last executing test programs: 54.033725111s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0xc, &(0x7f0000000000)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x32}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@const={0x0, 0x0, 0x0, 0x9, 0x3}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}}, 0x0, 0x4e}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, r1, 0x0, 0x1}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x14a80, 0x10, 0x38, &(0x7f00000002c0)="24006f20a01c2500", &(0x7f0000000300)=""/8, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) 53.233735826s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x7b}, [@ldst={0x6, 0x0, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={0x1, 0x58, &(0x7f0000000200)}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000340), 0x8) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0xb, 0x8400, 0x1}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000017c0)={r0, &(0x7f0000001680), 0x0}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xde93, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x5}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x5}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000340)={0x1b, 0x0, 0x0, 0x800000, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2217, 0x2}, 0x48) 52.473795881s ago: executing program 0: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) 52.273677928s ago: executing program 0: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a00000014000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000008000200e0000001050003000000000024000100000000000000000000000000000000000000000000000000000000000000000080010080200004000a004e2000000005200100000000000000000000000000000800000006000500b01f00000800030006000000060005000500000008000a000100000024000100dbffffffffffffffffffffffffffffffffffffffffffffffffffffffffffffff200004000a034e200000040100000000000000000000ffffac14142a06000000240001000000000000000000000000000000000000000000000000000000000000000000d40009"], 0x21c}}, 0x0) 32.933337728s ago: executing program 0: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}}, 0x0) 15.247081365s ago: executing program 0: r0 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000480)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r0, @ANYBLOB="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"], 0x21c}}, 0x0) 2.322846665s ago: executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x7, &(0x7f0000000100)=0xfffffffe, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000c40)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000020"], 0x0, 0x3d}, 0x20) setsockopt$packet_tx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.53968006s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000001000)={0xd4c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0xd30, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x4a0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ebde8191ef32b791e708c5de2c6489cbf6041a3a4e139ac5dfa5375a39526077"}, @WGPEER_A_ALLOWEDIPS={0x410, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0xfffffffffffffe35, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8560b2abfcff5f7fad26edbe46db38b2193196f33baad7e10cfd832dc3c8992a"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x7f0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x120, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1bc, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{}, {0x0, 0x2, @empty}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d03c421799dad8e5f1569d04f366d37ad2d85b00ff504f8d8e2dd9f96bea6635"}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_FLAGS={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}]}]}]}, 0xd4c}}, 0x0) 1.409284189s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x6, 0x8, 0x8, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040), &(0x7f00000005c0), 0x6, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000080000000000000800000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@map=0x1, 0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x40, 0xfffff010}, {0x20}, {0x6}]}, 0x10) sendmmsg(r2, &(0x7f0000008340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x112}) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0x31, &(0x7f0000000140)=0x1008008, 0x4) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r6, &(0x7f0000000700)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=""/166, 0xa6}}], 0x1, 0x0, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x10, &(0x7f0000000480)=@framed={{0x18, 0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x0, 0x9}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @exit]}, &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x6c, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000400)={0xa, 0x10, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[0x1, 0x1, r0, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0xe439}, 0x90) ppoll(&(0x7f0000000600)=[{r2, 0x150}, {r5}, {r4, 0x10}, {r5, 0x8444}, {r1, 0x100}, {r2, 0x8093}, {r3, 0x4023}, {r7, 0x1093}], 0x8, &(0x7f0000000800), &(0x7f0000000840)={[0x603]}, 0x8) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}, 0x4}, 0x1c) r8 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r9], 0x20}}, 0x0) 1.17612039s ago: executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c0000007c00000002000000000000000000000e00000000000000000000000006004482ba31675ce48200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00000000000000000000000900000000000000000000000900000000000000000000000902"], 0x0, 0x96}, 0x20) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f00000013c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001380)={r0, 0xfe, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff3c, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x2}, 0x90) 1.027064629s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff000000001f0000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) 990.056175ms ago: executing program 2: sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)={0x14}, 0x14}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r0}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x18, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r0}, 0x38) 898.755121ms ago: executing program 3: unshare(0x2040400) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x3}, @map_fd={0x18, 0x0, 0x2, 0x0, r0}, @generic, @initr0, @exit, @alu, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0x5d, &(0x7f0000000340)=""/222}, 0x21) 887.245713ms ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'authenc(michael_mic-generic,pcbc(fcrypt-generic))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000180)="0400b4c7", 0x4) 847.980627ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x5, 0x13, 0x5, 0x7c}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000200)={{r0, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r1}}]}, &(0x7f00000002c0)='syzkaller\x00', 0x3}, 0x90) 768.912399ms ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x40, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14}}, 0xd0}}, 0x0) 740.923069ms ago: executing program 3: r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000000)="d8000000100081046881f782dc5d9533213a462801000000e8fe55a11800150006001400000000120800190043000000a8001600045c0461c1d67f6f94007134cf58e08000a0e408e8d8ef52a9d7c7c0b7a196e6f66112c88ac417898516277ce06bba2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c0aaa16b8bfc64193071e9f8775730d16a4683f1aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb14feb9f5588a63644caf1ce1bd2fd6095c676f3b79a0a53945ad06f629b41ea8bb3f", 0xd8}], 0x1}, 0x0) 683.560316ms ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) setsockopt$inet6_mreq(r0, 0x29, 0x32, 0x0, 0x0) 597.79465ms ago: executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000084ffffffff0000000003000000090000000000000000000002000000000000000000000004"], 0x0, 0x4a}, 0x20) 513.574226ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000001c0)={0x0, 0x2, &(0x7f0000000080)={&(0x7f0000001000)={0xd4c, r1, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r3}, @WGDEVICE_A_PEERS={0xd30, 0x8, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}, {0x4a0, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "ebde8191ef32b791e708c5de2c6489cbf6041a3a4e139ac5dfa5375a39526077"}, @WGPEER_A_ALLOWEDIPS={0x410, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5, 0x3, 0x3}}]}, {0xfffffffffffffe35, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}]}, {0xd0, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "8560b2abfcff5f7fad26edbe46db38b2193196f33baad7e10cfd832dc3c8992a"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x7f0, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ALLOWEDIPS={0x318, 0x9, 0x0, 0x1, [{0x13c, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @empty}}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x124, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @broadcast}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x120, 0x9, 0x0, 0x1, [{0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @local}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}]}, {0xf4, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}]}]}, @WGPEER_A_ALLOWEDIPS={0x1bc, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private}, {0x5}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{}, {0x0, 0x2, @empty}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "d03c421799dad8e5f1569d04f366d37ad2d85b00ff504f8d8e2dd9f96bea6635"}]}, {0x2c, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @mcast1}}, @WGPEER_A_FLAGS={0x8}]}, {0x48, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @dev}}, @WGPEER_A_FLAGS={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @private0}}]}]}]}, 0xd4c}}, 0x0) 472.947986ms ago: executing program 1: sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c", 0x44}], 0x1}, 0x0) r0 = socket$unix(0x1, 0x2, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x5c}, 0x6e) 409.66154ms ago: executing program 4: setsockopt$inet6_mtu(0xffffffffffffffff, 0x29, 0x3, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@dellinkprop={0x4c, 0x6d, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'batadv_slave_1\x00'}, @IFLA_PROP_LIST={0x18, 0x34, 0x0, 0x1, [{0x14, 0x35, 'macvtap0\x00'}]}]}, 0x4c}}, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(0xffffffffffffffff, 0x8917, &(0x7f0000000000)={'team_slave_1\x00', {0x2, 0x0, @multicast1}}) 289.850424ms ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000500), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000580)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100e8ffffff000000001f0000002000018008000100", @ANYRES32=r2, @ANYBLOB="14000200776731"], 0x34}}, 0x0) 269.781531ms ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x90) r0 = socket(0x1, 0x803, 0x0) unshare(0xa020480) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.io_serviced\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) getsockname$packet(r0, 0x0, &(0x7f00000001c0)) 266.550514ms ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_genetlink_get_family_id$batadv(0x0, 0xffffffffffffffff) sendmsg$BATADV_CMD_TP_METER_CANCEL(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x24, r0, 0x8, 0x70bd2a, 0x25dfdbfe, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x24}}, 0x4000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x31}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r4, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}, 0x1, 0x2}}, 0x26) getsockopt$bt_BT_SECURITY(r2, 0x111, 0x5, 0x0, 0x20001f00) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b0f, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x200000100000011, 0x803, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) sendto$packet(r5, &(0x7f00000000c0)="4dcdc7d96a760000002f00050000000000060000450b21e9e89291df563213e9152234f5623c526156de8ae4ae9150d3d2dd194a", 0x34, 0x0, &(0x7f0000000000)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @dev}, 0x14) 156.19163ms ago: executing program 2: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r0, &(0x7f0000000100)={{0x3, @default, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) connect$ax25(r0, &(0x7f0000000000)={{0x3, @default, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @bcast]}, 