last executing test programs: 38.177843999s ago: executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x27, &(0x7f00000004c0)=""/153}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0x0, &(0x7f00000000c0)="61d7712bc884fed5722780b6c2a7", 0x0, 0x739d, 0x0, 0xf, 0x0, &(0x7f0000000000)="e4ef9efb3d4db08d3057fe26b12c87", &(0x7f0000000000), 0x0, 0x0, 0x657}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000640)={&(0x7f00000003c0)='ext4_da_reserve_space\x00', r0}, 0x10) 37.970163008s ago: executing program 1: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c0002800600190006"], 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="ff00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 37.962139445s ago: executing program 3: bpf$BPF_MAP_GET_NEXT_ID(0xc, &(0x7f0000000080)={0x1000}, 0x8) r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 37.84986537s ago: executing program 3: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', &(0x7f0000000240)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x2, 0x0, 0x5e55b37311de6d89, 0x0, @empty, @dev}}}}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c0002800600190006"], 0x3c}}, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) close(r2) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="ff00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe2, 0x0) 36.977071848s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x7, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xad}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r0 = epoll_create1(0x0) r1 = socket$unix(0x1, 0x1, 0x0) close(r1) socket(0x1d, 0x2, 0x6) setsockopt$sock_int(r1, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r1, &(0x7f0000000080)={0xe0028008}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000023c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r2, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r4 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000000c0)={r3}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd6e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x2, 0x4, 0x800004, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r5}, 0x48) 36.924025273s ago: executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3e8, 0xd0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x318, 0x20a, 0x278, 0x318, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0x1e0, 0x248, 0x0, {}, [@common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@dev, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @empty, @loopback, @loopback, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00', @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @private0, @private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x448) r1 = accept$alg(0xffffffffffffffff, 0x0, 0x0) r2 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @rose}, [@rose, @bcast, @netrom, @remote, @bcast, @netrom, @null, @null]}, &(0x7f0000000080)=0x48) sendfile(r1, r2, 0x0, 0x20) 36.825868689s ago: executing program 1: recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/153, 0x99}], 0x1}}], 0xffffff1f, 0x102, 0x0) write$binfmt_script(r0, &(0x7f0000000a00)={'#! ', '', [{}, {0x20, 'GPL\x00'}], 0xa, "1d5a69b0302a938a5aa99cf0759a416b893e43c0e1e4a3b515bc136f2cb0d16e8006bd5d37a2701cc0ae3a6cee1d62790759561eee01b6955c2d58bf315dba68e44736409c166506dad647a431fd1d3c69f5c87f199425b24bf0e6033da792f8b321075526512f8c9dff4255c0b2f8108ad9cc7dab676c35ef6f42b5f452cd2ac0de16cb"}, 0x8e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) 36.816086004s ago: executing program 3: recvmmsg(0xffffffffffffffff, &(0x7f0000007600)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000400)=0x1, 0x4) recvmmsg(r0, &(0x7f00000061c0)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)=""/153, 0x99}], 0x1}}], 0xffffff1f, 0x102, 0x0) write$binfmt_script(r0, &(0x7f0000000a00)={'#! ', '', [{}, {0x20, 'GPL\x00'}], 0xa, "1d5a69b0302a938a5aa99cf0759a416b893e43c0e1e4a3b515bc136f2cb0d16e8006bd5d37a2701cc0ae3a6cee1d62790759561eee01b6955c2d58bf315dba68e44736409c166506dad647a431fd1d3c69f5c87f199425b24bf0e6033da792f8b321075526512f8c9dff4255c0b2f8108ad9cc7dab676c35ef6f42b5f452cd2ac0de16cb"}, 0x8e) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1d65ab71f5ef2fe", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) 32.391563572s ago: executing program 4: r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$sock_ax25_SIOCADDRT(r1, 0x890b, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r0, 0x0, 0x484, &(0x7f0000000a40)=""/200, &(0x7f0000000240)=0xc8) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000100)={'ip6gretap0\x00', 0x800}) r3 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r3, &(0x7f0000002340), 0xfee6) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x16, 0x16, &(0x7f0000000f40)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x253, 0x10, &(0x7f0000000000), 0x19f, 0x0, 0xffffffffffffffff, 0xffffffffffffff74}, 0x48) r4 = socket$can_raw(0x1d, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x5}], {0x14}}, 0x3c}}, 0x0) bind$can_raw(r4, &(0x7f0000000040), 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@bridge_newvlan={0x24, 0x76, 0x1, 0x0, 0x0, {0x7, 0x2, 0x300}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, 0x0, 0x0) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r8 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r8, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @private}, {0x0, @dev}, 0x0, {0x2, 0x0, @local}}) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16e024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000067cf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b9242754b1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b466bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe60900bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c000000000000c1eaf0f34cb05ab03943510000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee7417ef02684d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca03bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca601008d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4ac6be1093ee5789f44b13e22b7ec0bede71caa71702a8bd83f31dcea1579ea730fd55098cade134d39652c42279c451edbb4eaae1e094ec599eeb275760e36fdd52ea3eece13af08227ba090dc3333749f3d580157f8b06efb793db962c9ff49c6c75a9524cef6b912"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r9, 0xe0, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x5d, 0x0, 0x0, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffb, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r10}, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup/syz1\x00', 0x200002, 0x0) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000840)={@cgroup=r12, 0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@map, 0xffffffffffffffff, 0x31, 0x0, 0x0, @link_id, r13}, 0x20) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)={@ifindex=r11, 0xffffffffffffffff, 0xa, 0x24, 0x0, @prog_id=r10, r13}, 0x20) connect$bt_l2cap(r7, &(0x7f0000000000)={0x1f, 0x81, @none, 0x5, 0x1}, 0xe) 32.16272194s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, 0x0, 0x0) (async) socket$pppl2tp(0x18, 0x1, 0x1) (async) ioctl$PPPIOCGL2TPSTATS(0xffffffffffffffff, 0x80487436, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_CIPSOV4_C_LISTALL(r3, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000400)={0x0, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) (async) syz_emit_ethernet(0x66, &(0x7f00000002c0)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "122d92", 0x30, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @remote, [{0x26, 0x1, "0ba44efd518d"}]}}}}}}, 0x0) (async) r4 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000200)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000000)={0x1d, r5}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f00000002c0)={&(0x7f00000000c0)={0x1d, 0x0, 0x0, {0x0, 0x1ee}}, 0x18, &(0x7f00000004c0)={&(0x7f0000000140)='\x00', 0x8}}, 0x0) (async) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r6, 0x111, 0x1, 0x0, 0x4) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x0) (async) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x1c, 0x41, 0x107, 0x0, 0x0, {0x1, 0x7c}, [@nested={0x8, 0x4, 0x0, 0x1, [@generic='\nN']}]}, 0x1c}}, 0x0) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newsa={0xf0, 0x10, 0x413, 0x70bd2b, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@rand_addr=' \x01\x00', 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee00}, {@in=@broadcast, 0x0, 0x32}, @in6=@private1, {0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {0x7}, 0x0, 0x0, 0x2}}, 0xf0}, 0x1, 0x0, 0x0, 0x40080}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000000000000000000000000008500000050"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) accept$alg(r0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xe, 0x4, 0x4, 0xa}, 0x48) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r8}, 0x10) write$cgroup_type(r1, &(0x7f0000000140), 0x9) 32.019366468s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0xe09, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900030073797a300000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a30"], 0xa4}}, 0x0) 31.815390538s ago: executing program 4: syz_emit_ethernet(0x66, &(0x7f0000000000)=ANY=[@ANYBLOB="ffffffffffff0180c200000086dd6012000800303a00000000000000000000004e02731d000000000000000000000000000000000001"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0x17, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x6, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 31.738652147s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x3}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x14, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x8}, @IFLA_MACVLAN_FLAGS={0x6, 0x2, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x4c}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) unshare(0x62040200) r3 = socket$alg(0x26, 0x5, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x18, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x0) bind$alg(r3, &(0x7f0000000500)={0x26, 'skcipher\x00', 0x0, 0x0, 'lrw(twofish)\x00'}, 0x58) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x28, 