last executing test programs: 38.487251005s ago: executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x4}, 0xe) sendmmsg$sock(r0, &(0x7f0000006700)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000240)="a6", 0x1}, {0x0, 0x2}], 0x2}}], 0x1, 0x0) 38.355773208s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x213a, 0x4) sendmmsg$inet(r0, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) setsockopt$sock_int(r0, 0x1, 0x1d, &(0x7f0000000080)=0x81, 0x4) sendmmsg$inet(r0, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r0, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40002110, 0x0) 38.282584486s ago: executing program 1: clock_gettime(0x2, &(0x7f00000007c0)) unshare(0x22020400) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000180)={0x1f, 0x0, @fixed}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000280)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x0, 0x2}, 0xe) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0xb, &(0x7f0000000000), &(0x7f0000000240)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000010000000000000000000000791203000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000005c80)={0x0, @in6={{0xa, 0x0, 0x0, @private2}}}, &(0x7f0000000500)=0x100) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x8, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}}, 0x200, 0x55, 0xfefffffa, 0x8000, 0x41, 0x8, 0x3a}, 0x9c) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000040)={0x0, @multicast1, @private}, &(0x7f0000000080)=0xc) 38.050691259s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x58, 0x0, 0x1, 0x405, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_SEQ_ADJ_ORIG={0x1c, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_CORRECTION_POS={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x58}}, 0x0) 37.933874036s ago: executing program 1: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) 37.811863936s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r0, 0x29, 0x21, &(0x7f0000000000)=0x101, 0x4) sendto$inet6(r0, 0x0, 0x0, 0x2004c810, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) 35.470085029s ago: executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040), 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000000)={r0, 0x58, &(0x7f00000001c0)={0x0, 0x0}}, 0x10) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={r1}, 0xc) close(r0) 35.437928045s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffffff000}], 0x5, 0x0, 0x0) r1 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x2a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000e00)={0x6, 0x7, &(0x7f00000001c0)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x85, 0x0, 0x0, 0xbe}}]}, &(0x7f0000000080)='syzkaller\x00', 0x1, 0x10e, &(0x7f0000000240)=""/270}, 0x90) bpf$ITER_CREATE(0x21, &(0x7f0000000140), 0x8) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) recvmmsg(r2, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) 34.756484088s ago: executing program 3: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$IPT_SO_SET_ADD_COUNTERS(r0, 0x0, 0x41, &(0x7f0000000040)={'nat\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 32.931428869s ago: executing program 3: r0 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200001400ffd9b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000d00)={&(0x7f0000000cc0)='mm_page_alloc\x00', r1}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000003c0)={@map, 0xffffffffffffffff, 0x1c}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000f9ffffff0000000000000000850000004100000095000000000000003d789ade838a5adf0c21f97a9d6f55528c474cb385573d9fd2aff88c497a5d0ab93dbb1df77098cacd277206f0902cf2c1d66e1ef4fe6deeaf8739f048bff4c9d61b5c334ef7384130fd875789e46307b8f29c46149360bea59a42011aabc5001093a06d23b6cf4f033c6000c3ab63ee036fe7023574b86c8964c32f955d410083f7567735a2ca01000000000000008644e801f1753258c767236f2b3addb04f55cee250cb376879ae14b9e1ab98703bc7db41925c55b0a4141ae3c08d264831d0f6365469c35621850000f6ff0000000000000000000000000000000000317dc59df6de3bfd0d7f785ff1e9606c84574e4b80937ae83516d820278c4c3fda81599b7c4bf635910dcb747508404034d9478ff88e1cbfe43f46a1a5d9239e393f2bb309160118a787cb0c64b606ffe744f79c1bba0ca081302b0f04e377f1b6a3646cbe934ef6ad95d4f160a9dcc9550f9777ca5d2daa2b239547f27a221d2eefb2c40ffe95c97ce091b7c2a8c0471b9124af726edb5a3b9aba486b93cb5ea7fff68f53401f8e826d5afbb98ed8b015dc328a507d15260a18a79110e68f1d43dad73121b60ec43e98e3f522b61a4f8fc0ba0257e8fd5ac428b986c49c76395b5a51c2c75d8c1453771915705bd0925cf573b0a9c01d8e552fe288d3c0433cbe801747f335448deb0e7164f6df7d3554bc66ff51352f912d76519aa6290fe7e72402000000e85552c5c049dde27c5294dc77c8a4490492a6deb8108c14ac9a261e2d990f65ea36f217783759c06e37c3a2f3b0b3c38937"], &(0x7f0000000240)='syzkaller\x00', 0x4, 0xff0, &(0x7f000062b000)=""/4080}, 0x3d) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r2, 0xa0001f98, 0xfe71, 0x1f00, &(0x7f0000000440)="85f17444c5a569f1e21b08c0f264", 0x0, 0xa70a, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 32.916503287s ago: executing program 4: socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r1, &(0x7f0000003280)={0x0, 0x0, 0x0}, 0x0) sendmsg$tipc(r1, &(0x7f0000000e40)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000f80)={0x0, 0x0, &(0x7f0000000f40)=[{&(0x7f00000042c0)="86", 0x1}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000002700)={0x0, 0x0, 0x0}, 0x0) setsockopt$sock_attach_bpf(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) close(r1) recvmsg(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000600)=""/203, 0xcb}], 0x1}, 0x0) 32.725351915s ago: executing program 4: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x30, 0x32, 0x2, 0x0, 0x0, 0x0, 0x0, @in=@rand_addr=0x2000000, @in6=@private2}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @local}}, @sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}]}, 0x80}}, 0x0) 32.665268991s ago: executing program 3: r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = gettid() r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_RELOAD(r2, &(0x7f00000003c0)={0x0, 0x7, &(0x7f0000000380)={&(0x7f00000002c0)={0x3c, r0, 0x1, 0x0, 0x0, {0x25, 0x0, 0x7401}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r1}}]}, 0x3c}}, 0x0) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, 0x0, &(0x7f0000000180)) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000001c0), &(0x7f0000000200)=0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getuid() getgid() openat$cgroup_pressure(0xffffffffffffffff, &(0x7f0000003c00)='io.pressure\x00', 0x2, 0x0) ioctl$sock_SIOCGPGRP(r4, 0x8904, &(0x7f0000003c40)) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) getsockopt$sock_cred(r5, 0x1, 0x11, 0x0, &(0x7f00000001c0)) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0x8, 0x1, 0x0, 0x0, @uid}]}, 0x1c}}, 0x0) ioctl$sock_FIOGETOWN(r3, 0x8903, &(0x7f0000006180)) getsockopt$inet_IP_IPSEC_POLICY(r3, 0x0, 0x10, &(0x7f00000061c0)={{{@in=@multicast1, @in=@local}}, {{@in=@dev}, 0x0, @in6=@mcast2}}, &(0x7f00000062c0)=0xe8) getgid() bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000006300), 0x4) socket$inet_smc(0x2b, 0x1, 0x0) sendmmsg$unix(r3, &(0x7f00000063c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmsg$unix(0xffffffffffffffff, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) 32.598385907s ago: executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x7}, 0x4) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x89a0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x48, 0x31, 0x53b, 0x0, 0x0, {0x9}, [{0x34, 0x1, [@m_sample={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) r6 = socket(0x0, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000000)={0x5}, 0x10) write(r6, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x28, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x40}]}, 0x28}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IE={0x11, 0x2a, [@random={0xdd, 0xb, 'abcdefghijk'}]}]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000040)=@mgmt_frame=@beacon={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x0, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}, 0x36) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0)=@o_path={&(0x7f0000000180)='./file0\x00', 0x0, 0x4010, r4}, 0x18) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000280)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0x1, 