last executing test programs: 32.766208529s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x0, 0x4}, 0xe) shutdown(r4, 0x0) r5 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$IP_VS_SO_SET_DEL(r5, 0x0, 0x484, &(0x7f0000000140)={0x6e, @private=0xa010101, 0x4e24, 0x2, 'lblcr\x00', 0x1a, 0x7, 0x5b}, 0x2c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) ioctl$BTRFS_IOC_QUOTA_CTL(r1, 0xc0109428, &(0x7f0000000100)={0x3, 0x101}) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r4, 0x84, 0x6c, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0x18) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002b80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x44, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x4}, @NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc8}}, 0x0) connect$unix(r2, &(0x7f0000000080)=@abs={0x1, 0x0, 0x4e22}, 0x6e) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000500)=ANY=[@ANYRES64=r0], 0x30}}, 0x0) 32.561538275s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1e, 0xe, &(0x7f0000002040)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r0, 0x0, 0x0, 0x3b, 0x0, &(0x7f00000001c0)=""/59, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r1 = socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000240), r1) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000880), 0x20) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0}, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0x3c, &(0x7f0000000040)=0x1, 0xfff0) connect$inet(r2, &(0x7f00000006c0)={0x2, 0x0, @multicast2}, 0xfffffffffffffe7c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000500)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000700)="a8", 0x1}], 0x1}}], 0x1, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x12, 0xf, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500020005000000bf09000000000000550901000000000095000000000000002c9200000000000009000000000000008500000076000000b7000000000000009500000000000000c47999f3a5e3c671f69e7eba6f315c3b9fa153b4e5f52568d2633a493f17ef08fbc60c67909a0da05f8e195f179d07f820a757c064efa6af01f0ffffffffffffb0ba3151593bfd8b5433b7bee4bbbf369e81f1dba6029646004579c59a6e3c04d5f785c205eef49e8f85e23b9aa5f1d8df0c2e697235e7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket(0x29, 0x800, 0x61) r5 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r5, 0x10f, 0x87, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000900)={0x0, 0x4}, 0x10) r7 = socket$tipc(0x1e, 0xb7661a5d1f0bb71f, 0x0) socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000200)={0x41, 0x1}, 0x10) socket$netlink(0x10, 0x3, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, 0x0, &(0x7f0000002a00)) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0x1, 0x5, 0x2}, 0x48) r8 = socket(0x29, 0xa, 0x3e) connect$inet(r8, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000005240), 0x264e33, 0x0) setsockopt$inet_buf(r8, 0x0, 0x11, 0x0, 0x0) 32.411597369s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000540)=@newqdisc={0xa4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}]}}]}, 0xa4}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000140)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x90, 0x5d7, 0x4b, @mcast2, @remote, 0x20, 0x80, 0x4, 0x8001}}) r8 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@bridge_dellink={0x2c, 0x11, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r10}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x4, 0x0, 0x1, {0x4, 0x5}}]}]}, 0x2c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000001c0)={'vxcan1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="70010000", @ANYRES16=r3, @ANYBLOB="100029bd7000fbdbdf2519000000300001800800030000000000080003000200000008000300010000001400020076657468310000000000000000000000540001800800030002000000080003000200000008000300000000000800030001000000140002007465616d30000000000000000000000008000100", @ANYRES32=r5, @ANYBLOB="14000200766c616e3000000000000000000000002800018008000300000000000800030001000000140002006d6163766c616e310000000000000000640001801400020070696d3672656731000000000000000008000300010000000800030003000000080003000100000008000300000000000800030002000000080003000200000008000100", @ANYRES32=r7, @ANYBLOB="14000200697036677265300000000000000000004c0001801400020069703665727370616e3000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="080700000000000000000000000f0000000800b6000200"/36], 0x170}, 0x1, 0x0, 0x0, 0x881}, 0x8044) bind$alg(r1, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) accept4(r1, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8}]}], {0x14}}, 0x5c}}, 0x0) 32.029403519s ago: executing program 2: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002440)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB, @ANYBLOB="dc030000100000000000000000000000e0000002000000000000000000000000fe8000000000000000000000000000aa00"/64], 0x3dc}}, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b}, 0x48) ioctl$FAT_IOCTL_SET_ATTRIBUTES(r1, 0x40047211, &(0x7f0000000000)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000100000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=0x0, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32], 0x398}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x80108907, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x68, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="5c00000010000100"/20, @ANYRES32=r4, @ANYBLOB="000000000000000034001680300001802c000c80140001"], 0x5c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x200000000000000) socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_MPP(r2, &(0x7f0000000780)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f00000006c0)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="00012dbd7000fedbdf256b00000008000300", @ANYRES32=r6, @ANYBLOB="0a00060008021100000000000a001a08021100000000000a001a00ffffffffffff00000a001a00ffffffffffff00000a00060008021100000000000a1e06004102110000000000"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x48801) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r7 = socket(0x10, 0x0, 0x0) sendto(r7, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x30}}, 0x0) 32.002023962s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r2, 0x0, &(0x7f0000001100)=0x9) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed}, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x0, 0x0, r3}, 0x48) socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00'}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000780)={@multicast1, @dev}, &(0x7f00000007c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x80, 0x40, 0x401, 0x7, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @local}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'veth1_virt_wifi\x00'}) r4 = socket(0x10, 0x3, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa8c9, 0x80000000, 0x0, 0x1, 0x6}, 0xffffffff, 0x1, 0xfc, 0x5, 0x401, 0x3, 0x4, 0x1, 0x8, 0x7fff, {0x8001, 0x8, 0xfb9, 0x7, 0x2, 0x5}}}}]}, 0x78}}, 0x0) 31.668015825s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000680)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f0000000880)={0x250, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x250}, 0x1, 0x0, 0x0, 0x44}, 0x40) 31.531785549s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a3000000100090003007379"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ_RESET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)=ANY=[@ANYBLOB="28000000150a030900000000000000000000000008000340007800000a0900010073797a300058e1840138ec25052500000000"], 0x28}}, 0x0) 31.525101541s ago: executing program 2: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="800037e9220ca1ce", 0x8, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @remote, 0x4000000}, 0x1c) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 31.331753611s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002740)=@newtaction={0xe80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{}, 0x5, 0x0, [{0x0, 0x0, 0x1}]}, [{0x9c, 0x5, 0x1, 0xff, 0x4, 0x1b}, {0x0, 0xfffffff7, 0x80000000, 0x644a, 0x13a, 0x1f}, {0x8, 0x5, 0x7, 0x69, 0x8, 0x9f}, {0x6, 0x8f3, 0x5, 0x2, 0x8001, 0x4}, {0x1, 0x25, 0x1, 0xb21, 0x1, 0x80}, {0x6, 0x400, 0x2c, 0x6, 0xfffff5a3, 0x800}, {0x101, 0x7, 0x0, 0x1, 0x4, 0xfffffffd}, {0x10001, 0xff, 0xb30, 0x7, 0x0, 0x6}, {0x2, 0x7, 0xfffffbff, 0x5, 0x8000, 0x101}, {0x4, 0x5b5, 0x6, 0x2, 0x3, 0xc2}, {0x6, 0x100, 0xfffffff1, 0x5, 0x8000, 0x3}, {0x6, 0xfffffffc, 0x81, 0xae, 0x3, 0xc88d}, {0x4, 0x580a, 0x9bd, 0x3ff, 0x401, 0xb5aa}, {0x6d, 0x101, 0x80, 0x8, 0x4, 0x40}, {0x7d00000, 0x4, 0x1, 0x3, 0x7f, 0x594}, {0x0, 0xffffffff, 0x0, 0xcf6, 0xff, 0x3ff}, {0xffff, 0xfffffc01, 0x7be, 0xb519, 0x80, 0x3}, {0xfffffff9, 0xb647, 0x5, 0x7, 0x3, 0x2270de55}, {0x4, 0x1, 0x7, 0x8b3, 0x3, 0x4b}, {0x1, 0x9, 0x4, 0xff, 0x3, 0x46}, {0xe2, 0x9, 0x0, 0x7, 0x400, 0x7}, {0x3, 0x4, 0x1000, 0x9cb1, 0x1de1, 0x4}, {0x4, 0x5, 0x1, 0x2, 0x10000, 0x7}, {0x20, 0x80, 0x1, 0x4, 0xfffffff9}, {0x1000000, 0x1, 0x8, 0x6, 0x380, 0x6}, {0x2b, 0x7, 0x3f, 0x4, 0x9, 0x4b}, {0x0, 0x0, 0x0, 0x0, 0xffff, 0x8}], [{0x4}, {0x2}, {0x4}, {0x4, 0x4725ff0f54dd7499}, {0x3}, {0x3, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x7}, {0x5}, {0x4, 0x1}, {0x3}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x6}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x4}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x1}, {0x7}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0xf282056d8d4e8c02, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3}, {0x4, 0x1}, {0x4}, {0x4}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 31.186768713s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_percpu\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000100000000950000d10691c321f5ecd46beaa60010000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x170, 0x1170, 0x1170, 0x0, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@ipv6={@loopback, @mcast1, [], [], 'bridge_slave_1\x00', 'wg2\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x2}, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000100)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_elf64(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x47b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800003d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r8}, 0x10) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 31.179863209s ago: executing program 3: sendmsg$NLBL_MGMT_C_REMOVE(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f0000000000)={0xd0, 0x0, 0x0, 0x0, 0x0, {}, [@NLBL_MGMT_A_DOMAIN={0xb9, 0x1, '\xe3\xe0v\xc8\xb1\xa8\xfe4<\x1a\xeb\x8c\xea32\xac\x1c\x18\xb7\xb7\xdf\a\xd3:\x87\x82o]\xf6\x10u\x84v\x9efb}\x1e\xa3\xa3\x00\x9b\xd4\x95\xe0C\xd0h\a:\a\xfe70\xff\x88\xa1\x87\r\\\xbcR{a$\xfe\xcc\xc6o\x831\xa5d\xba\x7f\xec \x00\x94[\xbe\xdbly\x01\x89\x01u#\x8e\x02K&d\xd4\xa0m\xeer\xb0d\xf1\xfe\xd4\x96u\xcd\x18\xd6!L\xd9*\xc4\xdeU$\x04)\xbf\xad`\xd6\xe3\v{\xee\xad\x97\xaf\x81W\xf2}\rd\xa6V$\x8f\xdb\x9d\x9a\xaf\x93\x92\xc5S[\xbdB\xea\xbc\t\xde\xc3H\x85\xb1F\xb8\xa3\x16ws\x9a\xde\xf5Ax$\xa5\xa0\x16\x16\x1b`D8g\t'}]}, 0xd0}}, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000a00)=ANY=[@ANYBLOB="40010000", @ANYRES16=r1, @ANYBLOB="010027bd70000000180001000000080001000000000004000480080002000100000010000c800c000b8008000a00326c0000080108804400078008000600fe000000080005"], 0x140}}, 0x0) syz_emit_ethernet(0xd2, &(0x7f0000000080)=ANY=[@ANYBLOB="ffffffffbfff00000000000086dd600489f1009c1100fc010000000000000025030000000000ff020000000000000000000000000001"], 0x0) 31.041923924s ago: executing program 4: unshare(0x6020400) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x5000001, 0x12, r0, 0xfffff000) setsockopt$XDP_UMEM_FILL_RING(0xffffffffffffffff, 0x11b, 0x5, &(0x7f0000000140), 0x4) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) r3 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r3, &(0x7f0000000180)={0x1d, r2, 0x3}, 0x18) socket$kcm(0x10, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x10) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r4, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r4, 0x0, 0x14, &(0x7f0000000040)=0xfdfffdfd, 0x4) connect$inet(r4, &(0x7f0000000440)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r4, &(0x7f0000007fc0), 0x0, 0x4040840) setsockopt$inet_int(r4, 0x0, 0x19, &(0x7f0000000180)=0x40000000, 0x4) recvmmsg(r4, &(0x7f0000000940)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=""/25, 0x19}}], 0x1, 0x12002, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f0000000240)={0x10, 0x0, 0x25dfdbfb, 0x20}, 0xc) r5 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r5, 0x1, 0x8, &(0x7f0000000000), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r5, 0x10e, 0x4, &(0x7f0000000100)=0x800, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r5) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4e23, 0x0, @dev={0xfe, 0x80, '\x00', 0x10}}, 0x1c) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000440), r0) 30.961252233s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r0, 0x11, 0x0, 0x0, @prog_id}, 0x20) 30.871656213s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000240)={'gre0\x00', 0x0}) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000140)=0x8, 0x4) bpf$PROG_LOAD(0x13, &(0x7f0000000680)={0x0, 0x0, 0x0, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendto$packet(r1, &(0x7f0000000340)="05040006e8fe091c6202a0ffffffff006003000000007f141434e3177f43055762cb80948864113b3a2543424aa608", 0xfef2, 0x0, &(0x7f0000000a80)={0x11, 0x8100, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) 30.859400901s ago: executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x4, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev}}]}, 0x70}, 0x1, 0x7}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"/290, @ANYRES32=0x0, @ANYRES32=0xee00, @ANYBLOB="ac1414bb0000000000000000000000000000000032000000ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000100000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c0004000700000000000000fe880000000000000000000000000001"], 0x154}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x11}, @NFTA_CT_DREG={0x8, 0x4, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) (async) close(r4) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000b2e900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) write$ppp(r5, &(0x7f0000000180)="82f5e70e6442c12c70c31585301b86031a5ac2f25550e257453cd364", 0x1c) (async, rerun: 64) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) sendmsg(r6, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[{0x10}, {0x10, 0x84, 0x2}], 0x20}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) connect$unix(0xffffffffffffffff, &(0x7f00000001c0)=@file={0x0, './file0\x00'}, 0x6e) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 30.844755003s ago: executing program 3: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x2c}}, 0x0) 30.702433134s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0xffffffc0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6d, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, &(0x7f00000002c0)=0x10) 30.616701632s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002740)=@newtaction={0xe80, 0x30, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0xe6c, 0x1, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{}, 0x5, 0x0, [{0x0, 0x0, 0x1}]}, [{0x9c, 0x5, 0x1, 0xff, 0x4, 0x1b}, {0x0, 0xfffffff7, 0x80000000, 0x644a, 0x13a, 0x1f}, {0x8, 0x5, 0x7, 0x69, 0x8, 0x9f}, {0x6, 0x8f3, 0x5, 0x2, 0x8001, 0x4}, {0x1, 0x25, 0x1, 0xb21, 0x1, 0x80}, {0x6, 0x400, 0x2c, 0x6, 0xfffff5a3, 0x800}, {0x101, 0x7, 0x0, 0x1, 0x4, 0xfffffffd}, {0x10001, 0xff, 0xb30, 0x7, 0x0, 0x6}, {0x2, 0x7, 0xfffffbff, 0x5, 0x8000, 0x101}, {0x4, 0x5b5, 0x6, 0x2, 0x3, 0xc2}, {0x6, 0x100, 0xfffffff1, 0x5, 0x8000, 0x3}, {0x6, 0xfffffffc, 0x81, 0xae, 0x3, 0xc88d}, {0x4, 0x580a, 0x9bd, 0x3ff, 0x401, 0xb5aa}, {0x6d, 0x101, 0x80, 0x8, 0x4, 0x40}, {0x7d00000, 0x4, 0x1, 0x3, 0x7f, 0x594}, {0x0, 0xffffffff, 0x0, 0xcf6, 0xff, 0x3ff}, {0xffff, 0xfffffc01, 0x7be, 0xb519, 0x80, 0x3}, {0xfffffff9, 0xb647, 0x5, 0x7, 0x3, 0x2270de55}, {0x4, 0x1, 0x7, 0x8b3, 0x3, 0x4b}, {0x1, 0x9, 0x4, 0xff, 0x3, 0x46}, {0xe2, 0x9, 0x0, 0x7, 0x400, 0x7}, {0x3, 0x4, 0x1000, 0x9cb1, 0x1de1, 0x4}, {0x4, 0x5, 0x1, 0x2, 0x10000, 0x7}, {0x20, 0x80, 0x1, 0x4, 0xfffffff9}, {0x1000000, 0x1, 0x8, 0x6, 0x380, 0x6}, {0x2b, 0x7, 0x3f, 0x4, 0x9, 0x4b}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8}], [{0x4}, {0x2}, {0x4}, {0x4, 0x4725ff0f54dd7499}, {0x3}, {0x3, 0x1}, {0x5}, {0x4}, {0x2, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}, {0x4, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x7}, {0x5}, {0x4, 0x1}, {0x3}, {}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x6}, {0x4}, {0x4}, {0x5, 0x1}, {0x1}, {0x5, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {}, {0x2, 0x1}, {0x4}, {0x0, 0x1}, {0x5}, {0x4}, {0x3}, {0x4}, {0x5, 0x1}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x4}, {0x1, 0x1}, {0x4, 0x1}, {0x2}, {0x3, 0x1}, {}, {0x4}, {0x3, 