0x48) 134.513114ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000340), r1) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@newlink={0x4c, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x452}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BR_PRIORITY={0x6}, @IFLA_BR_VLAN_FILTERING={0x5}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x4c}}, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000005c0)="aa16eac32131c756947343449df3e61869adab423e91bf26269073986a3bc04b593545dd056e0b56d404b09e2e35b1849ea126cf9c55ff23ebace5cf329ad1565913b6fc800c6ccf6803c365f885a72ffe2bd2b9e6c806d47379efe9ae0d2357c703570fb2520bcc885ec1150c179579b02c82b74767e692bf559c70581a8c388e6894a4087c1a2069a9a5ceb60735f638be9c480a17", 0x96, 0x4000000, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_AUTH_CHUNKS(r2, 0x84, 0x1a, 0x0, &(0x7f0000000400)) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$qrtr(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x38) 22.809662ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) 20.215813ms ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}]}, &(0x7f00000009c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x0, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r1}, 0x38) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000380)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000300), &(0x7f0000000340)='%ps \x00'}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000001c0000000000000000000018150000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) sendmsg$tipc(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000040)='b', 0x1}], 0x1}, 0x0) recvfrom(r5, &(0x7f0000001880)=""/63, 0x3f, 0x0, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r4, 0x0) ioctl$FS_IOC_GETFSMAP(r4, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x10, &(0x7f0000000a80)=ANY=[@ANYBLOB="180000000800db00000000008395c1c6f3bfc5dc5899090000181100001fcfcf9eb91125ded8ad609eadf635a912c2d27e33739e2078453c8aa70d86765cc8f3781ce07affe660d9d9c312e5e0d1c09007395fa16defd014637f3490497c8d359bcafa9992fbbad0fa4d771c534dbfdde9b3997a997273d1fc8744ec2918fb3991b2ecd894e5a332663b7961ce973b092f2c20d8cadb8ace5673c194b6651c3f4bcd23c66cc7", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000008520000001000000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000200)='syzkaller\x00', 0xffffffff, 0x55, &(0x7f0000000240)=""/85, 0x41100, 0x7f4df164df0e87ed, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000002c0)={0x5, 0x9, 0x3}, 0x10, 0x0, 0x0, 0x1, &(0x7f00000003c0)=[r2, r3, 0x1, r4], &(0x7f0000000400)=[{0x5, 0x4, 0xf, 0x2}], 0x10, 0x7}, 0x90) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DONE(r7, 0x0, 0x21, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr, @multicast1}, @timestamp}}}}, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000002000000000000000000082295"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x1f4, 0xb68, 0x6558, &(0x7f0000000000)="ff", 0x0, 0x149c, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2, 0xffff80fe, 0xce00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='xen_mmu_set_pud\x00', r0}, 0x10) r9 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r9, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4b0, 0x0, 0x11, 0x148, 0x0, 0x10, 0x418, 0x2a8, 0x2a8, 0x418, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x2f8, 0x360, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x510) r10 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030033000b07d25a806c8c6f94f90724fc601025020002250200053582c137153e37000c0980fc0b10000300", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x0, 0x0, 0x0, 0x0, 0x21, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x10}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'gretap0\x00', 0x0}) setsockopt$packet_int(r2, 0x107, 0xf, &(0x7f0000000000)=0xe80, 0x4) sendto$packet(r2, &(0x7f0000000240)="3f030e00030000002b001e0089e9aaa911e0c2310f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3", 0x37, 0x0, &(0x7f0000000040)={0x11, 0x0, r3, 0x4, 0x0, 0x6, @multicast}, 0x14) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xf, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000040420f00b7030000000020008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e8, 0x128, 0xffffff80, 0x178, 0x0, 0x178, 0x218, 0x258, 0x230, 0x218, 0x258, 0x2034, 0x0, {[{{@uncond, 0x1d, 0x100, 0x128, 0x340, {0x1e0002a8, 0x7203000000000000}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@cluster={{0x30}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@ipv6={@loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'nr0\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.125' (ED25519) to the list of known hosts. 2024/06/21 13:25:24 fuzzer started 2024/06/21 13:25:24 dialing manager at 10.128.0.169:30018 [ 70.824531][ T5097] cgroup: Unknown subsys name 'net' [ 71.008848][ T5097] cgroup: Unknown subsys name 'rlimit' [ 71.779127][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.785837][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 2024/06/21 13:25:26 starting 5 executor processes [ 72.464312][ T5100] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 73.463990][ T5127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 73.473866][ T5127] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 73.482834][ T5127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 73.490816][ T5127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 73.499312][ T5127] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 73.502603][ T5134] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 73.507370][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 73.516508][ T5134] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 73.528815][ T5134] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 73.532721][ T5136] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 73.538344][ T5134] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 73.543930][ T5127] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 73.552781][ T5134] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 73.558891][ T5136] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 73.565549][ T5134] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 73.572192][ T5136] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 73.585962][ T5136] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 73.586480][ T5134] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 73.600857][ T5137] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.602549][ T5136] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 73.624418][ T5137] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 73.637672][ T5134] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 73.645655][ T5137] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 73.655710][ T5134] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 73.662939][ T5137] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 73.671962][ T5134] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 73.679952][ T5134] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 73.688926][ T4494] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 73.696592][ T5134] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 73.704904][ T5137] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.170400][ T5129] chnl_net:caif_netlink_parms(): no params data found [ 74.392691][ T5119] chnl_net:caif_netlink_parms(): no params data found [ 74.420984][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 74.448342][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.456964][ T5129] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.464288][ T5129] bridge_slave_0: entered allmulticast mode [ 74.472198][ T5129] bridge_slave_0: entered promiscuous mode [ 74.538628][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.545908][ T5129] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.553282][ T5129] bridge_slave_1: entered allmulticast mode [ 74.560678][ T5129] bridge_slave_1: entered promiscuous mode [ 74.679292][ T5129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.698687][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 74.728786][ T5129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.780200][ T5129] team0: Port device team_slave_0 added [ 74.793844][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 74.822114][ T5129] team0: Port device team_slave_1 added [ 74.950100][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.957288][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.983943][ T5129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.997436][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.004802][ T5119] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.015530][ T5119] bridge_slave_0: entered allmulticast mode [ 75.022543][ T5119] bridge_slave_0: entered promiscuous mode [ 75.033141][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.040467][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.047918][ T5118] bridge_slave_0: entered allmulticast mode [ 75.054994][ T5118] bridge_slave_0: entered promiscuous mode [ 75.077588][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.084583][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.110809][ T5129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.130705][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.139165][ T5119] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.147126][ T5119] bridge_slave_1: entered allmulticast mode [ 75.154373][ T5119] bridge_slave_1: entered promiscuous mode [ 75.161907][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.169230][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.176723][ T5118] bridge_slave_1: entered allmulticast mode [ 75.183864][ T5118] bridge_slave_1: entered promiscuous mode [ 75.280389][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.287678][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.294843][ T5116] bridge_slave_0: entered allmulticast mode [ 75.303504][ T5116] bridge_slave_0: entered promiscuous mode [ 75.360490][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.371112][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.378529][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.390243][ T5116] bridge_slave_1: entered allmulticast mode [ 75.398500][ T5116] bridge_slave_1: entered promiscuous mode [ 75.422222][ T5129] hsr_slave_0: entered promiscuous mode [ 75.429415][ T5129] hsr_slave_1: entered promiscuous mode [ 75.439463][ T5119] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.453107][ T5119] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.466306][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.560997][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.573165][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.581417][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.591041][ T5117] bridge_slave_0: entered allmulticast mode [ 75.598936][ T5117] bridge_slave_0: entered promiscuous mode [ 75.608695][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.616924][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.616994][ T5137] Bluetooth: hci3: command tx timeout [ 75.624275][ T5117] bridge_slave_1: entered allmulticast mode [ 75.638074][ T5117] bridge_slave_1: entered promiscuous mode [ 75.658853][ T5118] team0: Port device team_slave_0 added [ 75.672195][ T5118] team0: Port device team_slave_1 added [ 75.680930][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.695700][ T5137] Bluetooth: hci1: command tx timeout [ 75.724536][ T5119] team0: Port device team_slave_0 added [ 75.776451][ T5124] Bluetooth: hci2: command tx timeout [ 75.782347][ T5137] Bluetooth: hci4: command tx timeout [ 75.788640][ T5124] Bluetooth: hci0: command tx timeout [ 75.812595][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.824366][ T5119] team0: Port device team_slave_1 added [ 75.858480][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.865740][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.891844][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.908032][ T5116] team0: Port device team_slave_0 added [ 