last executing test programs: 36.786657109s ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) unshare(0x8020480) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000140), 0x4) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [], 0x0, 0x0, 0x0}, 0x1a8) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$igmp(0x2, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000002380), 0xffffffffffffffff) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x18, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r3}, 0x90) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x0, @remote}], 0xff30) listen(r4, 0xfffffffc) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x4e22, @private=0xa010100}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x1d, 0x0, &(0x7f00000001c0)) sendmmsg$inet(r2, &(0x7f0000004840)=[{{&(0x7f0000000000)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="380000000000000000000000070000009404000044240901ffffffff000000007f00000100000000e00000020000000000000000000000001c000000000000000000000008000000", @ANYRES32=r2], 0x58}}], 0x1, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, &(0x7f0000000000)={0xffffffffffffffff, 0x8, 0x2, 0x5, @vifc_lcl_addr=@local, @private=0xa010102}, 0x10) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_inet_SIOCSIFFLAGS(r6, 0x89b1, &(0x7f0000000000)={'vlan0\x00'}) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x4, 0x0, 0x0) 35.83035451s ago: executing program 3: r0 = socket(0x10, 0x0, 0x0) r1 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r1, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x90) sendto$inet6(r1, &(0x7f0000000000)="80", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$inet6(0xa, 0x0, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000080)='veth1_to_bond\x00', 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000040)="ff", 0x1, 0x0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @private1}, 0x1c) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x90) setsockopt$PNPIPE_ENCAP(r2, 0x113, 0x1, &(0x7f0000000040)=0x1, 0x4) sendmsg$nl_generic(r0, &(0x7f0000000180)={&(0x7f0000000100), 0xc, 0x0}, 0x4008050) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x6800, 0xf, 0x10, 0x0, 0xff}, [], {0x95, 0x0, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) getsockopt$bt_hci(r1, 0x84, 0x7a, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) 34.804864667s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) unshare(0x10060100) (async, rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x2, [@struct={0x0, 0x1, 0x0, 0x4, 0x0, 0x0, [{0x0, 0x3}]}, @func_proto, @restrict={0x0, 0x0, 0x0, 0x9, 0x2}]}}, 0x0, 0x4a}, 0x20) (async, rerun: 32) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) socket$inet_udplite(0x2, 0x2, 0x88) (async, rerun: 64) listen(r4, 0x0) (rerun: 64) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x1, 0xa6, &(0x7f00000003c0)=""/166}, 0x80) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r6, r5, 0x7}, 0x10) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r6, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r4}, 0x20) (async, rerun: 32) sendmmsg$inet(r4, &(0x7f0000000b40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000480)="6b1ea8d70596ce2ec7", 0x9}], 0x1}}], 0x2, 0x2004c0f0) (rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x4}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{r7}, &(0x7f0000000180), &(0x7f00000005c0)}, 0x20) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000300)={0xa, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000340)=0x2c) (async) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="df4800000000000000000c00000004000380200001801400020067656e6576653100000000000000000008000100", @ANYRES32=r10, @ANYBLOB="1c41d2d2bb2deaa969155690624ca27d9ddef87ed73f3e89ceb7c18871e31f6dba4fc61d4e7f6e3f28819e5a2e7ce0d2e9ce514e4960978efab7920a367cbd743750fe31b29b675e6f6ff965c526917f70c21c3dd0d34518054cfe52f46c27a7d0390470cbe204b4c3982ab9dc08f27d537af34081abf25e97faebf777ae"], 0x38}}, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000180), r11) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="0100000000000000000001000000080002000200000014000480050003000200000005000300010000000800010001000000"], 0x38}}, 0x0) (async, rerun: 32) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'pimreg\x00', &(0x7f00000001c0)=@ethtool_rx_ntuple={0x35, {0x10, @ah_ip4_spec={@empty, @empty, 0x65c, 0x5}, @sctp_ip4_spec={@rand_addr=0x64010102, @local, 0x4e23, 0x4e21, 0x3f}, 0x80, 0x1, 0x9, 0xb1, 0xffffffffffffffff}}}) (rerun: 32) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x1a, &(0x7f0000000080)={r1}, &(0x7f00000000c0)=0x18) 34.504989934s ago: executing program 1: r0 = socket$nl_sock_diag(0x10, 0x3, 0x4) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r1, 0xfffffffc) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000140)=[@in6={0xa, 0x4e21, 0xb17, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) sendmsg$SOCK_DIAG_BY_FAMILY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000140000012cbd7000fbdbdf0400000000000000a095532602365ac9da2cdb54c295c2c7da8e89e1610b79c10b86c6470f27914d19b04ba830f864b8631ff8f9cc0896d8605a250f3e859b4143b0acf8d24c70500400000000"], 0x5c}, 0x1, 0x0, 0x0, 0x4044001}, 0x4085) socket$nl_route(0x10, 0x3, 0x0) 34.488493695s ago: executing program 4: syz_genetlink_get_family_id$nl80211(&(0x7f000000c140), 0xffffffffffffffff) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffff8, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x8000001}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={&(0x7f0000000240)="7d2ad756f0e12701c76dc9d342280cb1b9de9a8b9db91400a7307ce0fb93679a8748071b9b6b72df7b0a729caa38b96ed97c2330cbaa416b6028619d1e05d691eba6d7a9e6e2a820495462cd2a53d1597c880bdcc44bd582a79124ae55523eee7c41ea429e37dcd9892efe6a3fd7b46a0145a2a397cd08e14c454438aee6e078a55354708f67085464423e3c3e30decd97d21e762f31a845c3238ed2960b1fe51cd9beee812013a0e0124b7a2ca211b2124f78a80f638a2b9d309d872e10da1462df43169b7a6845f3ab1e524eabb1e39673494a197d88e1e922b9edcfb351", &(0x7f0000000340)=""/141, &(0x7f0000000500)="ade56e4172a457a16fbecbf5c9eed63b3d8b7a49141c7c8b9fad88833dbdb8fcad9e13f5f3c66d4626963f6211d65ba7930d2cd0f85d76c1af3dcaccd7dab4fc94b5fa0212f61e1e977e9aad1bd88b291feb52fc88c17bccff336f7b0fdd4ff025a73cf1329cf9bfbd14365f8e229afdbd9d2c95a23ced42d7bfc56bcb7e984ee4ec", &(0x7f0000000400)="5905019e5a9a112a4916479abc72a0f772b0af1b75b38f011c2c589ba80b03f73c18c7b99aab68f8666b5f806c6e8c07dc7589836448dcabae5d0627b8ffd19c6d81133aaa6d1b349ab4632af00bf1108978bac1ec423a4c3b01d2c8", 0x7f, r0}, 0x38) syz_genetlink_get_family_id$smc(0x0, 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000004f4b000000000000000000180100002020702000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) accept4(r1, &(0x7f0000000680)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000840)=0x80, 0x0) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_bt_hci(r1, 0x800448d5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001fd8)=ANY=[@ANYBLOB="850000002a00000084000000000000009500000000000000"], &(0x7f0000000180)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000001c0)=r2, 0x4) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB="3a00030007"], 0xd) 34.400216841s ago: executing program 0: r0 = socket$kcm(0x2, 0x1, 0x84) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f00000003c0)=[{}, {0x10000002}]}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) recvmsg$unix(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) setsockopt$sock_attach_bpf(r0, 0x84, 0x64, &(0x7f0000000000)=r3, 0x10) sendmsg$inet(r0, &(0x7f0000000140)={&(0x7f0000000280)={0x2, 0x0, @local}, 0x10, &(0x7f0000000680)=[{&(0x7f00000000c0)="ee", 0x34000}], 0x1, 0x0, 0x9}, 0x0) 34.331413975s ago: executing program 1: connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000000)={0x1f, 0x0, @none}, 0xe) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000000)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x14, &(0x7f0000000600)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @printk={@lu}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f0000000000), &(0x7f00000000c0)=""/109}, 0x20) 34.300867057s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x70, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e23, 0x6, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x1, 0x0}}, 0xd2b9}}, [0x2, 0x9, 0x1, 0x0, 0x7, 0xffffffffffffffff, 0xffffffff, 0x5, 0x8, 0x9, 0x1f, 0x51e1, 0x9, 0x2, 0x7]}, &(0x7f0000000100)=0x100) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x77, &(0x7f0000000140)={r1, 0x5, 0x8, [0x7, 0x400, 0x6, 0x3f, 0x0, 0x1, 0x7, 0x1]}, &(0x7f0000000180)=0x18) 34.272345534s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_MOD(0xffffffffffffffff, 0x3, r0, &(0x7f0000000340)={0x10000011}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) (async) r1 = socket(0x840000000002, 0x3, 0x100) (async) r2 = socket(0x25, 0x6, 0x0) accept4$tipc(r2, 0x0, 0x0, 0x0) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000040), 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async, rerun: 32) socketpair(0x3, 0x0, 0x400, &(0x7f0000000200)) r4 = gettid() syz_open_procfs$namespace(r4, 0x0) (async, rerun: 64) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async, rerun: 64) socket$inet6(0xa, 0x4, 0x6) getgid() ioctl$sock_SIOCGPGRP(0xffffffffffffffff, 0x8904, 0x0) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, 0x0) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, 0x0) (async, rerun: 32) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) (async, rerun: 32) getgid() (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async, rerun: 32) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x54890) (rerun: 32) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) (async) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) (async) sendmsg$NLBL_MGMT_C_ADDDEF(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) 34.251023749s ago: executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d098299e", 0x4}, {&(0x7f0000000080)="9416863cad598f64a20a62f948a29fe2c3a0b69e1736da2327e894e9cf74aa6b8a762ff96296523e346b406b2edd53644d60dad07bf681566bb2affbdc036464ec1c68651426d9b720eaba44f690e864645a717062c75a4d3150653434a6a7be45787ff532cdd6141047f23bdda4d2d2f8acfee395a45641d5b20416eee0f64e", 0x80}, {&(0x7f0000000140)="424e51ebbca9f944a53f03b07526a62c40b66fa1d54c81472e54b599844572838e10014f514761d0f505a03ff4141a75191a654f647316286b6f76dbd8ec07e7e0d9f120d45eebbb6900be88aafe74f5bff217426252d9232e65c64f0af88c0702b441a7c01f73d9215549917649e274b3fdf4196248f85830790ae62e76ed67761985fd331ceb293cbd14b829df08234cbcdfe25c7a7b7d7122fe7d765228f50f5d1864fc5adc24651d3d84e330bb1c50", 0xb1}, {&(0x7f0000000200)="4186ce983217cd7300e3637c0fc57310acf0f06c864ef787d901ebe1648f6584a5317526f0e98412bcc7eede8e93b9994e84404d5182b6fa7e22d00addcdf4cbc037116c3e3428c4718d8a2939bb762660d738f38b0d65908282f34733eef481abb4a966560b0ab4e0cd01097fa443bff3024bc3e870dabbd6a070f2c3a30b9d0258ec1bb7aecb24e3fdce33", 0x8c}], 0x4, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x20}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa944}}], 0x60}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 34.209526883s ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'lo\x00', 0x4000}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000003c0)={0x20}) write$cgroup_int(r1, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380), 0x101bf) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r7, @ANYBLOB="0103000000000000000008000000b00004801300010062726f6164636173742d6c696e6b00000900010073797a31000000000c0007800800010000000000240007800800020009000000080004004b000000080004000000000008000400010000803c0007800800040000dfffff0700030000000000080002000000000008000200000000000800030000000000080004000000000008000100000000001300010062726f6164636173742d6c696e6b00000900010073797a31f7"], 0xc4}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000300)={0x0, r5, 0x0, 0x2}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000400)) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r5}) 34.161791274s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x14, 0x2, 0x0, 0x1, {{0x8}, {0x8}}}}}]}, 0x40}}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000000440)=0x800037a, 0xfffffffffffffeb8) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x2e0, 0x0, 0x4c, 0x1a, 0x130, 0x73, 0x210, 0x258, 0x258, 0x210, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x73}, 0x0, 0x100, 0x130, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x0, 0x3, 0x0, 0x6}}, @common=@ipv6header={{0x28}, {0x0, 0x0, 0x1}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x340) bind$inet6(r3, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r5 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x228, 0xd8, 0x11, 0x148, 0x0, 0x0, 0x190, 0x2a8, 0x2a8, 0x190, 0x2a8, 0x3, 0x0, {[{{@ip={@loopback, @private, 0x0, 0x0, 'nicvf0\x00', 'syzkaller1\x00', {}, {}, 0x0, 0x0, 0x40}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x288) r6 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) listen(r3, 0x80) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) mmap(&(0x7f000001c000/0x1000)=nil, 0x1000, 0x0, 0x10010, 0xffffffffffffffff, 0x185fb000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="f3fefeff", @ANYRES16=0x0, @ANYBLOB="0700000800000000000002000000000006800000040000000000000000000000ffffe00000010000050008000000"], 0x18}, 0x1, 0x0, 0x0, 0x24088845}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x88, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0x0, 0xffe0}}}, 0x24}}, 0x0) 34.090284796s ago: executing program 0: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffffffff}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmmsg$inet6(r0, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) syz_extract_tcp_res$synack(0x0, 0x1, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000002200)=ANY=[@ANYRES32], 0x188) syz_emit_ethernet(0x0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x0, 0x3a, 0x0, 0x0, 0xffffffff}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000002480)={0x0, 0xc, &(0x7f0000002700)=ANY=[@ANYBLOB="0300000000000000562a7d5736260b00da85100000000000000000000000183d0000", @ANYBLOB, @ANYRES16], &(0x7f0000001cc0)='syzkaller\x00', 0x9, 0x0, 0x0, 0x41100, 0x9, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x8, &(0x7f0000002400)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000002440)={0x3, 0xf, 0x1}, 0x10}, 0x90) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$unix(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001300)=[{0x0}, {0x0}, {0x0}, {&(0x7f00000007c0)}, {&(0x7f0000000b80)}], 