0x6, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@mptcp=@generic={0x0, 0x3, "85"}, @sack={0x5, 0xe, [0x0, 0x0, 0x0]}]}}}}}}}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x2}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8}]}, 0x34}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40008402}, 0xc, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, r8, 0x200, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x9, 0x4}}}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_BSS_BASIC_RATES={0x10, 0x24, [{0x9}, {0x6c, 0x1}, {}, {0x36}, {0x30, 0x1}, {0x9, 0x1}, {0xb, 0x1}, {0x1b, 0x1}, {0x1b, 0x1}, {0x5, 0x1}, {0x48}, {0xb}]}, @NL80211_ATTR_HT_CAPABILITY={0x1e, 0x1f, {0x8000, 0x1, 0x2, 0x0, {0x1, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1, 0x3}, 0x8, 0x6, 0x40}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8000}, 0x800) 31.585288691s ago: executing program 0: r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r0, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x4}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x3}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x9}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x3ff}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000000}, 0x4000010) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), r1) sendmsg$TIPC_CMD_SET_LINK_PRI(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x30, r2, 0x400, 0x70bd27, 0x25dfdbfe, {{}, {}, {0x14, 0x18, {0x57cae38, @bearer=@udp='udp:syz2\x00'}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x900}, 0x80) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000002c0)=0x0, &(0x7f0000000300)=0x4) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000340)={0xbc, 0x0, 0x200, 0x70bd25, 0x25dfdbfb, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x10000040}, 0x10048000) sendto$inet6(0xffffffffffffffff, &(0x7f0000000480)="327b5a6073b205bb16eef9741f43ce4dabb3becd4cda2b316c7dcd8ae75fffae83663d4a1eaa154f487c8b7cf82d02103194bb02d35939a34c05826dcceb86c64d7db77acddb2ce3cf4ca3d37c2a1c9f9eb74b150ce915162ec171c9265bce92352d18f011c32c5ae05256e19cf1a4302bfe88bc495554908f72cae68a15f1b8d736578482ac93d482befab9a195b57abfd75a79300f1f79c5bf8277ad3e8cfe7d12e9d1a8b64535e35a4a239dd7a6e3d83f22696b08d5106d4dd378a9", 0xbd, 0x0, &(0x7f0000000540)={0xa, 0x4e24, 0x1, @empty, 0x2}, 0x1c) syz_genetlink_get_family_id$tipc2(&(0x7f0000000580), r1) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f00000005c0)={r1, 0x7, 0x3}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000640), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000680)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r4, &(0x7f0000000740)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x3c, r5, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x80}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40}, 0x4080) r7 = bpf$ITER_CREATE(0x21, &(0x7f0000000780)={r4}, 0x8) sendmsg$AUDIT_ADD_RULE(r7, &(0x7f0000000cc0)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000c80)={&(0x7f0000000800)={0x458, 0x3f3, 0x400, 0x70bd29, 0x25dfdbfd, {0x5, 0x2, 0x23, [0xffffffff, 0x9, 0xffff, 0x4, 0x318fbc62, 0x0, 0x7, 0x5, 0x8, 0x2, 0x1, 0x2, 0x1, 0x0, 0x97, 0x401, 0x100, 0x81, 0x0, 0x5, 0x3, 0x8, 0x1, 0x7fff, 0x8b, 0x7fffffff, 0x6, 0x6, 0x401, 0x1, 0x3ff, 0x1, 0x10000, 0x2, 0x6, 0x9, 0x71, 0x5, 0x4, 0x3ff, 0x769, 0x3, 0x80, 0x1, 0x892b, 0x9, 0x0, 0x0, 0x6, 0x7, 0x5, 0xfffffff7, 0x8, 0x1, 0x4, 0x8001, 0x69343466, 0x80, 0x3ff, 0x8, 0x0, 0x100, 0x5, 0x8], [0x4, 0x8, 0x9, 0x2, 0x800, 0x0, 0x1f, 0x8, 0x63f67863, 0xff, 0x1, 0x0, 0x7, 0x80, 0x2, 0x8e, 0x0, 0x81, 0xffff, 0x2, 0x10001, 0x4, 0x2, 0x5, 0xd78, 0x6, 0x200, 0x4, 0xfffffffc, 0x401, 0x1, 0x6a, 0xffffffff, 0x3, 0x1, 0x8ba1, 0x2, 0x1f, 0x3b361c1, 0x2, 0x80000001, 0x4, 0x8, 0x0, 0x5, 0x628, 0x1000, 0xfff, 0x80000000, 0x5, 0x9, 0x10001, 0x8, 0x80000001, 0x4, 0x86a, 0x4f, 0x9, 0x3, 0x1ff, 0x0, 0x0, 0x5], [0x9, 0x10001, 0x6, 0x7, 0x7fffffff, 0x3f, 0x5, 0x8, 0x40, 0x1, 0x4b, 0x0, 0xa826, 0x0, 0x7, 0xffffffff, 0xa715, 0x0, 0x4, 0xffff, 0x5, 0x4, 0x5, 0x1, 0xfffffffe, 0x21f, 0x81, 0x40, 0x2, 0x5, 0x9, 0x400, 0x50, 0x49fe6a6f, 0x3, 0xfffffffb, 0x1, 0xfff, 0xffffffff, 0x3, 0x3f39, 0x4, 0x80, 0x3, 0x400, 0x2d, 0x3, 0x0, 0x4, 0xffff, 0x401, 0x0, 0x6, 0x8, 0x7, 0x8ab6, 0x101, 0x1f, 0x8d4, 0x6, 0x101, 0x1, 0xff, 0x7], [0xfffffc00, 0x6, 0xfffffff8, 0x8, 0x4, 0x80, 0x8, 0x2, 0x6, 0x0, 0x4, 0x149, 0xfffff0f7, 0x6, 0x9, 0x10000, 0x9, 0x2, 0x5, 0x20, 0xaee, 0x80000001, 0xa6, 0x7, 0x8000, 0x5, 0x9, 0x2, 0x7, 0x42e, 0x8, 0x34, 0x1ff, 0xfffff870, 0x10000, 0x3, 0x7fffffff, 0x8000, 0x3, 0x10001, 0x1, 0x8b, 0x80, 0x101, 0x4, 0x7ff, 0x7fff, 0x149, 0x2, 0x7, 0x8001, 0x0, 0x1ff, 0x10001, 0xd173, 0x9a3, 0x10001, 0x2, 0x8, 0x0, 0x7, 0xd03a, 0x200, 0x7], 0x37, ['veth1_macvtap\x00', '\x00', 'wg1\x00', 'udp:syz2\x00', 'batadv_slave_1\x00', '-]:$\xbc.!/],\x00', '\x00']}, ["", "", "", "", ""]}, 0x458}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000d40), r7) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r7, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x24, r8, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_LINKINFO_PHYADDR={0x5, 0x3, 0x4}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x80}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008040}, 0x44800) getsockopt$bt_BT_SECURITY(r7, 0x112, 0x4, &(0x7f0000000e40), 0x2) r9 = socket$netlink(0x10, 0x3, 0x4) setsockopt$sock_attach_bpf(r9, 0x1, 0x32, &(0x7f0000000e80)=r7, 0x4) r10 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002000)=@o_path={&(0x7f0000001fc0)='./file0\x00', 0x0, 0x10, r7}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002100)={0x18, 0x10, &(0x7f0000000ec0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x0, 0x1, 0xd, 0x7, 0x7, 0x80, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x18f}}}, &(0x7f0000000f40)='syzkaller\x00', 0x4, 0x1000, &(0x7f0000000f80)=""/4096, 0x0, 0x70, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000001f80)={0x1, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000002040)=[r10, r7, r4, r7, 0xffffffffffffffff, r7], &(0x7f0000002080)=[{0x0, 0x3, 0xb, 0x5}, {0x4, 0x1, 0xb}, {0x1, 0x4, 0x7, 0x4}, {0x3, 0x4, 0xc, 0x1}, {0x1, 0x2, 0x3, 0x9}, {0x4, 0x5, 0xb, 0x2}], 0x10, 0x8001}, 0x90) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000002200), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_REMOVE(r11, &(0x7f0000002440)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000002400)={&(0x7f0000002240)={0x184, r12, 0x300, 0x70bd2b, 0x25dfdbfe, {}, [@NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x5}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}, @NLBL_CIPSOV4_A_MLSLVLLST={0x134, 0x8, 0x0, 0x1, [{0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x75}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x99}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x6a}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x592746e5}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x170134dc}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x2c2b624f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x120e62cd}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6170292a}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9f}]}, {0x24, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x6f93c778}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x86}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x29}]}, {0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x4a}]}, {0x1c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x73878451}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x3f}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x59e8e5db}]}, {0x2c, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x398af968}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x4fa8d42c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x41f861c4}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x606d883f}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x47}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0xc1}]}, {0x34, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x92}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x439eb23f}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x9c}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x90}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x16}, @NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x25f9f618}]}, {0x14, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8, 0x5, 0x5d12e34e}, @NLBL_CIPSOV4_A_MLSLVLREM={0x8, 0x6, 0x39}]}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x184}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) ioctl$FITHAW(r1, 0xc0045878) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002680)={0x11, 0x16, &(0x7f00000024c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@alu={0x7, 0x1, 0x2, 0xa, 0x9, 0x20, 0x10}, @jmp={0x5, 0x0, 0x7, 0x1, 0x8, 0x14a, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, @map_fd={0x18, 0x2, 0x1, 0x0, r4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000002580)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x37, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000025c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000002600)={0x1, 0x5, 0xa48, 0x486}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000002640)=[r10, r7, r7, r10], 0x0, 0x10, 0x1ff}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000002740)={&(0x7f0000002480)='jbd2_handle_extend\x00', r13}, 0x10) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r7, 0x6, 0x23, &(0x7f0000002900)={&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, &(0x7f0000002780)=""/127, 0x7f, 0x0, &(0x7f0000002800)=""/233, 0xe9}, &(0x7f0000002940)=0x40) sendmsg$NL802154_CMD_SET_SEC_PARAMS(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)={0x1c, 0x0, 0x100, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x48004) 31.426766179s ago: executing program 0: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080), 0x10) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="90030ee7ff072d2203000e218848"], 