0x1}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x2, 0x1}, {0x3}, {0x5, 0x1}, {0x5}, {0x4, 0x1}, {0x2, 0x1}, {0x3}, {0x3}, {0x3, 0x1}, {0x2, 0x1}, {0x3, 0x1}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0x5, 0x1}, {0x1, 0x1}, {}, {0x2}, {0x4, 0x1}, {0x4, 0x1}, {0x2}, {0x5}, {0x3, 0x1}, {0x1, 0x1}, {0x2}, {0x3}, {0x5, 0x1}, {0x2}, {}, {0x1}, {0x7}, {}, {0x2}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x0, 0x1}, {0x4}, {0x2, 0x1}, {0x3, 0x1}, {0x3}, {0x4}, {}, {0x4}, {0x0, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x2}, {0x3, 0x1}, {0x3, 0x1}, {0xf282056d8d4e8c02, 0x1}, {0x4}, {0x1}, {0x1, 0x1}, {0x5, 0x1}, {0x1}, {}, {0x3}, {0x4, 0x1}, {0x4}, {0x4}], 0x1}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe80}, 0x1, 0x0, 0x0, 0x40080}, 0x0) 30.574183073s ago: executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, &(0x7f0000000000)=0x8, 0x4) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)={0x58, 0x2, 0x6, 0x401, 0x6c, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x58}}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000400)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000100)="20a83686", 0x4) getsockopt$inet6_mreq(r0, 0x29, 0x14, &(0x7f0000000040)={@local, 0x0}, &(0x7f0000000180)=0x14) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$binfmt_script(r4, &(0x7f00000001c0)={'#! ', './file0', [], 0xa, "0e8e25adf65928f5b011c411934ca4375ec4e8a7995c94b7ea34eea741f59811311589619015216e522cbd971bca8db102d62c9a07fe28daf10240566d77f0caf9b6dca993dd4f82f964f2c719eeeda8e93bbaae7fec2311d90fc75e94a1ff0873c45327096be9268c62595e7b0a8caab508f166"}, 0x7f) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_mreq(r4, 0x29, 0x15, &(0x7f0000000280)={@local, 0x0}, &(0x7f00000002c0)=0x14) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0}, &(0x7f0000000340)=0xc) sendmsg$nl_xfrm(r6, &(0x7f00000005c0)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000600)=@migrate={0x158, 0x21, 0x10e, 0x0, 0x25dfdbfc, {{@in=@empty, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e24, 0x6, 0x4e21, 0xc46d, 0xa, 0x100, 0xa0, 0x4, r7, r8}, 0x6e6bb5, 0x2}, [@etimer_thresh={0x8}, @coaddr={0x14, 0xe, @in6=@mcast1}, @algo_comp={0xa1, 0x3, {{'lzs\x00'}, 0x2c8, "c06fb863b1a28029ca17e34c226995c0f39d6f8164718f013fb32b923b16313e0caad11ec5ce1ae28e70c507b0d59f919704cd4b7f2afb81eeba9e5c4566c49fd5e0c30208783e67a0def80dabdc3b716190b04986e20d3260"}}, @XFRMA_SET_MARK={0x8, 0x1d, 0xfffffff9}, @address_filter={0x28, 0x1a, {@in6=@dev={0xfe, 0x80, '\x00', 0x1f}, @in6=@loopback, 0xa, 0x4, 0x3}}, @extra_flags={0x8, 0x18, 0x8}, @replay_val={0x10, 0xa, {0x70bd2c, 0x70bd27, 0x1f}}]}, 0x158}, 0x1, 0x0, 0x0, 0x40880}, 0x4c000) setsockopt$inet_IP_XFRM_POLICY(r1, 0x0, 0x11, &(0x7f0000000200)={{{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@dev={0xfe, 0x80, '\x00', 0x36}, 0x4e24, 0x67, 0x4e23, 0x0, 0xa, 0x20, 0x20, 0x2b, r3, r8}, {0xfffffffffffffff9, 0x1ff, 0xfff, 0x3, 0xffff, 0x65b3, 0x410e, 0x2}, {0x81, 0x4a, 0x1, 0x957}, 0x9c2a, 0x6e6bbe, 0x2, 0x1, 0x4, 0x3}, {{@in=@remote, 0x4d2, 0x3c}, 0xa, @in=@local, 0x3507, 0x3, 0x1, 0x81, 0x10001, 0x1000, 0x4}}, 0xe8) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000003b80)={'veth1_to_batadv\x00', &(0x7f0000003880)=@ethtool_per_queue_op={0x4b, 0x21}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x5f}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) socket$netlink(0x10, 0x3, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r4) sendmsg$TIPC_NL_NODE_GET(r5, &(0x7f0000000540)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000500)={&(0x7f0000000780)={0x1a4, r10, 0x100, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffffffc0}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x200}]}, @TIPC_NLA_BEARER={0x134, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x800000}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x14, 0x2, @in={0x2, 0x4e22, @remote}}}}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @l2={'ib', 0x3a, 'veth1\x00'}}, @TIPC_NLA_BEARER_NAME={0xa, 0x1, @l2={'ib', 0x3a, 'lo\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0xf2b1}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x7, @local, 0x1}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0xce, @private0, 0x7}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x4}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x800}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xd5a}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x9}]}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x200400c4}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4000000010003b15000000000000000000004888", @ANYRES32=0x0, @ANYBLOB="d530d995212cf95a2000128008000100687372001400028008000200", @ANYRES32=r13, @ANYBLOB="08000100", @ANYRES64=r12], 0x40}}, 0x0) 30.542365776s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$int_in(r2, 0x0, &(0x7f0000001100)=0x9) connect$bt_sco(r2, &(0x7f0000000040)={0x1f, @fixed}, 0x8) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f}, 0x48) socket$kcm(0x2, 0x1000000000000002, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000740)={'vcan0\x00'}) getsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000780)={@multicast1, @dev}, &(0x7f00000007c0)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f0000000800)={'syztnl2\x00', 0x0, 0x80, 0x40, 0x401, 0x7, {{0x5, 0x4, 0x3, 0x8, 0x14, 0x67, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x17}, @local}}}}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000008c0)={'veth1_virt_wifi\x00'}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x78, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xa8c9, 0x80000000, 0x0, 0x1, 0x6}, 0xffffffff, 0x1, 0xfc, 0x5, 0x401, 0x3, 0x4, 0x1, 0x8, 0x7fff, {0x8001, 0x8, 0xfb9, 0x7, 0x2, 0x5}}}}]}, 0x78}}, 0x0) 30.468667761s ago: executing program 0: syz_init_net_socket$ax25(0x3, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000000)={0x28, 0x1a, 0x1, 0x0, 0x0, "", [@typed={0xa, 0x0, 0x0, 0x0, @str=':*^${\x00'}, @typed={0x9, 0x3, 0x0, 0x0, @str='&\\$]\x00'}]}, 0x28}], 0x1}, 0x0) 30.38582023s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = accept4$nfc_llcp(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) ioctl$FS_IOC_GETFSLABEL(r2, 0x81009431, &(0x7f0000000200)) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000001000000850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r3}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x200000000000000) 30.299591841s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000540)='cpuacct.usage_percpu\x00', 0x100002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) close(r2) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000000000000000000100000000950000d10691c321f5ecd46beaa60010000000"], &(0x7f0000000000)='GPL\x00'}, 0x90) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r4}, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r3, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r6, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b0, 0x170, 0x1170, 0x1170, 0x0, 0x1170, 0x398, 0x1398, 0x1398, 0x398, 0x1398, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [], [], 'veth0_vlan\x00', 'veth0_to_hsr\x00'}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@multicast2, 'netpci0\x00'}}}, {{@ipv6={@loopback, @mcast1, [], [], 'bridge_slave_1\x00', 'wg2\x00'}, 0x0, 0xa8, 0xf0}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) setsockopt$inet6_int(r6, 0x29, 0x35, &(0x7f0000000000)=0x8000, 0x4) bind$inet6(r6, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x2}, 0x0) recvmmsg(r6, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) sendto$inet6(r6, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, 0x0, 0x0) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r7, &(0x7f0000000100)='memory.numa_stat\x00', 0x275a, 0x0) write$binfmt_elf64(r2, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], 0x47b) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000580)=ANY=[@ANYRESOCT=0x0, @ANYRES32=r5, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70800003d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r8}, 0x10) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 30.112126939s ago: executing program 0: r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000002c0)={@ifindex, r0, 0x11, 0x0, 0x0, @prog_id}, 0x20) 30.039724382s ago: executing program 0: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x6, 0x20000000ec071, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="030300000000000000000a00000008000300", @ANYRES32=r5, @ANYBLOB="5a779ad6226c48dd92131f4894620509d1bab63224917075979871f2c4453c4ac232779372b20720bde82d23820d071e3c491ffcc6eaa38556c7f7568a57596b31a064fa0d2446b30221074c9bf36f3ebf220af38b7d3e248e09bb632f618a26075afb846fc8f1566e97b133220ba9c74c644ea053358a862b42d1323033ffb974fd5c48caa1f91c6dc7f1e9f960ff5854bca4f21f866f9af685edf2fc6bf7dfa76f0595a1879148d4684b5039a220c3101d6770a922652ddaad98f92f7cf118cea6e31202aa02e2b811cef6803d32981363d321e4f0ee65af0a"], 0x1c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000380)={r0, 0x200, 0x5, 0x5}) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x17, 0x15, &(0x7f0000000980)=ANY=[@ANYBLOB="18010000756c6c2500000000002069a7f980f7d09fd20000bfa100000000000007010000f8ffffffb702000008000000b7030000090000008500000006000000b7080000000000007b8af8ff00000000b7080000060000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400c400001823000000000000000000004000000000354dc5298c2fdd6f0a022bf58e100f0b0558f61e29dfb282c87deca0e3e00003e7d2f5eb031f60953e9dd4c48c5eab73035fa1b856a40cd8cfeddb7e3bbdaee61b21aa03b1ed618b66bffc31494bf9e52034672b5f58bf5c669d9340489871d9d08eb687f6314091d723b0b29cf5dad153df0afe2bb6760d0000000000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a5000000"], &(0x7f0000000180)='GPL\x00', 0x86, 0xc7, &(0x7f0000000880)=""/199, 0x41000, 0x2, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000340)={0x5, 0x0, 0x1000, 0x8}, 0x10, 0xffffffffffffffff, r7, 0x6, 0x0, &(0x7f0000000500)=[{0x0, 0x3, 0x0, 0x8}, {0x1, 0x2, 0x10, 0x7}, {0x0, 0x0, 0x5}, {0x5, 0x5}, {0x1, 0x5, 0xe, 0xd}, {0x0, 0x3, 0x8, 0x1}]}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB], 0x0, 0x26}, 0x20) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[], 0x10c}}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000680)={0x3, 'ip6gretap0\x00', {0x20}, 0x101}) r10 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r10, 0x0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000300), 0x4) mmap(&(0x7f0000981000/0x3000)=nil, 0x3000, 0x3000005, 0x11, 0xffffffffffffffff, 0xdb46c000) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f00000004c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x68, 0x2, 0x6, 0x401, 0x0, 0x0, {0x0, 0x0, 0xb3}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xa}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x8}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x1}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x68}, 0x1, 0x0, 0x0, 0x20028000}, 0x8000) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000100)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="82b500090000000000003b00000028000300", @ANYRES32=r12, @ANYBLOB="38003300c0000000ffffffffffff080211000000505050505050000000008c180000031686e62c7871af0ef2355a69d2dd510d0ca89bd043"], 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) 846.093911ms ago: executing program 4: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)={0x2c, r0, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_DEVKEY={0x10, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}]}]}, 0x2c}}, 0x0) 600.232975ms ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000680)={&(0x7f0000000140), 0xc, &(0x7f0000000640)={&(0x7f0000000880)={0x27c, r1, 0x1, 0x0, 0x0, {}, [@HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @HEADER={0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0xa8, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}]}, @HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'xfrm0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x27c}, 0x1, 0x0, 0x0, 0x44}, 0x40) 537.113663ms ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r2 = accept$alg(r1, 0x0, 0x0) write$binfmt_script(r2, &(0x7f0000000600), 0xfec8) recvmmsg(r2, &(0x7f00000008c0)=[{{&(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f00000005c0)=[{&(0x7f00000001c0)=""/200, 0x6}, {&(0x7f0000000140)=""/9, 0xa}, {&(0x7f0000000300)=""/225, 0xc0000000}, {&(0x7f0000000400)=""/41, 0xfeb2}, {&(0x7f0000000440)=""/123, 0x7b}, {&(0x7f00000004c0)=""/203, 0xcb}], 0x6, &(0x7f0000000640)=""/123, 0x7b, 0x2000000}}, {{&(0x7f00000006c0), 0x80, &(0x7f0000000840), 0x0, &(0x7f0000000880)=""/24, 0xffffffffffffffe0}}], 0x2, 0xcb, &(0x7f0000008000)={0x0, 0x989680}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) 501.778097ms ago: executing program 1: connect$l2tp6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r0 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @remote, 0x1}, 0x1c) r1 = socket$l2tp6(0xa, 0x2, 0x73) getpeername$l2tp6(r1, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="800037e9220ca1ce", 0x8, 0x0, &(0x7f00000012c0)={0xa, 0x0, 0x0, @remote, 0x4000000}, 0x1c) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="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"/287], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x2}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) 0s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) socket$isdn_base(0x22, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="0410000000000000000006000000"], 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_RAW={0x8}, @TCA_CAKE_MPU={0x8}]}}]}, 0x44}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff752b056800080000faff8141", @ANYRES32=0x0, @ANYBLOB="67a9fde500000000280012800a00010076786c616e"], 0x3}}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) close(r3) socket$nl_route(0x10, 0x3, 0x0) write$binfmt_misc(r2, &(0x7f0000000000)=ANY=[], 0xfffffecc) syz_genetlink_get_family_id$smc(&(0x7f0000000240), r4) splice(r1, 0x0, r3, 0x0, 0x4ffe6, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000200)={'caif0\x00', 0x400}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_procs(r6, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000080), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_procs(r8, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r9, &(0x7f0000000140), 0x12) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) kernel console output (not intermixed with test programs): ][ T6234] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.956996][ T6234] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.015411][ T6234] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.056147][ T6234] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.354273][ T6286] batadv_slave_0: entered promiscuous mode [ 98.424428][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 98.474546][ T6295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 98.525591][ T6285] batadv_slave_0: left promiscuous mode [ 98.859260][ T6315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 98.969007][ T6315] dummy0: entered promiscuous mode [ 98.974811][ T6315] macvtap1: entered promiscuous mode [ 98.988721][ T6315] macvtap1: entered allmulticast mode [ 98.994418][ T6315] dummy0: entered allmulticast mode [ 99.028435][ T6325] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.041398][ T6321] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.073103][ T6325] dummy0: left allmulticast mode [ 99.080145][ T6325] dummy0: left promiscuous mode [ 99.087356][ T6325] macvtap1: left promiscuous mode [ 99.097611][ T6325] macvtap1: left allmulticast mode [ 99.945793][ T6376] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 99.979409][ T6376] dummy0: entered promiscuous mode [ 99.985094][ T6376] macvtap1: entered promiscuous mode [ 99.992288][ T6376] macvtap1: entered allmulticast mode [ 99.993195][ T6380] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 99.998190][ T6376] dummy0: entered allmulticast mode [ 100.027436][ T6380] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.041646][ T6381] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.044933][ T6380] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 100.075822][ T6380] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.086320][ T6381] dummy0: left allmulticast mode [ 100.098523][ T6381] dummy0: left promiscuous mode [ 100.133441][ T6381] macvtap1: left promiscuous mode [ 100.154118][ T6381] macvtap1: left allmulticast mode [ 100.432367][ T6392] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 100.457435][ T6392] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 101.503182][ T6451] netlink: 312 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.103292][ T6477] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 102.116140][ T6477] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.132503][ T6479] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 102.173977][ T6477] batadv0: entered promiscuous mode [ 102.192234][ T6477] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 102.201689][ T6477] batadv0: left promiscuous mode [ 102.240663][ T6478] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.708622][ T54] Bluetooth: hci2: command tx timeout [ 102.788556][ T6505] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 103.203814][ T6535] bridge0: port 3(team0) entered blocking state [ 103.241190][ T6535] bridge0: port 3(team0) entered disabled state [ 103.257510][ T6535] team0: entered allmulticast mode [ 103.262788][ T6535] team_slave_0: entered allmulticast mode [ 103.279773][ T6535] team_slave_1: entered allmulticast mode [ 103.309750][ T6535] team0: entered promiscuous mode [ 103.317246][ T6535] team_slave_0: entered promiscuous mode [ 103.328020][ T6535] team_slave_1: entered promiscuous mode [ 103.334847][ T6535] bridge0: port 3(team0) entered blocking state [ 103.341707][ T6535] bridge0: port 3(team0) entered forwarding state [ 103.476901][ T6546] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 104.174977][ T6565] __nla_validate_parse: 9 callbacks suppressed [ 104.174997][ T6565] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 104.214390][ T6565] batadv0: entered promiscuous mode [ 104.221398][ T6565] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 104.240981][ T6565] batadv0: left promiscuous mode [ 104.543765][ T6583] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 104.632537][ T6588] cannot load conntrack support for proto=3 [ 104.685156][ T6591] syzkaller1: entered promiscuous mode [ 104.692893][ T6591] syzkaller1: entered allmulticast mode [ 104.798739][ T6593] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 104.813832][ T6593] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 105.191611][ T6608] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.280216][ T6617] netlink: 3692 bytes leftover after parsing attributes in process `syz-executor.1'. [ 105.371338][ T6608] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.484193][ T6608] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.515917][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.549238][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.559860][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.634556][ T6608] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.643183][ T6630] cannot load conntrack support for proto=3 [ 105.657489][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.680559][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.695471][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.711011][ T6624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.739216][ T6633] Cannot find add_set index 0 as target [ 105.815956][ T6608] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.886511][ T6608] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.944275][ T6608] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.040525][ T6608] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.087599][ T6648] bond0: option use_carrier: invalid value (164) [ 106.149856][ T6608] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.199203][ T6608] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 106.554039][ T6663] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 106.574244][ T6663] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 106.724881][ T6673] ax25_connect(): syz-executor.1 uses autobind, please contact jreuter@yaina.de [ 108.490101][ T6720] A link change request failed with some changes committed already. Interface veth0_to_bond may have been left with an inconsistent configuration, please check. [ 108.664319][ T6726] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 108.676001][ T6726] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 109.277509][ T6764] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 109.589315][ T6785] xt_CT: You must specify a L4 protocol and not use inversions on it [ 109.632141][ T6782] xt_CT: No such helper "pptp" [ 109.954194][ T6802] __nla_validate_parse: 64 callbacks suppressed [ 109.954215][ T6802] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.304106][ T6821] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 110.321348][ T6821] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 110.867603][ T54] Bluetooth: hci2: command 0x0405 tx timeout [ 111.501240][ T6869] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 111.511432][ T6869] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 111.945602][ T6892] netlink: 1072 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.470455][ T6932] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 112.470467][ T6930] bond0: option use_carrier: invalid value (164) [ 112.507625][ T6932] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 112.528118][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.590490][ T6932] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 112.607635][ T6940] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 112.616115][ T6937] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.663593][ T6934] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.814321][ T6953] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.061390][ T6966] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 113.083415][ T6966] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 113.140058][ T6976] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.171589][ T6981] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 113.283969][ T6990] xt_cgroup: invalid path, errno=-2 [ 113.370292][ T6994] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.379667][ T6994] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.388580][ T6994] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.397466][ T6994] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.561023][ T7005] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 113.703156][ T7012] syzkaller0: entered promiscuous mode [ 113.711787][ T7012] syzkaller0: entered allmulticast mode [ 115.374565][ T7038] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 115.399674][ T7038] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 115.596656][ T7041] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 115.625985][ T7041] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 116.053121][ T7080] nbd: must specify a size in bytes for the device [ 116.074937][ T7082] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 116.425221][ T7104] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.614250][ T7113] tun0: tun_chr_ioctl cmd 1074025680 [ 116.648769][ T7121] tun0: tun_chr_ioctl cmd 1074025673 [ 116.819994][ T7136] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.840440][ T7125] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 116.851251][ T7125] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 117.096645][ T7152] sctp: [Deprecated]: syz-executor.2 (pid 7152) Use of struct sctp_assoc_value in delayed_ack socket option. [ 117.096645][ T7152] Use struct sctp_sack_info instead [ 117.602157][ T7180] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 117.611278][ T7180] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 117.901759][ T7195] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 117.942383][ T7195] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.168212][ T7213] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.236735][ T7219] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 118.254741][ T7219] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 118.267050][ T7222] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.413582][ T29] audit: type=1804 audit(1717268743.338:3): pid=7224 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3735808064/syzkaller.n2tzC5/90/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 118.494632][ T7224] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.512560][ T7224] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.523103][ T7224] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 118.533625][ T7224] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.019320][ T7268] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 119.247421][ T7282] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 119.317719][ T7285] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.528996][ T7298] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 119.544857][ T7298] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 120.103584][ T7330] sctp: [Deprecated]: syz-executor.4 (pid 7330) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.103584][ T7330] Use struct sctp_sack_info instead [ 120.143120][ T7331] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 120.434223][ T7351] batadv0: entered promiscuous mode [ 120.462881][ T7351] batadv0: left promiscuous mode [ 120.521503][ T7359] tun0: tun_chr_ioctl cmd 1074025680 [ 120.701215][ T29] audit: type=1800 audit(1717268745.628:4): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 120.795769][ T29] audit: type=1804 audit(1717268745.718:5): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2362462409/syzkaller.feI1SM/216/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 120.874628][ T29] audit: type=1804 audit(1717268745.728:6): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2362462409/syzkaller.feI1SM/216/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 120.925495][ T29] audit: type=1804 audit(1717268745.758:7): pid=7378 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2362462409/syzkaller.feI1SM/216/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 120.969817][ T29] audit: type=1804 audit(1717268745.828:8): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2362462409/syzkaller.feI1SM/216/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 121.187637][ T29] audit: type=1804 audit(1717268745.838:9): pid=7372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2362462409/syzkaller.feI1SM/216/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 121.387823][ T7420] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.412713][ T7420] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 121.424721][ T7420] openvswitch: netlink: Tunnel attr 10922 out of range max 16 [ 121.851132][ T7454] __nla_validate_parse: 8 callbacks suppressed [ 121.851151][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.908780][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 121.915571][ C0] vxcan0: j1939_xtp_rx_dat: no rx connection found [ 121.922255][ C0] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 121.928832][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.936864][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.944862][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.952949][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.961080][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.969267][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.977436][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 121.985461][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 121.993423][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.001434][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.009404][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.017474][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.025414][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.033664][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.041655][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.049720][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.057689][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.065747][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.073731][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.081801][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.089769][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.098119][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.106053][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.114136][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.122209][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.130309][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.138291][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.146413][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.154395][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.162508][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.170532][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.178633][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.186561][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.194664][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.202743][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.210804][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.218772][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.228567][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.236610][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.244699][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.252687][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.260852][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.268848][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.276979][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.284965][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.293058][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.301041][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.309124][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.317053][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.325242][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.333219][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.341382][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.349446][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.357604][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.365547][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.373697][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.381692][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.389768][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.397745][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.405786][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.413769][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.421865][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.429931][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.438043][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.445991][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.454079][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.462066][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.470175][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.478584][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.486613][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.494847][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.502927][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.511070][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.519360][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.527419][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.535450][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.543460][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.551569][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.559584][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.567721][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.575659][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.583866][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.591864][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.599938][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.607933][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.616283][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.624339][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.632647][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.640659][ T7467] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 122.640881][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.657031][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.665043][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.673196][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.681271][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.689474][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.697544][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.701441][ T7467] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.705830][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.723480][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.731748][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.739721][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.745870][ T7467] openvswitch: netlink: Tunnel attr 10922 out of range max 16 [ 122.747795][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no tx connection found [ 122.747818][ C0] vxcan0 (unregistering): j1939_xtp_rx_dat: no rx connection found [ 122.852377][ T7463] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.046216][ T7481] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 123.119996][ T7481] team0: Device veth1_vlan failed to register rx_handler [ 123.586289][ T7504] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 123.633260][ T7504] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 123.656396][ T7504] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.671521][ T7504] openvswitch: netlink: Tunnel attr 10922 out of range max 16 [ 123.939806][ T7529] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 123.953384][ T7529] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 123.988719][ T7529] batman_adv: batadv0: Adding interface: team0 [ 124.000883][ T7529] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 124.026977][ T7529] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 124.046111][ T7530] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 124.061373][ T7530] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.071435][ T7530] team0: entered promiscuous mode [ 124.091822][ T7530] team_slave_0: entered promiscuous mode [ 124.103638][ T7530] team_slave_1: entered promiscuous mode [ 124.118940][ T7530] 8021q: adding VLAN 0 to HW filter on device team0 [ 124.126035][ T7530] batman_adv: batadv0: Interface activated: team0 [ 124.133134][ T7530] batman_adv: batadv0: Interface deactivated: team0 [ 124.140240][ T7530] batman_adv: batadv0: Removing interface: team0 [ 124.159614][ T7530] bridge0: port 4(team0) entered blocking state [ 124.173607][ T7530] bridge0: port 4(team0) entered disabled state [ 124.188900][ T7530] team0: entered allmulticast mode [ 124.198986][ T7530] team_slave_0: entered allmulticast mode [ 124.208487][ T7530] team_slave_1: entered allmulticast mode [ 124.219127][ T7530] bridge0: port 4(team0) entered blocking state [ 124.225613][ T7530] bridge0: port 4(team0) entered forwarding state [ 124.389321][ T7539] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 125.001353][ T7542] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 125.029579][ T7542] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 125.062215][ T7542] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.086002][ T7542] openvswitch: netlink: Tunnel attr 10922 out of range max 16 [ 125.202977][ T7559] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 125.253653][ T7559] team0: Device veth1_vlan failed to register rx_handler [ 125.306862][ T7565] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.317513][ T7565] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.4'. [ 125.326854][ T7565] netlink: 21 bytes leftover after parsing attributes in process `syz-executor.4'. [ 126.119308][ T7608] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.175598][ T7614] team0: Device veth1_vlan failed to register rx_handler [ 126.418339][ T7626] validate_nla: 1 callbacks suppressed [ 126.418358][ T7626] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 126.448778][ T7626] team0: Device veth1_vlan failed to register rx_handler [ 126.550931][ T7630] hsr_slave_0: left promiscuous mode [ 126.558410][ T7630] hsr_slave_1: left promiscuous mode [ 126.677442][ T7634] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 126.874170][ T7639] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.040104][ T7649] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 127.053906][ T7649] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 127.067949][ T7646] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.085785][ T7646] syz_tun: entered promiscuous mode [ 127.093000][ T7646] macsec2: entered promiscuous mode [ 127.099487][ T7646] macsec2: entered allmulticast mode [ 127.105463][ T7646] syz_tun: entered allmulticast mode [ 127.132087][ T7649] batman_adv: batadv0: adding TT local entry 4a:c8:93:75:00:00 to non-existent VLAN 2358 [ 127.646351][ T7691] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 127.692332][ T7691] team0: Device veth1_vlan failed to register rx_handler [ 128.102402][ T7714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 128.155608][ T7720] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.173937][ T7721] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.664374][ T7757] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.800477][ T7765] netlink: 'syz-executor.4': attribute type 309 has an invalid length. [ 128.859915][ T7765] macsec0: entered promiscuous mode [ 128.875604][ T7765] macsec1: entered promiscuous mode [ 128.995189][ T7775] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.028130][ T7775] bond_slave_0: entered promiscuous mode [ 129.034236][ T7775] bond_slave_1: entered promiscuous mode [ 129.041508][ T7775] macvtap1: entered promiscuous mode [ 129.048965][ T7775] bond0: entered promiscuous mode [ 129.056168][ T7775] macvtap1: entered allmulticast mode [ 129.061893][ T7775] bond0: entered allmulticast mode [ 129.069928][ T7775] bond_slave_0: entered allmulticast mode [ 129.076095][ T7775] bond_slave_1: entered allmulticast mode [ 129.083981][ T7775] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 129.111265][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.146535][ T7776] bond0: left allmulticast mode [ 129.170997][ T7776] bond_slave_0: left allmulticast mode [ 129.188386][ T7776] bond_slave_1: left allmulticast mode [ 129.195325][ T7776] bond0: left promiscuous mode [ 129.206926][ T7776] bond_slave_0: left promiscuous mode [ 129.212590][ T7776] bond_slave_1: left promiscuous mode [ 129.223953][ T7776] macvtap1: left promiscuous mode [ 129.229514][ T7776] macvtap1: left allmulticast mode [ 129.406627][ T7786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.502843][ T7793] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 129.955009][ T7811] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 129.982117][ T7811] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.008473][ T4489] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 130.018643][ T4489] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 130.032909][ T4489] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 130.041330][ T4489] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 130.049555][ T4489] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 130.057047][ T4489] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 130.705532][ T7814] chnl_net:caif_netlink_parms(): no params data found [ 130.923528][ T7814] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.951100][ T7814] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.962057][ T7814] bridge_slave_0: entered allmulticast mode [ 130.976280][ T7814] bridge_slave_0: entered promiscuous mode [ 130.999433][ T7814] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.009206][ T7814] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.016715][ T7814] bridge_slave_1: entered allmulticast mode [ 131.024500][ T7814] bridge_slave_1: entered promiscuous mode [ 131.148635][ T7814] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 131.178739][ T7814] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 131.274909][ T7814] team0: Port device team_slave_0 added [ 131.296999][ T7814] team0: Port device team_slave_1 added [ 131.434557][ T7814] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 131.443378][ T7814] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.477499][ T7814] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 131.516059][ T7814] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 131.533927][ T7814] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 131.568058][ T7814] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 131.682900][ T7814] hsr_slave_0: entered promiscuous mode [ 131.698318][ T7814] hsr_slave_1: entered promiscuous mode [ 131.709637][ T7814] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 131.723969][ T7814] Cannot create hsr debugfs directory [ 131.755552][ T29] audit: type=1800 audit(1717268756.678:10): pid=7892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 131.781769][ T29] audit: type=1804 audit(1717268756.678:11): pid=7892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir284780740/syzkaller.ceYFsk/193/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 131.824023][ T29] audit: type=1804 audit(1717268756.678:12): pid=7892 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir284780740/syzkaller.ceYFsk/193/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 132.105477][ T7905] __nla_validate_parse: 4 callbacks suppressed [ 132.105498][ T7905] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 132.136051][ T7814] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.148950][ T4489] Bluetooth: hci5: command tx timeout [ 132.240691][ T7912] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.298381][ T7814] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.461040][ T7921] IPVS: set_ctl: invalid protocol: 44 172.20.20.187:20003 [ 132.490599][ T7814] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.580836][ T7814] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.652227][ T7935] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.823291][ T7814] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 132.833613][ T7814] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 132.844928][ T7814] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 132.857070][ T7814] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 132.978170][ T7814] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.002442][ T7814] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.018346][ T5128] bridge0: port 1(bridge_slave_0) entered blocking state [ 133.025799][ T5128] bridge0: port 1(bridge_slave_0) entered forwarding state [ 133.045590][ T5126] bridge0: port 2(bridge_slave_1) entered blocking state [ 133.052737][ T5126] bridge0: port 2(bridge_slave_1) entered forwarding state [ 133.412052][ T7814] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 133.431134][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.438118][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.494834][ T7814] veth0_vlan: entered promiscuous mode [ 133.529038][ T7814] veth1_vlan: entered promiscuous mode [ 133.605567][ T7814] veth0_macvtap: entered promiscuous mode [ 133.646627][ T7946] xt_NFQUEUE: number of queues (1611) out of range (got 67144) [ 133.649238][ T7814] veth1_macvtap: entered promiscuous mode [ 133.709900][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.723412][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.733681][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.747931][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.757907][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.768682][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.779773][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.790576][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.801346][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 133.811944][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.824692][ T7814] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.856586][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.872283][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.885048][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.902233][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.917589][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.932854][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.943149][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.953804][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.964219][ T7814] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 133.974771][ T7814] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 133.986434][ T7814] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.006044][ T7952] 8021q: adding VLAN 0 to HW filter on device macvlan4 [ 134.087064][ T7814] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.108431][ T7814] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.119828][ T7814] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.133285][ T7814] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.227588][ T4489] Bluetooth: hci5: command tx timeout [ 134.337832][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.347405][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.368158][ T785] IPVS: starting estimator thread 0... [ 134.448618][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.456494][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 134.471955][ T7970] IPVS: using max 26 ests per chain, 62400 per kthread [ 134.573040][ T7979] mac80211_hwsim hwsim4 wlan1: left promiscuous mode [ 134.673189][ T7988] ipvlan4: entered promiscuous mode [ 134.682573][ T7988] ipvlan4: entered allmulticast mode [ 134.689905][ T7988] ip6gretap0: entered allmulticast mode [ 135.043920][ T8000] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 135.550174][ T8047] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.106188][ T8077] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.132556][ T8077] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.228464][ T8090] team0: left allmulticast mode [ 136.233538][ T8090] team_slave_0: left allmulticast mode [ 136.240104][ T8090] team_slave_1: left allmulticast mode [ 136.248535][ T8090] bridge0: port 4(team0) entered disabled state [ 136.317546][ T4489] Bluetooth: hci5: command tx timeout [ 136.685186][ T8111] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.685701][ T8104] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.734704][ T8111] netlink: 'syz-executor.0': attribute type 18 has an invalid length. [ 136.749333][ T8104] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 136.818830][ T8111] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.828072][ T8111] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.836788][ T8111] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.845710][ T8111] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.882000][ T8111] vxlan0: entered promiscuous mode [ 136.985614][ T8097] syzkaller0: entered promiscuous mode [ 137.007257][ T8097] syzkaller0: entered allmulticast mode [ 138.388046][ T4489] Bluetooth: hci5: command tx timeout [ 138.789271][ T8143] delete_channel: no stack [ 138.804409][ T8143] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.882048][ T8140] ɶƣ0GC¦: entered promiscuous mode [ 140.039417][ T8158] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xf [ 140.060945][ T8158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.093270][ T29] audit: type=1804 audit(1717268765.018:13): pid=8158 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir560557368/syzkaller.9SGcgl/12/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 140.097419][ T8158] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 140.320524][ T8157] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (281374) [ 140.493218][ T8185] netlink: 272 bytes leftover after parsing attributes in process `syz-executor.1'. [ 140.581628][ T8189] geneve2: entered promiscuous mode [ 140.598398][ T8189] geneve2: entered allmulticast mode [ 141.093870][ T8222] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.101548][ T8222] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.123506][ T8222] bridge0: entered promiscuous mode [ 141.133408][ T8222] bridge0: entered allmulticast mode [ 141.330656][ T8227] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (281374) [ 141.852493][ T8253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.972689][ T8260] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 141.995008][ T8260] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 142.010606][ T8260] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 142.115628][ T8269] tipc: Enabling of bearer rejected, failed to enable media [ 142.132664][ T8266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 142.456666][ T8292] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 142.913336][ T8309] sctp: [Deprecated]: syz-executor.0 (pid 8309) Use of int in maxseg socket option. [ 142.913336][ T8309] Use struct sctp_assoc_value instead [ 143.176212][ T8319] ɶƣ0GC¦: entered promiscuous mode [ 143.769562][ T8354] x_tables: duplicate underflow at hook 2 [ 144.275614][ T8366] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 144.299124][ T8366] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 144.924268][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.933938][ T8393] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.632795][ T8413] EXT4-fs warning (device sda1): verify_group_input:167: Cannot read last block (281374) [ 146.088337][ T8450] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 146.114641][ T8452] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 146.123719][ T8450] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 146.272746][ T8459] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.285978][ T8457] bridge_slave_1: left allmulticast mode [ 146.295728][ T8457] bridge_slave_1: left promiscuous mode [ 146.306811][ T8457] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.319982][ T8457] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 146.328287][ T8457] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 146.479123][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 146.710161][ T8476] netlink: 4083 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.937821][ T8488] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 146.970923][ T8490] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 147.009251][ T8488] af_packet: tpacket_rcv: packet too big, clamped from 6120 to 3952. macoff=96 [ 147.067843][ T8486] netlink: 'syz-executor.3': attribute type 27 has an invalid length. [ 147.538850][ T8486] bridge0: port 3(dummy0) entered disabled state [ 147.545583][ T8486] bridge0: port 2(bridge_slave_1) entered disabled state [ 147.553256][ T8486] bridge0: port 1(bridge_slave_0) entered disabled state [ 147.605228][ T8486] team0: left promiscuous mode [ 147.615459][ T8486] team_slave_0: left promiscuous mode [ 147.625137][ T8486] team_slave_1: left promiscuous mode [ 148.076555][ T8486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.125383][ T8486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.506998][ T8486] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.526346][ T8486] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.535476][ T8486] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.544961][ T8486] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.677595][ T8497] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.768542][ T8504] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (33024) [ 148.896728][ T8516] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.003087][ T8523] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 149.038692][ T8523] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 149.137225][ T8525] IPv4: Oversized IP packet from 127.202.26.0 [ 149.479354][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.495500][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.838332][ T8544] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 149.857695][ T8544] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.867588][ T8544] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 149.876209][ T8544] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 149.885313][ T8544] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.106533][ T8560] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 150.125349][ T8560] __nla_validate_parse: 1 callbacks suppressed [ 150.125371][ T8560] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.139638][ T8556] IPv4: Oversized IP packet from 127.202.26.0 [ 150.332558][ T8573] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.440090][ T8578] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 150.460696][ T8579] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 150.462561][ T8578] netlink: 9400 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.483841][ T8579] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 150.507800][ T8580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.535581][ T8578] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 150.549022][ T8578] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 150.578942][ T8578] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 [ 150.833727][ T8584] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.059761][ T8590] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 151.077276][ T8590] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.303258][ T8599] IPv4: Oversized IP packet from 127.202.26.0 [ 151.447650][ T8612] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 151.487807][ T8615] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 151.550740][ T8619] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.579016][ T8621] tun0: tun_chr_ioctl cmd 1074025673 [ 151.601242][ T8619] netlink: 26 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.840689][ T8631] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 151.857073][ T8631] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 152.037075][ T8645] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.076631][ T8644] bridge_slave_1: left allmulticast mode [ 152.089804][ T8644] bridge_slave_1: left promiscuous mode [ 152.103364][ T8644] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.118832][ T8644] bridge_slave_0: left allmulticast mode [ 152.124883][ T8644] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.155763][ T8651] IPv4: Oversized IP packet from 127.202.26.0 [ 152.304674][ T8657] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 152.874511][ T8702] validate_nla: 11 callbacks suppressed [ 152.874531][ T8702] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 153.126638][ T8724] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 153.175282][ T8719] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 153.194314][ T8719] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 153.422937][ T8740] bond0: (slave vlan2): Opening slave failed [ 154.195187][ T8793] No such timeout policy "syz0" [ 154.494545][ T8814] vcan0 speed is unknown, defaulting to 1000 [ 154.533077][ T8814] vcan0 speed is unknown, defaulting to 1000 [ 154.584557][ T8814] vcan0 speed is unknown, defaulting to 1000 [ 155.004485][ T8814] infiniband syz1: set active [ 155.013371][ T930] vcan0 speed is unknown, defaulting to 1000 [ 155.023325][ T8814] infiniband syz1: added vcan0 [ 155.144922][ T8814] RDS/IB: syz1: added [ 155.158622][ T8814] smc: adding ib device syz1 with port count 1 [ 155.165256][ T8814] smc: ib device syz1 port 1 has pnetid [ 155.182032][ T5127] vcan0 speed is unknown, defaulting to 1000 [ 155.206439][ T8814] vcan0 speed is unknown, defaulting to 1000 [ 155.453579][ T8865] __nla_validate_parse: 11 callbacks suppressed [ 155.453601][ T8865] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 155.514746][ T8865] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20003 - 0 [ 155.537366][ T8865] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20003 - 0 [ 155.547051][ T8865] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20003 - 0 [ 155.557439][ T8865] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 20003 - 0 [ 155.584721][ T8865] team0: Port device geneve3 added [ 155.604251][ T8814] vcan0 speed is unknown, defaulting to 1000 [ 155.681112][ T29] audit: type=1800 audit(1717268780.598:14): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 155.771449][ T29] audit: type=1804 audit(1717268780.608:15): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir284780740/syzkaller.ceYFsk/275/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 155.857638][ T8879] x_tables: duplicate underflow at hook 2 [ 155.887642][ T29] audit: type=1804 audit(1717268780.618:16): pid=8870 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir284780740/syzkaller.ceYFsk/275/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 156.020842][ T8814] vcan0 speed is unknown, defaulting to 1000 [ 156.516968][ T8814] vcan0 speed is unknown, defaulting to 1000 [ 156.718538][ T8911] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.858083][ T8911] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 156.942856][ T8814] vcan0 speed is unknown, defaulting to 1000 [ 156.976721][ T8911] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 157.056919][ T8911] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 157.146064][ T8911] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 157.177248][ T29] audit: type=1800 audit(1717268782.098:17): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 157.237252][ T29] audit: type=1804 audit(1717268782.118:18): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2362462409/syzkaller.feI1SM/347/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 157.288151][ T8814] vcan0 speed is unknown, defaulting to 1000 [ 157.326625][ T29] audit: type=1804 audit(1717268782.118:19): pid=8924 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir2362462409/syzkaller.feI1SM/347/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 157.360410][ T8911] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20003 - 0 [ 157.414731][ T8911] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20003 - 0 [ 157.472244][ T8911] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20003 - 0 [ 157.533756][ T8911] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20003 - 0 [ 157.640861][ T8935] pim6reg: entered allmulticast mode [ 157.664906][ T8935] pim6reg: left allmulticast mode [ 157.680872][ T8938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 157.725629][ T8938] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.733405][ T8938] IPv6: NLM_F_CREATE should be set when creating new route [ 157.740740][ T8938] IPv6: NLM_F_CREATE should be set when creating new route [ 158.000076][ T8958] vcan0 speed is unknown, defaulting to 1000 [ 158.096639][ T8961] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 158.177595][ T8963] vlan2: entered promiscuous mode [ 158.196318][ T8963] vlan2: entered allmulticast mode [ 158.305569][ T8967] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 158.475983][ T8972] batadv_slave_1: entered promiscuous mode [ 158.482506][ T8971] batadv_slave_1: left promiscuous mode [ 158.605864][ T8980] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 158.623613][ T8978] tipc: Started in network mode [ 158.629052][ T8978] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 158.647473][ T8978] tipc: Enabled bearer , priority 0 [ 158.925606][ T9001] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 159.031774][ T9004] rdma_rxe: rxe_newlink: failed to add vcan0 [ 159.202523][ T9009] Cannot find add_set index 0 as target [ 159.275938][ T9015] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 159.278637][ T9014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.649273][ T9029] vcan0 speed is unknown, defaulting to 1000 [ 159.748393][ T785] tipc: Node number set to 15444650 [ 160.094266][ T9039] syzkaller0: entered promiscuous mode [ 160.100501][ T9039] syzkaller0: entered allmulticast mode [ 160.156713][ T9051] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.646084][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 160.658249][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 160.669752][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 160.682776][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 160.692532][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 160.701639][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 162.788755][ T4489] Bluetooth: hci6: command tx timeout [ 163.236916][ T9063] vcan0 speed is unknown, defaulting to 1000 [ 164.068142][ T9063] chnl_net:caif_netlink_parms(): no params data found [ 164.361971][ T9163] x_tables: duplicate entry at hook 2 [ 164.404034][ T9162] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.0'. [ 164.489343][ T9063] bridge0: port 1(bridge_slave_0) entered blocking state [ 164.496623][ T9063] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.506728][ T9063] bridge_slave_0: entered allmulticast mode [ 164.542510][ T9063] bridge_slave_0: entered promiscuous mode [ 164.569499][ T9063] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.586057][ T9063] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.594917][ T9063] bridge_slave_1: entered allmulticast mode [ 164.611249][ T9063] bridge_slave_1: entered promiscuous mode [ 164.721871][ T9063] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.751654][ T9063] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.869945][ T54] Bluetooth: hci6: command tx timeout [ 164.893055][ T9063] team0: Port device team_slave_0 added [ 164.919633][ T9063] team0: Port device team_slave_1 added [ 164.976296][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.991036][ T9063] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 165.006355][ T9063] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.036050][ T9063] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 165.049219][ T9063] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 165.056209][ T9063] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.095270][ T9063] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 165.167660][ T9198] netlink: get zone limit has 8 unknown bytes [ 165.248885][ T9063] hsr_slave_0: entered promiscuous mode [ 165.300482][ T9063] hsr_slave_1: entered promiscuous mode [ 165.320480][ T9208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.333429][ T9063] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 165.352929][ T9063] Cannot create hsr debugfs directory [ 165.446501][ T9209] syzkaller0: entered promiscuous mode [ 165.467194][ T9209] syzkaller0: entered allmulticast mode [ 165.667276][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 165.667524][ T4489] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 165.826185][ T9233] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 165.834781][ T9233] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.959666][ T4489] Bluetooth: hci6: command tx timeout [ 167.819200][ T9253] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.928703][ T9063] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.057728][ T9063] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.159706][ T9063] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.286317][ T9063] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.394017][ T9281] xt_cluster: you have exceeded the maximum number of cluster nodes (4294967295 > 32) [ 168.429804][ T9287] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 168.570029][ T9295] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.663347][ T9063] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 168.711912][ T9063] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 168.743142][ T9063] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 168.780756][ T9063] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.027555][ T4489] Bluetooth: hci6: command tx timeout [ 169.065684][ T9063] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.092514][ T9063] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.116741][ T5126] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.123951][ T5126] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.208154][ T930] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.215330][ T930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.381504][ T9335] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.391423][ T9335] siw: device registration error -23 [ 169.724109][ T9063] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.913933][ T9371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.942513][ T9371] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 170.157443][ T9382] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.465891][ T9063] veth0_vlan: entered promiscuous mode [ 170.485731][ T9402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.524478][ T9402] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.558927][ T9404] dvmrp0: entered allmulticast mode [ 170.598841][ T9063] veth1_vlan: entered promiscuous mode [ 170.638937][ T9407] dvmrp0: left allmulticast mode [ 170.714303][ T9410] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.843062][ T9413] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 170.890978][ T9413] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 170.909357][ T9063] veth0_macvtap: entered promiscuous mode [ 170.929945][ T9063] veth1_macvtap: entered promiscuous mode [ 170.954578][ T9415] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.994242][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.020021][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.032236][ T9415] rdma_rxe: rxe_newlink: failed to add caif0 [ 171.049472][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.055202][ T9418] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 171.070809][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.085789][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.096482][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.107546][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.119255][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.131348][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 171.157813][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.169849][ T9063] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 171.220946][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.245283][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.258004][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.270586][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.281744][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.292498][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.303019][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.313728][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.323923][ T9063] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 171.334750][ T9063] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 171.346772][ T9063] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 171.391692][ T9063] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.400814][ T9063] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.409772][ T9063] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.419134][ T9063] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.658390][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.666231][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.701097][ T9443] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.735761][ T9443] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.790491][ T9437] IPv6: sit1: Disabled Multicast RS [ 171.811573][ T2810] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.831180][ T2810] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.958065][ T9454] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.985418][ T9453] Cannot find add_set index 0 as target [ 172.021144][ T9456] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.430821][ T9489] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 172.465883][ T9489] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 172.486947][ T9492] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 172.499350][ T9488] cannot load conntrack support for proto=3 [ 172.579046][ T9488] vcan0 speed is unknown, defaulting to 1000 [ 173.049560][ T9513] bridge0: entered promiscuous mode [ 173.059816][ T9513] bond0: entered promiscuous mode [ 173.065976][ T9513] bond_slave_0: entered promiscuous mode [ 173.072551][ T9513] bond_slave_1: entered promiscuous mode [ 173.086444][ T9513] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 173.254586][ T9521] openvswitch: netlink: VXLAN extension 5 out of range max 1 [ 173.918040][ T9558] vcan0 speed is unknown, defaulting to 1000 [ 173.934687][ T9579] cannot load conntrack support for proto=3 [ 174.059089][ T9588] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 174.098648][ T9588] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 174.385367][ T9579] vcan0 speed is unknown, defaulting to 1000 [ 175.032772][ T9612] __nla_validate_parse: 13 callbacks suppressed [ 175.032795][ T9612] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.172522][ T9613] vcan0 speed is unknown, defaulting to 1000 [ 175.225894][ T9628] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 175.256189][ T9612] lo: entered promiscuous mode [ 175.274904][ T9612] lo: entered allmulticast mode [ 175.536191][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.556968][ T9646] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 175.581015][ T9646] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 175.978871][ T29] audit: type=1804 audit(1717268800.908:20): pid=9660 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir560557368/syzkaller.9SGcgl/140/memory.events" dev="sda1" ino=1971 res=1 errno=0 [ 176.130011][ T9659] syzkaller0: entered promiscuous mode [ 176.135949][ T9659] syzkaller0: entered allmulticast mode [ 176.145721][ T29] audit: type=1804 audit(1717268801.068:21): pid=9658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir560557368/syzkaller.9SGcgl/140/memory.events" dev="sda1" ino=1971 res=1 errno=0 [ 176.428914][ T9665] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 176.449222][ T9670] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.486451][ T9670] openvswitch: netlink: Flow actions attr not present in new flow. [ 178.894642][ T9697] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.925322][ T9697] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.968195][ T9697] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.178464][ T9710] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 179.230825][ T9710] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 179.709730][ T9741] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.725740][ T9735] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.814009][ T9746] xt_TPROXY: Can be used only with -p tcp or -p udp [ 180.173242][ T9765] syzkaller0: entered promiscuous mode [ 180.196351][ T9765] syzkaller0: entered allmulticast mode [ 180.280038][ T9780] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.431087][ T9793] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.598091][ T5113] Bluetooth: hci0: command 0x0c1a tx timeout [ 181.600232][ T5111] Bluetooth: hci1: command 0x0406 tx timeout [ 182.387918][ T9790] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 182.405186][ T9790] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 182.452009][ T9803] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 182.472833][ T9805] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.099199][ T9848] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 183.108630][ T9851] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.129116][ T9848] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.155289][ T9848] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 183.193055][ T9857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.204077][ T9845] vcan0 speed is unknown, defaulting to 1000 [ 183.208881][ T9855] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 183.233826][ T9850] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 183.246954][ T9850] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 183.569662][ T9868] ipt_rpfilter: unknown options [ 183.880759][ T9882] ipt_rpfilter: unknown options [ 184.051200][ T9854] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 184.056553][ T9890] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 184.235952][ T9898] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 184.269916][ T9900] tun0: tun_chr_ioctl cmd 2147767506 [ 184.332864][ T9903] bridge_slave_0: invalid flags given to default FDB implementation [ 184.636554][ T9915] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.694779][ T9915] block nbd0: not configured, cannot reconfigure [ 184.768042][ T9919] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 184.787431][ T9919] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 185.129398][ T9936] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 185.520242][ T9949] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 185.537807][ T9949] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 185.570930][ T9949] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.749020][ T9965] bridge_slave_0: invalid flags given to default FDB implementation [ 185.844444][ T9972] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.019821][ T9981] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.226357][ T9990] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 186.252077][ T9990] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 186.565638][T10009] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.675438][T10015] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.710829][ T5111] Bluetooth: hci3: command 0x0406 tx timeout [ 186.857401][T10026] bridge_slave_0: invalid flags given to default FDB implementation [ 186.919355][T10029] xt_time: unknown flags 0x4 [ 187.165851][T10042] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.449919][T10057] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 187.502474][T10057] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 187.709655][ T9570] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.786354][T10070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.846466][T10070] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 187.955215][ T9570] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.970156][T10082] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 188.036158][T10071] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 188.077576][T10071] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 188.086292][ T54] Bluetooth: hci0: command 0x0c1a tx timeout [ 188.093656][ T4489] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 188.152538][ T9570] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.177846][T10087] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 188.206105][T10087] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 188.232853][T10089] bond0: entered promiscuous mode [ 188.238377][T10089] bond_slave_0: entered promiscuous mode [ 188.244442][T10089] bond_slave_1: entered promiscuous mode [ 188.289429][ T9570] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 188.521784][ T54] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 188.532143][ T54] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 188.551550][ T54] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 188.574843][ T54] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 188.586951][ T54] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 188.595788][ T54] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 188.678469][ T9570] bridge_slave_1: left allmulticast mode [ 188.698012][ T9570] bridge_slave_1: left promiscuous mode [ 188.703764][ T9570] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.738444][ T9570] bridge_slave_0: left allmulticast mode [ 188.775585][ T9570] bridge_slave_0: left promiscuous mode [ 188.787463][ T9570] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.261078][ T9570] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.280159][ T9570] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 189.291748][ T9570] bond0 (unregistering): Released all slaves [ 189.312827][T10098] vcan0 speed is unknown, defaulting to 1000 [ 189.579677][T10129] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 189.763990][T10149] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 189.944009][T10156] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 189.964444][T10156] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 190.349257][ T9570] hsr_slave_0: left promiscuous mode [ 190.364350][ T9570] hsr_slave_1: left promiscuous mode [ 190.380859][ T9570] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 190.397618][ T9570] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 190.482997][ T9570] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 190.493208][ T9570] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 190.547308][ T9570] veth1_macvtap: left promiscuous mode [ 190.553141][ T9570] veth0_macvtap: left promiscuous mode [ 190.563846][ T9570] veth1_vlan: left promiscuous mode [ 190.575438][ T9570] veth0_vlan: left promiscuous mode [ 190.583801][T10168] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.637463][ T54] Bluetooth: hci6: command tx timeout [ 191.324834][ T9570] team0 (unregistering): Port device team_slave_1 removed [ 191.374177][ T9570] team0 (unregistering): Port device team_slave_0 removed [ 191.769393][T10186] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 191.828836][ T5111] Bluetooth: hci4: command 0x0406 tx timeout [ 192.186810][T10098] chnl_net:caif_netlink_parms(): no params data found [ 192.196028][T10198] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.228827][T10194] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 192.247423][T10194] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 192.268280][T10194] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.440236][T10209] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 192.450095][T10209] netlink: 8448 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.485214][T10211] ieee802154 phy0 wpan0: encryption failed: -22 [ 192.496442][T10209] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 192.512987][T10209] netlink: 8448 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.559401][T10204] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 192.572903][T10204] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 192.707536][ T4489] Bluetooth: hci6: command tx timeout [ 193.042921][T10226] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.797570][ T4489] Bluetooth: hci6: command 0x040f tx timeout [ 194.881611][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.888131][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.978565][T10098] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.000409][T10098] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.014351][T10098] bridge_slave_0: entered allmulticast mode [ 195.035591][T10098] bridge_slave_0: entered promiscuous mode [ 195.096080][T10098] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.096228][T10239] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 195.104061][T10098] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.139093][T10098] bridge_slave_1: entered allmulticast mode [ 195.155567][T10098] bridge_slave_1: entered promiscuous mode [ 195.273656][T10098] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.305477][T10098] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.421489][T10264] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 195.606016][T10098] team0: Port device team_slave_0 added [ 195.640799][T10098] team0: Port device team_slave_1 added [ 195.671465][T10274] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.722762][T10098] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.746653][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.785668][T10098] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.817968][T10098] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.839516][T10098] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.869506][T10098] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.898862][T10279] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 195.921429][T10279] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 195.966902][T10277] vcan0 speed is unknown, defaulting to 1000 [ 195.981897][T10098] hsr_slave_0: entered promiscuous mode [ 195.997620][T10098] hsr_slave_1: entered promiscuous mode [ 196.011622][T10098] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.027184][T10098] Cannot create hsr debugfs directory [ 196.604318][T10296] xt_NFQUEUE: number of total queues is 0 [ 196.646044][T10301] batadv0: entered promiscuous mode [ 196.682273][T10301] batadv0: left promiscuous mode [ 196.867524][ T54] Bluetooth: hci6: command 0x040f tx timeout [ 196.878753][T10309] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.970432][T10315] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 197.290670][T10098] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 197.350357][T10098] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 197.438194][T10332] netlink: 440 bytes leftover after parsing attributes in process `syz-executor.1'. [ 197.496038][T10098] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 197.546875][T10098] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 197.655732][T10338] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 197.674331][T10349] xt_NFQUEUE: number of total queues is 0 [ 197.686478][T10338] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 197.967391][T10358] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.012873][T10359] vlan2: entered allmulticast mode [ 198.020621][T10359] team0: entered allmulticast mode [ 198.026653][T10359] team_slave_0: entered allmulticast mode [ 198.034518][T10359] team_slave_1: entered allmulticast mode [ 198.044935][T10359] team0: left allmulticast mode [ 198.050322][T10359] team_slave_0: left allmulticast mode [ 198.055950][T10359] team_slave_1: left allmulticast mode [ 198.107637][T10361] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 198.171281][T10361] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 198.188588][T10098] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.282010][T10098] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.307794][ T5410] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.315102][ T5410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.330662][T10373] No such timeout policy "syz1" [ 198.363361][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.370587][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.433521][T10377] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 198.926212][T10098] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.949257][ T54] Bluetooth: hci6: command 0x040f tx timeout [ 199.258925][T10426] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 199.292075][T10426] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 199.318410][T10415] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 199.368385][T10415] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 199.573762][T10098] veth0_vlan: entered promiscuous mode [ 199.588747][T10440] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 199.648580][T10098] veth1_vlan: entered promiscuous mode [ 199.722361][T10098] veth0_macvtap: entered promiscuous mode [ 199.740979][T10098] veth1_macvtap: entered promiscuous mode [ 