0x5, &(0x7f0000001380)=ANY=[@ANYRESOCT, @ANYBLOB="e5ed14094a0e6f740d432a18053ed04f4f603d65b010e931230f99380e94e84464691d5d75f137d40cf8e95735dcee504a79af29f1ba170e768af2670ef647cc0f624223572b481b3560187c7725db45122d4722de29084760bd34e889dcae7b000000000000c8ee563bc5094e06055c8b602ceac730966188507118e91688be5afe953706a4c3a2449e0bf429374d3e6c1062e93b8919", @ANYRESOCT, @ANYRES32, @ANYRES32, @ANYRESHEX, @ANYRES64, @ANYRES32, @ANYRES32=0x0, @ANYRESHEX, @ANYBLOB="000000001cf8fe961a0000000000000000000000fa044b2c5e7c3a0be15800af3c89e24cfc0318ca42ce1a2f329923aa3d", @ANYRES32=0x0, @ANYRES8, @ANYRESDEC], 0xffffffa1}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001000)=[{0x0, 0x2c}, {&(0x7f0000002800)=ANY=[], 0x200}, {&(0x7f0000000f00)=ANY=[], 0x16c}], 0x3}, 0x0) syz_emit_ethernet(0x106e, &(0x7f0000006640)=ANY=[@ANYBLOB, @ANYRES32=0x41424344, @ANYRES32, @ANYBLOB="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"], 0x0) 33.926995485s ago: executing program 4: sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000001280)=ANY=[], 0x6) recvmmsg(r0, &(0x7f0000000600), 0x204083acb88ff8b, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x78}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 33.909258155s ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="680000001000370429bd70000000000000000000", @ANYRES32, @ANYBLOB="93040400000000004800128008000100736974003c00028006000f000000000008000100", @ANYRESDEC=r0, @ANYBLOB="08000300ffffffff0800ff03ef000000080002006401010005000a00000000000600080003"], 0x68}}, 0x0) 33.829858538s ago: executing program 1: syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000080), 0xc060080) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x400448c9, 0x0) 33.736359644s ago: executing program 3: r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000"], &(0x7f0000000140)='GPL\x00'}, 0x90) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0x30, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe33, 0xfffffffffffffda7, 0x0, 0x0}, 0x40) 33.708836672s ago: executing program 2: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) socket(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000540)="2ff43efaf3daf440ebfeea14a3394f138ae528cbf466db3100ff9427a3b77bb6463c56b9cdaf45e34faee7a1084df087d0d372199959825a393cf400cb377dfa449ca54e5a155d81930d6ffd0ed9bda4e5a9fd21827456a755e1f680b30a344d1633bbcdcaeebcbcd30937", 0x6b, 0x20000885, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0), 0x4) write$binfmt_script(r2, &(0x7f0000000200), 0xfffffd9d) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000300)='hybla\x00', 0x6) sendfile(r1, r2, 0x0, 0x8000002b) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x2}, 0xe) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, 0x0, 0x0) listen(r0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a300e000000080003"], 0x64}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x38, 0x10, 0x200, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2d20, 0x4d880}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x4}}}]}, 0x38}}, 0x0) 33.554090847s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r3 = socket$pppoe(0x18, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) socketpair(0x1d, 0x3, 0x1, &(0x7f0000000080)) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, 0x0}, 0x90) sendmsg$nl_route(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000014000100000000000000000002000000", @ANYRES32=r6, @ANYBLOB="08000b000000000008000200ac1e0001140006"], 0x3c}}, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYRES64=0x0, @ANYRES64=0x2710, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="00000000000000596fe58e6e0c60f940e7134d98d9e6feae977b2b5d20e48b74b1bb6e0237543728fe5ca9ac1b25fbfeb5f988040aff0989f99ad9ea6740281163721a12275ca62b1ffdefd3c3e87961f4aaf03abda0c465ab67e08d0e6ac3e18525295556728e049dbb924c05be19b3b063ff2cad3a4d6b1b9c5060c5077667adb7b02e57d7435c859d0566862cf2d94f772acd45738f329b8a6ed8d683ee1c13645b0d55277c65eca5ed249a7d1435a8eac689bc06f5057b01bfd7c8ae4539"], 0x48}}, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r10 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r10, 0x10e, 0x4, &(0x7f0000000000)=0x2, 0x4) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r10, &(0x7f0000009340)={&(0x7f0000009140), 0xc, &(0x7f0000009300)={0x0}, 0x1, 0x0, 0x0, 0x844}, 0x20048001) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=ANY=[@ANYBLOB="44000006100003052bbd7000009d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010041800400140012800b0001006d616373656300000400028008000500", @ANYRES32=r9, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r12, @ANYBLOB], 0x44}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {0xd}, {0x0, 0x8}}}, 0x742236f21f611466}}, 0x0) connect$pppoe(r3, &(0x7f0000004480)={0x18, 0x0, {0x4, @broadcast, 'veth0_virt_wifi\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(r3, 0x80047453, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r2}, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, {}, {0x1}}}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, &(0x7f0000000780)=ANY=[@ANYBLOB="020000000000000002004e22e0000002000000000000000000000000000000000000000000000000000000000100000000000000000000030000000000000000000000000000000000000000000000000000000000000000000000000000000900000000000000000000000000000000000000000000000000000000000000000000000000000000010000000200000002000000e000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x190) 33.479002606s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x3000000}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000002c0)=0x2000000) write$cgroup_int(r1, &(0x7f0000000140), 0x12) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c000000150000000000000000000000002000050000000a00"], 0x1c}}, 0x0) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) bind$tipc(0xffffffffffffffff, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) listen(0xffffffffffffffff, 0x0) socket$alg(0x26, 0x5, 0x0) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r3 = bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'sha224-ssse3\x00'}, 0x58) r5 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@ifindex, 0x26, 0x1, 0x100, &(0x7f0000000140), 0x3e, 0x0, &(0x7f00000000c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240), &(0x7f0000000140), 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000001c0)={@map=0x1, r3, 0x17, 0x10, r3, @link_fd=r5, r6}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB], 0x0}, 0x90) r7 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r7, &(0x7f00000006c0)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x0, [@null, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) write$binfmt_script(r7, 0x0, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES8], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x19}, 0x90) 33.440554388s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_SYNC(r0, 0x9408, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x41, &(0x7f0000000080)=0x853, 0x4) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r1, &(0x7f0000000a80)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=""/51, 0x33}}], 0x1, 0x2020, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x8, &(0x7f00000002c0)={&(0x7f0000000540)=@newtaction={0x48, 0x31, 0x1, 0x0, 0x0, {0x0, 0x0, 0x11}, [{0x34, 0x1, [@m_police={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x3}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x28, 0x1, 0x0, 0x0, "", [@nested={0x105, 0x0, 0x0, 0x1, [@typed={0xc, 0x3, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@dev}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) r3 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) r4 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000ffffffff18110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70200001400b600b7030000000000108500000008000000bc09000000000000550901000000000095000000c7119dedbf91000000000000b7020000000000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) socket$igmp6(0xa, 0x3, 0x2) write$cgroup_subtree(r3, &(0x7f0000000040)={[{0x0, 'rdma'}]}, 0x6) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) 32.817700677s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x120, 0xc, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0xf8, 0x3, 0x0, 0x1, [{0xf4, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0xf0, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xea, 0x1, "7d399cd7d27e3d2fc67f70cc0290f1bb6b2b971e975852d612013133751ca0ab5a87ca3aa598e763fa9f648591e2e2b39e3340f61558be78a6cc9b9722c64745ca778c04982630e850a752f5cd2625c8a3da5e53592cd24bc8d50232ab787046ab47c2fac3cc32557862f66f7774a020b1ccdb4a840ef8b754571d2e0449f4fa207e0f8841bde183fd6ce996cf9b5d9126c9a9a883bf18eb50836f8633d5ecd22839d4a59a17fc0652b465ce2db1711ff0022b4675d5a3366fdc7cd4e07fa0e3e1f82da412bc587a6e6297afaef314780e155325e7e64d635bc1163b81ef9f12f9e5e69e9b96"}]}]}]}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x1a4}}, 0x0) 32.639691993s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2}, 0x18) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xf101}) ioctl$TUNGETVNETHDRSZ(r3, 0x800454d7, &(0x7f00000000c0)) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r4, &(0x7f0000000140)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a0155b0962f0000008001edfffeffe809000000fff5dd0000001000010009080800418e00000504fcff", 0x58}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x5) sendmsg$nl_route_sched(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}}, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r6, &(0x7f0000000200)=ANY=[@ANYBLOB="3200030007", @ANYRES16=r8], 0xd) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000700)=[{0x2, 0x3}, {0x2}, {}], 0x60) r9 = socket$can_bcm(0x1d, 0x2, 0x2) r10 = socket(0x11, 0x800000003, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x3, 0x1}}}}]}, 0x40}, 0x1, 0x7a00}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0x0, {0x0, 0x0, 0x0, r13}}, 0x24}}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r14, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 30.084323031s ago: executing program 4: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r2, &(0x7f0000000300)={0x2, 0xe, @local}, 0x10) 30.024178568s ago: executing program 4: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast1}}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x14) close(r0) sendmsg$inet(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000040)="d098299e", 0x4}, {&(0x7f0000000080)="9416863cad598f64a20a62f948a29fe2c3a0b69e1736da2327e894e9cf74aa6b8a762ff96296523e346b406b2edd53644d60dad07bf681566bb2affbdc036464ec1c68651426d9b720eaba44f690e864645a717062c75a4d3150653434a6a7be45787ff532cdd6141047f23bdda4d2d2f8acfee395a45641d5b20416eee0f64e", 0x80}, {&(0x7f0000000140)="424e51ebbca9f944a53f03b07526a62c40b66fa1d54c81472e54b599844572838e10014f514761d0f505a03ff4141a75191a654f647316286b6f76dbd8ec07e7e0d9f120d45eebbb6900be88aafe74f5bff217426252d9232e65c64f0af88c0702b441a7c01f73d9215549917649e274b3fdf4196248f85830790ae62e76ed67761985fd331ceb293cbd14b829df08234cbcdfe25c7a7b7d7122fe7d765228f50f5d1864fc5adc24651d3d84e330bb1c50", 0xb1}, {&(0x7f0000000200)="4186ce983217cd7300e3637c0fc57310acf0f06c864ef787d901ebe1648f6584a5317526f0e98412bcc7eede8e93b9994e84404d5182b6fa7e22d00addcdf4cbc037116c3e3428c4718d8a2939bb762660d738f38b0d65908282f34733eef481abb4a966560b0ab4e0cd01097fa443bff3024bc3e870dabbd6a070f2c3a30b9d0258ec1bb7aecb24e3fdce33", 0x8c}], 0x4, &(0x7f0000000300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x20}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xa944}}], 0x60}, 0x8000) socket$nl_generic(0x10, 0x3, 0x10) 3.513767861s ago: executing program 3: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000200)='cpuacct.usage_user\x00', 0x275a, 0x0) r2 = socket$netlink(0x10, 0x3, 0xb) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r4}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x5, 0x0, 0x1, {0x4}}]}]}, 0x2c}}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000280)={'lo\x00', 0x4000}) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f00000003c0)={0x20}) write$cgroup_int(r1, &(0x7f0000000040), 0xfea0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000380), 0x101bf) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000006c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="c4000000", @ANYRES16=r7, @ANYBLOB="0103000000000000000008000000b00004801300010062726f6164636173742d6c696e6b00000900010073797a31000000000c0007800800010000000000240007800800020009000000080004004b000000080004000000000008000400010000803c0007800800040000dfffff0700030000000000080002000000000008000200000000000800030000000000080004000000000008000100000000001300010062726f6164636173742d6c696e6b00000900010073797a31f7"], 0xc4}}, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r5, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000300)={0x0, r5, 0x0, 0x2}) ioctl$FS_IOC_GETFSLABEL(r1, 0x81009431, &(0x7f0000000400)) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffffffff}) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000080)={0x0, r5}) 3.461095039s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000080)=@framed={{}, [@btf_id]}, &(0x7f0000000100)='syzkaller\x00', 0x6}, 0x90) socket$inet6(0xa, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) bind$inet6(0xffffffffffffffff, 0x0, 0x0) listen(0xffffffffffffffff, 0x0) r0 = socket(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'bridge_slave_1\x00', 0x0}) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000000)=0x3, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000140)=0x289e, 0x4) bind$packet(r0, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) sendto$packet(r0, &(0x7f00000002c0)="fb57975e267951722b395d37bac8", 0xe, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x2000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) r3 = epoll_create1(0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x60, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000000c0)='mmap_lock_acquire_returned\x00', r4}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000340), 0x8) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f, 0x0, 0xffffffffffffffff, 0x40}, 0x48) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000040)={0x20000004}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000a40)={0x40, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_TX_RATES={0x24, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x20, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xa73, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff]}}]}]}]}, 0x40}}, 0x40084) 3.424329027s ago: executing program 2: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, 0x0, &(0x7f00000000c0)) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="680000001000370429bd70000000000000000000", @ANYRES32, @ANYBLOB="93040400000000004800128008000100736974003c00028006000f000000000008000100", @ANYRESDEC=r0, @ANYBLOB="08000300ffffffff0800ff03ef000000080002006401010005000a00000000000600080003"], 0x68}}, 0x0) 2.616046737s ago: executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x4e4, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x450, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0xaa}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x434, 0x6, [@m_tunnel_key={0x140, 0x0, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c}]}, {0xf1, 0x6, "d6ffbaa2d807e57d2fb5d20d34548ab7b37f8349e465ab4b081af6c4d264921cd8c936c513978e97737d21a5ab41e1e2d97b9274a9713da8bb2a7790e43e58a9382a0fefc1b0bd95680829a8f749c4a1b7578673e50b8c1f238e0564b2e86011a210d9798298010cdd47394ed3cf832f5a7cb7207d71e03efd3449463f6f23d4b2343ef7a21bade823b43fe276d1256ce22abacd5ac6cf14007e3e50df98b3a0ba69017e92816025e7ed3480f55d4bc6fd3ad7936845054ded5a03ac3666e0a223ed11842f19025ef317434e863afa0f7496bc06c02e425a42d3726cf12ea5cae79d407b644262f795ec248a49"}, {0xc}, {0xc}}}, @m_ife={0xc8, 0x0, 0x0, 0x0, {{0x8}, {0x34, 0x2, 0x0, 0x1, [@TCA_IFE_TYPE={0x6}, @TCA_IFE_SMAC={0xa, 0x4, @local}, @TCA_IFE_PARMS={0x1c}]}, {0x6d, 0x6, "68f33c84b776915719434abe46a9ad66388de7f727e754e0482910d008dee0199b585271d39abe13f7c59928211ea2eea798182b0caf370760e543f9c63a2fafb29bde21d4a4166ea1d1c4e6f61174108c064b3b9a7cf04e9b165a21eef5e591bb3d865a0f1d264787"}, {0xc}, {0xc}}}, @m_nat={0x7c, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x3}}}}, @m_connmark={0xec, 0x0, 0x0, 0x0, {{0xd}, {0x58, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0xffffffff}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4}}}]}, {0x65, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7d66cf821e93079c15dda212b0b37b761856342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e"}, {0xc, 0x7, {0x0, 0x1}}, {0xc}}}, @m_bpf={0x70, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x3d, 0x6, "538ccaa56078deef003c66568338f89ce81cefabfec7b5ecd9cf6ec4c86d636a2b2cee0c35637b64dc5c63c60e180d0c44ef1e097dda82cf07"}, {0xc}, {0xc}}}, @m_ctinfo={0x50, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0x19, 0x6, "41be356e964e7745f9a57571dce1c50c2bf05086e1"}, {0xc}, {0xc}}}]}]}}]}, 0x4e4}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$xdp(0xffffffffffffffff, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f00000000c0)=ANY=[@ANYBLOB="02"], 0x8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x0) connect$pppoe(0xffffffffffffffff, &(0x7f00000000c0)={0x18, 0x0, {0x0, @local, 'nicvf0\x00'}}, 0x1e) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) socket$inet6(0xa, 0x4, 0x9) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r3, 0x1, 0x0, 0x6, @local}, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000000000000000000000180000000000000000000000000000002a0000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="720aacff0000000071101d000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ff00ff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x10) close(r5) close(r4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000140)) r7 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000540)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x9, 0xc9, &(0x7f00000002c0)=""/201, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x5}, 0x8, 0x10, &(0x7f0000000000)={0x0, 0x10}, 0x10}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r8, r7, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r8}, &(0x7f0000000000), &(0x7f0000000080)=r5}, 0x20) 0s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000647e674685000000040000001801000020756c2500000000002020207b1ae8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_gettime(0x2, &(0x7f0000000000)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000780)}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)="d8000000210081044e81f782db44b904020000", 0x13}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0x33fe0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f00000001c0)='block_plug\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x43400) socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x9a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x4, 0xe, &(0x7f0000001f40)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0), 0xfffffedf, 0x10, &(0x7f0000000040), 0xffffff95, 0x0, 0xffffffffffffffff, 0xd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={r6, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r8 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000700)={r7}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x0, 0x10, 0x0, &(0x7f00000004c0)="63eced8e46dc3f0adf33c9f7b9862716", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r4, @ANYBLOB="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"], 0x270}}, 0x0) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x3}, 0x4) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x30, r11, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0x8}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3f}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0xa8, r11, 0x1, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x101, 0x1b}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x5}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x336}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x59}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14c8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x10001}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x4}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xe}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x5}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x6}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x49}]]}, 0xa8}, 0x1, 0x0, 0x0, 0x24040845}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.89' (ED25519) to the list of known hosts. 2024/06/11 08:30:26 fuzzer started 2024/06/11 08:30:26 dialing manager at 10.128.0.169:30018 [ 54.014126][ T5088] cgroup: Unknown subsys name 'net' [ 54.189825][ T5088] cgroup: Unknown subsys name 'rlimit' 2024/06/11 08:30:27 starting 5 executor processes [ 55.304167][ T5090] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.080117][ T5109] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.089009][ T5109] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.106983][ T5109] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.137088][ T5109] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.144949][ T5109] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.152767][ T5109] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.250227][ T4489] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.258942][ T4489] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.266818][ T4489] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.276773][ T4489] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.284717][ T4489] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.292235][ T4489] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.389118][ T4489] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.416428][ T4489] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.426271][ T5117] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.447348][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.455188][ T5117] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.461471][ T5122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.469968][ T5118] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.478792][ T5122] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.487516][ T5122] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.495688][ T5122] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.495899][ T5124] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.502928][ T5122] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.519274][ T5109] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.528243][ T5109] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.535831][ T5109] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.565887][ T5109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.580485][ T5109] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.587991][ T5109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.714083][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 56.899175][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 56.935135][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.944152][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.951953][ T5110] bridge_slave_0: entered allmulticast mode [ 56.959449][ T5110] bridge_slave_0: entered promiscuous mode [ 57.001322][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.008634][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.015749][ T5110] bridge_slave_1: entered allmulticast mode [ 57.022968][ T5110] bridge_slave_1: entered promiscuous mode [ 57.122910][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.130314][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.137604][ T5107] bridge_slave_0: entered allmulticast mode [ 57.144298][ T5107] bridge_slave_0: entered promiscuous mode [ 57.154112][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.166746][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.196399][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.204115][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.212288][ T5107] bridge_slave_1: entered allmulticast mode [ 57.219662][ T5107] bridge_slave_1: entered promiscuous mode [ 57.287538][ T5110] team0: Port device team_slave_0 added [ 57.308548][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 57.328743][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.341305][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.351682][ T5110] team0: Port device team_slave_1 added [ 57.420225][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.427868][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.453925][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.494782][ T5107] team0: Port device team_slave_0 added [ 57.504264][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.511594][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.537883][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.574605][ T5107] team0: Port device team_slave_1 added [ 57.606830][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.613901][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.639827][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.651149][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 57.680112][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.687187][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.713190][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.788042][ T5110] hsr_slave_0: entered promiscuous mode [ 57.794383][ T5110] hsr_slave_1: entered promiscuous mode [ 57.873448][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.881555][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.891709][ T5112] bridge_slave_0: entered allmulticast mode [ 57.899120][ T5112] bridge_slave_0: entered promiscuous mode [ 57.910872][ T5107] hsr_slave_0: entered promiscuous mode [ 57.917610][ T5107] hsr_slave_1: entered promiscuous mode [ 57.923720][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.932300][ T5107] Cannot create hsr debugfs directory [ 57.959800][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.967449][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.974616][ T5112] bridge_slave_1: entered allmulticast mode [ 57.982405][ T5112] bridge_slave_1: entered promiscuous mode [ 58.001553][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 58.052560][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.111684][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.195214][ T5112] team0: Port device team_slave_0 added [ 58.206629][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.214614][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.222186][ T4489] Bluetooth: hci0: command tx timeout [ 58.222881][ T5115] bridge_slave_0: entered allmulticast mode [ 58.234892][ T5115] bridge_slave_0: entered promiscuous mode [ 58.260273][ T5112] team0: Port device team_slave_1 added [ 58.280309][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.287611][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.294944][ T5115] bridge_slave_1: entered allmulticast mode [ 58.302148][ T5115] bridge_slave_1: entered promiscuous mode [ 58.373178][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.387476][ T4489] Bluetooth: hci1: command tx timeout [ 58.398352][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.405403][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.431933][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.445653][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.452774][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.480737][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.492910][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.500435][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.508023][ T5114] bridge_slave_0: entered allmulticast mode [ 58.514976][ T5114] bridge_slave_0: entered promiscuous mode [ 58.529441][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.572294][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.579684][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.587022][ T5114] bridge_slave_1: entered allmulticast mode [ 58.593783][ T5114] bridge_slave_1: entered promiscuous mode [ 58.617502][ T5109] Bluetooth: hci3: command tx timeout [ 58.623185][ T5109] Bluetooth: hci2: command tx timeout [ 58.629201][ T4489] Bluetooth: hci4: command tx timeout [ 58.640260][ T5115] team0: Port device team_slave_0 added [ 58.649359][ T5115] team0: Port device team_slave_1 added [ 58.713438][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.741438][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.748861][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.774932][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.804299][ T5112] hsr_slave_0: entered promiscuous mode [ 58.811416][ T5112] hsr_slave_1: entered promiscuous mode [ 58.817909][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.825461][ T5112] Cannot create hsr debugfs directory [ 58.834701][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.858332][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.865310][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.897522][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.991233][ T5114] team0: Port device team_slave_0 added [ 59.001809][ T5115] hsr_slave_0: entered promiscuous mode [ 59.009539][ T5115] hsr_slave_1: entered promiscuous mode [ 59.015599][ T5115] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.024844][ T5115] Cannot create hsr debugfs directory [ 59.053405][ T5114] team0: Port device team_slave_1 added [ 59.132934][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.140067][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.166221][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.179013][ T5107] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.192362][ T5107] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.224734][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.232068][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.258538][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.302783][ T5107] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.336444][ T5114] hsr_slave_0: entered promiscuous mode [ 59.342975][ T5114] hsr_slave_1: entered promiscuous mode [ 59.352048][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.359718][ T5114] Cannot create hsr debugfs directory [ 59.365454][ T5107] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.516150][ T5110] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.535106][ T5110] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.566517][ T5110] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.610692][ T5110] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.669158][ T5112] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.686116][ T5112] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.720362][ T5112] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.744910][ T5112] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.847599][ T5115] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.881723][ T5115] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.894073][ T5115] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.938844][ T5115] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.962657][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.005690][ T5114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 60.017913][ T5114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 60.059819][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.068118][ T5114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 60.078816][ T5114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 60.108797][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.116080][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.149697][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.156922][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.199350][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.266311][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.298618][ T5109] Bluetooth: hci0: command tx timeout [ 60.300928][ T5155] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.311128][ T5155] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.323783][ T5155] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.330918][ T5155] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.386379][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.458120][ T5109] Bluetooth: hci1: command tx timeout [ 60.464018][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.551156][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.558332][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.599109][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.613368][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.620563][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.638874][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.693681][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.701580][ T5109] Bluetooth: hci2: command tx timeout [ 60.707285][ T53] Bluetooth: hci3: command tx timeout [ 60.712757][ T4489] Bluetooth: hci4: command tx timeout [ 60.762119][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.773644][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.780781][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.802196][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.839098][ T5112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.868304][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.875540][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.901544][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.908677][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.949461][ T5119] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.956592][ T5119] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.054053][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.107735][ T5114] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.178975][ T5107] veth0_vlan: entered promiscuous mode [ 61.275697][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.290618][ T5107] veth1_vlan: entered promiscuous mode [ 61.314200][ T5110] veth0_vlan: entered promiscuous mode [ 61.374068][ T5110] veth1_vlan: entered promiscuous mode [ 61.402391][ T5107] veth0_macvtap: entered promiscuous mode [ 61.448947][ T5107] veth1_macvtap: entered promiscuous mode [ 61.480420][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.516404][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.558835][ T5107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.568585][ T5107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.581005][ T5107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.590082][ T5107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.619270][ T5110] veth0_macvtap: entered promiscuous mode [ 61.646942][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.673964][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.700240][ T5112] veth0_vlan: entered promiscuous mode [ 61.722443][ T5110] veth1_macvtap: entered promiscuous mode [ 61.772010][ T5112] veth1_vlan: entered promiscuous mode [ 61.893414][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.905629][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.918621][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.930422][ T5112] veth0_macvtap: entered promiscuous mode [ 61.955631][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.957636][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.978836][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.989169][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.005320][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.025032][ T5112] veth1_macvtap: entered promiscuous mode [ 62.052941][ T5110] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.068660][ T5110] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.077937][ T5110] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.086675][ T5110] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.177826][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.184516][ T5114] veth0_vlan: entered promiscuous mode [ 62.185671][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.247384][ T5114] veth1_vlan: entered promiscuous mode [ 62.274637][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.286752][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.297815][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.308892][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.320331][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.377889][ T4489] Bluetooth: hci0: command tx timeout [ 62.400330][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.418996][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.453019][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.465268][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.476157][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.487504][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.500890][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.537574][ T4489] Bluetooth: hci1: command tx timeout [ 62.552017][ T5115] veth0_vlan: entered promiscuous mode [ 62.569351][ T5112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.578590][ T5112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.593692][ T5112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.602605][ T5112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.633075][ T1111] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.647809][ T1111] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.678656][ T5115] veth1_vlan: entered promiscuous mode [ 62.711003][ T5114] veth0_macvtap: entered promiscuous mode [ 62.769826][ T5114] veth1_macvtap: entered promiscuous mode [ 62.778737][ T5109] Bluetooth: hci2: command tx timeout [ 62.784204][ T53] Bluetooth: hci3: command tx timeout [ 62.791654][ T4489] Bluetooth: hci4: command tx timeout [ 62.877135][ T5196] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 62.931469][ T5196] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 62.973870][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.999636][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.006091][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.030189][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.047933][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.061910][ T5201] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.064179][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.090518][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.108059][ T5201] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 63.117602][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.132205][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.184134][ T5115] veth0_macvtap: entered promiscuous mode [ 63.218266][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.236600][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.257969][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.272315][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.294640][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.317278][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.329667][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.341042][ T5115] veth1_macvtap: entered promiscuous mode [ 63.371623][ T5114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.419158][ T5114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.429539][ T5114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.438651][ T5114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.486781][ T2862] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.511939][ T2862] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.585117][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.612688][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.668378][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.690129][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.700755][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.712971][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.726967][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.757535][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.778516][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.819578][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.848981][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.872448][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.916268][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.939898][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.956229][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.969023][ T5115] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.980754][ T5115] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.992976][ T5227] x_tables: duplicate underflow at hook 2 [ 64.014410][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.114242][ T5115] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.133733][ T5115] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.143856][ T5115] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.171692][ T5115] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.304807][ T2862] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.341401][ T2862] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.371845][ T29] audit: type=1800 audit(1718094636.944:2): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 64.446339][ T29] audit: type=1804 audit(1718094636.974:3): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1574700636/syzkaller.lfI8By/12/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 64.457086][ T4489] Bluetooth: hci0: command tx timeout [ 64.480121][ T29] audit: type=1804 audit(1718094636.974:4): pid=5244 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1574700636/syzkaller.lfI8By/12/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 64.551966][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.562557][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.617211][ T4489] Bluetooth: hci1: command tx timeout [ 64.692233][ T5251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 64.727018][ T5251] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 64.809664][ T5257] Zero length message leads to an empty skb [ 64.864511][ T4489] Bluetooth: hci4: command tx timeout [ 64.870297][ T5109] Bluetooth: hci2: command tx timeout [ 64.875727][ T5109] Bluetooth: hci3: command tx timeout [ 64.942055][ T5256] veth0_macvtap: left promiscuous mode [ 65.088755][ T5266] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 65.113162][ T5266] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 65.128448][ T5266] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 65.207457][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.246573][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.349879][ T5281] syz-executor.0[5281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.350273][ T5281] syz-executor.0[5281] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 65.389292][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.444476][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.555355][ T29] audit: type=1800 audit(1718094638.124:5): pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 65.648925][ T29] audit: type=1804 audit(1718094638.154:6): pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2141355445/syzkaller.iaDzF5/4/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 65.748834][ T29] audit: type=1804 audit(1718094638.154:7): pid=5290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2141355445/syzkaller.iaDzF5/4/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 65.959346][ T5307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.699492][ T5345] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 66.732491][ T5346] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.004818][ T5359] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 67.020364][ T5359] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.154716][ T5359] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 67.164125][ T5359] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 67.176082][ T5359] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 67.198554][ T5359] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 67.222023][ T5359] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.277950][ T5367] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 67.286179][ T5367] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.399456][ T5367] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 67.442966][ T5367] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 67.544556][ T5372] team_slave_0: entered promiscuous mode [ 