0x120) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, r7, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r10, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x24000840) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r9, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x74, r12, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xa}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}]}, 0x74}, 0x1, 0x0, 0x0, 0x24880}, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000540)={0x60, r5, 0x200, 0x1, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x60}}, 0x0) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r13, 0xe39, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08040e000000000d01a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4094000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 31.101650429s ago: executing program 0: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c0002800600190006"], 0x3c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="ff00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 30.972579863s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) pwritev(r0, &(0x7f00000001c0)=[{0x0}], 0x2, 0x0, 0x0) r2 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write$binfmt_script(r2, &(0x7f0000000000)={'#! ', './file0'}, 0xb) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={0x2, 0x3, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @loopback}}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0xa}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}]}, 0x70}, 0x1, 0x7}, 0x0) listen(r4, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x20, 0x3a, 0x107, 0x0, 0x0, {0x2, 0x7c}, [@typed={0x4}, @nested={0x8, 0x1, 0x0, 0x1, [@generic="8506e7e2"]}]}, 0x20}}, 0x0) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r6, 0x29, 0x2a, &(0x7f0000000000)={0x2, {{0xa, 0x4e22, 0x9, @dev={0xfe, 0x80, '\x00', 0x32}, 0xff}}}, 0x88) 30.962749971s ago: executing program 2: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 30.855514917s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x80086301, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 30.786310463s ago: executing program 2: syz_emit_ethernet(0x5e, &(0x7f0000000280)={@local, @random="cce390677742", @void, {@ipv6={0x86dd, @icmpv6={0x6, 0x6, "0cbb45", 0x28, 0x3a, 0xff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], @ndisc_redir={0x89, 0x3, 0x0, '\x00', @empty, @private1}}}}}}, 0x0) 30.693476547s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0xe09, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000005c000000030a01010000000000000000010000000900030073797a300000000028000480080002400000000208000140000000051400030076657468315f746f5f626174616476000900010073797a30"], 0xa4}}, 0x0) 30.670978324s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@RTM_NEWMDB={0x14, 0x54, 0x1, 0x0, 0x0, {}, [@MDBA_SET_ENTRY={0x20}]}, 0x38}, 0x1, 0x700}, 0x0) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@link_local={0x3}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x38, 0x3a, 0x0, @dev, @mcast2, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "094218", 0x0, 0x2f, 0x0, @local, @dev, [@fragment={0x3c}]}}}}}}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c000000200045bf000000000000deff0a000000000000000000000005001600000000000800170000000000"], 0x2c}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x40, 0x1, 0x1, 0x300, 0x0, 0x0, {}, [@CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2404}, @CTA_TUPLE_ORIG={0x4}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0x8f7a}, @CTA_HELP={0x10, 0x5, 0x0, 0x1, {0x9, 0x1, 'pptp\x00'}}, @CTA_ID={0x8}]}, 0x40}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000180)={{}, &(0x7f0000000000), &(0x7f0000000140)='%pi6 \x00'}, 0x20) 30.618429902s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x3, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.14447835s ago: executing program 1: syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) (async) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) (async) writev(r1, &(0x7f00000002c0)=[{&(0x7f0000000080)='?', 0x1}], 0x1) r2 = accept4$unix(r0, 0x0, 0x0, 0x0) recvmmsg(r2, &(0x7f0000001680)=[{{0x0, 0x0, &(0x7f0000003380)=[{&(0x7f0000000140)=""/120, 0x78}, {&(0x7f0000000040)=""/40, 0x28}, {&(0x7f0000003300)=""/107, 0x6b}], 0x3}}], 0x4000000000000a1, 0x2, 0x0) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1}, 0x4c2103a0) (async) recvmsg(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)=""/55, 0x37}], 0x1}, 0x4c2103a0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRESDEC=r3], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xda}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYRESDEC=r3], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xda}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000080)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x67, '\x00', 0x0, 0x1e}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000006fd6b696aa0000000071121100"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000006fd6b696aa0000000071121100"/32], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) (async) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r5, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newlink={0x38, 0x10, 0x49920d862a92153b, 0x0, 0x25dfdbff, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_PHYS_PORT_ID={0xf, 0x22, "55bb78cae9666fe3556a10"}]}, 0x38}, 0x1, 0x0, 0x0, 0x15840}, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 30.032453278s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x0, 0x2000, 0x8}, 0x48) r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000300)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='batadv0\x00', 0x10) sendmmsg$inet6(r1, &(0x7f0000001600)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000000)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) write$binfmt_script(r1, &(0x7f00000000c0)={'#! ', './file0', [], 0xa, "46ccff30a4d3b5e486f3fd79"}, 0x2) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000001c0)=0x8) r3 = socket(0x2, 0x80805, 0x0) setsockopt$bt_hci_HCI_FILTER(r3, 0x0, 0x2, &(0x7f0000000180)={0x3661, [0x401, 0x851], 0x2}, 0x10) getsockopt$inet_sctp_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x1b, &(0x7f00000005c0)={r2}, &(0x7f0000001740)=0x8) r5 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r5, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) sendmsg$DEVLINK_CMD_RATE_GET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0, 0x44}}, 0x0) setsockopt$inet_msfilter(r5, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$nl_netfilter(r3, &(0x7f0000000140)={&(0x7f0000000080), 0xc, &(0x7f0000000100)={&(0x7f0000001780)=ANY=[@ANYBLOB="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", @ANYRES64=r4, @ANYRES32=r1], 0x12e4}, 0x1, 0x0, 0x0, 0x200000c4}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000002d000800"/23], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r9}, 0x10) recvfrom$unix(r8, 0x0, 0x0, 0x40000041, 0x0, 0x96) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="20000000070a01839f00000000000000020000000900010073797a30"], 0x20}}, 0x0) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e000000850000000f00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='kmem_cache_free\x00', r10}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r11, &(0x7f0000000800)={0x0, 0x0, 0x0}, 0x0) close(r11) close(r12) 1.699577429s ago: executing program 4: socket$packet(0x11, 0x3, 0x300) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x14) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x34}}, 0x0) (async) sendmsg$IPSET_CMD_RENAME(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) (async) syz_genetlink_get_family_id$team(&(0x7f0000000140), r0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1000000007140108fcffffff0000003cc1fd22832734225b4e541fb623b8bdad42b0806707951972f99c5ab09f23ae98b7c75ca54939ea54f35660262cef52caf357b76eb8aaec13716bfdc663e6da5b9dce8390"], 0x10}}, 0x0) socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-pclmul\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmmsg(r5, &(0x7f0000005280)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES64=r5, @ANYRESHEX=r6], 0x48}}, 0x4004) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xfff1, 0xfff5}, {0x0, 0xc}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @qdisc_kind_options=@q_ingress={0xc}]}, 0x38}}, 0x20004000) r8 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) socket$packet(0x11, 0x2, 0x300) (async) socket$packet(0x11, 0x2, 0x300) sendto$inet6(r8, 0x0, 0x0, 0x404c880, &(0x7f0000000540)={0xa, 0x4e28, 0x0, @dev={0xfe, 0x80, '\x00', 0x32}}, 0x1c) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000280), 0xffffffffffffffff) socket(0x1d, 0x80000, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000040)) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000f000000050030000100000008000300", @ANYRESOCT=r3, @ANYBLOB="05002700030000002a9f164de0dfa57d69f0f2da327aca5978499d52eeff75cee311b2ee2befbb625edc2ac590f54f6e9929fb3f6abfe181fe11941a"], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_SET_MESH(r9, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000480)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000000000f000000050030000100000008000300", @ANYRESOCT=r3, @ANYBLOB="05002700030000002a9f164de0dfa57d69f0f2da327aca5978499d52eeff75cee311b2ee2befbb625edc2ac590f54f6e9929fb3f6abfe181fe11941a"], 0x2c}}, 0x0) sendmmsg$inet6(r8, &(0x7f0000000240)=[{{&(0x7f00000001c0)={0xa, 0x4e24, 0x9, @private2, 0xfff}, 0x1c, &(0x7f0000000200)=[{&(0x7f00000003c0)="5f2cbb60202b65a8fb74bc41bfbc254ca839cba2937a0dcd11452765764f0b3beb10c1a46c3c3c84482712ac357d302848031e010526739fb752222244b45188060dfb6c272d530ece10f19e9e22163059b6702ed3fb94e4c80b1d8c463cceefccd8a3e9f25cf6bf73c92ac91601108635da424dc79e42a838bedd1d9f1888846c956b79dd6187dbe66d49d8b248edad2d411d63f78cc79a0b6d5dff6984086f22a75935aea991460a2966947df5871a01b2f163d5c95d", 0xb7}], 0x1}}], 0x1, 0x400c404) 645.199307ms ago: executing program 0: write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000000c0)={'tunl0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000001000"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100626f5c64000000000c0002800600190006"], 