsr debugfs directory [ 262.716212][ T5114] Bluetooth: hci4: command tx timeout [ 262.860532][T12789] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 262.898865][T12789] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 262.919392][T12789] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 262.939304][T12789] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 262.973050][T12789] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 263.033631][T12797] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 263.189157][T12804] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.199728][T12804] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.209719][T12804] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.219489][T12804] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 263.229520][ T29] audit: type=1800 audit(1718196304.113:28): pid=12797 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 263.257716][T12804] vxlan0: entered promiscuous mode [ 263.263003][T12804] vxlan0: entered allmulticast mode [ 263.273839][T12804] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.284248][T12804] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.294413][T12804] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.303605][T12804] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 263.334728][T12801] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 263.773046][T12586] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 263.803192][T12586] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 263.839459][T12586] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 263.872181][T12586] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 264.190290][T12586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.242253][T12586] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.276497][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 264.283706][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 264.341036][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 264.348278][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 264.412296][T12847] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 264.468746][T12850] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.712423][T12586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.798006][ T5114] Bluetooth: hci4: command tx timeout [ 264.841470][T12871] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.851967][T12871] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.902449][T12586] veth0_vlan: entered promiscuous mode [ 264.962589][T12586] veth1_vlan: entered promiscuous mode [ 265.061197][T12586] veth0_macvtap: entered promiscuous mode [ 265.080792][T12586] veth1_macvtap: entered promiscuous mode [ 265.161703][T12586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.184986][T12586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.206931][T12586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.224949][T12586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.244593][T12586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 265.258206][T12586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.269414][T12586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.280753][T12586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.291710][T12586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.301949][T12586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.305298][T12891] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 265.312622][T12586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.312647][T12586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.312663][T12586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.312679][T12586] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 265.312693][T12586] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 265.314717][T12586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.384345][T12886] netlink: 1276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 265.426253][T12586] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.435050][T12586] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.446320][T12586] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.455046][T12586] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.698652][ T29] audit: type=1800 audit(1718196306.603:29): pid=12901 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1950 res=0 errno=0 [ 265.732206][ T29] audit: type=1804 audit(1718196306.623:30): pid=12898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2721022764/syzkaller.6YhlBq/103/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 265.759039][T11029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.769034][T11029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.779094][ T29] audit: type=1804 audit(1718196306.623:31): pid=12898 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir2721022764/syzkaller.6YhlBq/103/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 265.888261][T12907] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.934359][T11037] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.959104][T11037] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.975479][T12911] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.149553][T12917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.488837][T12937] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 266.680877][T12947] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 266.862032][T12954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.030321][T12965] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.222137][T12978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.631533][T13001] netlink: 'syz-executor.1': attribute type 33 has an invalid length. [ 267.712448][T13007] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 267.762509][T13012] No such timeout policy "syz0" [ 268.432522][T13044] bond0: entered promiscuous mode [ 268.438880][T13044] bond_slave_1: entered promiscuous mode [ 268.445137][T13044] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 268.453777][T13044] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 268.483385][T13044] batadv_slave_0: entered promiscuous mode [ 268.594082][T13050] dummy0: entered promiscuous mode [ 268.604536][T13050] dummy0: left promiscuous mode [ 268.672051][T13052] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.687132][T13052] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.729082][T13052] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.748167][T13052] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.895021][T11030] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.341833][T13081] bridge0: port 5(vlan2) entered blocking state [ 269.366788][T13081] bridge0: port 5(vlan2) entered disabled state [ 269.373290][T13081] vlan2: entered allmulticast mode [ 269.419792][T13081] vlan2: left allmulticast mode [ 269.529519][ T4491] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 269.539155][ T4491] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 269.554345][ T4491] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 269.564273][ T4491] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 269.571065][T13088] syzkaller0: entered promiscuous mode [ 269.573169][ T4491] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 269.576937][T13088] syzkaller0: entered allmulticast mode [ 269.584418][ T4491] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.182570][T13107] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 271.191132][T13107] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 271.200664][T13107] __nla_validate_parse: 10 callbacks suppressed [ 271.200681][T13107] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.518400][T11030] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.579634][T13089] lo speed is unknown, defaulting to 1000 [ 271.677879][ T5114] Bluetooth: hci4: command tx timeout [ 271.690707][T11030] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.727721][T13115] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 271.927723][T11030] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.963905][T13127] xt_TCPMSS: Only works on TCP SYN packets [ 271.982959][T13128] xt_TCPMSS: Only works on TCP SYN packets [ 272.106111][T13124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 272.150532][T13124] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 272.195944][T13127] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 272.659103][T13089] chnl_net:caif_netlink_parms(): no params data found [ 272.681368][T13153] syz-executor.2[13153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.681512][T13153] syz-executor.2[13153] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 272.722987][T11030] bridge_slave_1: left allmulticast mode [ 272.771283][T11030] bridge_slave_1: left promiscuous mode [ 272.796932][T11030] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.838970][T11030] bridge_slave_0: left allmulticast mode [ 272.844628][T11030] bridge_slave_0: left promiscuous mode [ 272.857333][T11030] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.494759][T11030] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.520576][T11030] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.533971][T11030] bond0 (unregistering): Released all slaves [ 273.573467][T13155] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.583413][T13156] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 273.601953][T13156] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.612715][T13171] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.756943][ T5114] Bluetooth: hci4: command 0x041b tx timeout [ 273.853514][T13196] can: request_module (can-proto-0) failed. [ 273.880302][T13089] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.890851][T13089] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.900985][T13200] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.904766][T13089] bridge_slave_0: entered allmulticast mode [ 273.920510][T13089] bridge_slave_0: entered promiscuous mode [ 274.001889][T13089] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.045173][T13089] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.062871][T13089] bridge_slave_1: entered allmulticast mode [ 274.072378][T13089] bridge_slave_1: entered promiscuous mode [ 274.189669][T13205] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 274.247065][T13089] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.340013][T13089] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.852224][T13089] team0: Port device team_slave_0 added [ 274.946956][T11030] hsr_slave_0: left promiscuous mode [ 274.959196][T11030] hsr_slave_1: left promiscuous mode [ 274.977958][T11030] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.986326][T11030] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.996845][T11030] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.007122][T11030] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.044418][T11030] veth1_macvtap: left promiscuous mode [ 275.050360][T11030] veth0_macvtap: left promiscuous mode [ 275.058929][T11030] veth1_vlan: left promiscuous mode [ 275.069454][T11030] veth0_vlan: left promiscuous mode [ 275.663523][T11030] team0 (unregistering): Port device team_slave_1 removed [ 275.710639][T11030] team0 (unregistering): Port device team_slave_0 removed [ 275.847439][ T4491] Bluetooth: hci4: command 0x041b tx timeout [ 276.113310][T13216] ------------[ cut here ]------------ [ 276.120421][T13216] refcount_t: decrement hit 0; leaking memory. [ 276.130402][T13216] WARNING: CPU: 1 PID: 13216 at lib/refcount.c:31 refcount_warn_saturate+0xfa/0x1d0 [ 276.140856][T13216] Modules linked in: [ 276.144801][T13216] CPU: 1 PID: 13216 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00724-g45403b12c29c #0 2024/06/12 12:45:17 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 276.156812][T13216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 276.167899][T13216] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 276.174883][T13216] Code: b2 00 00 00 e8 e7 ac e6 fc 5b 5d c3 cc cc cc cc e8 db ac e6 fc c6 05 4e 66 e8 0a 01 90 48 c7 c7 20 a5 1f 8c e8 47 db a8 fc 90 <0f> 0b 90 90 eb d9 e8 bb ac e6 fc c6 05 2b 66 e8 0a 01 90 48 c7 c7 [ 276.196062][T13216] RSP: 0018:ffffc90002dcf908 EFLAGS: 00010246 [ 276.202175][T13216] RAX: 59d3bb8321d75600 RBX: ffff88802b6b0664 RCX: 0000000000040000 [ 276.211242][T13216] RDX: ffffc90009069000 RSI: 00000000000082ba RDI: 00000000000082bb [ 276.219914][T13216] RBP: 0000000000000004 R08: ffffffff815857a2 R09: fffffbfff1c39994 [ 276.228645][T13216] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffff88802b6b0620 [ 276.237183][T13216] R13: 0000000000000000 R14: ffff88802b6b0664 R15: dffffc0000000000 [ 276.245185][T13216] FS: 00007f5e9cc9a6c0(0000) GS:ffff8880b9500000(0000) knlGS:0000000000000000 [ 276.255117][T13216] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 276.262701][T13216] CR2: 00000000200000c0 CR3: 0000000076686000 CR4: 00000000003506f0 [ 276.272591][T13216] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 276.282032][T13216] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 276.291017][T13216] Call Trace: [ 276.294320][T13216] [ 276.298226][T13216] ? __warn+0x163/0x4e0 [ 276.302419][T13216] ? refcount_warn_saturate+0xfa/0x1d0 [ 276.308895][T13216] ? report_bug+0x2b3/0x500 [ 276.313445][T13216] ? refcount_warn_saturate+0xfa/0x1d0 [ 276.319843][T13216] ? handle_bug+0x3e/0x70 [ 276.324212][T13216] ? exc_invalid_op+0x1a/0x50 [ 276.329496][T13216] ? asm_exc_invalid_op+0x1a/0x20 [ 276.334564][T13216] ? __warn_printk+0x292/0x360 [ 276.339898][T13216] ? refcount_warn_saturate+0xfa/0x1d0 [ 276.345473][T13216] ? refcount_warn_saturate+0xf9/0x1d0 [ 276.351949][T13216] ref_tracker_free+0x6af/0x7e0 [ 276.357775][T13216] ? __pfx_ref_tracker_free+0x10/0x10 [ 276.363202][T13216] ax25_release+0x368/0x950 [ 276.368683][T13216] sock_close+0xbc/0x240 [ 276.373754][T13216] ? __pfx_sock_close+0x10/0x10 [ 276.380141][T13216] __fput+0x406/0x8b0 [ 276.384169][T13216] task_work_run+0x24f/0x310 [ 276.389794][T13216] ? __pfx_task_work_run+0x10/0x10 [ 276.394945][T13216] get_signal+0x15e6/0x1740 [ 276.400654][T13216] ? __pfx_get_signal+0x10/0x10 [ 276.405549][T13216] arch_do_signal_or_restart+0x96/0x860 [ 276.412222][T13216] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 