67.550540][ T5372] team_slave_1: entered promiscuous mode [ 67.569202][ T5372] macvtap1: entered promiscuous mode [ 67.574833][ T5372] team0: entered promiscuous mode [ 67.591698][ T5372] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 67.626133][ T5377] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 67.698016][ T5377] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 67.852138][ T5382] bridge1: entered promiscuous mode [ 67.860598][ T5382] bridge1: entered allmulticast mode [ 67.972094][ T29] audit: type=1800 audit(1718094640.544:8): pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1950 res=0 errno=0 [ 68.035654][ T29] audit: type=1804 audit(1718094640.584:9): pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir471530661/syzkaller.W0lBDw/16/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 68.092115][ T29] audit: type=1804 audit(1718094640.584:10): pid=5397 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir471530661/syzkaller.W0lBDw/16/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 68.245930][ T5405] validate_nla: 3 callbacks suppressed [ 68.245950][ T5405] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 68.262291][ T5405] __nla_validate_parse: 1 callbacks suppressed [ 68.262309][ T5405] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.365916][ T5405] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 68.379320][ T5405] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 68.388593][ T5405] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 68.409637][ T5405] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 68.423019][ T5405] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 68.437748][ T5413] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 68.670157][ T5428] Illegal XDP return value 5428 on prog (id 30) dev N/A, expect packet loss! [ 68.756433][ T5433] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 68.923320][ T29] audit: type=1800 audit(1718094641.494:11): pid=5439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 69.292371][ T5462] team_slave_0: entered promiscuous mode [ 69.298157][ T5462] team_slave_1: entered promiscuous mode [ 69.306781][ T5462] macvtap1: entered promiscuous mode [ 69.313167][ T5462] team0: entered promiscuous mode [ 69.320670][ T5462] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 69.358971][ T5464] macvtap2: entered promiscuous mode [ 69.364756][ T5464] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 69.385832][ T5468] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 69.413133][ T5468] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.552471][ T5468] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 69.577319][ T5468] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 69.602819][ T5468] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 69.613380][ T5468] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 69.627141][ T5468] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.766764][ T5485] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.050947][ T5496] team_slave_0: entered promiscuous mode [ 70.056767][ T5496] team_slave_1: entered promiscuous mode [ 70.094370][ T5496] macvtap1: entered promiscuous mode [ 70.109843][ T5496] team0: entered promiscuous mode [ 70.123816][ T5496] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 70.365129][ T5510] netlink: 113592 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.390523][ T5510] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.445819][ T5510] SET target dimension over the limit! [ 70.487835][ T5514] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.545062][ T5514] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.645832][ T5522] vlan2: entered promiscuous mode [ 71.155634][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 71.155650][ T29] audit: type=1800 audit(1718094643.724:14): pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1947 res=0 errno=0 [ 71.222915][ T29] audit: type=1804 audit(1718094643.744:15): pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir55438598/syzkaller.4UT1EU/20/memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 71.277914][ T29] audit: type=1804 audit(1718094643.744:16): pid=5548 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir55438598/syzkaller.4UT1EU/20/memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 71.360329][ T5555] macvtap2: entered promiscuous mode [ 71.366231][ T5555] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 71.604663][ T5573] sctp: [Deprecated]: syz-executor.3 (pid 5573) Use of int in max_burst socket option deprecated. [ 71.604663][ T5573] Use struct sctp_assoc_value instead [ 71.823151][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.837019][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.294936][ T5613] macvtap3: entered promiscuous mode [ 72.306430][ T5613] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 72.614511][ T29] audit: type=1800 audit(1718094645.184:17): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1954 res=0 errno=0 [ 72.686591][ T29] audit: type=1804 audit(1718094645.194:18): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2141355445/syzkaller.iaDzF5/24/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 72.773583][ T29] audit: type=1804 audit(1718094645.194:19): pid=5631 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2141355445/syzkaller.iaDzF5/24/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 72.937952][ T5109] Bluetooth: hci4: command 0x0401 tx timeout [ 73.111097][ T5652] sctp: [Deprecated]: syz-executor.1 (pid 5652) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.111097][ T5652] Use struct sctp_sack_info instead [ 73.154220][ T5660] macvtap3: entered promiscuous mode [ 73.194747][ T5660] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 73.424379][ T5675] macvtap4: entered promiscuous mode [ 73.435422][ T5675] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 73.463531][ T5671] __nla_validate_parse: 6 callbacks suppressed [ 73.463549][ T5671] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 74.053954][ T5710] team_slave_0: entered promiscuous mode [ 74.059786][ T5710] team_slave_1: entered promiscuous mode [ 74.079529][ T5710] macvtap0: entered promiscuous mode [ 74.084874][ T5710] team0: entered promiscuous mode [ 74.127939][ T5710] 8021q: adding VLAN 0 to HW filter on device macvtap0 [ 74.302197][ T5719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.347720][ T29] audit: type=1800 audit(1718094646.924:20): pid=5723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 74.426821][ T29] audit: type=1804 audit(1718094646.934:21): pid=5723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1574700636/syzkaller.lfI8By/36/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 74.503433][ T29] audit: type=1804 audit(1718094646.944:22): pid=5723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1574700636/syzkaller.lfI8By/36/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 74.674844][ T4489] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.683843][ T4489] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.692524][ T4489] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.705229][ T4489] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.715312][ T4489] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.723772][ T4489] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.788003][ T5731] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 74.996376][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.022507][ T4489] Bluetooth: hci4: command 0x0401 tx timeout [ 75.201917][ T29] audit: type=1800 audit(1718094647.774:23): pid=5762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1947 res=0 errno=0 [ 75.251990][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.441071][ T5776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 75.473669][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.608860][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.646494][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.878126][ T5730] chnl_net:caif_netlink_parms(): no params data found [ 76.003777][ T35] bridge_slave_1: left allmulticast mode [ 76.021391][ T35] bridge_slave_1: left promiscuous mode [ 76.028304][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.070779][ T35] bridge_slave_0: left allmulticast mode [ 76.087138][ T35] bridge_slave_0: left promiscuous mode [ 76.092993][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.526159][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 76.539168][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 76.549654][ T35] bond0 (unregistering): Released all slaves [ 76.637826][ T5730] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.645195][ T5730] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.653404][ T5730] bridge_slave_0: entered allmulticast mode [ 76.663060][ T5730] bridge_slave_0: entered promiscuous mode [ 76.671895][ T5730] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.679559][ T5730] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.686808][ T5730] bridge_slave_1: entered allmulticast mode [ 76.693775][ T5730] bridge_slave_1: entered promiscuous mode [ 76.728898][ T5730] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.771813][ T5730] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.781190][ T4489] Bluetooth: hci3: command tx timeout [ 76.844655][ T5730] team0: Port device team_slave_0 added [ 76.872728][ T5730] team0: Port device team_slave_1 added [ 76.950444][ T9] cfg80211: failed to load regulatory.db [ 77.032985][ T35] hsr_slave_0: left promiscuous mode [ 77.054965][ T35] hsr_slave_1: left promiscuous mode [ 77.076694][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.097114][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.114367][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.122099][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 77.181341][ T35] team0: left promiscuous mode [ 77.197746][ T35] team_slave_0: left promiscuous mode [ 77.203427][ T35] team_slave_1: left promiscuous mode [ 77.227263][ T35] veth1_macvtap: left promiscuous mode [ 77.233304][ T35] veth0_macvtap: left promiscuous mode [ 77.247102][ T35] veth1_vlan: left promiscuous mode [ 77.252693][ T35] veth0_vlan: left promiscuous mode [ 77.834607][ T35] team0 (unregistering): Port device team_slave_1 removed [ 77.867978][ T35] team0 (unregistering): Port device team_slave_0 removed [ 78.141241][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.148278][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.174326][ T5730] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.191312][ T5730] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.200765][ T5730] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.237066][ T5730] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.314339][ T5730] hsr_slave_0: entered promiscuous mode [ 78.320823][ T5730] hsr_slave_1: entered promiscuous mode [ 78.326806][ T5730] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.335361][ T5730] Cannot create hsr debugfs directory [ 78.847354][ T5730] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.860955][ T5730] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.870796][ T4489] Bluetooth: hci3: command tx timeout [ 78.881729][ T5730] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.894437][ T5730] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.988550][ T5730] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.021352][ T5730] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.040207][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.047396][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.055967][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.063150][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.293679][ T5730] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.385197][ T5730] veth0_vlan: entered promiscuous mode [ 79.404606][ T5730] veth1_vlan: entered promiscuous mode [ 79.457703][ T5730] veth0_macvtap: entered promiscuous mode [ 79.474519][ T5730] veth1_macvtap: entered promiscuous mode [ 79.501926][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.517927][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.527882][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.542235][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.552296][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.563350][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.573668][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.594087][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.613354][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.635728][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.646441][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.665050][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.682799][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.693046][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.710348][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.720691][ T5730] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.738992][ T5730] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.755341][ T5730] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.771965][ T5730] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.781875][ T5730] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.792421][ T5730] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.805355][ T5730] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.915509][ T1111] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.939007][ T1111] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.973080][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.988663][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.937490][ T4489] Bluetooth: hci3: command tx timeout [ 83.017104][ T4489] Bluetooth: hci3: command tx timeout [ 89.624033][ T5891] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.774526][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 89.774542][ T29] audit: type=1800 audit(1718094662.344:26): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1946 res=0 errno=0 [ 89.907008][ T29] audit: type=1804 audit(1718094662.354:27): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3578688570/syzkaller.u5mvTX/29/memory.events" dev="sda1" ino=1946 res=1 errno=0 [ 89.993016][ T29] audit: type=1804 audit(1718094662.364:28): pid=5906 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3578688570/syzkaller.u5mvTX/29/memory.events" dev="sda1" ino=1946 res=1 errno=0 [ 90.023088][ T5918] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.4'. [ 90.382297][ T5934] team_slave_0: left promiscuous mode [ 90.466422][ T5934] team0: Port device team_slave_0 removed [ 90.473607][ T29] audit: type=1800 audit(1718094663.044:29): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 90.482553][ T5934] net_ratelimit: 2 callbacks