0x3c}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010005f3f770005000000000000000000", @ANYRES32=0x0, @ANYBLOB="ff00000000000000280012800a00010076786c616e"], 0x3}}, 0x0) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(0xffffffffffffffff, 0x0, r0, 0x0, 0x4ffe2, 0x0) 604.455073ms ago: executing program 2: r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket(0x200000100000011, 0x803, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r3, 0x6, 0x3, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000080), 0x10) bind$packet(r1, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @multicast}, 0x14) write$binfmt_aout(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="90030ee7ff072d2203000e218848"], 0x120) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x64, r7, 0x1, 0x0, 0x0, {0x35}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x73}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x64}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r9, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_NEIGHBORS(r9, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x24, r10, 0x331, 0x0, 0x0, {0x8}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r11}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) sendmsg$BATADV_CMD_TP_METER_CANCEL(r8, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r10, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x2000c000}, 0x24000840) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r9) sendmsg$NL80211_CMD_DEL_NAN_FUNCTION(r9, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={&(0x7f0000000380)={0x74, r12, 0x0, 0x70bd28, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xffffffff, 0xa}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x1f}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x14}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x32}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x4e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x3d}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x52}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x34}]}, 0x74}, 0x1, 0x0, 0x0, 0x24880}, 0x1) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000540)={0x60, r5, 0x200, 0x1, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0xc, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_SIZE={0x8}]}, @ETHTOOL_A_FEATURES_HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}]}]}, 0x60}}, 0x0) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)={0x2c, r13, 0xe39, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r14}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x2c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000001c40)="d80000001c0081064e81f782db44b9040a1d08040e000000000d01a118000c000600142603600e1208000f0000810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4094000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 129.826939ms ago: executing program 1: r0 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r0, 0x0, 0x0) 0s ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r1, &(0x7f00000002c0)={0x0, 0x2, &(0x7f0000000280)={&(0x7f0000000400)=ANY=[@ANYBLOB='(\x00\a\x00', @ANYRES16=r2, @ANYBLOB="01000000ecffffffffff2000000005002000000000000c001f0070687930"], 0x28}}, 0x0) kernel console output (not intermixed with test programs): T29] Þ´ÚtI:¿Åš²"wBØśɥÕxlb•íÍs[à s}Q€Eµãÿà·sÜŸqµIGh­z‚CÑ Ja0J ¿Òµ~¾Çõ©ÒÖ–´Í³·êúÑÚ·[jƒÒ¤|>‡·õ÷Ifl“QTjТ½ÀÓÌ:|{«gq"|kóëžÀÓ‚[°Z |¤àEë¯ÿ§JIzɈ«T›0m#‚R~F±^û›¨¬¢„®ì™™òr [ 241.066590][T13063] __nla_validate_parse: 6 callbacks suppressed [ 241.066611][T13063] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.185426][T13063] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.243865][T13063] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.720445][T13102] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 241.760959][T13102] ieee802154 phy0 wpan0: encryption failed: -22 [ 242.148420][T13128] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 242.235132][T13136] netlink: 2272 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.288352][T13136] openvswitch: netlink: Unknown key attributes 1 [ 242.295891][T13133] can: request_module (can-proto-0) failed. [ 242.815808][T13158] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.844341][T13158] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 243.016542][T13166] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 243.027626][T13166] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 243.042049][T13166] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 243.069966][T13166] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 243.104882][T13114] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 243.114182][T13166] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 243.140084][T13171] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 243.267438][T13176] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 243.376809][T13181] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 243.555936][T13191] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 244.300426][T13227] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 244.449869][T13233] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 244.638120][T13245] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 244.669615][T13245] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 244.713181][T13245] netlink: 9328 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.733818][T13245] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 244.994784][T13266] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 245.017111][T13266] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 245.037666][T13266] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.1'. [ 245.203896][T13278] xt_CT: You must specify a L4 protocol and not use inversions on it [ 245.339454][T13283] openvswitch: netlink: Key 0 has unexpected len 2 expected 0 [ 245.656257][T13289] xt_CT: No such helper "snmp_trap" [ 246.165157][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 246.180693][T13318] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 246.575014][T13343] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.968428][T13360] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 247.176121][T13365] xt_TCPMSS: Only works on TCP SYN packets [ 247.822396][T13391] bridge0: port 3(team0) entered blocking state [ 247.856687][T13391] bridge0: port 3(team0) entered disabled state [ 247.889089][T13391] team0: entered allmulticast mode [ 247.904780][T13391] team_slave_0: entered allmulticast mode [ 247.926429][T13391] team_slave_1: entered allmulticast mode [ 247.948468][T13398] ebt_among: dst integrity fail: 200 [ 247.952356][T13391] team0: entered promiscuous mode [ 247.962545][T13391] team_slave_0: entered promiscuous mode [ 247.977260][T13398] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.985029][T13391] team_slave_1: entered promiscuous mode [ 248.011187][T13391] bridge0: port 3(team0) entered blocking state [ 248.017651][T13391] bridge0: port 3(team0) entered forwarding state [ 248.195747][T13406] validate_nla: 4 callbacks suppressed [ 248.195767][T13406] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 248.226833][T13406] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.344628][T13409] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 248.873056][T13430] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.937043][T13430] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 249.256894][T13442] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 249.275482][T13438] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 249.294303][T13442] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 249.459186][T13449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 249.847716][T13469] Êü: entered promiscuous mode [ 250.125538][T13480] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 250.223547][T13484] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 250.245242][T13484] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 250.381915][T13488] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 251.123943][T13530] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 251.231885][T13541] __nla_validate_parse: 6 callbacks suppressed [ 251.231905][T13541] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.251057][T13541] block nbd0: not configured, cannot reconfigure [ 251.639865][T13568] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 251.894458][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 251.919856][T13577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.449194][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.466470][T13614] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.521465][T13617] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.601145][T13621] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 252.613193][T13621] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 252.631476][T13621] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 252.643593][T13621] (unnamed net_device) (uninitialized): option arp_missed_max: mode dependency failed, not supported in mode balance-alb(6) [ 253.193457][ T29] audit: type=1804 audit(1717207687.365:11): pid=13645 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1005722107/syzkaller.k31QOt/656/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 253.209482][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.281900][T13648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.519735][T13659] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 254.775271][T13752] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.796226][T13752] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.883466][T13752] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.894405][T13752] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.950364][T13752] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 254.965795][T13752] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.071892][T13752] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 