75.923160][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.960500][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.967570][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.994799][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.009523][ T5116] team0: Port device team_slave_1 added [ 76.060410][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.068538][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.094581][ T5119] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.112392][ T5119] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.119670][ T5119] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.145899][ T5119] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.171438][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.178826][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.204940][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.234143][ T5117] team0: Port device team_slave_0 added [ 76.276043][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.283022][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.310165][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.324140][ T5117] team0: Port device team_slave_1 added [ 76.385889][ T5118] hsr_slave_0: entered promiscuous mode [ 76.392383][ T5118] hsr_slave_1: entered promiscuous mode [ 76.399016][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.407019][ T5118] Cannot create hsr debugfs directory [ 76.502376][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.510354][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.536448][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.550833][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.558548][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.584849][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.618956][ T5119] hsr_slave_0: entered promiscuous mode [ 76.626766][ T5119] hsr_slave_1: entered promiscuous mode [ 76.633132][ T5119] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.640858][ T5119] Cannot create hsr debugfs directory [ 76.652411][ T5116] hsr_slave_0: entered promiscuous mode [ 76.663115][ T5116] hsr_slave_1: entered promiscuous mode [ 76.672743][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.680779][ T5116] Cannot create hsr debugfs directory [ 76.904514][ T5117] hsr_slave_0: entered promiscuous mode [ 76.911918][ T5117] hsr_slave_1: entered promiscuous mode [ 76.918976][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.927080][ T5117] Cannot create hsr debugfs directory [ 77.061384][ T5129] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.088896][ T5129] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.113198][ T5129] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.181223][ T5129] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.348671][ T5116] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.360638][ T5116] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.371509][ T5116] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.398692][ T5116] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.522599][ T5118] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.538137][ T5118] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.552773][ T5118] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.564173][ T5118] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.697446][ T5124] Bluetooth: hci3: command tx timeout [ 77.724352][ T5119] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.734865][ T5119] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.752636][ T5119] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.775853][ T5124] Bluetooth: hci1: command tx timeout [ 77.790708][ T5119] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.809322][ T5129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.849030][ T5129] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.861274][ T5137] Bluetooth: hci4: command tx timeout [ 77.867886][ T5131] Bluetooth: hci2: command tx timeout [ 77.877167][ T5124] Bluetooth: hci0: command tx timeout [ 77.891170][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.926158][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.933554][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.994152][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.001387][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.031227][ T5117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.062934][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.089024][ T5117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.100664][ T5117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.132544][ T5117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.147843][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.155048][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.192245][ T5129] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.228196][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.235445][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.394397][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.512597][ T5119] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.578346][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.599428][ T5129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.630384][ T5119] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.640266][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.647569][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.684970][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.692283][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.722876][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.730586][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.761082][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.768389][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.912637][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.983967][ T5119] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.020459][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.071430][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.120484][ T5178] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.127744][ T5178] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.139258][ T5129] veth0_vlan: entered promiscuous mode [ 79.194363][ T5178] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.201650][ T5178] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.238276][ T5129] veth1_vlan: entered promiscuous mode [ 79.366679][ T5116] veth0_vlan: entered promiscuous mode [ 79.403124][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.454129][ T5129] veth0_macvtap: entered promiscuous mode [ 79.468990][ T5129] veth1_macvtap: entered promiscuous mode [ 79.478698][ T5117] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.511331][ T5119] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.522021][ T5116] veth1_vlan: entered promiscuous mode [ 79.599711][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.681045][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.707561][ T5116] veth0_macvtap: entered promiscuous mode [ 79.717228][ T5129] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.727979][ T5129] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.739834][ T5129] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.751103][ T5129] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.775169][ T5118] veth0_vlan: entered promiscuous mode [ 79.780912][ T5124] Bluetooth: hci3: command tx timeout [ 79.811120][ T5116] veth1_macvtap: entered promiscuous mode [ 79.855680][ T5124] Bluetooth: hci1: command tx timeout [ 79.888449][ T5118] veth1_vlan: entered promiscuous mode [ 79.933642][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.944582][ T5124] Bluetooth: hci2: command tx timeout [ 79.946262][ T5137] Bluetooth: hci4: command tx timeout [ 79.957156][ T5124] Bluetooth: hci0: command tx timeout [ 79.972880][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.984613][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.003140][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.014196][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.027499][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.044062][ T5116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.054679][ T5116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.063883][ T5116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.074487][ T5116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.148541][ T5118] veth0_macvtap: entered promiscuous mode [ 80.163282][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.172076][ T5119] veth0_vlan: entered promiscuous mode [ 80.223646][ T5119] veth1_vlan: entered promiscuous mode [ 80.237239][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.251457][ T5118] veth1_macvtap: entered promiscuous mode [ 80.260050][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.363273][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.376663][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.457479][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.485308][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.500235][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.511285][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.524744][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.548284][ T5119] veth0_macvtap: entered promiscuous mode [ 80.569793][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.595508][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.616672][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.632438][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.660344][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.723748][ T5119] veth1_macvtap: entered promiscuous mode [ 80.750654][ T5118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.760755][ T5118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.772347][ T5118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.783269][ T5118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.800274][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.822895][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.888406][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.902825][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.920717][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.931772][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.941710][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.953307][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.967723][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.020156][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.034793][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.066457][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.084557][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.104155][ T5119] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.114882][ T5119] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.129548][ T5119] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.154361][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.167702][ T5119] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.176621][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.179657][ T5119] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.201490][ T5119] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.211622][ T5119] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.262722][ T5117] veth0_vlan: entered promiscuous mode [ 81.352765][ T5117] veth1_vlan: entered promiscuous mode [ 81.518559][ T2872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.529693][ T2872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.695911][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.703809][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.749452][ T5117] veth0_macvtap: entered promiscuous mode [ 81.865571][ T5137] Bluetooth: hci3: command tx timeout [ 81.950886][ T5137] Bluetooth: hci1: command tx timeout [ 82.015762][ T5137] Bluetooth: hci4: command tx timeout [ 82.021325][ T5137] Bluetooth: hci0: command tx timeout [ 82.026900][ T5124] Bluetooth: hci2: command tx timeout [ 82.065153][ T5117] veth1_macvtap: entered promiscuous mode [ 