suppressed [ 90.482568][ T5934] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 90.520108][ T29] audit: type=1804 audit(1718094663.074:30): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1574700636/syzkaller.lfI8By/45/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 90.550053][ T29] audit: type=1804 audit(1718094663.084:31): pid=5945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1574700636/syzkaller.lfI8By/45/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 90.578426][ T5951] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.843451][ T5959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.125364][ T5979] bridge1: entered promiscuous mode [ 91.139095][ T5979] bridge1: entered allmulticast mode [ 91.387729][ T29] audit: type=1800 audit(1718094663.964:32): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 91.452307][ T29] audit: type=1804 audit(1718094663.964:33): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir471530661/syzkaller.W0lBDw/44/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 91.513558][ T29] audit: type=1804 audit(1718094663.964:34): pid=5994 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir471530661/syzkaller.W0lBDw/44/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 92.033387][ T29] audit: type=1800 audit(1718094664.604:35): pid=6033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1949 res=0 errno=0 [ 92.282019][ T6049] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.289608][ T6048] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.354584][ T6050] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.402345][ T6050] validate_nla: 6 callbacks suppressed [ 92.402360][ T6050] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 92.447881][ T6058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.808698][ T6076] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 92.837243][ T6076] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.935524][ T6076] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 92.953934][ T6076] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 92.962853][ T6076] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 92.987809][ T6076] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 93.019782][ T6076] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.224479][ T6101] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 136, id = 0 [ 93.384293][ T6106] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 94.111306][ T6144] batadv_slave_1: entered promiscuous mode [ 94.175231][ T6149] ipvlan2: entered promiscuous mode [ 94.205733][ T6149] ipvlan2: entered allmulticast mode [ 94.222285][ T6149] bridge0: entered allmulticast mode [ 94.231149][ T6142] batadv_slave_1: left promiscuous mode [ 94.351938][ T6155] x_tables: duplicate underflow at hook 1 [ 94.927043][ T6184] __nla_validate_parse: 3 callbacks suppressed [ 94.927061][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.978771][ T6184] bridge_slave_1: left allmulticast mode [ 95.003814][ T6184] bridge_slave_1: left promiscuous mode [ 95.036149][ T6184] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.122057][ T6184] bridge_slave_0: left allmulticast mode [ 95.139005][ T6184] bridge_slave_0: left promiscuous mode [ 95.149536][ T6184] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.335116][ T6196] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 95.389517][ T6202] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 95.448902][ T6197] syzkaller1: entered promiscuous mode [ 95.455341][ T6197] syzkaller1: entered allmulticast mode [ 95.730430][ T6223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.785058][ T6223] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 95.817456][ T6228] Bluetooth: MGMT ver 1.22 [ 95.872788][ T6232] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.010717][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.047234][ T6232] tipc: Can't bind to reserved service type 0 [ 96.238824][ T6248] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 96.247411][ T6248] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.317500][ T6250] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 96.348651][ T6248] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.2'. [ 96.472043][ T6258] syzkaller1: entered promiscuous mode [ 96.488095][ T6258] syzkaller1: entered allmulticast mode [ 96.507484][ T6256] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 96.525317][ T6256] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.533310][ T6256] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.569735][ T6256] bridge0: entered promiscuous mode [ 96.813617][ T6269] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.874141][ T6274] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 96.967712][ T6269] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.038262][ T6285] xt_CT: You must specify a L4 protocol and not use inversions on it [ 97.109316][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 97.109333][ T29] audit: type=1800 audit(1718094669.684:47): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 97.199595][ T29] audit: type=1804 audit(1718094669.734:48): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir685764778/syzkaller.CUVPH5/33/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 97.303942][ T29] audit: type=1804 audit(1718094669.734:49): pid=6290 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir685764778/syzkaller.CUVPH5/33/memory.events" dev="sda1" ino=1951 res=1 errno=0 [ 97.352400][ T6297] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.376557][ T6297] bridge0: entered promiscuous mode [ 97.386117][ T29] audit: type=1804 audit(1718094669.774:50): pid=6292 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3578688570/syzkaller.u5mvTX/50/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 97.431185][ T6302] validate_nla: 7 callbacks suppressed [ 97.431203][ T6302] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 97.457179][ T6302] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 97.475606][ T6302] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 97.505814][ T6302] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 97.506616][ T6310] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.525916][ T6304] syzkaller1: entered promiscuous mode [ 97.547286][ T6304] syzkaller1: entered allmulticast mode [ 97.975243][ T4544] udevd[4544]: worker [5938] terminated by signal 33 (Unknown signal 33) [ 99.419148][ T6383] team0: Device macvtap2 is already an upper device of the team interface [ 99.906193][ T6431] batadv_slave_1: entered promiscuous mode [ 100.304966][ T6447] sctp: [Deprecated]: syz-executor.0 (pid 6447) Use of int in max_burst socket option. [ 100.304966][ T6447] Use struct sctp_assoc_value instead [ 100.664210][ T6462] __nla_validate_parse: 10 callbacks suppressed [ 100.664229][ T6462] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 100.732163][ T6430] batadv_slave_1: left promiscuous mode [ 101.198408][ T6449] dccp_close: ABORT with 32 bytes unread [ 101.291201][ T6498] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.494016][ T6510] ieee802154 phy0 wpan0: encryption failed: -22 [ 101.933352][ T6526] team0: Device macvtap2 is already an upper device of the team interface [ 101.962978][ T6537] macvlan2: entered allmulticast mode [ 101.969093][ T6537] mac80211_hwsim hwsim13 wlan0: entered promiscuous mode [ 101.996918][ T6537] mac80211_hwsim hwsim13 wlan0: entered allmulticast mode [ 102.016632][ T6537] team0: Port device macvlan2 added [ 102.026482][ T6538] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 102.065295][ T6538] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.080645][ T6538] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.088366][ T6538] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.106831][ T6538] bridge0: entered promiscuous mode [ 102.126670][ T6542] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 102.136162][ T6542] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.242413][ T29] audit: type=1804 audit(1718094674.814:51): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3578688570/syzkaller.u5mvTX/63/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 102.283014][ T29] audit: type=1804 audit(1718094674.814:52): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3578688570/syzkaller.u5mvTX/63/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 102.397828][ T29] audit: type=1804 audit(1718094674.814:53): pid=6544 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3578688570/syzkaller.u5mvTX/63/memory.events" dev="sda1" ino=1949 res=1 errno=0 [ 102.468795][ T6562] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 102.479700][ T6560] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.513534][ T6562] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.530724][ T6562] bond0: (slave team0): Enslaving as an active interface with an up link [ 102.548532][ T6562] syz-executor.2 uses obsolete (PF_INET,SOCK_PACKET) [ 102.557692][ T6562] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 102.574708][ T6562] bond0: (slave team0): Releasing backup interface [ 102.619214][ T6562] bridge0: port 3(team0) entered blocking state [ 102.658602][ T6562] bridge0: port 3(team0) entered disabled state [ 102.697489][ T6562] team0: entered allmulticast mode [ 102.702664][ T6562] team_slave_0: entered allmulticast mode [ 102.730566][ T6562] team_slave_1: entered allmulticast mode [ 102.744687][ T6562] team0: entered promiscuous mode [ 102.752118][ T6562] team_slave_0: entered promiscuous mode [ 102.765897][ T6562] team_slave_1: entered promiscuous mode [ 102.898015][ T6579] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 103.211213][ T6609] netlink: 2272 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.232420][ T6608] RDS: rds_bind could not find a transport for ::ffff:100.1.1.0, load rds_tcp or rds_rdma? [ 103.259048][ T6603] can: request_module (can-proto-0) failed. [ 103.431922][ T6622] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 103.462311][ T6622] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 103.486721][ T6622] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 103.686001][ T6641] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.833400][ T6641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.016040][ T6656] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 104.495883][ T6691] IPVS: Error connecting to the multicast addr [ 104.849370][ T6713] IPVS: Error connecting to the multicast addr [ 104.859857][ T6712] IPVS: Error connecting to the multicast addr [ 104.926157][ T6717] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 104.959966][ T6717] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.212831][ T6734] bond0: entered promiscuous mode [ 105.243075][ T6734] bond_slave_0: entered promiscuous mode [ 105.265561][ T6734] bond_slave_1: entered promiscuous mode [ 105.337636][ T6749] x_tables: duplicate underflow at hook 4 [ 105.463416][ T6753] netlink: 'syz-executor.4': attribute type 14 has an invalid length. [ 105.493002][ T6753] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 105.695831][ T6764] __nla_validate_parse: 3 callbacks suppressed [ 105.695850][ T6764] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.728187][ T6764] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.960589][ T6779] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.970073][ T6779] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.979245][ T6779] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 105.988369][ T6779] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.010097][ T6779] vxlan0: entered promiscuous mode [ 106.022803][ T6779] vxlan0: entered allmulticast mode [ 106.113691][ T6793] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.185138][ T6798] netlink: 'syz-executor.2': attribute type 14 has an invalid length. [ 106.229303][ T6798] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 106.382894][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802d4bf000: rx timeout, send abort [ 106.393212][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802d4be800: rx timeout, send abort [ 106.402319][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802d4bf000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 106.417933][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802d4be800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 106.619969][ T6810] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 106.656328][ T6810] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 106.926834][ T6828] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 106.951926][ T6828] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.008976][ T6828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.225773][ T6839] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.314047][ T6844] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.363535][ T6845] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 107.386069][ T6844] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 108.820622][ T29] audit: type=1800 audit(1718094681.394:54): pid=6781 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 108.826849][ T6915] vlan2: entered promiscuous mode [ 108.871856][ T6915] vlan2: entered allmulticast mode [ 108.889231][ T6915] team0: entered allmulticast mode [ 108.923530][ T6915] team_slave_1: entered allmulticast mode [ 108.959460][ T6915] team0: left allmulticast mode [ 108.965010][ T6915] team_slave_1: left allmulticast mode [ 110.168295][ T6959] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 110.280567][ T6959] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.290142][ T6959] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.299001][ T6959] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.307776][ T6959] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 110.346448][ T6959] vxlan0: entered promiscuous mode [ 110.716641][ T6985] __nla_validate_parse: 4 callbacks suppressed [ 110.716662][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.766092][ T6985] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.958872][ T6998] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 110.987050][ T6998] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.008102][ T6996] tap0: tun_chr_ioctl cmd 1074025694 [ 111.035021][ T7003] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.063562][ T6998] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 111.083523][ T6998] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 111.093075][ T6998] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 111.106152][ T6998] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 111.125792][ T6998] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.528074][ T7029] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.562713][ T7029] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 111.602372][ T7029] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.611281][ T7029] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.620039][ T7029] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.628815][ T7029] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.653752][ T7029] vxlan0: entered promiscuous mode [ 111.746944][ T7035] TCP: MD5 Hash not found for 172.20.20.187.0->255.255.255.255.20002 [FSP.] L3 index 0 [ 111.907066][ T7050] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 111.933066][ T29] audit: type=1800 audit(1718094684.504:55): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 111.968940][ T29] audit: type=1804 audit(1718094684.504:56): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3578688570/syzkaller.u5mvTX/88/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 111.998241][ T29] audit: type=1804 audit(1718094684.504:57): pid=7052 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3578688570/syzkaller.u5mvTX/88/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 112.380985][ T7068] team0: Device batadv0 is up. Set it down before adding it as a team port [ 112.688295][ T7083] tipc: Started in network mode [ 112.693447][ T7083] tipc: Node identity ac1414aa, cluster identity 4711 [ 112.718968][ T7083] tipc: Enabled bearer , priority 10 [ 112.812323][ T7087] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 113.123497][ T7106] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.144769][ T7107] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 113.462494][ T7124] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 113.489831][ T7124] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 113.692651][ T7135] x_tables: unsorted underflow at hook 3 [ 113.838412][ T5157] tipc: Node number set to 2886997162 [ 114.177800][ T7156] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 114.199071][ T7156] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.246777][ T7156] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 114.267302][ T7156] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 114.275802][ T7156] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.630062][ T7177] lo speed is unknown, defaulting to 1000 [ 114.661348][ T7177] lo speed is unknown, defaulting to 1000 [ 114.684720][ T7177] lo speed is unknown, defaulting to 1000 [ 114.851873][ T7185] batman_adv: batadv0: Adding interface: gretap1 [ 114.887073][ T7185] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 114.927025][ T7185] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 115.163322][ T5157] lo speed is unknown, defaulting to 1000 [ 115.176603][ T7177] infiniband syz0: set active [ 115.206406][ T7177] infiniband syz0: added lo [ 115.207890][ T7196] validate_nla: 5 callbacks suppressed [ 115.207906][ T7196] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 115.240349][ T7196] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 115.257858][ T7196] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 115.290499][ T7196] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 115.319556][ T7197] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 115.320634][ T7177] RDS/IB: syz0: added [ 115.347935][ T7177] smc: adding ib device syz0 with port count 1 [ 115.365271][ T7197] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 115.375603][ T7177] smc: ib device syz0 port 1 has pnetid [ 115.400681][ T5157] lo speed is unknown, defaulting to 1000 [ 115.424048][ T7177] lo speed is unknown, defaulting to 1000 [ 115.571475][ T7205] gretap0: entered promiscuous mode [ 115.607504][ T7205] gretap0: left promiscuous mode [ 115.630417][ T29] audit: type=1804 audit(1718094688.204:58): pid=7206 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir471530661/syzkaller.W0lBDw/127/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 115.723702][ T7210] dummy0: entered promiscuous mode [ 115.749293][ T7210] dummy0: left promiscuous mode [ 115.881596][ T7177] lo speed is unknown, defaulting to 1000 [ 116.170269][ T7177] lo speed is unknown, defaulting to 1000 [ 116.566525][ T7177] lo speed is unknown, defaulting to 1000 [ 116.686434][ T7230] batman_adv: batadv0: Adding interface: gretap1 [ 116.724638][ T7230] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.758526][ T7243] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 116.824226][ T7230] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 117.035512][ T7177] lo speed is unknown, defaulting to 1000 [ 117.063022][ T7247] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 117.097174][ T7247] __nla_validate_parse: 2 callbacks suppressed [ 117.097196][ T7247] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.217296][ T7247] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 117.246084][ T7247] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 117.278380][ T7247] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 117.297335][ T7247] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 117.305458][ T7247] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.359431][ T5109] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 117.377308][ T5109] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 117.389315][ T5109] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 117.397686][ T5109] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 117.407592][ T5109] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 117.415280][ T5109] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 117.594858][ T51] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.785416][ T51] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.829172][ T7249] lo speed is unknown, defaulting to 1000 [ 117.904725][ T51] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.957130][ T7262] bond0: entered promiscuous mode [ 117.962229][ T7262] bond_slave_0: entered promiscuous mode [ 117.992885][ T7262] bond_slave_1: entered promiscuous mode [ 118.017199][ T7262] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 118.038436][ T7262] macvlan2: entered promiscuous mode [ 118.109022][ T51] bond0: (slave netdevsim0): Releasing backup interface [ 118.139852][ T51] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.193791][ T7261] bond0: left promiscuous mode [ 118.203043][ T7261] bond_slave_0: left promiscuous mode [ 118.218612][ T7261] bond_slave_1: left promiscuous mode [ 118.257254][ T7261] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 118.264615][ T7261] macvlan2: left promiscuous mode [ 118.431664][ T7273] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.490757][ T7277] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.560642][ T7281] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.582276][ T51] bridge_slave_1: left allmulticast mode [ 118.593602][ T51] bridge_slave_1: left promiscuous mode [ 118.601862][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.613388][ T51] bridge_slave_0: left allmulticast mode [ 118.619350][ T51] bridge_slave_0: left promiscuous mode [ 118.625340][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.801586][ T7301] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.910751][ T51] batman_adv: batadv0: Removing interface: gretap1 [ 119.089948][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 119.104958][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 119.115557][ T51] bond0 (unregistering): Released all slaves [ 119.129070][ T7281] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.223922][ T51] tipc: Disabling bearer [ 119.229788][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.232054][ T51] tipc: Left network mode [ 119.241666][ T7312] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 119.348952][ T7249] chnl_net:caif_netlink_parms(): no params data found [ 119.497211][ T4489] Bluetooth: hci4: command tx timeout [ 119.511864][ T7326] xt_NFQUEUE: number of total queues is 0 [ 119.545371][ T7249] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.556508][ T7249] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.571106][ T7249] bridge_slave_0: entered allmulticast mode [ 119.603627][ T7249] bridge_slave_0: entered promiscuous mode [ 119.631252][ T7249] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.650143][ T7249] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.676670][ T7249] bridge_slave_1: entered allmulticast mode [ 119.722492][ T7249] bridge_slave_1: entered promiscuous mode [ 119.730453][ T7331] xt_TCPMSS: Only works on TCP SYN packets [ 119.738516][ T7331] rdma_op ffff888060cab1f0 conn xmit_rdma 0000000000000000 [ 119.776594][ T51] hsr_slave_0: left promiscuous mode [ 119.785717][ T51] hsr_slave_1: left promiscuous mode [ 119.792363][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.800375][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.814411][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.826676][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.870466][ T51] team0: left promiscuous mode [ 119.876078][ T51] team_slave_0: left promiscuous mode [ 119.881598][ T51] team_slave_1: left promiscuous mode [ 119.889220][ T51] veth1_macvtap: left promiscuous mode [ 119.894858][ T51] veth0_macvtap: left promiscuous mode [ 119.900741][ T51] veth1_vlan: left promiscuous mode [ 119.906149][ T51] veth0_vlan: left promiscuous mode [ 120.390339][ T51] team0 (unregistering): Port device team_slave_1 removed [ 120.425852][ T51] team0 (unregistering): Port device team_slave_0 removed [ 120.736266][ T7331] infiniband syz0: set active [ 120.742089][ T7331] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.774249][ T7333] macvlan3: entered promiscuous mode [ 120.814886][ T7343] validate_nla: 7 callbacks suppressed [ 120.814903][ T7343] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 120.855650][ T7343] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.866073][ T7344] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 120.883509][ T7344] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 120.896297][ T7344] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 120.904974][ T7344] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 121.050980][ T5157] lo speed is unknown, defaulting to 1000 [ 121.068743][ T7249] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 121.086818][ T7249] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 121.178261][ T7249] team0: Port device team_slave_0 added [ 121.216656][ T7249] team0: Port device team_slave_1 added [ 121.269127][ T7357] xt_connbytes: Forcing CT accounting to be enabled [ 121.275850][ T7357] xt_CT: You must specify a L4 protocol and not use inversions on it [ 121.529182][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 121.549748][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.583468][ T4489] Bluetooth: hci4: command tx timeout [ 121.635369][ T7249] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 121.677195][ T7249] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 121.684167][ T7249] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 121.718971][ T7249] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 121.768940][ T7377] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 122.056719][ T7377] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 122.066067][ T7377] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 122.074320][ T7377] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 122.083723][ T7377] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 122.111395][ T7377] __nla_validate_parse: 2 callbacks suppressed [ 122.111414][ T7377] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.142756][ T7249] hsr_slave_0: entered promiscuous mode [ 122.174634][ T7249] hsr_slave_1: entered promiscuous mode [ 122.197871][ T7249] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 122.216051][ T7249] Cannot create hsr debugfs directory [ 122.387681][ T7379] lo speed is unknown, defaulting to 1000 [ 123.114743][ T7421] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.216587][ T7421] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.1'. [ 123.381526][ T7249] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 123.399923][ T7249] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 123.428663][ T7249] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 123.444781][ T7249] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 123.633596][ T7249] 8021q: adding VLAN 0 to HW filter on device bond0 [ 123.657667][ T4489] Bluetooth: hci4: command tx timeout [ 123.709158][ T7249] 8021q: adding VLAN 0 to HW filter on device team0 [ 123.760212][ T5119] bridge0: port 1(bridge_slave_0) entered blocking state [ 123.767433][ T5119] bridge0: port 1(bridge_slave_0) entered forwarding state [ 123.822558][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 123.829762][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 123.953666][ T7450] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.005655][ T7450] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 124.245788][ T7462] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.271011][ T7461] team0: Device is already in use. [ 124.366211][ T7249] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 124.535505][ T7473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 124.704051][ T7493] IPVS: set_ctl: invalid protocol: 166 172.20.20.170:20000 [ 124.769970][ T7495] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.950498][ T7503] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 125.094078][ T7513] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 125.128254][ T7515] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 125.168405][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 125.185515][ T7249] veth0_vlan: entered promiscuous mode [ 125.239193][ T7249] veth1_vlan: entered promiscuous mode [ 125.335505][ T7249] veth0_macvtap: entered promiscuous mode [ 125.416758][ T7249] veth1_macvtap: entered promiscuous mode [ 125.555335][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 125.562126][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 125.568912][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 125.575442][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 125.582150][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 125.588709][ C1] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 125.595319][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.603262][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.611311][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.619255][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.627300][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 125.635215][ C1] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 125.737201][ T4489] Bluetooth: hci4: command tx timeout [ 