199.765561][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.776719][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.809951][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.821818][T10454] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.847602][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.864468][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.881055][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.907772][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.926380][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.946898][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.962241][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.984618][T10098] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 200.046208][T10460] infiniband syz1: set active [ 200.067042][T10460] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 200.109450][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.145326][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.188239][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.225215][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.249244][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.261989][T10469] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 200.278123][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.295706][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.318219][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.336385][T10098] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.357514][T10098] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.393300][T10098] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.446715][ T5410] vcan0 speed is unknown, defaulting to 1000 [ 200.571821][T10098] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.603141][T10098] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.653472][T10098] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.687657][T10098] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 201.380911][T10501] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 201.384055][T10508] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 201.395316][T10501] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 201.419691][ T5410] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.432909][ T5410] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.494081][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 201.511275][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.524007][T10510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.035509][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.062981][T10545] netlink: 344 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.078417][T10542] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.283172][T10550] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 202.478931][T10557] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.756124][T10571] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 202.781505][T10571] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 203.111278][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.156543][T10582] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.384019][T10600] tap0: tun_chr_ioctl cmd 1074025677 [ 203.409446][T10600] tap0: linktype set to 804 [ 203.543688][T10609] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 203.553695][T10609] netlink: 16078 bytes leftover after parsing attributes in process `syz-executor.1'. [ 204.121852][T10642] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 204.132987][T10642] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 204.176467][T10645] vcan0 speed is unknown, defaulting to 1000 [ 204.585275][T10660] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 205.097051][ T29] audit: type=1804 audit(1717268830.018:22): pid=10684 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir284780740/syzkaller.ceYFsk/402/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 205.274074][T10691] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 205.304940][T10691] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 205.325505][T10691] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 205.334670][T10691] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 205.365100][T10691] geneve4: entered promiscuous mode [ 205.392336][T10691] geneve4: entered allmulticast mode [ 205.431089][T10691] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 6081 - 0 [ 205.443232][T10691] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 6081 - 0 [ 205.462575][T10691] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 6081 - 0 [ 205.474969][T10691] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 6081 - 0 [ 205.971986][T10720] sch_tbf: peakrate 3 is lower than or equals to rate 5628977692805006585 ! [ 206.024756][T10723] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 206.058591][T10723] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 206.728648][T10764] vcan0 speed is unknown, defaulting to 1000 [ 207.042633][T10781] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 207.066575][T10786] __nla_validate_parse: 5 callbacks suppressed [ 207.066595][T10786] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.156208][T10790] xt_nfacct: accounting object `syz1' does not exists [ 207.333116][T10802] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 207.363116][T10802] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 207.478685][T10807] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.003700][T10764] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.212676][T10840] xt_nfacct: accounting object `syz1' does not exists [ 208.564047][T10844] Cannot find set identified by id 632 to match [ 208.697909][T10861] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.835876][T10869] IPVS: set_ctl: invalid protocol: 108 224.0.0.1:20004 [ 208.858532][T10866] A link change request failed with some changes committed already. Interface dummy0 may have been left with an inconsistent configuration, please check. [ 208.950834][T10876] xt_nfacct: accounting object `syz1' does not exists [ 208.969414][T10864] IPVS: set_ctl: invalid protocol: 2 172.20.20.187:20001 [ 209.008640][T10873] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 209.041726][T10873] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 209.047456][T10881] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.187907][T10883] vcan0 speed is unknown, defaulting to 1000 [ 209.317448][T10891] team0: Port device bridge0 added [ 209.934816][T10906] vcan0 speed is unknown, defaulting to 1000 [ 210.035337][T10886] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 210.595238][ T29] audit: type=1804 audit(1717268835.518:23): pid=10930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir284780740/syzkaller.ceYFsk/425/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 210.615982][T10936] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.691500][ T29] audit: type=1804 audit(1717268835.518:24): pid=10930 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir284780740/syzkaller.ceYFsk/425/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 210.833447][T10906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.873250][T10934] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.025594][T10934] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.105815][T10934] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.155018][T10934] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.175513][T10955] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 211.470414][T10969] vcan0 speed is unknown, defaulting to 1000 [ 211.538179][T10973] xt_TPROXY: Can be used only with -p tcp or -p udp [ 211.722642][T10982] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 211.864118][T10993] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 211.892688][T10993] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 212.684348][T11017] team0: Port device bridge0 added [ 212.722071][T10969] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 212.857665][T11019] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.085048][T11034] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.140155][T11038] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.266131][T11039] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 213.314610][T11039] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.359760][T11039] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 213.553323][ T29] audit: type=1804 audit(1717268838.478:25): pid=11009 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2362462409/syzkaller.feI1SM/494/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 213.638723][T11049] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 213.669336][T11049] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 214.008298][T11072] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.066910][T11073] vcan0 speed is unknown, defaulting to 1000 [ 214.068349][T11075] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.211234][T11080] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.699198][T11106] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.898299][T11116] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.907937][T11097] netlink: zone id is out of range [ 214.908445][T11097] netlink: zone id is out of range [ 214.977279][T11097] netlink: zone id is out of range [ 214.985630][T11097] netlink: zone id is out of range [ 215.010045][T11097] netlink: zone id is out of range [ 215.029566][T11097] netlink: zone id is out of range [ 215.056447][T11097] netlink: zone id is out of range [ 215.077230][T11097] netlink: zone id is out of range [ 215.090789][T11097] netlink: zone id is out of range [ 215.108010][T11097] netlink: zone id is out of range [ 215.305529][T11127] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 215.346951][T11127] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 215.658396][T11149] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 216.301561][T11176] ɶƣ0GC¦: entered promiscuous mode [ 216.725155][T11212] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 217.397742][ T29] audit: type=1800 audit(1717268842.318:26): pid=11246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 217.477338][ T29] audit: type=1800 audit(1717268842.328:27): pid=11246 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 217.709204][T11222] syz-executor.4: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 217.766839][T11222] CPU: 0 PID: 11222 Comm: syz-executor.4 Not tainted 6.10.0-rc1-syzkaller-00205-ge19de2064fdf #0 [ 217.777423][T11222] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 217.787529][T11222] Call Trace: [ 217.790931][T11222] [ 217.793892][T11222] dump_stack_lvl+0x241/0x360 [ 217.798648][T11222] ? __pfx_dump_stack_lvl+0x10/0x10 [ 217.803884][T11222] ? __pfx__printk+0x10/0x10 [ 217.808529][T11222] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 217.814997][T11222] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 217.821546][T11222] warn_alloc+0x278/0x410 [ 217.825942][T11222] ? __pfx_warn_alloc+0x10/0x10 [ 217.830845][T11222] ? packet_set_ring+0x6da/0x2450 [ 217.836259][T11222] ? __get_vm_area_node+0x23d/0x270 [ 217.841507][T11222] __vmalloc_node_range_noprof+0x69f/0x1460 [ 217.847439][T11222] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 217.853226][T11222] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 217.859602][T11222] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 217.865640][T11222] ? packet_set_ring+0x62b/0x2450 [ 217.870798][T11222] ? rcu_is_watching+0x15/0xb0 [ 217.875605][T11222] ? packet_set_ring+0x6da/0x2450 [ 217.880682][T11222] vzalloc_noprof+0x79/0x90 [ 217.885232][T11222] ? packet_set_ring+0x6da/0x2450 [ 217.890385][T11222] packet_set_ring+0x6da/0x2450 [ 217.895299][T11222] ? __pfx_packet_set_ring+0x10/0x10 [ 217.900636][T11222] ? __might_fault+0xaa/0x120 [ 217.905427][T11222] ? __might_fault+0xc6/0x120 [ 217.910196][T11222] packet_setsockopt+0x1140/0x1970 [ 217.915490][T11222] ? __pfx___might_resched+0x10/0x10 [ 217.920832][T11222] ? __pfx_packet_setsockopt+0x10/0x10 [ 217.926343][T11222] ? aa_sk_perm+0x967/0xab0 [ 217.930911][T11222] ? __pfx_aa_sk_perm+0x10/0x10 [ 217.935801][T11222] ? __pfx_lock_acquire+0x10/0x10 [ 217.940863][T11222] ? aa_sock_opt_perm+0x79/0x120 [ 217.945845][T11222] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 217.951517][T11222] ? security_socket_setsockopt+0x87/0xb0 [ 217.957325][T11222] ? __pfx_packet_setsockopt+0x10/0x10 [ 217.962840][T11222] do_sock_setsockopt+0x3af/0x720 [ 217.968136][T11222] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 217.973817][T11222] ? __fget_files+0x29/0x470 [ 217.978454][T11222] ? __fget_files+0x3f6/0x470 [ 217.983184][T11222] __sys_setsockopt+0x1ae/0x250 [ 217.988096][T11222] __x64_sys_setsockopt+0xb5/0xd0 [ 217.993186][T11222] do_syscall_64+0xf3/0x230 [ 217.997741][T11222] ? clear_bhb_loop+0x35/0x90 [ 218.002473][T11222] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 218.008431][T11222] RIP: 0033:0x7f319f87cee9 [ 218.012890][T11222] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 218.032625][T11222] RSP: 002b:00007f31a06e40c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 218.041185][T11222] RAX: ffffffffffffffda RBX: 00007f319f9b3fa0 RCX: 00007f319f87cee9 [ 218.049201][T11222] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000006 [ 218.057203][T11222] RBP: 00007f319f8c947f R08: 000000000000001c R09: 0000000000000000 [ 218.065222][T11222] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 218.073320][T11222] R13: 000000000000000b R14: 00007f319f9b3fa0 R15: 00007ffdabe1fe78 [ 218.081367][T11222] [ 218.193296][T11222] Mem-Info: [ 218.196582][T11222] active_anon:14966 inactive_anon:0 isolated_anon:0 [ 218.196582][T11222] active_file:0 inactive_file:47001 isolated_file:0 [ 218.196582][T11222] unevictable:768 dirty:69 writeback:0 [ 218.196582][T11222] slab_reclaimable:11536 slab_unreclaimable:105287 [ 218.196582][T11222] mapped:26141 shmem:1648 pagetables:767 [ 218.196582][T11222] sec_pagetables:0 bounce:0 [ 218.196582][T11222] kernel_misc_reclaimable:0 [ 218.196582][T11222] free:1349615 free_pcp:827 free_cma:0 [ 218.286560][T11222] Node 0 active_anon:59564kB inactive_anon:0kB active_file:0kB inactive_file:187936kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:104364kB dirty:272kB writeback:0kB shmem:5056kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11920kB pagetables:2868kB sec_pagetables:0kB all_unreclaimable? no [ 218.319134][T11281] __nla_validate_parse: 10 callbacks suppressed [ 218.319155][T11281] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.345760][T11222] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 218.380673][T11222] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 218.418427][T11222] lowmem_reserve[]: 0 2571 2571 0 0 [ 218.423929][T11222] Node 0 DMA32 free:1440472kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:59528kB inactive_anon:0kB active_file:0kB inactive_file:187624kB unevictable:1536kB writepending:272kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:1204kB local_pcp:616kB free_cma:0kB [ 218.537956][T11222] lowmem_reserve[]: 0 0 0 0 0 [ 218.542779][T11222] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:0kB free_cma:0kB [ 218.571419][T11222] lowmem_reserve[]: 0 0 0 0 0 [ 218.576341][T11222] Node 1 Normal free:3944396kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:1252kB local_pcp:500kB free_cma:0kB [ 218.606940][T11222] lowmem_reserve[]: 0 0 0 0 0 [ 218.611787][T11222] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 218.625028][T11222] Node 0 DMA32: 40*4kB (UM) 120*8kB (UME) 155*16kB (UME) 117*32kB (UME) 70*64kB (UME) 34*128kB (UME) 9*256kB (UME) 5*512kB (UME) 2*1024kB (M) 4*2048kB (ME) 344*4096kB (UM) = 1440304kB [ 218.643585][T11222] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 218.655460][T11222] Node 1 Normal: 0*4kB 2*8kB (U) 1*16kB (U) 1*32kB (U) 3*64kB (UM) 2*128kB (U) 4*256kB (UM) 3*512kB (UM) 1*1024kB (U) 0*2048kB 962*4096kB (UM) = 3944448kB [ 218.671576][T11222] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.681451][T11222] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.691499][T11222] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 218.701158][T11222] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 218.711045][T11222] 48608 total pagecache pages [ 218.715817][T11222] 0 pages in swap cache [ 218.720040][T11222] Free swap = 124996kB [ 218.724211][T11222] Total swap = 124996kB [ 218.728525][T11222] 2097051 pages RAM [ 218.732354][T11222] 0 pages HighMem/MovableOnly [ 218.737140][T11222] 400871 pages reserved [ 218.741323][T11222] 0 pages cma reserved [ 218.770045][T11298] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 218.972839][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.310374][T11325] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 219.366107][T11328] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 219.369452][T11329] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.534302][T11342] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 219.594169][T11342] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 219.974334][T11370] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.184406][T11378] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 