82.091684][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.140134][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.344674][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.379876][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.395556][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.411701][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.424019][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.443140][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.455609][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.471770][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.494081][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.532804][ T2795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.560876][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 82.567928][ C0] vcan0: j1939_xtp_rx_dat: no tx connection found [ 82.593986][ T2795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.631791][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.675508][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.705419][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.737748][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.768632][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.814486][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.835330][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.857339][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.882412][ T5232] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.907235][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.047297][ T5117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.062894][ T5117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.071875][ T5117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.087837][ T5117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.324451][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bd94800: rx timeout, send abort [ 83.400910][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.445350][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.474503][ T5241] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.525624][ T2795] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.533526][ T2795] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.833638][ C0] vcan0: j1939_tp_rxtimer: 0xffff88807bd94800: abort rx timeout. Force session deactivation [ 84.017269][ T5256] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.054616][ T5253] netlink: 134312 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.177104][ T5261] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.300869][ T5262] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 84.498672][ T5275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.524002][ T5275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.755684][ T785] cfg80211: failed to load regulatory.db [ 85.349086][ T5297] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 85.356098][ T5297] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 85.569997][ T5304] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.844244][ T5315] netlink: 'syz-executor.3': attribute type 16 has an invalid length. [ 85.872032][ T5315] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 86.199570][ T5323] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 86.329443][ T5332] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 86.857365][ T5354] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 86.969516][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.991422][ T5362] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 87.205770][ T5354] bridge_slave_1 (unregistering): left allmulticast mode [ 87.224480][ T5354] bridge_slave_1 (unregistering): left promiscuous mode [ 87.258875][ T5354] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.492292][ T5358] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.634099][ T5362] : entered promiscuous mode [ 87.679837][ T5366] bridge_slave_1: left allmulticast mode [ 87.696279][ T5366] bridge_slave_1: left promiscuous mode [ 87.702210][ T5366] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.781902][ T5366] bridge_slave_0: left allmulticast mode [ 87.811025][ T5366] bridge_slave_0: left promiscuous mode [ 87.831731][ T5366] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.963222][ T5367] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 87.977586][ T5367] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 88.523780][ T5404] __nla_validate_parse: 2 callbacks suppressed [ 88.523804][ T5404] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.596833][ T5404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.793780][ T5417] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.879432][ T5421] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 88.920204][ T5421] netlink: 'syz-executor.0': attribute type 17 has an invalid length. [ 89.608158][ T5449] Bluetooth: MGMT ver 1.22 [ 89.870729][ T29] audit: type=1804 audit(1718976344.273:2): pid=5461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1125807146/syzkaller.SjRrNo/12/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 89.909775][ T5463] xt_time: unknown flags 0x4 [ 90.026468][ T5473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.646921][ T5498] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 90.696275][ T5503] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.202911][ T2872] tipc: Subscription rejected, illegal request [ 91.228439][ T5520] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 91.273729][ T5520] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 91.476815][ T5533] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.542570][ T5533] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 91.641438][ T5533] : entered promiscuous mode [ 91.734370][ T5542] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.806786][ T5542] bridge_slave_1: left allmulticast mode [ 91.845706][ T5542] bridge_slave_1: left promiscuous mode [ 91.886230][ T5542] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.993329][ T5542] bridge_slave_0: left allmulticast mode [ 92.046211][ T5542] bridge_slave_0: left promiscuous mode [ 92.052235][ T5542] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.166117][ T68] tipc: Subscription rejected, illegal request [ 93.347509][ T29] audit: type=1804 audit(1718976347.753:3): pid=5603 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2638083401/syzkaller.AqdaMa/38/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 93.587819][ T5615] openvswitch: netlink: Unknown key attributes 1 [ 94.235644][ T5637] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.266805][ T5637] bridge_slave_1: left allmulticast mode [ 94.305962][ T5637] bridge_slave_1: left promiscuous mode [ 94.334436][ T5637] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.356611][ T29] audit: type=1804 audit(1718976348.763:4): pid=5647 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir78996130/syzkaller.DEdj6y/37/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 94.387931][ T5637] bridge_slave_0: left allmulticast mode [ 94.402303][ T5637] bridge_slave_0: left promiscuous mode [ 94.414345][ T5637] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.810440][ T5733] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 96.863420][ T5736] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 97.821031][ T5774] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 98.116297][ T5783] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 98.124451][ T5783] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 98.199502][ T5783] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. [ 98.216405][ T5783] tipc: Started in network mode [ 98.221519][ T5783] tipc: Node identity aaaaaaaaaa0c, cluster identity 4711 [ 98.233293][ T5783] tipc: Enabled bearer , priority 16 [ 98.336029][ T5800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.402549][ T5800] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 98.441523][ T5800] team0: Port device batadv1 added [ 98.464999][ T5803] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 98.482607][ T5803] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 98.575811][ T5807] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 99.166527][ T5845] lo speed is unknown, defaulting to 1000 [ 99.182795][ T5845] lo speed is unknown, defaulting to 1000 [ 99.198274][ T5845] lo speed is unknown, defaulting to 1000 [ 99.309627][ T5848] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 99.347924][ T5168] tipc: Node number set to 10922666 [ 99.881146][ T5845] infiniband syz0: set active [ 99.917064][ T25] lo speed is unknown, defaulting to 1000 [ 99.933434][ T5845] infiniband syz0: added lo [ 100.051266][ T5845] RDS/IB: syz0: added [ 100.056647][ T5845] smc: adding ib device syz0 with port count 1 [ 100.063555][ T5845] smc: ib device syz0 port 1 has pnetid [ 100.071868][ T5168] lo speed is unknown, defaulting to 1000 [ 100.083601][ T5845] lo speed is unknown, defaulting to 1000 [ 100.117601][ T5878] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 100.397495][ T5845] lo speed is unknown, defaulting to 1000 [ 100.805796][ T5907] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.973236][ T5845] lo speed is unknown, defaulting to 1000 [ 101.474046][ T5845] lo speed is unknown, defaulting to 1000 [ 101.521280][ T5938] xt_CT: You must specify a L4 protocol and not use inversions on it [ 101.572797][ T5941] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 101.912761][ T5949] team_slave_0: entered promiscuous mode [ 101.918934][ T5949] team_slave_1: entered promiscuous mode [ 101.924778][ T5949] batadv1: entered promiscuous mode [ 101.975160][ T5949] macvtap1: entered promiscuous mode [ 101.988796][ T5949] team0: entered promiscuous mode [ 102.008022][ T5949] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 102.020336][ T5845] lo speed is unknown, defaulting to 1000 [ 102.344037][ T5972] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 102.682142][ T5989] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 103.037698][ T6011] warning: `syz-executor.4' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 103.402123][ T6033] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.924010][ T6044] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 103.952832][ T6044] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.227465][ T6074] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.270966][ T6077] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1 [ 104.789483][ T6109] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.029165][ T6120] sctp: [Deprecated]: syz-executor.0 (pid 6120) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.029165][ T6120] Use struct sctp_sack_info instead [ 105.194983][ T6129] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 105.234114][ T6129] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 105.451223][ T6141] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.669112][ T6151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.840371][ T6161] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 105.862587][ T6157] Driver unsupported XDP return value 0 on prog (id 84) dev N/A, expect packet loss! [ 105.887456][ T6161] netlink: 168864 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.656055][ T6202] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 106.769539][ T6202] 8021q: adding VLAN 0 to HW filter on device bond1 [ 106.925318][ T6220] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 106.933556][ T6220] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.977973][ T6220] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 107.012122][ T6220] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.202917][ T6233] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.657961][ T6265] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1 [ 109.455700][ T5137] Bluetooth: hci0: command 0x0c1a tx timeout [ 109.460494][ T5131] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 109.891583][ T6293] tipc: Can't bind to reserved service type 0 [ 109.924533][ T6294] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.139514][ T6297] ip6_tunnel: non-ECT from fe80:0000:0000:0000:0000:0000:0000:00bb with DS=0x1 [ 111.018419][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.133823][ T6356] syz-executor.0[6356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.134099][ T6356] syz-executor.0[6356] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.735309][ T6381] dccp_invalid_packet: P.Data Offset(0) too small [ 112.988309][ T6387] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 113.179323][ T6393] syz-executor.4[6393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 113.179651][ T6393] syz-executor.4[6393] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 114.470978][ T6435] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 114.493557][ C0] hrtimer: interrupt took 864063 ns [ 114.770658][ T6443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 115.827651][ T6480] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 115.837276][ T29] audit: type=1800 audit(1718976370.233:5): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 115.857981][ T29] audit: type=1804 audit(1718976370.243:6): pid=6473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1142998240/syzkaller.5NBBAj/111/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 116.507822][ T6496] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.286989][ T6525] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 118.292299][ T6554] batadv_slave_1: entered promiscuous mode [ 118.380927][ T6553] batadv_slave_1: left promiscuous mode [ 119.329753][ T6568] bond0: entered promiscuous mode [ 119.372280][ T6568] bond_slave_0: entered promiscuous mode [ 119.396418][ T6568] bond_slave_1: entered promiscuous mode [ 119.441227][ T6572] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.719614][ T6591] syzkaller0: entered allmulticast mode [ 119.786738][ T6594] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 119.843041][ T6594] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.844862][ T6590] syzkaller0 (unregistering): left allmulticast mode [ 120.726698][ T6623] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.312625][ T6633] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.720626][ T6649] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 122.268099][ T6670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.379376][ T6671] No such timeout policy "syz0" [ 123.131496][ T6677] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.398732][ T6688] openvswitch: netlink: Flow key attr not present in new flow. [ 123.446056][ T6688] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 123.619161][ T6692] ip6gretap0: entered promiscuous mode [ 123.646818][ T6692] batadv_slave_0: entered promiscuous mode [ 123.694846][ T6698] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.736931][ T6701] trusted_key: syz-executor.0 sent an empty control message without MSG_MORE. [ 123.769862][ T6702] sctp: [Deprecated]: syz-executor.1 (pid 6702) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.769862][ T6702] Use struct sctp_sack_info instead [ 123.905778][ T6699] sctp: [Deprecated]: syz-executor.1 (pid 6699) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.905778][ T6699] Use struct sctp_sack_info instead [ 124.070752][ T6712] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.116450][ T6712] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 124.315478][ T6718] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 124.346052][ T6718] batman_adv: batadv0: Adding interface: ip6gretap1 [ 124.353987][ T6718] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.389142][ T6693] syz-executor.1 (6693) used greatest stack depth: 16944 bytes left [ 124.415614][ T6718] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 125.080402][ T6741] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 125.400799][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.386791][ T6787] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.679674][ T6795] dccp_invalid_packet: P.Data Offset(144) too large [ 127.625867][ T6817] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 127.635131][ T6817] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.664666][ T6816] netlink: 'syz-executor.2': attribute type 64 has an invalid length. [ 127.694778][ T6816] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.734341][ T6814] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.920979][ T6823] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.923132][ T6825] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 128.110598][ T29] audit: type=1804 audit(1718976382.513:7): pid=6823 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir78996130/syzkaller.DEdj6y/147/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 128.319514][ T6832] delete_channel: no stack [ 129.253521][ T6855] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.782917][ T6871] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.844750][ T6871] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.287167][ T6889] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 130.569354][ T6901] atomic_op ffff88807a720998 conn xmit_atomic 0000000000000000 [ 131.396221][ T6920] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 131.534756][ T6922] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 131.563136][ T6922] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 131.605571][ T6922] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 131.682951][ T6922] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 131.767435][ T6922] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.244955][ T7015] __nla_validate_parse: 2 callbacks suppressed [ 134.245001][ T7015] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.309186][ T7015] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.846306][ T7063] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 136.031899][ T29] audit: type=1804 audit(1718976390.433:8): pid=7063 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1142998240/syzkaller.5NBBAj/149/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 136.321602][ T7079] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.409727][ T7079] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 136.465117][ T7079] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.605603][ T7083] Zero length message leads to an empty skb [ 136.641683][ T7086] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.697360][ T7086] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.816343][ T7127] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 137.879585][ T7127] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.985672][ T7127] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 138.071123][ T7127] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 138.118258][ T7132] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.136259][ T7127] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.2'. [ 138.145733][ T7132] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 141.258273][ T7214] __nla_validate_parse: 1 callbacks suppressed [ 141.258299][ T7214] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.751780][ T7274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.811417][ T7274] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.870220][ T7274] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.097368][ T7297] vlan2: entered promiscuous mode [ 145.103729][ T7297] dummy0: entered promiscuous mode [ 145.220723][ T7297] team0: Port device vlan2 added [ 145.934321][ T29] audit: type=1804 audit(1718976400.333:9): pid=7313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1142998240/syzkaller.5NBBAj/167/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 147.395593][ T7342] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 148.371553][ T7366] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 148.496203][ T5131] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 148.505775][ T5137] Bluetooth: hci0: command 0x0c1a tx timeout [ 151.984305][ T7440] team0 (unregistering): Port device team_slave_0 removed [ 152.056436][ T7440] team0 (unregistering): Port device team_slave_1 removed [ 152.899907][ T7477] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 154.091325][ T7509] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 154.328850][ T7519] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 154.436730][ T7519] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 155.910230][ T7553] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.237240][ T7563] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.596047][ T7576] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.433880][ T7592] team0 (unregistering): left promiscuous mode [ 157.463555][ T7592] team_slave_0: left promiscuous mode [ 157.489884][ T7592] team_slave_1: left promiscuous mode [ 157.498544][ T7592] batadv1: left promiscuous mode [ 157.717792][ T7592] team0 (unregistering): Port device team_slave_0 removed [ 157.810481][ T7592] team0 (unregistering): Port device team_slave_1 removed [ 157.883485][ T7592] team0 (unregistering): Port device batadv1 removed [ 157.978035][ T7609] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.196713][ T7628] Cannot find del_set index 2048 as target [ 158.983391][ T7669] Cannot find del_set index 2048 as target [ 159.940300][ T7703] Cannot find add_set index 0 as target [ 160.351041][ T7714] ip6tnl1: entered promiscuous mode [ 160.399617][ T7714] ip6tnl1: entered allmulticast mode [ 160.937922][ T7743] Cannot find add_set index 0 as target [ 161.194481][ T7752] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.782835][ T7772] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 163.127570][ T7799] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 163.327350][ T7802] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.586374][ T7807] bond2: (slave bridge1): Enslaving as an active interface with an up link [ 163.646164][ T7802] bridge0: port 3(bond2) entered blocking state [ 163.677355][ T7802] bridge0: port 3(bond2) entered disabled state [ 163.705785][ T7802] bond2: entered allmulticast mode [ 163.711529][ T7802] bridge1: entered allmulticast mode [ 163.776060][ T7802] bond2: entered promiscuous mode [ 163.795527][ T7802] bridge1: entered promiscuous mode [ 164.016241][ T7822] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.816431][ T7846] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 164.987681][ T7850] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 165.036580][ T7850] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.134233][ T7850] vlan2: entered promiscuous mode [ 165.597831][ T7874] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.837046][ T7883] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 165.879967][ T7885] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.019227][ T7887] batadv0: entered promiscuous mode [ 166.071327][ T7887] batadv_slave_0: entered promiscuous mode [ 166.094194][ T7887] batadv_slave_0: left promiscuous mode [ 166.118425][ T7887] batadv0: left promiscuous mode [ 166.234387][ T7894] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 166.454722][ T7902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.817547][ T7913] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.378773][ T7932] openvswitch: netlink: Message has 4 unknown bytes. [ 167.388325][ T7931] syz-executor.2[7931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.392247][ T7931] syz-executor.2[7931] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 167.727314][ T7936] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 167.826008][ T7939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.915888][ T7939] vlan2: entered promiscuous mode [ 168.508683][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.793229][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.009368][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.262047][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.530188][ T7977] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.095288][ T51] bond2: left allmulticast mode [ 170.101305][ T51] bridge1: left allmulticast mode [ 170.109233][ T5131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 170.139208][ T5131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 170.148430][ T51] bond2: left promiscuous mode [ 170.156634][ T5131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 170.167055][ T51] bridge1: left promiscuous mode [ 