276.419331][T13216] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.425343][T13216] ? fput+0x19a/0x210 [ 276.430320][T13216] ? syscall_exit_to_user_mode+0xa3/0x370 [ 276.437000][T13216] syscall_exit_to_user_mode+0xc9/0x370 [ 276.442585][T13216] do_syscall_64+0x100/0x230 [ 276.448155][T13216] ? clear_bhb_loop+0x35/0x90 [ 276.452879][T13216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.459770][T13216] RIP: 0033:0x7f5e9be7cea9 [ 276.464219][T13216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 276.485961][T13216] RSP: 002b:00007f5e9cc9a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 276.494428][T13216] RAX: 0000000000000000 RBX: 00007f5e9bfb3f80 RCX: 00007f5e9be7cea9 [ 276.503621][T13216] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000005 [ 276.512621][T13216] RBP: 00007f5e9beebff4 R08: 0000000000000010 R09: 0000000000000000 [ 276.521595][T13216] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000000 [ 276.530570][T13216] R13: 000000000000000b R14: 00007f5e9bfb3f80 R15: 00007ffcc8fa9df8 [ 276.539649][T13216] [ 276.542690][T13216] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 276.549984][T13216] CPU: 1 PID: 13216 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00724-g45403b12c29c #0 [ 276.560500][T13216] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 276.570568][T13216] Call Trace: [ 276.573844][T13216] [ 276.576781][T13216] dump_stack_lvl+0x241/0x360 [ 276.581472][T13216] ? __pfx_dump_stack_lvl+0x10/0x10 [ 276.586688][T13216] ? __pfx__printk+0x10/0x10 [ 276.591289][T13216] ? vscnprintf+0x5d/0x90 [ 276.595618][T13216] panic+0x349/0x860 [ 276.599518][T13216] ? __warn+0x172/0x4e0 [ 276.603681][T13216] ? __pfx_panic+0x10/0x10 [ 276.608112][T13216] __warn+0x346/0x4e0 [ 276.612109][T13216] ? refcount_warn_saturate+0xfa/0x1d0 [ 276.617590][T13216] report_bug+0x2b3/0x500 [ 276.621938][T13216] ? refcount_warn_saturate+0xfa/0x1d0 [ 276.627411][T13216] handle_bug+0x3e/0x70 [ 276.631573][T13216] exc_invalid_op+0x1a/0x50 [ 276.636081][T13216] asm_exc_invalid_op+0x1a/0x20 [ 276.640931][T13216] RIP: 0010:refcount_warn_saturate+0xfa/0x1d0 [ 276.646998][T13216] Code: b2 00 00 00 e8 e7 ac e6 fc 5b 5d c3 cc cc cc cc e8 db ac e6 fc c6 05 4e 66 e8 0a 01 90 48 c7 c7 20 a5 1f 8c e8 47 db a8 fc 90 <0f> 0b 90 90 eb d9 e8 bb ac e6 fc c6 05 2b 66 e8 0a 01 90 48 c7 c7 [ 276.666597][T13216] RSP: 0018:ffffc90002dcf908 EFLAGS: 00010246 [ 276.672657][T13216] RAX: 59d3bb8321d75600 RBX: ffff88802b6b0664 RCX: 0000000000040000 [ 276.680624][T13216] RDX: ffffc90009069000 RSI: 00000000000082ba RDI: 00000000000082bb [ 276.688588][T13216] RBP: 0000000000000004 R08: ffffffff815857a2 R09: fffffbfff1c39994 [ 276.696549][T13216] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: ffff88802b6b0620 [ 276.704507][T13216] R13: 0000000000000000 R14: ffff88802b6b0664 R15: dffffc0000000000 [ 276.712485][T13216] ? __warn_printk+0x292/0x360 [ 276.717254][T13216] ? refcount_warn_saturate+0xf9/0x1d0 [ 276.722710][T13216] ref_tracker_free+0x6af/0x7e0 [ 276.727555][T13216] ? __pfx_ref_tracker_free+0x10/0x10 [ 276.732938][T13216] ax25_release+0x368/0x950 [ 276.737444][T13216] sock_close+0xbc/0x240 [ 276.741681][T13216] ? __pfx_sock_close+0x10/0x10 [ 276.746536][T13216] __fput+0x406/0x8b0 [ 276.750521][T13216] task_work_run+0x24f/0x310 [ 276.755106][T13216] ? __pfx_task_work_run+0x10/0x10 [ 276.760217][T13216] get_signal+0x15e6/0x1740 [ 276.764732][T13216] ? __pfx_get_signal+0x10/0x10 [ 276.769586][T13216] arch_do_signal_or_restart+0x96/0x860 [ 276.775128][T13216] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 276.781273][T13216] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 276.787292][T13216] ? fput+0x19a/0x210 [ 276.791272][T13216] ? syscall_exit_to_user_mode+0xa3/0x370 [ 276.796994][T13216] syscall_exit_to_user_mode+0xc9/0x370 [ 276.802544][T13216] do_syscall_64+0x100/0x230 [ 276.807130][T13216] ? clear_bhb_loop+0x35/0x90 [ 276.811809][T13216] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 276.817705][T13216] RIP: 0033:0x7f5e9be7cea9 [ 276.822109][T13216] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 276.841713][T13216] RSP: 002b:00007f5e9cc9a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 276.850206][T13216] RAX: 0000000000000000 RBX: 00007f5e9bfb3f80 RCX: 00007f5e9be7cea9 [ 276.858169][T13216] RDX: 0000000000000019 RSI: 0000000000000101 RDI: 0000000000000005 [ 276.866128][T13216] RBP: 00007f5e9beebff4 R08: 0000000000000010 R09: 0000000000000000 [ 276.874090][T13216] R10: 00000000200003c0 R11: 0000000000000246 R12: 0000000000000000 [ 276.882102][T13216] R13: 000000000000000b R14: 00007f5e9bfb3f80 R15: 00007ffcc8fa9df8 [ 276.890166][T13216] [ 276.893395][T13216] Kernel Offset: disabled [ 276.897768][T13216] Rebooting in 86400 seconds..