0x54ba, 0x1, @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x0, 0x8}}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@bloom_filter={0x1e, 0xffffffff, 0x1, 0x1000, 0x0, r10, 0x7fff, '\x00', r11, 0xffffffffffffffff, 0x1, 0x1, 0x0, 0x5}, 0x48) nanosleep(&(0x7f0000000080)={0x0, 0x4c4b40}, 0x0) syz_80211_inject_frame(&(0x7f0000000300)=@device_b, &(0x7f0000000340)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x35) r12 = socket$alg(0x26, 0x5, 0x0) bind$alg(r12, &(0x7f0000001580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) 31.127290959s ago: executing program 4: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x20, 0x1418, 0x1, 0x0, 0x0, "", [{{0x10}, {0x8}}]}, 0x20}}, 0x0) 31.000939118s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.933619067s ago: executing program 0: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x8, 0x4, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r1}, &(0x7f00000000c0), &(0x7f0000000100)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r1, &(0x7f0000000280)}, 0x20) 30.857528514s ago: executing program 0: r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000700)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_retopts={{0x10}}, @ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x6}]}}}], 0x24}}], 0x2, 0x0) 30.77775745s ago: executing program 0: syz_genetlink_get_family_id$nfc(&(0x7f00000002c0), 0xffffffffffffffff) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x85, 0x0, &(0x7f00000000c0)) 30.676420805s ago: executing program 0: r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0xae0, 0x8d8, 0x4c, 0x1a, 0x0, 0x75, 0xa10, 0x258, 0x258, 0xa10, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'syz_tun\x00', 'macvlan0\x00'}, 0x0, 0x8b0, 0x8d8, 0x0, {}, [@common=@ipv6header={{0x28}}, @common=@unspec=@u32={{0x7e0}, {[{}, {}, {}, {}, {}, {}, {[], [], 0x0, 0x64}], 0x9}}]}, @common=@inet=@SET1={0x28}}, {{@uncond, 0x0, 0xf8, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb40) 30.605137575s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x3c}}, 0x0) 30.352316891s ago: executing program 2: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r0, 0x10d, 0xa, &(0x7f00001c9fff)="03", 0x19) 30.29758059s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x4c, 0x2, 0x6, 0x8bbfe40507dbfe1b, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x4c}}, 0x0) 30.229720465s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x4, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) 30.127797125s ago: executing program 2: bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000000), 0x2c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x300000b, 0x10012, r1, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r2, &(0x7f0000000380)={&(0x7f00000001c0)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x1}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000bc0)="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", 0x9c5}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000140)={0xffffffffffffffff}) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r3) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3, 0x1000}) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, &(0x7f0000000040)) ioctl$sock_rose_SIOCRSCLRRT(r0, 0x89e4) 30.021542183s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)={0x38, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0xfffd]}}]}]}]}, 0x38}}, 0x0) 2.63323224s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000040)) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000000)=0x7fffffff) 975.543317ms ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, &(0x7f0000000140)='wg0\x00', 0x4) connect$inet(r1, &(0x7f00000001c0)={0x2, 0x0, @dev}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffe48500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x1c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000180)={0x80000020}, 0x10) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_IPV6_RTHDRDSTOPTS(0xffffffffffffffff, 0x29, 0x37, 0x0, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000200)='ext4_ext_rm_leaf\x00'}, 0x10) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r4}, 0x10) 580.890969ms ago: executing program 0: socket$packet(0x11, 0x3, 0x300) r0 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) sendmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=',', 0x1}], 0x1}, 0xc9c0) writev(r0, &(0x7f0000000340)=[{&(0x7f0000000100)="5fc903ce8cb5049e077f3ba953190a8ce22e51a45861006641e661523ed30e13487a64d3e98231a20c5e08ebe24801b531c63d06db0e6cca2bdb10dd7d02d74ab9dd95bd33747598fc1e063ff967b7c16abd2076323dca7cd2cc5ab8225b6d31c8029cfe91c8f8c054ff41", 0x6b}, {&(0x7f0000000980)="941dd634f75d70afed00837e63d7a620c1b5fd6f48660a86826b474ffb6274f02f52586f30140dafd6a0baffee63a7bafec8837268f35cf21be882e4ac6c522534080f35b3033aeb3f84e473f0b8c5a0d132378d8d7ff5299fd7616415c9c97f6331af9d07a746bb657558522dcee4c292efe922ce9584ec0ca31b7f5362419bd2084f5f9d2ef32bb866383dcb862e17ae85989ce20040b023f6d6b6cae15622b6b9ab922f95edd7f1fe11b20efdecc038027fe452320671c98e51817e1ab6e62610629bb0fa0b8513df543828b7dc90c220c6e7b17c4c7176508749", 0x50c}, {&(0x7f0000000480)="84", 0x10}], 0x3) 0s ago: executing program 2: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000ac0)={&(0x7f0000000a00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@func={0x1, 0x2}]}, {0x0, [0x2e, 0x2e]}}, 0x0, 0x28}, 0x20) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r2, 0x84, 0x8, &(0x7f0000000000)=0x5, 0x4) sendmmsg$inet6(r1, &(0x7f00000011c0)=[{{&(0x7f0000000680)={0xa, 0x4e20, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x6}, 0x1c, &(0x7f0000000c80)=[{&(0x7f00000006c0)="327606c4a31b3b102e0a1118ddb37de174817b65fefafe68c7567978a4cedc6361bd4d23c9fb7bf929bbdb3980aa38516aedbb0e8995cb35a3eb88db9341f70fd1f11b1b296116ec58704db82224c35e5d751327182edf6475ece00fad7459376755750c411e22c564d9c0f904b198e60ad4e11dda9aa3c093bbfc9c542b2e0b2b861b40613c5aff3155c149c00519f78b0e8a3b3f111022df700842a8fda70c303b176f", 0xa4}, {&(0x7f0000000780)="720e1608a262ea44e0d4464933c5eca3381f5f55c576bbcc74d2b35e97ef41727b836d10721cfcc72a8e0c6ea7e4c2103b6ed2b65973488aa6c625bac7626d970a6853f44d13feeb09ce24ac4d8cce15731362d0d4fe5e328e699be8", 0x5c}, {&(0x7f0000000800)="826ba827e3cdb508b2f6ce63958414e708217847047a3216518c00fe13772a043d4bcf1f12c6eaf89a989c31f46c9a4d7891ca61fbc2273fbb62d1d3d7d3207e596410c8ee855fb50b83ce783d0eb5ffe27e0f45f3d7da0b2df8b9a3829ce57511def7dd779e36deede6075e33a3540469cce8469984270e1cdbc4d1dc8138e0edb090dfcacf039b1ed22d5091460a99ff755933146fc4ab7fb6921a372e97f73d61839e38bc8fb2e733bbeb6cf50b290b", 0xb1}, {&(0x7f00000008c0)="d0b81e2d74cc6994b364fabee73832ad10dda851c3cc9c1a2a9537386762eaf4ded0ad12a2ed5a57b1b9b1f9034730809cf305037842d92efe23d680de93", 0x3e}, {&(0x7f0000000900)="3535c7d48882624b635286e12f6e93a4db7842694909d4836566c0c901ac6a122e360237c3f3468542b0f24ac146fa5024efb3a7f728d10dce085081fbc8476550b1dc63fcf0103c895bcb24bd661536ec6f8bd8635277", 0x57}, {&(0x7f0000000b00)="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", 0xfd}, {0x0}], 0x7}}, {{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000d40)="b28a438fd30dbead5cb48307d0f7f55d97e81c77039beebd211de76ed5c7dc2a6ff533314e14a9e0f550b5dabe05cc1a97635b6c59794ea6e28011c99a27b6fbab091d2e62faf78930da0aa34789c4e6e070f7056d73472eb9731cb011839c362d65bf440d5c5731e2e3f0857eea28141c0f48aa186dd3ab9fa785ab28ed39b803ae8b5432a9428b8270a145ba70032fd7263be0276afb8c98fbd8840f4d946350b4", 0xa2}, {&(0x7f0000000e00)="2e4eb12221f803aad8ca4a640cb0b3ce35e3a7f4d180ed625149fbe86bb071e6617eeac297fc73e106d88f39243a86", 0x2f}, {&(0x7f0000000e40)="07de77fe5f1244e8cbf434297c4fa50e392e7025dfaaa62defe88b82f64730f11bf189e6b5daa9a4130a8d5d90d7cb72cb8755d56b1f049dfdefef561e9853dff01eb489d7e68502a924384b86788d25a7f6fec65fba974d734e4f99d5fad0d57a3486408facda9294fb09a8f8aab22450f2b5528c93e5021c0288a4bcb5af39513fd1fa27f477a2e4ee0b094a038b7d77050622de8650817667feaa32c65458abd874c62f302ac723816e29cb59312341c5c7b87f456f0c17b35886b248dff6994a3506139b440bd1d427cfd84b78d35cc660cac3343bc3d2646628dc801c7d5d0b", 0xe2}, {&(0x7f0000000f40)="03d282558a480b15d99f3d7574c1ec8337b7cfe6441b7edb5aee841d6ab38c4f6ab9e7a324230be51c3974c63259c17845a68bfa097764ba4b87d300e7ce12274b04b7814510", 0x46}, {&(0x7f0000001080)="556c175d3f1670f6a7952b308ba9fdf2e0d4d004b7452f3305c0d09a0bf6c50eb287c493c4a6541708ab6a3d9038fad5b12dd273ba1128d66e82718ad1f0f08ac852a184bb36ea07f915bd0322dbb23cbca67cd29a67ddcf22b80fdab0e45840bc8031469d69e2446b7b3dd2ac2c26327261445430761811b79f951f47f3fbe7a1125e77f20b298a9c8440722850aadd22cc4bf7c173c19d74d1070f3d8861bdec26", 0xa2}], 0x5, &(0x7f0000001140)=[@rthdr_2292={{0x78, 0x29, 0x39, {0x2f, 0xc, 0x1, 0x7a, 0x0, [@ipv4={'\x00', '\xff\xff', @remote}, @local, @dev={0xfe, 0x80, '\x00', 0xa}, @private0={0xfc, 0x0, '\x00', 0x1}, @empty, @ipv4={'\x00', '\xff\xff', @local}]}}}], 0x78}}], 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x3, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x0, 0x0, 0x2, 0x0, 0x2}]}, &(0x7f0000000040)='GPL\x00'}, 0x90) r3 = socket$kcm(0x25, 0x1, 0x0) recvmsg$kcm(r3, &(0x7f0000001340)={0x0, 0x0, 0x0}, 0x40010102) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. 