255.094120][T13752] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.292605][T13752] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.333970][T13752] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.405890][T13752] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.412181][T13740] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.425324][T13752] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.488823][T13752] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.505715][T13752] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.554976][T13752] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 255.583199][T13752] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.714443][T13774] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 255.798425][T13780] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 256.108641][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.115319][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.397232][T13816] __nla_validate_parse: 9 callbacks suppressed [ 256.397254][T13816] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.451206][T13816] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 256.482393][T13816] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 256.527165][T13818] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.080903][T13842] --map-set only usable from mangle table [ 257.153634][T13849] --map-set only usable from mangle table [ 257.164258][T13847] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 257.172374][T13847] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.183345][T13848] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 257.287691][T13858] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 257.444207][T13864] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.447943][T13868] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 257.462978][T13864] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.556469][T13864] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.591711][T13864] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.734854][T13864] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.764877][T13864] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.824997][T13864] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 257.842197][T13864] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.880865][T13888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.214307][T13902] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.374528][T13906] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.400828][T13906] netlink: 'syz-executor.4': attribute type 19 has an invalid length. [ 259.550265][T13951] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.561640][T13951] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.572626][T13951] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 259.687777][T13956] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 260.598180][T13864] netdevsim netdevsim0 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.613840][T13864] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.653027][T13864] netdevsim netdevsim0 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.670635][T13864] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.715478][T13864] netdevsim netdevsim0 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.729662][T13864] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 260.778136][T13864] netdevsim netdevsim0 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 260.796503][T13864] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 261.134065][T14002] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (6) [ 261.250504][T14009] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 261.596207][T14022] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.700408][T14022] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.947122][T14041] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 262.330809][T14056] ip6t_srh: unknown srh invflags 7863 [ 262.932927][T14084] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 263.006206][T14084] ipvlan2: entered promiscuous mode [ 263.012759][T14084] ipvlan2: entered allmulticast mode [ 263.029658][T14084] team0: entered allmulticast mode [ 263.041224][T14084] team_slave_0: entered allmulticast mode [ 263.054848][T14084] team_slave_1: entered allmulticast mode [ 263.061368][T14084] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 263.421713][T14113] syzkaller0: entered promiscuous mode [ 263.430458][T14113] syzkaller0: entered allmulticast mode [ 263.443836][T14125] : renamed from bridge_slave_0 (while UP) [ 263.607140][T14134] ip6t_srh: unknown srh invflags 7863 [ 264.538557][T14144] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 266.104244][T14161] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 266.112469][T14161] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 266.372997][T14181] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.043221][T14206] ip6t_srh: unknown srh invflags 7863 [ 267.238633][T14220] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.518602][T14224] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.530478][T14226] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.543086][T14224] tun0: tun_chr_ioctl cmd 1074025677 [ 267.552828][T14224] tun0: linktype set to 774 [ 267.558517][T14228] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 267.577879][T14228] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.640827][T14229] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 267.661694][T14229] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.860936][T14236] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.884915][T14235] tap0: tun_chr_ioctl cmd 1074025676 [ 267.895543][T14235] tap0: owner set to 60929 [ 268.213658][T14256] bridge0: port 1(bridge_slave_0) entered disabled state [ 268.302166][T14261] ip6t_srh: unknown srh invflags 7863 [ 268.397714][T14259] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.438087][T14259] tun0: tun_chr_ioctl cmd 1074025677 [ 268.453209][T14259] tun0: linktype set to 774 [ 268.952637][T14293] bond0: entered promiscuous mode [ 268.983095][T14293] bond_slave_0: entered promiscuous mode [ 269.007566][T14293] bond_slave_1: entered promiscuous mode [ 269.036592][T14295] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.077016][T14293] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 269.106166][T14293] dummy0: entered promiscuous mode [ 269.111931][T14293] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 269.132884][T14281] bond0: left promiscuous mode [ 269.145165][T14281] bond_slave_0: left promiscuous mode [ 269.161402][T14281] bond_slave_1: left promiscuous mode [ 269.167915][T14281] dummy0: left promiscuous mode [ 269.283923][T14305] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.466495][T14314] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 269.484533][T14314] IPv6: NLM_F_CREATE should be specified when creating new route [ 269.499135][T14314] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.506974][T14314] IPv6: NLM_F_CREATE should be set when creating new route [ 269.514291][T14314] IPv6: NLM_F_CREATE should be set when creating new route [ 269.521545][T14314] IPv6: NLM_F_CREATE should be set when creating new route [ 269.704527][T14316] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.736008][T14316] tun0: tun_chr_ioctl cmd 1074025677 [ 269.746394][T14316] tun0: linktype set to 774 [ 270.362887][T14357] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 270.385542][T14357] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.404555][T14365] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 270.423372][T14357] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 270.433290][T14365] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 270.926518][T14386] tun0: tun_chr_ioctl cmd 1074025677 [ 270.959443][T14386] tun0: linktype set to 774 [ 271.027874][T14399] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 271.197235][T14402] ip6t_srh: unknown srh invflags 7863 [ 271.288777][T14402] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 271.771316][T14431] xt_CT: You must specify a L4 protocol and not use inversions on it [ 272.062554][T14444] tun0: tun_chr_ioctl cmd 1074025677 [ 272.074393][T14444] tun0: linktype set to 774 [ 272.385668][T14458] __nla_validate_parse: 13 callbacks suppressed [ 272.385692][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 272.446761][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 272.537809][T14458] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 272.553282][T14460] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 272.895460][T14473] fscrypt (sda1, inode 8197): Unsupported encryption modes (contents 0, filenames 0) [ 273.036971][T14472] syzkaller0: entered promiscuous mode [ 273.052621][T14472] syzkaller0: entered allmulticast mode [ 273.199610][T14486] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 273.492101][T14501] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 273.576563][T14501] tun0: tun_chr_ioctl cmd 1074025677 [ 273.586683][T14501] tun0: linktype set to 774 [ 273.971322][T14518] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 275.933559][T14504] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.128264][T14571] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 277.183070][T14572] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.395957][T14581] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 277.455404][T14575] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 277.464046][T14577] __nla_validate_parse: 1 callbacks suppressed [ 277.464064][T14577] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 277.511744][T14575] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 278.026326][T14609] dccp_invalid_packet: P.type (SYNC) not Data || [Data]Ack, while P.X == 0 [ 278.089174][T14609] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 278.112006][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 278.172137][T14626] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 278.261204][T14621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 278.559862][T14638] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 278.601216][T14631] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 278.624922][T14631] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 