125.748155][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.780398][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.791268][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.831139][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.855600][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.866240][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.879318][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 125.890246][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.902624][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 125.929211][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.956976][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 125.970279][ T7536] xt_CT: No such helper "pptp" [ 125.975099][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 125.990214][ T7536] xt_CT: You must specify a L4 protocol and not use inversions on it [ 125.999792][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.009981][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.021525][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.031523][ T7249] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 126.042127][ T7249] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 126.060314][ T7249] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 126.096424][ T7249] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.121259][ T7249] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.130486][ T7249] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.145803][ T7249] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.233104][ T7546] IPv6: Can't replace route, no match found [ 126.268297][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.283129][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 126.312130][ T7548] validate_nla: 10 callbacks suppressed [ 126.312147][ T7548] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 126.335466][ T7548] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 126.352714][ T7548] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 126.365259][ T7548] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 126.407551][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 126.425584][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 127.739123][ T7651] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 127.747642][ T7651] __nla_validate_parse: 7 callbacks suppressed [ 127.747658][ T7651] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 127.790888][ T29] audit: type=1800 audit(1718094700.364:59): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 127.808462][ T7642] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 127.844281][ T29] audit: type=1804 audit(1718094700.414:60): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1574700636/syzkaller.lfI8By/169/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 127.892351][ T29] audit: type=1804 audit(1718094700.414:61): pid=7654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1574700636/syzkaller.lfI8By/169/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 127.929292][ T29] audit: type=1800 audit(1718094700.484:62): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 127.953058][ T29] audit: type=1804 audit(1718094700.494:63): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2268303005/syzkaller.qJxkqy/6/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 127.983990][ T29] audit: type=1804 audit(1718094700.494:64): pid=7658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2268303005/syzkaller.qJxkqy/6/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 128.618309][ T7689] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 129.049693][ T7706] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.127587][ T7706] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 129.135711][ T7706] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 129.174777][ T7706] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 129.194476][ T7706] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 129.212340][ T7706] netlink: 320 bytes leftover after parsing attributes in process `syz-executor.0'. [ 129.401957][ T7722] Bluetooth: MGMT ver 1.22 [ 129.406470][ T7722] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 129.720990][ T7748] --map-set only usable from mangle table [ 129.745164][ T7748] xt_CT: You must specify a L4 protocol and not use inversions on it [ 130.605606][ T7783] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.657458][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.259996][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.266609][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 160.759687][ T5109] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 160.773914][ T5109] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 160.821602][ T5109] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 160.830969][ T5109] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 160.839582][ T5109] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 160.847071][ T5109] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 160.867352][ T4489] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 160.881544][ T4489] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.893430][ T4489] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 160.908124][ T5124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.916304][ T4489] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 160.924503][ T5124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 160.936098][ T4489] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 160.944222][ T5124] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 160.957089][ T5124] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 160.982829][ T4489] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 160.991046][ T4489] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 161.007183][ T4489] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 161.422611][ T4489] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 161.431831][ T4489] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 161.440216][ T4489] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 161.458228][ T4489] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 161.466813][ T4489] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 161.477355][ T4489] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 162.937319][ T4489] Bluetooth: hci5: command tx timeout [ 163.017020][ T4489] Bluetooth: hci6: command tx timeout [ 163.097351][ T4489] Bluetooth: hci7: command tx timeout [ 163.498242][ T4489] Bluetooth: hci8: command tx timeout [ 164.065321][ T53] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 164.075389][ T53] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 164.088725][ T53] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 164.096776][ T53] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 164.108394][ T53] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 164.116500][ T53] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 165.017262][ T4489] Bluetooth: hci5: command tx timeout [ 165.097016][ T4489] Bluetooth: hci6: command tx timeout [ 165.177126][ T4489] Bluetooth: hci7: command tx timeout [ 165.577040][ T4489] Bluetooth: hci8: command tx timeout [ 166.217135][ T4489] Bluetooth: hci9: command tx timeout [ 167.097101][ T4489] Bluetooth: hci5: command tx timeout [ 167.177139][ T4489] Bluetooth: hci6: command tx timeout [ 167.257115][ T4489] Bluetooth: hci7: command tx timeout [ 167.657236][ T4489] Bluetooth: hci8: command tx timeout [ 168.297295][ T4489] Bluetooth: hci9: command tx timeout [ 169.177127][ T4489] Bluetooth: hci5: command tx timeout [ 169.259261][ T4489] Bluetooth: hci6: command tx timeout [ 169.337129][ T4489] Bluetooth: hci7: command tx timeout [ 169.743904][ T4489] Bluetooth: hci8: command tx timeout [ 170.377099][ T4489] Bluetooth: hci9: command tx timeout [ 172.457186][ T4489] Bluetooth: hci9: command tx timeout [ 181.425666][ T5124] Bluetooth: hci2: command 0x0406 tx timeout [ 181.425842][ T5117] Bluetooth: hci0: command 0x0406 tx timeout [ 181.437826][ T5122] Bluetooth: hci1: command 0x0406 tx timeout [ 194.702312][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.708698][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 225.777364][ T5109] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 225.786278][ T5109] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 225.807358][ T5109] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 225.827457][ T5109] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 225.837411][ T5117] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 225.839762][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 225.847452][ T5117] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 225.884313][ T4489] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 225.895867][ T4489] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 225.911495][ T5117] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 225.917714][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 225.925997][ T5117] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 225.926673][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 225.945469][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 225.977482][ T5109] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 225.992549][ T5109] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 226.000784][ T5109] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 226.008397][ T5109] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 226.451375][ T4489] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 226.461103][ T4489] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 226.470450][ T4489] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 226.483858][ T4489] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 226.492278][ T4489] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 226.500232][ T4489] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 227.898415][ T4489] Bluetooth: hci10: command tx timeout [ 227.977205][ T5109] Bluetooth: hci11: command tx timeout [ 228.057031][ T4489] Bluetooth: hci12: command tx timeout [ 228.537202][ T4489] Bluetooth: hci13: command tx timeout [ 229.101096][ T5109] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 229.110370][ T5109] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 229.126737][ T5109] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 229.135076][ T5109] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 229.150005][ T5109] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 229.160928][ T5109] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 229.977154][ T4489] Bluetooth: hci10: command tx timeout [ 230.072775][ T4489] Bluetooth: hci11: command tx timeout [ 230.137004][ T4489] Bluetooth: hci12: command tx timeout [ 230.616967][ T5109] Bluetooth: hci13: command tx timeout [ 231.177347][ T5109] Bluetooth: hci14: command tx timeout [ 232.057038][ T5109] Bluetooth: hci10: command tx timeout [ 232.137136][ T5109] Bluetooth: hci11: command tx timeout [ 232.217058][ T5109] Bluetooth: hci12: command tx timeout [ 232.624512][ T4489] Bluetooth: hci3: command 0x0405 tx timeout [ 232.697030][ T4489] Bluetooth: hci13: command tx timeout [ 233.257103][ T4489] Bluetooth: hci14: command tx timeout [ 234.137269][ T4489] Bluetooth: hci10: command tx timeout [ 234.219724][ T4489] Bluetooth: hci11: command tx timeout [ 234.297146][ T4489] Bluetooth: hci12: command tx timeout [ 234.786963][ T4489] Bluetooth: hci13: command tx timeout [ 235.337098][ T4489] Bluetooth: hci14: command tx timeout [ 237.427067][ T4489] Bluetooth: hci14: command tx timeout [ 242.862709][ T4489] Bluetooth: hci4: command 0x0406 tx timeout [ 256.142377][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.148797][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 279.177531][ T30] INFO: task syz-executor.3:7778 blocked for more than 143 seconds. [ 279.185563][ T30] Not tainted 6.10.0-rc2-syzkaller-00722-gbb678f01804c #0 [ 279.205995][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/11 08:34:11 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 279.221807][ T30] task:syz-executor.3 state:D stack:26320 pid:7778 tgid:7774 ppid:5112 flags:0x00000006 [ 279.242710][ T30] Call Trace: [ 279.246038][ T30] [ 279.256388][ T30] __schedule+0x17e8/0x4a20 [ 279.261515][ T30] ? __pfx___schedule+0x10/0x10 [ 279.266407][ T30] ? __pfx_lock_release+0x10/0x10 [ 279.280889][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 279.286397][ T30] ? schedule+0x90/0x320 [ 279.291919][ T30] schedule+0x14b/0x320 [ 279.296098][ T30] schedule_preempt_disabled+0x13/0x30 [ 279.301800][ T30] __mutex_lock+0x6a4/0xd70 [ 279.306324][ T30] ? __mutex_lock+0x527/0xd70 [ 279.323189][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 279.328529][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 279.333593][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 279.347044][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 279.352466][ T30] ? aa_sk_perm+0x967/0xab0 [ 279.361690][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 279.366572][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 279.371685][ T30] ? aa_sock_opt_perm+0x79/0x120 [ 279.376637][ T30] ip_setsockopt+0x63/0x100 [ 279.386805][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 279.392792][ T30] do_sock_setsockopt+0x3af/0x720 [ 279.398070][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 279.403627][ T30] ? __fget_files+0x29/0x470 [ 279.415366][ T30] ? __fget_files+0x3f6/0x470 [ 279.426467][ T30] __sys_setsockopt+0x1ae/0x250 [ 279.436978][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 279.442036][ T30] do_syscall_64+0xf3/0x230 [ 279.446556][ T30] ? clear_bhb_loop+0x35/0x90 [ 279.456419][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 279.462468][ T30] RIP: 0033:0x7f775a27cf69 [ 279.472521][ T30] RSP: 002b:00007f775b0080c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 279.481085][ T30] RAX: ffffffffffffffda RBX: 00007f775a3b4050 RCX: 00007f775a27cf69 [ 279.494693][ T30] RDX: 0000000000000030 RSI: 0000000000000000 RDI: 0000000000000005 [ 279.502840][ T30] RBP: 00007f775a2da6fe R08: 0000000000000190 R09: 0000000000000000 [ 279.511076][ T30] R10: 0000000020000780 R11: 0000000000000246 R12: 0000000000000000 [ 279.526322][ T30] R13: 000000000000006e R14: 00007f775a3b4050 R15: 00007ffcfa5c05d8 [ 279.542996][ T30] [ 279.549213][ T30] INFO: task syz-executor.1:7777 blocked for more than 143 seconds. [ 279.562921][ T30] Not tainted 6.10.0-rc2-syzkaller-00722-gbb678f01804c #0 [ 279.570727][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 279.586910][ T30] task:syz-executor.1 state:D stack:25680 pid:7777 tgid:7776 ppid:5730 flags:0x00000006 [ 279.602338][ T30] Call Trace: [ 279.605637][ T30] [ 279.608636][ T30] __schedule+0x17e8/0x4a20 [ 279.613195][ T30] ? __pfx___schedule+0x10/0x10 [ 279.618293][ T30] ? __pfx_lock_release+0x10/0x10 [ 279.624057][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 279.635887][ T30] ? schedule+0x90/0x320 [ 279.64261