220.201454][T11378] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 220.309010][T11393] bond_slave_0: entered promiscuous mode [ 220.314804][T11393] bond_slave_1: entered promiscuous mode [ 220.320574][T11393] mac80211_hwsim hwsim15 wlan1: entered promiscuous mode [ 220.376922][T11393] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 220.396737][T11393] bond_slave_0: left promiscuous mode [ 220.402313][T11393] bond_slave_1: left promiscuous mode [ 220.407918][T11393] mac80211_hwsim hwsim15 wlan1: left promiscuous mode [ 220.410397][T11399] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.432703][T11399] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 220.516024][T11389] vcan0 speed is unknown, defaulting to 1000 [ 220.812217][T11408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.373768][T11427] IPv6: NLM_F_REPLACE set, but no existing node found! [ 221.471725][T11425] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 221.513884][T11430] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 221.542612][T11430] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.556511][T11412] vcan0 speed is unknown, defaulting to 1000 [ 221.595508][T11431] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.114752][T11446] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 222.154896][T11446] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 222.651005][T11481] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 222.919633][T11491] RDS: rds_bind could not find a transport for fe80::fd, load rds_tcp or rds_rdma? [ 223.268906][T11508] netlink: 'syz-executor.0': attribute type 13 has an invalid length. [ 223.300351][T11506] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 223.318721][T11506] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 223.581502][T11525] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 223.802018][T11539] __nla_validate_parse: 2 callbacks suppressed [ 223.802042][T11539] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.228424][T11562] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 224.344037][T11574] net_ratelimit: 43 callbacks suppressed [ 224.344058][T11574] dccp_invalid_packet: P.Data Offset(144) too large [ 224.380404][T11575] sctp: [Deprecated]: syz-executor.2 (pid 11575) Use of int in max_burst socket option. [ 224.380404][T11575] Use struct sctp_assoc_value instead [ 224.465840][T11575] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.679208][T11587] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 224.706481][T11587] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 224.824865][T11601] vcan0 speed is unknown, defaulting to 1000 [ 224.901163][T11610] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 225.217416][T11624] tipc: Started in network mode [ 225.227637][T11624] tipc: Node identity ac1414aa, cluster identity 4711 [ 225.245881][T11624] tipc: New replicast peer: 0.0.0.0 [ 225.273462][T11624] tipc: Enabled bearer , priority 10 [ 225.431825][T11632] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.486308][T11632] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.612578][T11638] 8021q: adding VLAN 0 to HW filter on device bond2 [ 225.623685][T11638] bond2: (slave ip6tnl3): The slave device specified does not support setting the MAC address [ 225.636347][T11638] bond2: (slave ip6tnl3): Error -95 calling set_mac_address [ 225.694685][T11641] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 225.793123][T11641] bond4: entered promiscuous mode [ 225.833035][T11646] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.867529][T11649] bond4: (slave ip6gretap1): making interface the new active one [ 225.879406][T11649] ip6gretap1: entered promiscuous mode [ 225.897434][T11649] bond4: (slave ip6gretap1): Enslaving as an active interface with an up link [ 225.915112][T11641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.940926][T11641] bond4: entered allmulticast mode [ 225.946133][T11641] ip6gretap1: entered allmulticast mode [ 225.952567][T11654] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 225.957652][T11641] 8021q: adding VLAN 0 to HW filter on device bond4 [ 226.345178][T11666] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.385071][ T8] tipc: Node number set to 2886997162 [ 226.524331][T11675] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 226.567567][T11675] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 226.594281][T11681] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.880263][T11692] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 227.126233][T11708] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 227.768203][T11731] vcan0 speed is unknown, defaulting to 1000 [ 227.885511][T11742] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 227.918282][T11743] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 228.021392][T11749] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 228.053357][T11749] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 228.220290][T11755] xfrm1: entered promiscuous mode [ 228.225624][T11755] xfrm1: entered allmulticast mode [ 228.872059][T11771] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 228.965054][T11773] __nla_validate_parse: 4 callbacks suppressed [ 228.965077][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.000307][T11775] netlink: zone id is out of range [ 229.005844][T11775] netlink: zone id is out of range [ 229.013520][T11775] netlink: zone id is out of range [ 229.021760][T11775] netlink: set zone limit has 4 unknown bytes [ 229.029989][T11773] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.997033][T11807] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 230.047467][T11807] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 230.105546][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.135732][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.171631][T11806] sctp: [Deprecated]: syz-executor.3 (pid 11806) Use of struct sctp_assoc_value in delayed_ack socket option. [ 230.171631][T11806] Use struct sctp_sack_info instead [ 230.737766][ T29] audit: type=1800 audit(1717268855.668:28): pid=11736 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 231.080345][T11832] vcan0 speed is unknown, defaulting to 1000 [ 231.287808][T11839] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.432135][T11847] IPVS: set_ctl: invalid protocol: 110 10.1.1.1:20004 [ 231.466987][T11845] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 231.539491][T11845] netlink: 77 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.155992][T11880] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 232.512638][T11890] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.3'. [ 232.537408][T11890] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 233.142226][T11920] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 233.667666][ T4489] Bluetooth: hci6: command 0x040f tx timeout [ 243.029349][ T4489] Bluetooth: hci2: command 0x0405 tx timeout [ 253.267383][ T4489] Bluetooth: hci5: command 0x0406 tx timeout [ 256.317972][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.324465][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.231464][ T4489] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 263.247640][ T4489] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 263.264690][ T4489] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 263.315276][ T4489] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 263.338414][ T4489] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 263.346714][ T4489] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 263.611112][ T4489] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 263.628046][ T4489] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 263.640479][ T4489] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 263.676594][ T4489] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 263.686135][ T4489] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 263.693793][ T4489] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 263.809273][ T4489] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 263.819381][ T4489] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 263.830712][ T4489] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 263.856641][ T4489] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 263.865649][ T4489] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 263.877405][ T4489] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 263.910637][ T4489] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 263.921212][ T4489] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 263.929860][ T4489] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 263.959728][ T4489] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 263.969398][ T4489] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 263.976907][ T4489] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 264.063510][ T4489] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 264.074334][ T4489] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 264.083055][ T4489] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 264.091638][ T4489] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 264.099988][ T4489] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 264.107814][ T4489] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 265.427789][ T54] Bluetooth: hci7: command tx timeout [ 265.827335][ T54] Bluetooth: hci8: command tx timeout [ 265.912207][ T54] Bluetooth: hci9: command tx timeout [ 266.067295][ T54] Bluetooth: hci10: command tx timeout [ 266.147222][ T54] Bluetooth: hci11: command tx timeout [ 267.507267][ T54] Bluetooth: hci7: command tx timeout [ 267.914499][ T54] Bluetooth: hci8: command tx timeout [ 267.987390][ T54] Bluetooth: hci9: command tx timeout [ 268.153890][ T54] Bluetooth: hci10: command tx timeout [ 268.237554][ T54] Bluetooth: hci11: command tx timeout [ 269.587609][ T54] Bluetooth: hci7: command tx timeout [ 269.988130][ T54] Bluetooth: hci8: command tx timeout [ 270.067370][ T54] Bluetooth: hci9: command tx timeout [ 270.227720][ T54] Bluetooth: hci10: command tx timeout [ 270.307182][ T54] Bluetooth: hci11: command tx timeout [ 271.671452][ T54] Bluetooth: hci7: command tx timeout [ 272.067376][ T54] Bluetooth: hci8: command tx timeout [ 272.147557][ T54] Bluetooth: hci9: command tx timeout [ 272.308419][ T54] Bluetooth: hci10: command tx timeout [ 272.387589][ T54] Bluetooth: hci11: command tx timeout [ 317.755789][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.767441][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 328.060379][ T5111] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 328.078714][ T5111] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 328.097755][ T5111] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 328.106069][ T5111] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 328.114102][ T5111] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 328.128870][ T5111] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 328.719452][ T5111] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 328.730678][ T5111] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 328.739711][ T5111] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 328.753779][ T5113] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 328.763483][ T5113] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 328.775489][ T5113] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 328.782795][ T5112] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 328.792921][T11963] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 328.795755][ T5113] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 328.801486][T11963] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 328.817828][T11963] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 328.825746][T11963] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 328.866114][ T5111] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 328.887525][ T5111] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 328.905377][ T5111] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 328.914400][ T5111] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 328.938376][ T5111] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 328.946130][ T5111] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 329.179283][ T5111] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 329.190340][ T5111] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 329.201757][ T5111] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 329.211812][ T5111] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 329.221608][ T5111] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 329.237593][ T5111] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 330.068877][ T5112] Bluetooth: hci6: command 0x040f tx timeout [ 330.227313][ T4489] Bluetooth: hci12: command tx timeout [ 330.867390][ T4489] Bluetooth: hci14: command tx timeout [ 330.878198][ T4489] Bluetooth: hci13: command tx timeout [ 331.037618][ T4489] Bluetooth: hci15: command tx timeout [ 331.267409][ T4489] Bluetooth: hci16: command tx timeout [ 332.307264][ T4489] Bluetooth: hci12: command tx timeout [ 332.947415][ T4489] Bluetooth: hci13: command tx timeout [ 332.947429][ T5112] Bluetooth: hci14: command tx timeout [ 333.112207][ T5112] Bluetooth: hci15: command tx timeout [ 333.347276][ T5112] Bluetooth: hci16: command tx timeout [ 334.388248][ T5112] Bluetooth: hci12: command tx timeout [ 335.027567][ T5112] Bluetooth: hci13: command tx timeout [ 335.027786][ T4489] Bluetooth: hci14: command tx timeout [ 335.187381][ T4489] Bluetooth: hci15: command tx timeout [ 335.437273][ T4489] Bluetooth: hci16: command tx timeout [ 336.477345][ T4489] Bluetooth: hci12: command tx timeout [ 337.107371][ T4489] Bluetooth: hci14: command tx timeout [ 337.117201][ T4489] Bluetooth: hci13: command tx timeout [ 337.267435][ T4489] Bluetooth: hci15: command tx timeout [ 337.507315][ T4489] Bluetooth: hci16: command tx timeout [ 379.194785][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.201612][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 384.308923][ T30] INFO: task kworker/u8:27:9566 blocked for more than 143 seconds. [ 384.325443][ T30] Not tainted 6.10.0-rc1-syzkaller-00205-ge19de2064fdf #0 [ 384.337083][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.345777][ T30] task:kworker/u8:27 state:D stack:23904 pid:9566 tgid:9566 ppid:2 flags:0x00004000 2024/06/01 19:10:09 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 384.367405][ T30] Workqueue: netns cleanup_net [ 384.372757][ T30] Call Trace: [ 384.376067][ T30] [ 384.444489][ T30] __schedule+0x17e8/0x4a20 [ 384.467531][ T30] ? __pfx___schedule+0x10/0x10 [ 384.473751][ T30] ? __pfx_lock_release+0x10/0x10 [ 384.507109][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 384.512721][ T30] ? kthread_data+0x52/0xd0 [ 384.527421][ T30] ? schedule+0x90/0x320 [ 384.531733][ T30] ? wq_worker_sleeping+0x66/0x240 [ 384.536857][ T30] ? schedule+0x90/0x320 [ 384.557297][ T30] schedule+0x14b/0x320 [ 384.561525][ T30] schedule_preempt_disabled+0x13/0x30 [ 384.587262][ T30] __mutex_lock+0x6a4/0xd70 [ 384.591850][ T30] ? __mutex_lock+0x527/0xd70 [ 384.596549][ T30] ? ppp_exit_net+0xe3/0x3d0 [ 384.624394][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 384.647508][ T30] ? net_generic+0x1f/0x240 [ 384.652096][ T30] ppp_exit_net+0xe3/0x3d0 [ 384.656621][ T30] ? __pfx_ppp_exit_net+0x10/0x10 [ 384.687148][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 384.692435][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 384.716650][ T30] cleanup_net+0x802/0xcc0 [ 384.734825][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 384.747404][ T30] ? process_scheduled_works+0x945/0x1830 [ 384.753274][ T30] process_scheduled_works+0xa2c/0x1830 [ 384.767183][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 384.773221][ T30] ? assign_work+0x364/0x3d0 [ 384.797210][ T30] worker_thread+0x86d/0xd70 [ 384.801974][ T30] ? __kthread_parkme+0x169/0x1d0 [ 384.817150][ T30] ? __pfx_worker_thread+0x10/0x10 [ 384.822314][ T30] kthread+0x2f0/0x390 [ 384.826400][ T30] ? __pfx_worker_thread+0x10/0x10 [ 384.847218][ T30] ? __pfx_kthread+0x10/0x10 [ 384.851873][ T30] ret_from_fork+0x4b/0x80 [ 384.856403][ T30] ? __pfx_kthread+0x10/0x10 [ 384.896202][ T30] ret_from_fork_asm+0x1a/0x30 [ 384.907267][ T30] [ 384.917223][ T30] INFO: task syz-executor.3:11913 blocked for more than 143 seconds. [ 384.925326][ T30] Not tainted 6.10.0-rc1-syzkaller-00205-ge19de2064fdf #0 [ 384.957046][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.965769][ T30] task:syz-executor.3 state:D stack:26800 pid:11913 tgid:11912 ppid:5173 flags:0x00000006 [ 384.976508][ T30] Call Trace: [ 384.979934][ T30] [ 384.983201][ T30] __schedule+0x17e8/0x4a20 [ 384.987898][ T30] ? __pfx___schedule+0x10/0x10 [ 384.992781][ T30] ? __pfx_lock_release+0x10/0x10 [ 384.997975][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 385.003746][ T30] ? schedule+0x90/0x