170.177203][ T51] bridge0: port 3(bond2) entered disabled state [ 170.188888][ T5131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 170.200812][ T5131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 170.221491][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 170.279551][ T51] bridge_slave_1: left allmulticast mode [ 170.301294][ T51] bridge_slave_1: left promiscuous mode [ 170.335126][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.408262][ T51] bridge_slave_0: left allmulticast mode [ 170.438537][ T51] bridge_slave_0: left promiscuous mode [ 170.464563][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.582487][ T51] tipc: Resetting bearer [ 171.293057][ T51] tipc: Disabling bearer [ 171.353249][ T51] bond2 (unregistering): (slave bridge1): Releasing backup interface [ 171.569468][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.598606][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.613615][ T51] bond0 (unregistering): Released all slaves [ 171.635074][ T51] bond1 (unregistering): Released all slaves [ 171.665724][ T51] bond2 (unregistering): Released all slaves [ 171.693712][ T7997] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 171.874525][ T7990] lo speed is unknown, defaulting to 1000 [ 171.907409][ T51] tipc: Left network mode [ 172.113758][ T8022] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.255924][ T5131] Bluetooth: hci3: command tx timeout [ 173.051022][ T8053] No such timeout policy "syz0" [ 173.588971][ T51] hsr_slave_0: left promiscuous mode [ 173.616458][ T51] hsr_slave_1: left promiscuous mode [ 173.638138][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.656684][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.697391][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 173.731645][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 173.747661][ T8066] xt_TCPMSS: Only works on TCP SYN packets [ 173.827036][ T8066] Bluetooth: MGMT ver 1.22 [ 173.840632][ T51] veth1_macvtap: left promiscuous mode [ 173.871366][ T51] veth0_macvtap: left promiscuous mode [ 173.890685][ T51] veth1_vlan: left promiscuous mode [ 173.910633][ T51] veth0_vlan: left promiscuous mode [ 174.337184][ T5131] Bluetooth: hci3: command tx timeout [ 174.526510][ T51] infiniband syz0: set down [ 174.743432][ T8085] xt_TCPMSS: Only works on TCP SYN packets [ 175.876286][ T8118] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 176.009260][ T51] team0 (unregistering): Port device team_slave_1 removed [ 176.118588][ T51] team0 (unregistering): Port device team_slave_0 removed [ 176.417490][ T5131] Bluetooth: hci3: command tx timeout [ 177.035703][ T2927] smc: removing ib device syz0 [ 177.071017][ T5125] lo speed is unknown, defaulting to 1000 [ 177.092344][ T8118] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 177.454248][ T7990] chnl_net:caif_netlink_parms(): no params data found [ 177.618359][ T8128] xt_TCPMSS: Only works on TCP SYN packets [ 178.505571][ T5131] Bluetooth: hci3: command tx timeout [ 178.528187][ T7990] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.564444][ T7990] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.573208][ T7990] bridge_slave_0: entered allmulticast mode [ 178.689617][ T7990] bridge_slave_0: entered promiscuous mode [ 178.719579][ T7990] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.760458][ T7990] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.808762][ T7990] bridge_slave_1: entered allmulticast mode [ 178.873637][ T7990] bridge_slave_1: entered promiscuous mode [ 179.226120][ T7990] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.272181][ T7990] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.589735][ T7990] team0: Port device team_slave_0 added [ 179.664634][ T7990] team0: Port device team_slave_1 added [ 180.267765][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.298629][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.415036][ T8187] RDS: rds_bind could not find a transport for 2001::, load rds_tcp or rds_rdma? [ 180.415687][ T7990] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.523155][ T7990] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.565357][ T7990] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.626026][ T7990] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.640253][ T8195] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 180.649860][ T8195] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.833458][ T7990] hsr_slave_0: entered promiscuous mode [ 180.855972][ T7990] hsr_slave_1: entered promiscuous mode [ 180.866334][ T7990] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.887810][ T7990] Cannot create hsr debugfs directory [ 182.060015][ T7990] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 182.104884][ T7990] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 182.172283][ T7990] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 182.218062][ T7990] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 182.739457][ T7990] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.831164][ T7990] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.898579][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.905854][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.980757][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.988369][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.942089][ T7990] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 184.211078][ T7990] veth0_vlan: entered promiscuous mode [ 184.269680][ T7990] veth1_vlan: entered promiscuous mode [ 184.394700][ T7990] veth0_macvtap: entered promiscuous mode [ 184.408857][ T7990] veth1_macvtap: entered promiscuous mode [ 184.453220][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.463885][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.485754][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.523286][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.547375][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.583887][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.611141][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 184.622131][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.676798][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 184.719621][ T8297] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.802452][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.827265][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.841917][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.860747][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.875496][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.911543][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.933234][ T7990] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 184.964626][ T7990] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 184.992849][ T7990] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 185.012271][ T8300] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.167919][ T8306] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.184097][ T8306] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.198718][ T8306] tc_dump_action: action bad kind [ 185.274929][ T7990] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.320630][ T7990] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.352681][ T7990] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.368470][ T7990] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 185.737887][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.758444][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 185.824912][ T2927] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 185.843168][ T2927] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.211726][ T8346] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 186.403669][ T8351] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.557188][ T8359] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 186.569513][ T8359] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.746118][ T8366] bridge_slave_0: entered allmulticast mode [ 186.849649][ T8368] tipc: Started in network mode [ 186.855124][ T8368] tipc: Node identity ac1414aa, cluster identity 4711 [ 186.873213][ T8368] tipc: Enabled bearer , priority 10 [ 187.094280][ T8378] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.106526][ T8378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.117439][ T8378] tc_dump_action: action bad kind [ 187.317504][ T8384] xt_limit: Overflow, try lower: 0/0 [ 187.482925][ T2852] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.987399][ T9] tipc: Node number set to 2886997162 [ 188.099927][ T2852] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.289235][ T2852] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.534431][ T2852] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.839061][ T8435] tipc: Started in network mode [ 188.872894][ T8435] tipc: Node identity ac1414aa, cluster identity 4711 [ 188.899473][ T8438] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.902020][ T8435] tipc: Enabled bearer , priority 10 [ 188.923629][ T8438] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.926092][ T5137] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 188.947641][ T5137] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 188.982113][ T5137] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 188.993737][ T8438] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.008983][ T5137] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 189.024343][ T5137] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 189.045857][ T5137] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 189.063873][ T2852] bridge_slave_1: left allmulticast mode [ 189.070795][ T2852] bridge_slave_1: left promiscuous mode [ 189.076902][ T2852] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.092173][ T2852] bridge_slave_0: left allmulticast mode [ 189.098677][ T2852] bridge_slave_0: left promiscuous mode [ 189.104947][ T2852] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.267611][ T8447] xt_limit: Overflow, try lower: 0/0 [ 189.810016][ T2852] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.826217][ T2852] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.839709][ T2852] bond0 (unregistering): Released all slaves [ 189.897088][ T5123] tipc: Node number set to 2886997162 [ 190.266545][ T8462] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.439299][ T8469] bridge1: entered promiscuous mode [ 190.478136][ T8469] bridge1: entered allmulticast mode [ 190.715466][ T8440] chnl_net:caif_netlink_parms(): no params data found [ 191.139748][ T5131] Bluetooth: hci3: command tx timeout [ 191.650719][ T2852] hsr_slave_0: left promiscuous mode [ 191.674115][ T2852] hsr_slave_1: left promiscuous mode [ 191.698824][ T2852] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.726913][ T2852] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.759115][ T2852] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.787565][ T2852] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.854247][ T2852] veth1_macvtap: left promiscuous mode [ 191.869988][ T2852] veth0_macvtap: left promiscuous mode [ 191.877609][ T2852] veth1_vlan: left promiscuous mode [ 191.884742][ T2852] veth0_vlan: left promiscuous mode [ 192.808958][ T2852] team0 (unregistering): Port device team_slave_1 removed [ 192.866563][ T2852] team0 (unregistering): Port device team_slave_0 removed [ 193.215540][ T5131] Bluetooth: hci3: command tx timeout [ 193.480409][ T8497] tipc: Enabling of bearer rejected, already enabled [ 193.525401][ T8510] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.2'. [ 193.559480][ T8440] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.575436][ T8440] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.582843][ T8440] bridge_slave_0: entered allmulticast mode [ 193.613627][ T8440] bridge_slave_0: entered promiscuous mode [ 193.671812][ T8440] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.705741][ T8440] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.721066][ T8440] bridge_slave_1: entered allmulticast mode [ 193.744885][ T8440] bridge_slave_1: entered promiscuous mode [ 193.958784][ T8440] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.998498][ T8521] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.106436][ T8440] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.186574][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.423356][ T8440] team0: Port device team_slave_0 added [ 194.497268][ T8534] gretap0: entered promiscuous mode [ 194.694836][ T8536] syzkaller0: entered promiscuous mode [ 194.708483][ T8536] syzkaller0: entered allmulticast mode [ 194.723826][ T8440] team0: Port device team_slave_1 added [ 195.297725][ T5134] Bluetooth: hci3: command tx timeout [ 196.739009][ T5134] Bluetooth: hci1: command 0x0406 tx timeout [ 196.743806][ T4494] Bluetooth: hci0: command 0x0c1a tx timeout [ 196.751470][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 197.376525][ T5124] Bluetooth: hci3: command tx timeout [ 197.603589][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.611908][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.642127][ T8440] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.682178][ T8440] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.697414][ T8440] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.750230][ T8440] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 198.006352][ T8440] hsr_slave_0: entered promiscuous mode [ 198.034760][ T8440] hsr_slave_1: entered promiscuous mode [ 198.078591][ T8440] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.122155][ T8440] Cannot create hsr debugfs directory [ 198.525062][ T8603] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.335761][ T8629] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.568597][ T8638] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 199.729955][ T8636] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.802341][ T8636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 200.109623][ T8440] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 200.165831][ T8440] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 200.239825][ T8440] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 200.302014][ T8440] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 200.417297][ T8669] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 200.491756][ T8669] mac80211_hwsim hwsim7 wlan1: entered promiscuous mode [ 200.538131][ T8669] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 200.664809][ T8680] bridge_slave_0: entered promiscuous mode [ 200.684869][ T8681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 200.911147][ T8440] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.051140][ T8440] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.149156][ T5168] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.157243][ T5168] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.235116][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.243607][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 201.588390][ T8703] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 201.931071][ T8440] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 201.958343][ T8714] bridge_slave_0: entered promiscuous mode [ 202.199919][ T8440] veth0_vlan: entered promiscuous mode [ 202.259289][ T8440] veth1_vlan: entered promiscuous mode [ 202.554612][ T8440] veth0_macvtap: entered promiscuous mode [ 202.575532][ T8440] veth1_macvtap: entered promiscuous mode [ 202.624995][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.636833][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.649716][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.662061][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.674131][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.689784][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.702817][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 202.713859][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.727292][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 202.744974][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.757004][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.769758][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.780408][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.790422][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.800987][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.811310][ T8440] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 202.822016][ T8440] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 202.834644][ T8440] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 202.853490][ T8440] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.863630][ T8440] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.872959][ T8440] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.885428][ T8440] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 202.992708][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.011953][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 203.050477][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 203.060989][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.371598][ T8769] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 204.607435][ T8775] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 204.635784][ T8775] netlink: 636 bytes leftover after parsing attributes in process `syz-executor.3'. [ 204.845105][ T8781] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.874271][ T8781] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 205.313027][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.402797][ T8798] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 205.475504][ T8798] unsupported nla_type 768 [ 206.076291][ T8822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 206.298199][ T29] audit: type=1800 audit(1718976460.703:10): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 206.340879][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.382696][ T29] audit: type=1804 audit(1718976460.743:11): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1125807146/syzkaller.SjRrNo/293/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 206.415928][ T8823] sch_tbf: burst 0 is lower than device bridge0 mtu (1514) ! [ 206.575749][ T29] audit: type=1804 audit(1718976460.743:12): pid=8826 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1125807146/syzkaller.SjRrNo/293/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 206.660133][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.851036][ T5131] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.866959][ T5131] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.893820][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.925549][ T5131] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.958229][ T5131] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 206.983268][ T5131] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 206.997618][ T5131] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.374662][ T51] bridge_slave_1: left allmulticast mode [ 207.396403][ T51] bridge_slave_1: left promiscuous mode [ 207.402433][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.477294][ T51] bridge_slave_0: left allmulticast mode [ 207.483027][ T51] bridge_slave_0: left promiscuous mode [ 207.510683][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.410970][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 208.423840][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 208.440099][ T51] bond0 (unregistering): Released all slaves [ 208.467096][ T8859] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 208.524260][ T8860] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 209.056505][ T5124] Bluetooth: hci3: command tx timeout [ 209.087638][ T8903] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.271139][ T8905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.345438][ T8836] chnl_net:caif_netlink_parms(): no params data found [ 209.462921][ T51] hsr_slave_0: left promiscuous mode [ 209.497471][ T51] hsr_slave_1: left promiscuous mode [ 209.522459][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 209.538944][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 209.570416][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 209.591844][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 209.703239][ T51] veth1_macvtap: left promiscuous mode [ 209.713025][ T51] veth0_macvtap: left promiscuous mode [ 209.724497][ T51] veth1_vlan: left promiscuous mode [ 209.732805][ T51] veth0_vlan: left promiscuous mode [ 210.924927][ T51] team0 (unregistering): Port device team_slave_1 removed [ 210.987181][ T51] team0 (unregistering): Port device team_slave_0 removed [ 211.136071][ T5124] Bluetooth: hci3: command tx timeout [ 212.026138][ T8960] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.063469][ T8836] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.100076][ T8836] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.141560][ T8836] bridge_slave_0: entered allmulticast mode [ 212.170206][ T8836] bridge_slave_0: entered promiscuous mode [ 212.218317][ T8836] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.237864][ T8836] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.246191][ T8836] bridge_slave_1: entered allmulticast mode [ 212.259056][ T8836] bridge_slave_1: entered promiscuous mode [ 212.568903][ T8973] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 212.694620][ T8979] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 212.728157][ T8836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.809705][ T8836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 213.011539][ T8836] team0: Port device team_slave_0 added [ 213.046688][ T8836] team0: Port device team_slave_1 added [ 213.193025][ T8836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.210383][ T8836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.238513][ T5124] Bluetooth: hci3: command tx timeout [ 213.246783][ T8836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.308199][ T8836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.336112][ T8836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.409372][ T8836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.433640][ T9006] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.473667][ T9006] bond_slave_0: entered promiscuous mode [ 213.480046][ T9006] bond_slave_1: entered promiscuous mode [ 213.501609][ T9006] macvlan2: entered allmulticast mode [ 213.514287][ T9006] bond0: entered allmulticast mode [ 213.527325][ T9006] bond_slave_0: entered allmulticast mode [ 213.534928][ T9006] bond_slave_1: entered allmulticast mode [ 213.548906][ T9006] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 213.853000][ T8836] hsr_slave_0: entered promiscuous mode [ 213.880562][ T8836] hsr_slave_1: entered promiscuous mode [ 213.892402][ T9014] xt_CT: You must specify a L4 protocol and not use inversions on it [ 213.902302][ T8836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.938356][ T8836] Cannot create hsr debugfs directory [ 214.147272][ T9023] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 214.165150][ T9023] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.558839][ T9032] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.571406][ T9040] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.603301][ T9040] macvlan3: entered allmulticast mode [ 214.628076][ T9040] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 215.121235][ T8836] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 215.171116][ T8836] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 215.216106][ T8836] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 215.267088][ T8836] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 215.296780][ T5124] Bluetooth: hci3: command tx timeout [ 215.507600][ T9066] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 215.561484][ T9066] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.584162][ T8836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 215.697331][ T8836] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.808880][ T5125] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.816197][ T5125] bridge0: port 1(bridge_slave_0) entered forwarding state [ 215.891659][ T5125] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.899044][ T5125] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.752070][ T8836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.969989][ T8836] veth0_vlan: entered promiscuous mode [ 217.051510][ T8836] veth1_vlan: entered promiscuous mode [ 217.163891][ T8836] veth0_macvtap: entered promiscuous mode [ 217.226488][ T8836] veth1_macvtap: entered promiscuous mode [ 217.307346][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.349572][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.368862][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.383447][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.397334][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.409402][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.430965][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 217.459372][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.490601][ T8836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.523687][ T9127] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.579110][ T9127] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.637231][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.666501][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.686607][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.706483][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.722194][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.733383][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.746272][ T8836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.761343][ T8836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.793555][ T8836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.937629][ T8836] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.996490][ T8836] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.020790][ T8836] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.051794][ T9144] Bluetooth: MGMT ver 1.22 [ 218.056421][ T8836] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.471310][ T9156] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.483472][ T9156] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.710929][ T2852] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.722906][ T2852] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.846594][ T2825] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.848403][ T9171] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.855102][ T2825] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.237882][ T9186] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 219.271631][ T9186] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 219.574594][ T9201] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.620765][ T9201] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 219.866165][ T9208] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.223298][ T35] ================================================================== [ 220.232511][ T35] BUG: KASAN: slab-use-after-free in l2tp_tunnel_del_work+0xe5/0x330 [ 220.240678][ T35] Read of size 8 at addr ffff8880224190b8 by task kworker/u8:2/35 [ 220.248521][ T35] [ 220.250892][ T35] CPU: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc4-syzkaller-00836-gb0d3969d2b4d #0 [ 220.262825][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 220.273376][ T35] Workqueue: l2tp l2tp_tunnel_del_work [ 220.279632][ T35] Call Trace: [ 220.283047][ T35] [ 220.286100][ T35] dump_stack_lvl+0x241/0x360 [ 220.290825][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 220.296048][ T35] ? __pfx__printk+0x10/0x10 [ 220.300660][ T35] ? _printk+0xd5/0x120 [ 220.304831][ T35] ? __virt_addr_valid+0x183/0x520 [ 220.309963][ T35] ? __virt_addr_valid+0x183/0x520 [ 220.315119][ T35] print_report+0x169/0x550 [ 220.319737][ T35] ? __virt_addr_valid+0x183/0x520 [ 220.324979][ T35] ? __virt_addr_valid+0x183/0x520 [ 220.330113][ T35] ? __virt_addr_valid+0x44e/0x520 [ 220.335269][ T35] ? __phys_addr+0xba/0x170 [ 220.339813][ T35] ? l2tp_tunnel_del_work+0xe5/0x330 [ 220.345121][ T35] kasan_report+0x143/0x180 [ 220.349665][ T35] ? l2tp_tunnel_del_work+0xe5/0x330 [ 220.354980][ T35] l2tp_tunnel_del_work+0xe5/0x330 [ 220.360133][ T35] ? process_scheduled_works+0x945/0x1830 [ 220.366140][ T35] process_scheduled_works+0xa2c/0x1830 [ 220.371901][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 220.378092][ T35] ? assign_work+0x364/0x3d0 [ 220.382710][ T35] worker_thread+0x86d/0xd70 [ 220.387936][ T35] ? __kthread_parkme+0x169/0x1d0 [ 220.392984][ T35] ? __pfx_worker_thread+0x10/0x10 [ 220.398120][ T35] kthread+0x2f0/0x390 [ 220.402206][ T35] ? __pfx_worker_thread+0x10/0x10 [ 220.407435][ T35] ? __pfx_kthread+0x10/0x10 [ 220.412045][ T35] ret_from_fork+0x4b/0x80 [ 220.416480][ T35] ? __pfx_kthread+0x10/0x10 [ 220.421086][ T35] ret_from_fork_asm+0x1a/0x30 [ 220.425967][ T35] [ 220.429017][ T35] [ 220.431343][ T35] Allocated by task 9217: [ 220.435669][ T35] kasan_save_track+0x3f/0x80 [ 220.440359][ T35] __kasan_kmalloc+0x98/0xb0 [ 220.444983][ T35] __kmalloc_noprof+0x1f9/0x400 [ 220.449843][ T35] l2tp_session_create+0x3b/0xc20 [ 220.454922][ T35] pppol2tp_connect+0xca3/0x17a0 [ 220.460325][ T35] __sys_connect+0x2df/0x310 [ 220.465030][ T35] __x64_sys_connect+0x7a/0x90 [ 220.470067][ T35] do_syscall_64+0xf3/0x230 [ 220.474721][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.480650][ T35] [ 220.483002][ T35] Freed by task 9220: [ 220.486996][ T35] kasan_save_track+0x3f/0x80 [ 220.491691][ T35] kasan_save_free_info+0x40/0x50 [ 220.496748][ T35] poison_slab_object+0xe0/0x150 [ 220.501731][ T35] __kasan_slab_free+0x37/0x60 [ 220.506595][ T35] kfree+0x149/0x360 [ 220.510509][ T35] __sk_destruct+0x58/0x5f0 [ 220.515032][ T35] rcu_core+0xafd/0x1830 [ 220.519303][ T35] handle_softirqs+0x2c4/0x970 [ 220.524075][ T35] __irq_exit_rcu+0xf4/0x1c0 [ 220.529148][ T35] irq_exit_rcu+0x9/0x30 [ 220.533502][ T35] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 220.539150][ T35] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 220.545325][ T35] [ 220.547651][ T35] Last potentially related work creation: [ 220.553448][ T35] kasan_save_stack+0x3f/0x60 [ 220.558759][ T35] __kasan_record_aux_stack+0xac/0xc0 [ 220.564337][ T35] call_rcu+0x167/0xa70 [ 220.568520][ T35] pppol2tp_release+0x24b/0x350 [ 220.573414][ T35] sock_close+0xbc/0x240 [ 220.577673][ T35] __fput+0x406/0x8b0 [ 220.581680][ T35] task_work_run+0x24f/0x310 [ 220.586290][ T35] syscall_exit_to_user_mode+0x168/0x370 [ 220.591934][ T35] do_syscall_64+0x100/0x230 [ 220.596535][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.602529][ T35] [ 220.604854][ T35] The buggy address belongs to the object at ffff888022419000 [ 220.604854][ T35] which belongs to the cache kmalloc-1k of size 1024 [ 220.618916][ T35] The buggy address is located 184 bytes inside of [ 220.618916][ T35] freed 1024-byte region [ffff888022419000, ffff888022419400) [ 220.633961][ T35] [ 220.636302][ T35] The buggy address belongs to the physical page: [ 220.642924][ T35] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x22418 [ 220.653381][ T35] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 220.663992][ T35] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 220.673158][ T35] page_type: 0xffffefff(slab) [ 220.677942][ T35] raw: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 220.686584][ T35] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 220.695199][ T35] head: 00fff00000000040 ffff888015041dc0 0000000000000000 dead000000000001 [ 220.703889][ T35] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 220.712575][ T35] head: 00fff00000000003 ffffea0000890601 ffffffffffffffff 0000000000000000 [ 220.721258][ T35] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 220.729941][ T35] page dumped because: kasan: bad access detected [ 220.736373][ T35] page_owner tracks the page as allocated [ 220.742094][ T35] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x152820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_HARDWALL), pid 2825, tgid 2825 (kworker/u8:9), ts 140341868517, free_ts 140332370418 [ 220.762973][ T35] post_alloc_hook+0x1f3/0x230 [ 220.767850][ T35] get_page_from_freelist+0x2e43/0x2f00 [ 220.773404][ T35] __alloc_pages_noprof+0x256/0x6c0 [ 220.778611][ T35] alloc_slab_page+0x5f/0x120 [ 220.783318][ T35] allocate_slab+0x5a/0x2f0 [ 220.787830][ T35] ___slab_alloc+0xcd1/0x14b0 [ 220.792523][ T35] __slab_alloc+0x58/0xa0 [ 220.796861][ T35] __kmalloc_noprof+0x257/0x400 [ 220.801716][ T35] ieee802_11_parse_elems_full+0xdb/0x2880 [ 220.807538][ T35] ieee80211_inform_bss+0x15f/0x1080 [ 220.812834][ T35] cfg80211_inform_single_bss_data+0x1121/0x2360 [ 220.819222][ T35] cfg80211_inform_bss_data+0x3dd/0x5a70 [ 220.824893][ T35] cfg80211_inform_bss_frame_data+0x3bc/0x720 [ 220.831597][ T35] ieee80211_bss_info_update+0x8a7/0xbc0 [ 220.837254][ T35] ieee80211_ibss_rx_queued_mgmt+0x1962/0x2d70 [ 220.843421][ T35] ieee80211_iface_work+0x8a5/0xf20 [ 220.848637][ T35] page last free pid 7193 tgid 7192 stack trace: [ 220.855250][ T35] free_unref_page+0xd22/0xea0 [ 220.860051][ T35] __put_partials+0xeb/0x130 [ 220.864650][ T35] put_cpu_partial+0x17c/0x250 [ 220.869517][ T35] __slab_free+0x2ea/0x3d0 [ 220.873947][ T35] qlist_free_all+0x9e/0x140 [ 220.878635][ T35] kasan_quarantine_reduce+0x14f/0x170 [ 220.884191][ T35] __kasan_slab_alloc+0x23/0x80 [ 220.889054][ T35] kmalloc_node_track_caller_noprof+0x1cd/0x440 [ 220.895302][ T35] sctp_setsockopt+0x88/0x11c0 [ 220.900080][ T35] do_sock_setsockopt+0x3af/0x720 [ 220.905120][ T35] __sys_setsockopt+0x1ae/0x250 [ 220.910072][ T35] __x64_sys_setsockopt+0xb5/0xd0 [ 220.915109][ T35] do_syscall_64+0xf3/0x230 [ 220.919650][ T35] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 220.925563][ T35] [ 220.927912][ T35] Memory state around the buggy address: [ 220.933541][ T35] ffff888022418f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 220.941641][ T35] ffff888022419000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.949888][ T35] >ffff888022419080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.958085][ T35] ^ [ 220.964084][ T35] ffff888022419100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.972243][ T35] ffff888022419180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 220.980319][ T35] ================================================================== [ 221.017590][ T35] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 221.024840][ T35] CPU: 0 PID: 35 Comm: kworker/u8:2 Not tainted 6.10.0-rc4-syzkaller-00836-gb0d3969d2b4d #0 [ 221.034935][ T35] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 221.045007][ T35] Workqueue: l2tp l2tp_tunnel_del_work [ 221.050506][ T35] Call Trace: [ 221.054057][ T35] [ 221.056995][ T35] dump_stack_lvl+0x241/0x360 [ 221.061694][ T35] ? __pfx_dump_stack_lvl+0x10/0x10 [ 221.066908][ T35] ? __pfx__printk+0x10/0x10 [ 221.071529][ T35] ? vscnprintf+0x5d/0x90 [ 221.075882][ T35] panic+0x349/0x860 [ 221.079825][ T35] ? check_panic_on_warn+0x21/0xb0 [ 221.084996][ T35] ? __pfx_panic+0x10/0x10 [ 221.089526][ T35] ? mark_lock+0x9a/0x350 [ 221.093900][ T35] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 221.099912][ T35] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 221.105829][ T35] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 221.112266][ T35] ? print_report+0x502/0x550 [ 221.117051][ T35] check_panic_on_warn+0x86/0xb0 [ 221.122015][ T35] ? l2tp_tunnel_del_work+0xe5/0x330 [ 221.127322][ T35] end_report+0x77/0x160 [ 221.131602][ T35] kasan_report+0x154/0x180 [ 221.136127][ T35] ? l2tp_tunnel_del_work+0xe5/0x330 [ 221.141441][ T35] l2tp_tunnel_del_work+0xe5/0x330 [ 221.146576][ T35] ? process_scheduled_works+0x945/0x1830 [ 221.152308][ T35] process_scheduled_works+0xa2c/0x1830 [ 221.157889][ T35] ? __pfx_process_scheduled_works+0x10/0x10 [ 221.163912][ T35] ? assign_work+0x364/0x3d0 [ 221.168957][ T35] worker_thread+0x86d/0xd70 [ 221.173757][ T35] ? __kthread_parkme+0x169/0x1d0 [ 221.178911][ T35] ? __pfx_worker_thread+0x10/0x10 [ 221.184043][ T35] kthread+0x2f0/0x390 [ 221.188151][ T35] ? __pfx_worker_thread+0x10/0x10 [ 221.193304][ T35] ? __pfx_kthread+0x10/0x10 [ 221.197917][ T35] ret_from_fork+0x4b/0x80 [ 221.202355][ T35] ? __pfx_kthread+0x10/0x10 [ 221.207084][ T35] ret_from_fork_asm+0x1a/0x30 [ 221.211887][ T35] [ 221.215265][ T35] Kernel Offset: disabled [ 221.219944][ T35] Rebooting in 86400 seconds..