278.862225][T14651] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 278.917534][T14652] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 278.952049][T14648] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 278.989066][T14648] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.880859][T14680] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 279.908312][T14675] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 279.963248][T14675] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 280.841046][T14715] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.217775][T14733] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 281.274715][T14729] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 281.393105][T14733] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 282.316125][T14765] xt_NFQUEUE: number of total queues is 0 [ 282.615166][T14787] __nla_validate_parse: 3 callbacks suppressed [ 282.615187][T14787] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 282.775937][T14790] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 283.365990][T14810] geneve1: entered promiscuous mode [ 283.370178][T14807] xt_NFQUEUE: number of total queues is 0 [ 283.371235][T14810] geneve1: entered allmulticast mode [ 283.372314][T14810] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.407530][T14810] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.426180][T14810] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.474458][T14810] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 283.571658][T14810] team0: Port device geneve1 added [ 283.589861][T14822] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 283.809112][T14839] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 283.833934][T14839] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 283.854840][T14839] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.1'. [ 284.034184][T14846] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 284.049498][T14846] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 284.400134][T14860] xt_NFQUEUE: number of total queues is 0 [ 284.400376][T14863] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.442808][T14864] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 284.466587][T14864] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 284.583427][T14871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 284.594248][T14871] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 284.614486][T14870] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 284.665994][T14870] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 285.601193][T14904] sock: sock_timestamping_bind_phc: sock not bind to device [ 285.665481][T14903] xt_NFQUEUE: number of total queues is 0 [ 285.677070][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801bfa0400: rx timeout, send abort [ 285.689215][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801bfa0c00: rx timeout, send abort [ 285.698557][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801bfa0400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 285.714525][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801bfa0c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 287.081352][T14968] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 287.110227][T14968] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.119212][T14968] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.128049][T14968] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.137090][T14968] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 287.416789][T14971] sock: sock_timestamping_bind_phc: sock not bind to device [ 287.922974][T14974] sock: sock_timestamping_bind_phc: sock not bind to device [ 287.983334][T14983] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ1 [ 288.005790][T14979] __nla_validate_parse: 1 callbacks suppressed [ 288.005812][T14979] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 288.654641][ T5121] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 288.661930][ T5121] Bluetooth: hci3: command 0x1407 tx timeout [ 289.081548][T15021] sock: sock_timestamping_bind_phc: sock not bind to device [ 289.280037][T15033] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 289.344037][T15033] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 289.677819][T15055] sock: sock_timestamping_bind_phc: sock not bind to device [ 290.394251][T15081] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 291.644017][T15120] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 291.803369][T15129] sock: sock_timestamping_bind_phc: sock not bind to device [ 291.978368][T15139] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.254155][ T5114] Bluetooth: hci3: command 0x1407 tx timeout [ 292.268655][ T5121] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 293.850219][T15170] bond0: Device is already in use. [ 294.043069][T15183] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 294.335142][T15192] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 294.378203][T15192] dummy0: entered promiscuous mode [ 294.426557][T15192] batman_adv: batadv0: Adding interface: macsec0 [ 294.455438][T15192] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.523922][T15192] batman_adv: batadv0: Interface activated: macsec0 [ 295.927622][T15213] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 296.224880][T15216] bond0: Device is already in use. [ 296.378746][ T5114] Bluetooth: hci3: command 0x1407 tx timeout [ 296.383966][ T5121] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 296.533424][T15232] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 296.565138][T15234] openvswitch: netlink: nsh attr 1 has unexpected len 0 expected 8 [ 296.591111][T15232] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 296.808845][T15238] sock: sock_timestamping_bind_phc: sock not bind to device [ 297.421235][T15250] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 298.017203][T15255] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 298.725006][T15262] bond0: Device is already in use. [ 298.919019][T15276] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.929252][T15276] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 299.070487][T15280] sock: sock_timestamping_bind_phc: sock not bind to device [ 299.134433][ T5114] Bluetooth: hci3: command 0x1407 tx timeout [ 299.491764][T15283] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 299.520381][T15283] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 299.856519][T15293] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 300.645216][T15320] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 300.666857][T15320] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 300.676590][T15318] sock: sock_timestamping_bind_phc: sock not bind to device [ 301.214131][ T5114] Bluetooth: hci3: command 0x1407 tx timeout [ 301.214522][ T5121] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 301.324973][T15330] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 301.375317][T15330] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 301.496015][T15342] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 301.527730][T15342] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 301.615088][T15350] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 301.759426][T15362] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.847472][T15362] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 301.868225][T15362] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 301.938075][T15362] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.946775][T15362] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.955134][T15362] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 301.963428][T15362] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 302.227496][T15375] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.271959][T15375] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 302.851405][T15397] infiniband syz0: set active [ 302.941519][T15407] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 302.965425][T15407] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 305.403273][T15473] __nla_validate_parse: 1 callbacks suppressed [ 305.403293][T15473] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 305.673075][T15477] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 305.692668][T15477] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 305.705427][T15477] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.228004][T15488] wg2: left promiscuous mode [ 306.236228][T15488] wg2: left allmulticast mode [ 310.130645][T15587] netem: incorrect ge model size [ 310.146709][T15587] netem: change failed [ 311.724640][T15633] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 312.863166][T15675] IPVS: set_ctl: invalid protocol: 103 172.30.0.2:20000 [ 313.247026][T15694] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 313.275704][T15696] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 313.945323][T15711] xt_limit: Overflow, try lower: 262144/524288 [ 314.015414][T15718] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 314.057778][T15718] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 314.123912][T15718] team0: left allmulticast mode [ 314.129019][T15723] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 314.147650][T15718] team_slave_0: left allmulticast mode [ 314.167024][T15718] team_slave_1: left allmulticast mode [ 314.199548][T15721] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 314.228702][T15718] bridge0: port 3(team0) entered disabled state [ 314.269605][T15718] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 314.792588][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 314.869312][T15765] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 314.878666][T15765] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 314.896450][T15765] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 314.974800][T15765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 315.239415][T15773] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 315.735158][T15784] x_tables: duplicate underflow at hook 1 [ 316.048713][T15804] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 