2024/05/29 18:23:48 fuzzer started 2024/05/29 18:23:49 dialing manager at 10.128.0.169:30018 [ 57.914383][ T5088] cgroup: Unknown subsys name 'net' [ 58.106380][ T5088] cgroup: Unknown subsys name 'rlimit' 2024/05/29 18:23:50 starting 5 executor processes [ 59.204321][ T5097] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 59.216864][ T5097] syz-executor (5097) used greatest stack depth: 18832 bytes left [ 60.055527][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.065516][ T5125] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.075678][ T5125] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.084417][ T5125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.092958][ T5126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.101048][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.103475][ T5125] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.109235][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.117887][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.122896][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.131864][ T5127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.145233][ T5125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.145973][ T5129] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.153733][ T5125] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.160978][ T5126] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.169313][ T5127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.175129][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.181161][ T5125] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.189727][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.196150][ T5125] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.204541][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.209634][ T5125] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 60.215585][ T5129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.229885][ T4490] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.241164][ T5117] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.257014][ T5117] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.264570][ T5117] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.271932][ T5129] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.281371][ T5129] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.291634][ T5129] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.824670][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 60.898151][ T5114] chnl_net:caif_netlink_parms(): no params data found [ 60.976609][ T5115] chnl_net:caif_netlink_parms(): no params data found [ 60.995961][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 61.074175][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 61.196709][ T5114] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.205264][ T5114] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.213189][ T5114] bridge_slave_0: entered allmulticast mode [ 61.220134][ T5114] bridge_slave_0: entered promiscuous mode [ 61.228353][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.235713][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.243493][ T5109] bridge_slave_0: entered allmulticast mode [ 61.250276][ T5109] bridge_slave_0: entered promiscuous mode [ 61.275693][ T5115] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.283062][ T5115] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.291622][ T5115] bridge_slave_0: entered allmulticast mode [ 61.298455][ T5115] bridge_slave_0: entered promiscuous mode [ 61.308384][ T5115] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.316227][ T5115] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.323570][ T5115] bridge_slave_1: entered allmulticast mode [ 61.330656][ T5115] bridge_slave_1: entered promiscuous mode [ 61.337870][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.345115][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.352392][ T5114] bridge_slave_1: entered allmulticast mode [ 61.359174][ T5114] bridge_slave_1: entered promiscuous mode [ 61.378272][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.385449][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.393129][ T5109] bridge_slave_1: entered allmulticast mode [ 61.399862][ T5109] bridge_slave_1: entered promiscuous mode [ 61.447727][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.500125][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.525447][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.532934][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.540109][ T5110] bridge_slave_0: entered allmulticast mode [ 61.547204][ T5110] bridge_slave_0: entered promiscuous mode [ 61.556655][ T5115] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.572200][ T5115] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.594673][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.616477][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.623729][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.631339][ T5110] bridge_slave_1: entered allmulticast mode [ 61.638216][ T5110] bridge_slave_1: entered promiscuous mode [ 61.668417][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.735921][ T5114] team0: Port device team_slave_0 added [ 61.754435][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.762416][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.769627][ T5111] bridge_slave_0: entered allmulticast mode [ 61.777218][ T5111] bridge_slave_0: entered promiscuous mode [ 61.784971][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.792247][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.799489][ T5111] bridge_slave_1: entered allmulticast mode [ 61.806458][ T5111] bridge_slave_1: entered promiscuous mode [ 61.819437][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.832689][ T5115] team0: Port device team_slave_0 added [ 61.840328][ T5114] team0: Port device team_slave_1 added [ 61.848925][ T5109] team0: Port device team_slave_0 added [ 61.869454][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.880295][ T5115] team0: Port device team_slave_1 added [ 61.899669][ T5109] team0: Port device team_slave_1 added [ 61.964266][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.977536][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.007474][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.014770][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.041319][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.076286][ T5110] team0: Port device team_slave_0 added [ 62.085122][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.092375][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.119165][ T5115] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.133448][ T5115] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.140634][ T5115] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.166851][ T5115] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.179376][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.188268][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.214713][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.226675][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.234016][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.260354][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.271501][ T5117] Bluetooth: hci0: command tx timeout [ 62.273834][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.281468][ T5117] Bluetooth: hci2: command tx timeout [ 62.284882][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.316741][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.342800][ T5110] team0: Port device team_slave_1 added [ 62.350745][ T5117] Bluetooth: hci1: command tx timeout [ 62.350794][ T5129] Bluetooth: hci3: command tx timeout [ 62.356387][ T5117] Bluetooth: hci4: command tx timeout [ 62.395758][ T5111] team0: Port device team_slave_0 added [ 62.441896][ T5111] team0: Port device team_slave_1 added [ 62.462853][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.469917][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.495940][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.522267][ T5115] hsr_slave_0: entered promiscuous mode [ 62.528659][ T5115] hsr_slave_1: entered promiscuous mode [ 62.562830][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.569794][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.595902][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.618614][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.625827][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.652448][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.667502][ T5114] hsr_slave_0: entered promiscuous mode [ 62.676032][ T5114] hsr_slave_1: entered promiscuous mode [ 62.682521][ T5114] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.690362][ T5114] Cannot create hsr debugfs directory [ 62.717202][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.724312][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.751118][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.777485][ T5109] hsr_slave_0: entered promiscuous mode [ 62.784119][ T5109] hsr_slave_1: entered promiscuous mode [ 62.790183][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.797893][ T5109] Cannot create hsr debugfs directory [ 62.940801][ T5110] hsr_slave_0: entered promiscuous mode [ 62.948628][ T5110] hsr_slave_1: entered promiscuous mode [ 62.958995][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.967416][ T5110] Cannot create hsr debugfs directory [ 63.018592][ T5111] hsr_slave_0: entered promiscuous mode [ 63.025027][ T5111] hsr_slave_1: entered promiscuous mode [ 63.032408][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.040017][ T5111] Cannot create hsr debugfs directory [ 63.408400][ T5114] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.425827][ T5114] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.436661][ T5114] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.462849][ T5114] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.502249][ T5115] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.515912][ T5115] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.528531][ T5115] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.541700][ T5115] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.644852][ T5109] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.655300][ T5109] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.667383][ T5109] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.679315][ T5109] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.758183][ T5110] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.768820][ T5110] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.795591][ T5110] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.813415][ T5110] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.949719][ T5115] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.964848][ T5111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.975428][ T5111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.001927][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.008868][ T5111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.025688][ T5111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.046541][ T5115] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.090698][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.098071][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.116654][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.162539][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.169830][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.187898][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.195252][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.258972][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.266326][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.304203][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.351345][ T5117] Bluetooth: hci0: command tx timeout [ 64.351918][ T5129] Bluetooth: hci2: command tx timeout [ 64.431580][ T5129] Bluetooth: hci4: command tx timeout [ 64.439756][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.447978][ T5129] Bluetooth: hci3: command tx timeout [ 64.448209][ T5117] Bluetooth: hci1: command tx timeout [ 64.471518][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.478788][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.509560][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.534516][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.541801][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.576847][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.669385][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.695990][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.709457][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.716637][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.736119][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.743296][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.794659][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.801969][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.847419][ T5115] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.858549][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.866603][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.938227][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.073057][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.129084][ T5115] veth0_vlan: entered promiscuous mode [ 65.214080][ T5115] veth1_vlan: entered promiscuous mode [ 65.297132][ T5114] veth0_vlan: entered promiscuous mode [ 65.345036][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.365445][ T5114] veth1_vlan: entered promiscuous mode [ 65.384178][ T5109] veth0_vlan: entered promiscuous mode [ 65.404223][ T5115] veth0_macvtap: entered promiscuous mode [ 65.434786][ T5115] veth1_macvtap: entered promiscuous mode [ 65.490250][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.499537][ T5109] veth1_vlan: entered promiscuous mode [ 65.516158][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.563067][ T5115] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.600032][ T5115] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.617395][ T5115] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.627685][ T5115] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.645709][ T5115] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.669441][ T5114] veth0_macvtap: entered promiscuous mode [ 65.699324][ T5111] veth0_vlan: entered promiscuous mode [ 65.731747][ T5114] veth1_macvtap: entered promiscuous mode [ 65.770239][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.786865][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.800200][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.814671][ T5114] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.826568][ T5114] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.838262][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.847730][ T5109] veth0_macvtap: entered promiscuous mode [ 65.858749][ T5109] veth1_macvtap: entered promiscuous mode [ 65.889469][ T5114] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.902399][ T5114] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.913650][ T5114] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.922541][ T5114] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.944170][ T5111] veth1_vlan: entered promiscuous mode [ 66.043322][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.055474][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.066084][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.076586][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.087846][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.127900][ T5161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.136681][ T5161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.173023][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.184415][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.200469][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.214297][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.226090][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.248751][ T5110] veth0_vlan: entered promiscuous mode [ 66.268717][ T5111] veth0_macvtap: entered promiscuous mode [ 66.299198][ T5111] veth1_macvtap: entered promiscuous mode [ 66.301297][ T5162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.321495][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.332428][ T5162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.332434][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.350022][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.361835][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.372436][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.383233][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.394849][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.411201][ T5109] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.420168][ T5109] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.429005][ T5109] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.430852][ T5117] Bluetooth: hci0: command tx timeout [ 66.438436][ T5129] Bluetooth: hci2: command tx timeout [ 66.458121][ T5109] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.469235][ T5110] veth1_vlan: entered promiscuous mode [ 66.511235][ T5129] Bluetooth: hci1: command tx timeout [ 66.511792][ T5117] Bluetooth: hci3: command tx timeout [ 66.516643][ T5124] Bluetooth: hci4: command tx timeout [ 66.548128][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.559377][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.572984][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.583739][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.594188][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.605444][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.617138][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.628318][ T2788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.637747][ T2788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.643307][ T5164] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.649329][ T5111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.664218][ T5111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.667276][ T5164] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.673004][ T5111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.673032][ T5111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.718469][ T5110] veth0_macvtap: entered promiscuous mode [ 66.774085][ T5110] veth1_macvtap: entered promiscuous mode [ 66.880219][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.897463][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.928693][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.969422][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.994598][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.005774][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.016672][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.027314][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.039572][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.050291][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.064656][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.096011][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.107632][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.118378][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.129790][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.143524][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.154780][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.164830][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.175577][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.187146][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.213069][ T5110] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.222628][ T5110] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.231889][ T5110] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.249645][ T5110] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.264444][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.275328][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.347840][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.368743][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.462762][ T5161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.480573][ T5161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.500167][ T5202] Bluetooth: MGMT ver 1.22 [ 67.525770][ T5202] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 67.543627][ T5204] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.030508][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.044672][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.186981][ T5192] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.226760][ T5192] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.511197][ T5124] Bluetooth: hci0: command tx timeout [ 68.522210][ T5124] Bluetooth: hci2: command tx timeout [ 68.591637][ T5124] Bluetooth: hci1: command tx timeout [ 68.592581][ T5129] Bluetooth: hci4: command tx timeout [ 68.597066][ T5124] Bluetooth: hci3: command tx timeout [ 68.631991][ T5244] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 69.617130][ T5286] syz-executor.4[5286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.619707][ T5286] syz-executor.4[5286] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 69.675374][ T5287] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 69.821466][ T5292] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 69.918472][ T5292] veth0_macvtap: left promiscuous mode [ 69.953701][ T5292] macvtap0: entered promiscuous mode [ 69.987803][ T5292] macvtap0: refused to change device tx_queue_len [ 70.099396][ T5301] sit0: entered promiscuous mode [ 70.142019][ T5301] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 70.181265][ T5301] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 70.956808][ T5339] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 70.981885][ T5339] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.115633][ T5344] pim6reg: entered allmulticast mode [ 71.182230][ T5350] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 71.300913][ T5358] syz-executor.3[5358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.301161][ T5358] syz-executor.3[5358] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 71.570598][ T5372] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 71.656245][ T5376] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 71.695571][ T5376] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.722620][ T5376] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 71.780799][ T5384] pim6reg: entered allmulticast mode [ 71.876202][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.885109][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.009792][ T5402] syz-executor.2[5402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.011224][ T5402] syz-executor.2[5402] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.345089][ T5416] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.275034][ T5468] netlink: 'syz-executor.3': attribute type 49 has an invalid length. [ 73.290302][ T5468] netlink: 'syz-executor.3': attribute type 49 has an invalid length. [ 73.597387][ T5480] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 73.755336][ T5488] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.781854][ T5488] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.811592][ T5488] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 73.949101][ T5495] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 74.386521][ T5513] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 76.012148][ T5619] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.033643][ T5619] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 76.048801][ T5619] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.379035][ T5645] netlink: 'syz-executor.0': attribute type 64 has an invalid length. [ 76.407392][ T5645] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.443448][ T5645] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 76.473230][ T5645] Zero length message leads to an empty skb [ 76.514361][ T29] audit: type=1804 audit(1717007047.945:2): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1997071780/syzkaller.aBjB9O/39/cgroup.controllers" dev="sda1" ino=1943 res=1 errno=0 [ 76.567340][ T5656] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.577931][ T5656] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 76.586491][ T5656] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.958189][ T5678] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.067763][ T5682] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.100547][ T5682] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 77.108670][ T5682] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.180719][ T5686] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 77.302247][ T5690] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 77.778197][ T5713] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 77.857469][ T5718] A link change request failed with some changes committed already. Interface ip6tnl0 may have been left with an inconsistent configuration, please check. [ 77.934763][ T5722] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 78.068928][ T5726] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 78.095893][ T5728] IPVS: Unknown mcast interface: vca‡0 [ 78.378918][ T5743] hsr0: entered promiscuous mode [ 78.679092][ T5763] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 79.105180][ T5786] hsr0: entered promiscuous mode [ 80.888150][ T5874] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 81.032882][ T5886] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 81.043617][ T5886] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 81.249466][ T5896] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 81.259696][ T5897] __nla_validate_parse: 4 callbacks suppressed [ 81.259716][ T5897] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.1'. [ 81.382205][ T5897] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 81.563582][ T5909] atomic_op ffff88805ab57998 conn xmit_atomic 0000000000000000 [ 81.735583][ T5920] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.883937][ T5931] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.895466][ T5929] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 82.018865][ T5931] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 82.122839][ T58] cfg80211: failed to load regulatory.db [ 82.337193][ T5956] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.354076][ T5957] atomic_op ffff88807ed9a198 conn xmit_atomic 0000000000000000 [ 82.590278][ T5969] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! [ 82.858702][ T5986] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 82.877169][ T5986] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 82.981360][ T5996] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.143583][ T6005] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.473194][ T6023] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 83.590374][ T6034] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 83.613803][ T6032] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.634442][ T6034] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 83.854999][ T6045] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 84.078570][ T6055] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.106901][ T6055] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.424223][ T6077] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 84.444507][ T6077] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 85.730878][ T6143] ip6gretap0: entered promiscuous mode [ 85.751973][ T6143] syz_tun: entered promiscuous mode [ 85.781377][ T6149] nftables ruleset with unbound chain [ 86.344283][ T6174] tipc: Failed to remove unknown binding: 66,1,1/0:1587703844/1587703846 [ 86.373805][ T6174] tipc: Failed to remove unknown binding: 66,1,1/0:1587703844/1587703846 [ 86.396750][ T6174] tipc: Failed to remove unknown binding: 66,1,1/0:1587703844/1587703846 [ 86.530233][ T6178] tipc: Failed to remove unknown binding: 66,1,1/0:4070248621/4070248623 [ 86.543459][ T6178] tipc: Failed to remove unknown binding: 66,1,1/0:4070248621/4070248623 [ 86.564794][ T6178] tipc: Failed to remove unknown binding: 66,1,1/0:4070248621/4070248623 [ 86.794525][ T6199] tipc: Failed to remove unknown binding: 66,1,1/0:1838096580/1838096582 [ 86.824259][ T6199] tipc: Failed to remove unknown binding: 66,1,1/0:1838096580/1838096582 [ 86.843732][ T6199] tipc: Failed to remove unknown binding: 66,1,1/0:1838096580/1838096582 [ 87.784400][ T6226] __nla_validate_parse: 4 callbacks suppressed [ 87.784420][ T6226] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.834593][ T6226] ip6gretap0: entered promiscuous mode [ 87.852824][ T6228] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.073970][ T6238] tipc: Failed to remove unknown binding: 66,1,1/0:3877542268/3877542270 [ 88.093604][ T6238] tipc: Failed to remove unknown binding: 66,1,1/0:3877542268/3877542270 [ 88.121793][ T6238] tipc: Failed to remove unknown binding: 66,1,1/0:3877542268/3877542270 [ 88.465267][ T6259] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.578337][ T6265] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.615260][ T6265] ip6gretap0: entered promiscuous mode [ 88.625408][ T6262] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.639794][ T6265] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 88.657256][ T6268] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 88.680551][ T6262] ip6gretap0: entered promiscuous mode [ 88.941377][ T6275] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 89.043857][ T6279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.653479][ T6306] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.082706][ T6380] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 92.072109][ T6442] syzkaller0: entered allmulticast mode [ 92.546878][ T6462] ieee802154 phy0 wpan0: encryption failed: -22 [ 92.797686][ T6474] __nla_validate_parse: 11 callbacks suppressed [ 92.797707][ T6474] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.008589][ T6487] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147221503 (only 8 groups) [ 93.226818][ T6494] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.291283][ T6497] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.395326][ T6489] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.697981][ T6520] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147221503 (only 8 groups) [ 93.749959][ T6525] ieee802154 phy0 wpan0: encryption failed: -22 [ 93.763312][ T6526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 93.940530][ T6533] Bluetooth: MGMT ver 1.22 [ 94.152448][ T6530] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.194590][ T6541] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.400810][ T6554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.439186][ T6553] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.621441][ T6571] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.694508][ T6553] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.742822][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.757359][ T6575] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.868851][ T6553] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.032708][ T6553] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.232224][ T6553] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.251936][ T6553] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.299704][ T6553] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.368055][ T6553] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.814551][ T6621] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.928672][ T6621] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.042267][ T6621] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.174590][ T6621] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.234947][ T6647] validate_nla: 1 callbacks suppressed [ 96.234966][ T6647] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 96.651829][ T6673] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 96.872626][ T6683] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 97.546614][ T6704] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.711225][ T6710] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 97.919958][ T6720] __nla_validate_parse: 3 callbacks suppressed [ 97.919987][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.957372][ T6720] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.775157][ T6761] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 99.275080][ T6785] tipc: Can't bind to reserved service type 0 [ 99.500171][ T5129] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 99.520368][ T5129] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 99.535943][ T5129] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 99.547877][ T5129] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 99.557374][ T5129] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 99.567194][ T5129] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 99.895994][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 99.953814][ T6790] chnl_net:caif_netlink_parms(): no params data found [ 100.192706][ T6790] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.199964][ T6790] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.208334][ T6790] bridge_slave_0: entered allmulticast mode [ 100.219804][ T6790] bridge_slave_0: entered promiscuous mode [ 100.242497][ T6790] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.250496][ T6790] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.257760][ T6790] bridge_slave_1: entered allmulticast mode [ 100.266580][ T6790] bridge_slave_1: entered promiscuous mode [ 100.444139][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.480082][ T6790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.516405][ T6790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.614367][ T6841] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.641898][ T6841] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 100.693018][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.716347][ T6790] team0: Port device team_slave_0 added [ 100.721665][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 100.812092][ T6790] team0: Port device team_slave_1 added [ 100.896127][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.964489][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.980305][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.028430][ T6790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.055722][ T6790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.069139][ T6790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.105131][ T6790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.144492][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.205868][ T6862] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 101.327016][ T6790] hsr_slave_0: entered promiscuous mode [ 101.343300][ T6790] hsr_slave_1: entered promiscuous mode [ 101.359181][ T6790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.370988][ T6790] Cannot create hsr debugfs directory [ 101.606346][ T12] bridge_slave_1: left allmulticast mode [ 101.620538][ T12] bridge_slave_1: left promiscuous mode [ 101.627763][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.631714][ T5129] Bluetooth: hci0: command tx timeout [ 101.661406][ T12] bridge_slave_0: left allmulticast mode [ 101.687516][ T12] bridge_slave_0: left promiscuous mode [ 101.693442][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.302032][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.667216][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 102.688477][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 102.699962][ T12] bond0 (unregistering): Released all slaves [ 102.716830][ T12] bond1 (unregistering): Released all slaves [ 102.828589][ T6621] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.911079][ T6621] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.943160][ T6621] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.968783][ T6621] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.029791][ T6902] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.262810][ T6906] xt_CT: You must specify a L4 protocol and not use inversions on it [ 103.547625][ T12] hsr_slave_0: left promiscuous mode [ 103.590671][ T12] hsr_slave_1: left promiscuous mode [ 103.607418][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.615583][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 103.654646][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 103.670748][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 103.710850][ T5129] Bluetooth: hci0: command tx timeout [ 103.727702][ T12] veth1_macvtap: left promiscuous mode [ 103.734484][ T12] veth0_macvtap: left promiscuous mode [ 103.740182][ T12] veth1_vlan: left promiscuous mode [ 103.746280][ T12] veth0_vlan: left promiscuous mode [ 103.912099][ T12] pim6reg (unregistering): left allmulticast mode [ 104.052138][ T6935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.083181][ T6935] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.307317][ T12] team0 (unregistering): Port device team_slave_1 removed [ 104.344149][ T12] team0 (unregistering): Port device team_slave_0 removed [ 104.745976][ T6924] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.960916][ T6924] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.107354][ T6924] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.207401][ T6956] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 105.291814][ T6924] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.790698][ T5129] Bluetooth: hci0: command tx timeout [ 107.870698][ T5129] Bluetooth: hci0: command tx timeout [ 133.315312][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.327911][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.981622][ T5124] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 133.990985][ T5124] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 133.999077][ T5124] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 134.009986][ T5124] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 134.018024][ T5124] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 134.025894][ T5124] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 135.510246][ T5124] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 135.523075][ T5124] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 135.531209][ T5124] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 135.544845][ T5124] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 135.554491][ T5124] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 135.566971][ T5124] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 135.987785][ T5124] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 135.997106][ T5124] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 136.005291][ T5124] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 136.014162][ T5124] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 136.021928][ T5124] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 136.030031][ T5124] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 136.121126][ T5124] Bluetooth: hci5: command tx timeout [ 136.580977][ T5129] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 136.589490][ T5129] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 136.597545][ T5129] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 136.607927][ T5129] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 136.621475][ T5129] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 136.629622][ T5129] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 137.630785][ T5124] Bluetooth: hci6: command tx timeout [ 138.120614][ T5124] Bluetooth: hci7: command tx timeout [ 138.190793][ T5124] Bluetooth: hci5: command tx timeout [ 138.670621][ T5124] Bluetooth: hci8: command tx timeout [ 139.711139][ T5124] Bluetooth: hci6: command tx timeout [ 140.200597][ T5124] Bluetooth: hci7: command tx timeout [ 140.280535][ T5124] Bluetooth: hci5: command tx timeout [ 140.750591][ T5124] Bluetooth: hci8: command tx timeout [ 141.800588][ T5124] Bluetooth: hci6: command tx timeout [ 142.270747][ T5124] Bluetooth: hci7: command tx timeout [ 142.351094][ T5124] Bluetooth: hci5: command tx timeout [ 142.830767][ T5124] Bluetooth: hci8: command tx timeout [ 143.870613][ T5124] Bluetooth: hci6: command tx timeout [ 144.350605][ T5124] Bluetooth: hci7: command tx timeout [ 144.910632][ T5124] Bluetooth: hci8: command tx timeout [ 164.386664][ T5129] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 164.395489][ T5129] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 164.409658][ T5129] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 164.419081][ T5129] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 164.427399][ T5129] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 164.434937][ T5129] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 166.510691][ T5129] Bluetooth: hci9: command tx timeout [ 168.590705][ T5129] Bluetooth: hci9: command tx timeout [ 170.670658][ T5129] Bluetooth: hci9: command tx timeout [ 172.750532][ T5129] Bluetooth: hci9: command tx timeout [ 186.601458][ T5129] Bluetooth: hci3: command 0x0406 tx timeout [ 186.601481][ T53] Bluetooth: hci2: command 0x0406 tx timeout [ 186.601494][ T5125] Bluetooth: hci1: command 0x0406 tx timeout [ 194.763743][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.770087][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 199.099223][ T5117] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 199.114499][ T5117] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 199.126952][ T5117] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 199.139489][ T5117] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 199.151017][ T5117] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 199.158637][ T5117] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 200.643327][ T5117] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 200.655266][ T5117] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 200.669529][ T5117] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 200.678226][ T5117] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 200.686319][ T5117] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 200.693855][ T5117] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 201.031264][ T5124] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 201.040082][ T5124] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 201.048185][ T5124] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 201.057483][ T5124] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 201.065410][ T5124] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 201.073835][ T5124] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 201.230586][ T5117] Bluetooth: hci10: command tx timeout [ 201.600990][ T5124] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 201.610341][ T5124] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 201.618765][ T5124] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 201.628145][ T5124] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 201.636207][ T5124] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 201.648156][ T5124] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 202.750665][ T5124] Bluetooth: hci11: command tx timeout [ 203.157576][ T5124] Bluetooth: hci12: command tx timeout [ 203.310845][ T5124] Bluetooth: hci10: command tx timeout [ 203.710719][ T5124] Bluetooth: hci13: command tx timeout [ 204.835969][ T5124] Bluetooth: hci11: command tx timeout [ 205.230605][ T5124] Bluetooth: hci12: command tx timeout [ 205.392630][ T5124] Bluetooth: hci10: command tx timeout [ 205.806024][ T5124] Bluetooth: hci13: command tx timeout [ 206.910471][ T5124] Bluetooth: hci11: command tx timeout [ 207.310591][ T5124] Bluetooth: hci12: command tx timeout [ 207.470607][ T5124] Bluetooth: hci10: command tx timeout [ 207.870485][ T5124] Bluetooth: hci13: command tx timeout [ 208.990467][ T5124] Bluetooth: hci11: command tx timeout [ 209.390578][ T5124] Bluetooth: hci12: command tx timeout [ 209.950718][ T5124] Bluetooth: hci13: command tx timeout [ 222.444396][ T5116] Bluetooth: hci4: command 0x0406 tx timeout [ 222.450482][ T5129] Bluetooth: hci0: command 0x0406 tx timeout [ 229.432761][ T5124] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 229.441874][ T5124] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 229.450312][ T5124] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 229.459008][ T5124] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 229.470631][ T5124] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 229.478325][ T5124] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 231.550724][ T5124] Bluetooth: hci14: command tx timeout [ 233.630652][ T5124] Bluetooth: hci14: command tx timeout [ 235.710505][ T5124] Bluetooth: hci14: command tx timeout [ 237.800499][ T5124] Bluetooth: hci14: command tx timeout [ 256.212480][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.218844][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.278350][ T5129] Bluetooth: hci7: command 0x0406 tx timeout [ 258.280509][ T5125] Bluetooth: hci6: command 0x0406 tx timeout [ 258.286407][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 262.590933][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 262.598868][ T30] Not tainted 6.9.0-syzkaller-12116-g782471db6c72 #0 [ 262.606196][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 262.615195][ T30] task:kworker/u8:1 state:D stack:19608 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 262.625530][ T30] Workqueue: netns cleanup_net [ 262.630411][ T30] Call Trace: [ 262.633785][ T30] [ 262.636727][ T30] __schedule+0x17e8/0x4a20 2024/05/29 18:27:14 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 262.641394][ T30] ? __pfx___schedule+0x10/0x10 [ 262.675008][ T30] ? __pfx_lock_release+0x10/0x10 [ 262.680109][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 262.690755][ T30] ? kthread_data+0x52/0xd0 [ 262.695293][ T30] ? schedule+0x90/0x320 [ 262.699547][ T30] ? wq_worker_sleeping+0x66/0x240 [ 262.720469][ T30] ? schedule+0x90/0x320 [ 262.725283][ T30] schedule+0x14b/0x320 [ 262.729573][ T30] schedule_preempt_disabled+0x13/0x30 [ 262.735111][ T30] __mutex_lock+0x6a4/0xd70 [ 262.739646][ T30] ? __mutex_lock+0x527/0xd70 [ 262.744575][ T30] ? mpls_net_exit+0x7d/0x2a0 [ 262.749276][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 262.754595][ T30] ? kfree+0x149/0x360 [ 262.758691][ T30] mpls_net_exit+0x7d/0x2a0 [ 262.763646][ T30] cleanup_net+0x802/0xcc0 [ 262.768105][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 262.775095][ T30] ? process_scheduled_works+0x945/0x1830 [ 262.788566][ T30] process_scheduled_works+0xa2c/0x1830 [ 262.794265][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 262.806145][ T30] ? assign_work+0x364/0x3d0 [ 262.810843][ T30] worker_thread+0x86d/0xd70 [ 262.815495][ T30] ? __kthread_parkme+0x169/0x1d0 [ 262.821081][ T30] ? __pfx_worker_thread+0x10/0x10 [ 262.826221][ T30] kthread+0x2f0/0x390 [ 262.830306][ T30] ? __pfx_worker_thread+0x10/0x10 [ 262.842115][ T30] ? __pfx_kthread+0x10/0x10 [ 262.846832][ T30] ret_from_fork+0x4b/0x80 [ 262.857300][ T30] ? __pfx_kthread+0x10/0x10 [ 262.862295][ T30] ret_from_fork_asm+0x1a/0x30 [ 262.867390][ T30] [ 262.870913][ T30] INFO: task kworker/1:1:45 blocked for more than 143 seconds. [ 262.878580][ T30] Not tainted 6.9.0-syzkaller-12116-g782471db6c72 #0 [ 262.895825][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 262.909228][ T30] task:kworker/1:1 state:D stack:23128 pid:45 tgid:45 ppid:2 flags:0x00004000 [ 262.926256][ T30] Workqueue: events linkwatch_event [ 262.931608][ T30] Call Trace: [ 262.934895][ T30] [ 262.937839][ T30] __schedule+0x17e8/0x4a20 [ 262.948418][ T30] ? __pfx___schedule+0x10/0x10 [ 262.953442][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 262.959440][ T30] ? __pfx_lock_release+0x10/0x10 [ 262.970296][ T30] ? kick_pool+0x1bd/0x620 [ 262.974787][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 262.979994][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 262.985509][ T30] ? schedule+0x90/0x320 [ 262.989770][ T30] schedule+0x14b/0x320 [ 263.010140][ T30] schedule_preempt_disabled+0x13/0x30 [ 263.015743][ T30] __mutex_lock+0x6a4/0xd70 [ 263.020269][ T30] ? __mutex_lock+0x527/0xd70 [ 263.031456][ T30] ? linkwatch_event+0xe/0x60 [ 263.036166][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 263.045665][ T30] ? process_scheduled_works+0x945/0x1830 [ 263.051730][ T30] linkwatch_event+0xe/0x60 [ 263.056255][ T30] process_scheduled_works+0xa2c/0x1830 [ 263.067387][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 263.073572][ T30] ? assign_work+0x364/0x3d0 [ 263.078182][ T30] worker_thread+0x86d