316.074033][T15804] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 316.100071][T15804] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 316.170382][T15813] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 316.625534][T15838] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 317.016028][T15856] bridge5: entered promiscuous mode [ 317.030187][T15856] bridge5: entered allmulticast mode [ 317.056111][T15859] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 317.076387][T15859] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 317.098829][T15859] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 317.157989][T15859] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 317.554310][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.560669][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.060943][T15913] bond0: entered promiscuous mode [ 318.074951][T15913] bond_slave_0: entered promiscuous mode [ 318.108907][T15913] bond_slave_1: entered promiscuous mode [ 318.128649][T15913] batadv_slave_0: entered promiscuous mode [ 318.410004][T15925] netlink: del zone limit has 8 unknown bytes [ 318.428724][T15908] bond0: left promiscuous mode [ 318.435917][T15908] bond_slave_0: left promiscuous mode [ 318.450208][T15908] bond_slave_1: left promiscuous mode [ 318.460952][T15908] batadv_slave_0: left promiscuous mode [ 319.070803][T15958] batadv_slave_1: entered promiscuous mode [ 319.094309][T15956] batadv_slave_1: left promiscuous mode [ 319.280496][T15975] batadv_slave_1: entered promiscuous mode [ 319.309476][T15971] batadv_slave_1: left promiscuous mode [ 319.456145][T15982] __nla_validate_parse: 1 callbacks suppressed [ 319.456165][T15982] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 319.472630][T15987] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 319.496907][T15987] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.548398][T15987] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.568770][T15986] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 319.635755][T15986] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 319.692492][T15986] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 319.739300][T16003] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 319.747902][T15986] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 319.762644][T16001] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 319.791160][T16003] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.810466][T16006] syz-executor.2[16006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.810625][T16006] syz-executor.2[16006] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 319.830664][T16001] bond1: entered promiscuous mode [ 319.849176][T15986] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 319.877313][T15986] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 319.901523][T16001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 319.924201][T16001] bond1: entered allmulticast mode [ 319.934778][T16001] 8021q: adding VLAN 0 to HW filter on device bond1 [ 320.612104][T16046] tipc: Enabling of bearer rejected, failed to enable media [ 320.730424][T16054] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 320.752002][T16054] syz-executor.2[16054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.752333][T16054] syz-executor.2[16054] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 320.966885][T16062] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.1'. [ 321.174933][T16076] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 321.185810][T16075] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 321.219657][T16075] : entered promiscuous mode [ 321.501031][T16100] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 321.531893][T16100] syz-executor.3[16100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 321.532039][T16100] syz-executor.3[16100] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.203326][T16147] validate_nla: 18 callbacks suppressed [ 322.203350][T16147] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 322.262533][T16147] syz-executor.1[16147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 322.262683][T16147] syz-executor.1[16147] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 324.732725][T16291] __nla_validate_parse: 7 callbacks suppressed [ 324.732747][T16291] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.850768][T16299] pimreg: renamed from lo (while UP) [ 325.021175][T16306] Bluetooth: MGMT ver 1.22 [ 325.075583][T16306] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.103040][T16306] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.142428][T16312] netlink: 'syz-executor.3': attribute type 15 has an invalid length. [ 325.164303][T16312] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.300660][T16319] syz-executor.4[16319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.300902][T16319] syz-executor.4[16319] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 325.524433][T16330] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 325.919882][T16348] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 326.084451][T16358] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 326.124418][T16354] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 326.141650][T16354] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 326.200398][T16361] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 326.232204][T16365] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 326.270723][T16361] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 326.456380][T16372] syz-executor.0[16372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.456599][T16372] syz-executor.0[16372] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 326.761305][T16387] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.789953][T16398] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 326.899423][T16387] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.928128][T16402] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 327.020458][T16408] syz-executor.3[16408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.020698][T16408] syz-executor.3[16408] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 327.091050][T16387] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.162313][T16412] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 327.237998][T16387] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 327.500329][T16387] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.576467][T16387] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.639132][T16387] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.678211][T16387] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 327.816253][T16438] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 328.387427][T16456] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 328.557332][T16470] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 328.633219][T16474] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 328.814518][T16488] syz-executor.4[16488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.814761][T16488] syz-executor.4[16488] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 328.957941][T16490] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 329.307599][T16512] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 330.051054][T16547] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 330.062395][T16547] __nla_validate_parse: 17 callbacks suppressed [ 330.062414][T16547] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 330.302398][T16556] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 330.376203][T16558] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 330.388645][T16558] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 330.426950][T16562] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.522775][T16566] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 330.668939][T16573] syz-executor.1[16573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 330.669178][T16573] syz-executor.1[16573] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 331.173181][T16602] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 331.231649][T16600] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 331.241467][T16600] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 331.395526][T16609] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 331.806291][T16622] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 331.830708][T16622] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 331.862821][T16622] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 331.877741][T16622] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 331.915958][T16622] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 331.935147][T16622] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 333.510609][T16716] xt_connbytes: Forcing CT accounting to be enabled [ 333.644779][T16723] sock: sock_timestamping_bind_phc: sock not bind to device [ 333.783950][T16737] validate_nla: 16 callbacks suppressed [ 333.783968][T16737] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 333.863461][T16737] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 333.884399][T16739] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 333.920988][T16737] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 333.943951][T16737] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 333.969277][T16737] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 333.999397][T16737] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 334.291535][T16764] sock: sock_timestamping_bind_phc: sock not bind to device [ 334.393427][T16768] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 334.811317][T16785] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 334.862107][T16788] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 335.221732][T16805] sock: sock_timestamping_bind_phc: sock not bind to device [ 335.354042][T16813] tap0: tun_chr_ioctl cmd 1074025677 [ 335.386390][T16813] tap0: linktype set to 65534 [ 335.399757][T16817] __nla_validate_parse: 20 callbacks suppressed [ 335.399776][T16817] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 336.121143][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.180373][T16868] netlink: zone id is out of range [ 336.205361][T16868] netlink: zone id is out of range [ 336.215984][T16868] netlink: zone id is out of range [ 336.244865][T16868] netlink: zone id is out of range [ 336.275031][T16868] netlink: zone id is out of range [ 336.284450][T16868] netlink: zone id is out of range [ 336.294026][T16868] netlink: zone id is out of range [ 336.312438][T16868] netlink: zone id is out of range [ 336.319852][T16868] netlink: zone id is out of range [ 336.335564][T16868] netlink: zone id is out of range [ 336.633322][T16884] syz-executor.0 (16884) used greatest stack depth: 19024 bytes left [ 336.634421][T16889] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 336.676531][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 336.717869][T16893] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 336.758360][T16893] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 336.814223][T16899] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 337.575526][T16926] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 337.596670][T16926] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 338.036690][T16950] pim6reg: entered allmulticast mode [ 338.138070][ T29] audit: type=1800 audit(1717207772.315:12): pid=16956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1941 res=0 errno=0 [ 338.197465][T16961] pim6reg: left allmulticast mode [ 338.204050][ T29] audit: type=1804 audit(1717207772.315:13): pid=16956 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir1005722107/syzkaller.k31QOt/871/memory.events" dev="sda1" ino=1941 res=1 errno=0 [ 338.462407][T16972] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 339.108188][T17015] vlan2: entered promiscuous mode [ 339.690041][T17061] caif0 speed is unknown, defaulting to 1000 [ 339.712518][T17061] caif0 speed is unknown, defaulting to 1000 [ 339.746282][T17061] caif0 speed is unknown, defaulting to 1000 [ 340.365456][T17061] infiniband syz1: set down [ 340.370221][ T5162] caif0 speed is unknown, defaulting to 1000 [ 340.385816][T17061] infiniband syz1: added caif0 [ 340.510426][T17110] __nla_validate_parse: 9 callbacks suppressed [ 340.510447][T17110] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.526604][T17110] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.596602][T17061] RDS/IB: syz1: added [ 340.622866][T17061] smc: adding ib device syz1 with port count 1 [ 340.656050][T17061] smc: ib device syz1 port 1 has pnetid [ 340.676558][ T5163] caif0 speed is unknown, defaulting to 1000 [ 340.691037][T17061] caif0 speed is unknown, defaulting to 1000 [ 340.957796][T17134] validate_nla: 3 callbacks suppressed [ 340.957814][T17134] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 341.216224][T17061] caif0 speed is unknown, defaulting to 1000 [ 341.314966][T17152] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 341.339789][T17152] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 341.478844][T17157] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 341.691424][T17061] caif0 speed is unknown, defaulting to 1000 [ 341.950375][T17173] sock: sock_timestamping_bind_phc: sock not bind to device [ 342.088310][T17061] caif0 speed is unknown, defaulting to 1000 [ 342.402036][T17061] caif0 speed is unknown, defaulting to 1000 [ 342.565634][T17194] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 342.587339][T17194] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 342.862394][T17202] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 342.926667][T17202] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 343.038594][T17214] sock: sock_timestamping_bind_phc: sock not bind to device [ 343.204346][T17223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 343.423181][T17232] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 343.491210][ T11] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.545365][T17235] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 343.570738][ T5114] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 343.581051][ T5114] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 343.592376][ T5114] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 343.602613][ T5114] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 343.611903][ T5114] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 343.625491][ T5114] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 343.660715][ T11] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.749838][ T11] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 343.751458][T17243] rdma_rxe: rxe_newlink: failed to add caif0 [ 343.827719][ T11] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 344.039883][ T11] bridge_slave_1: left allmulticast mode [ 344.046215][ T11] bridge_slave_1: left promiscuous mode [ 344.052256][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.098629][ T11] bridge_slave_0: left allmulticast mode [ 344.122297][ T11] bridge_slave_0: left promiscuous mode [ 344.142203][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.236167][T17263] sock: sock_timestamping_bind_phc: sock not bind to device [ 344.696756][ T11] team0: Port device geneve1 removed [ 345.230513][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.241289][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.251671][ T11] bond0 (unregistering): (slave batadv_slave_0): Releasing backup interface [ 345.262937][ T11] bond0 (unregistering): Released all slaves [ 345.400874][ T11] bond1 (unregistering): Released all slaves [ 345.415644][ T11] bond2 (unregistering): Released all slaves [ 345.429804][T17236] caif0 speed is unknown, defaulting to 1000 [ 345.601219][T17294] __nla_validate_parse: 11 callbacks suppressed [ 345.601240][T17294] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 345.694819][ T5121] Bluetooth: hci2: command tx timeout [ 345.760346][T17302] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 345.845988][T17305] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 345.869678][T17305] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 345.903307][T17289] rdma_rxe: rxe_newlink: failed to add caif0 [ 346.157193][T17318] sock: sock_timestamping_bind_phc: sock not bind to device [ 346.419892][T17323] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 346.454175][T17323] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 346.556066][T17325] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 346.587982][T17325] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 346.721211][ T11] hsr_slave_0: left promiscuous mode [ 346.741191][ T11] hsr_slave_1: left promiscuous mode [ 346.757103][T17330] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 346.766106][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.791859][T17330] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 347.058659][T17341] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 347.083344][T17341] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 347.537354][ T11] team0 (unregistering): Port device team_slave_1 removed [ 347.583236][T17351] sock: sock_timestamping_bind_phc: sock not bind to device [ 347.595562][ T11] team0 (unregistering): Port device team_slave_0 removed [ 347.773942][ T5121] Bluetooth: hci2: command tx timeout [ 347.960111][T11832] smc: removing ib device syz1 [ 348.847638][T17373] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 349.099048][T17236] chnl_net:caif_netlink_parms(): no params data found [ 349.139677][T17383] sock: sock_timestamping_bind_phc: sock not bind to device [ 349.431943][T17389] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 349.722277][T17236] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.758746][T17236] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.773186][T17236] bridge_slave_0: entered allmulticast mode [ 349.800725][T17236] bridge_slave_0: entered promiscuous mode [ 349.833960][T17236] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.854177][ T5121] Bluetooth: hci2: command tx timeout [ 349.874190][T17236] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.891671][T17236] bridge_slave_1: entered allmulticast mode [ 349.921043][T17236] bridge_slave_1: entered promiscuous mode [ 350.087946][T17236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.108553][T17236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.274467][T17236] team0: Port device team_slave_0 added [ 350.298095][T17236] team0: Port device team_slave_1 added [ 350.302197][T17433] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 350.432749][T17236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.474033][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.522441][T17236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.550251][T17440] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 350.609981][T17236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.628159][T17236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.659089][T17236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.809001][T17236] hsr_slave_0: entered promiscuous mode [ 350.832984][T17236] hsr_slave_1: entered promiscuous mode [ 350.884405][T17463] __nla_validate_parse: 18 callbacks suppressed [ 350.884426][T17463] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 350.926516][T17463] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 351.518465][ T5114] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 351.529974][ T5114] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 351.538447][ T5114] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 351.553599][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 351.562006][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 351.574840][ T5114] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 351.626262][ T51] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.636790][ T51] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.737830][ T51] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.750028][ T51] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.811558][T17490] syzkaller1: entered promiscuous mode [ 351.818097][T17490] syzkaller1: entered allmulticast mode [ 351.865137][ T51] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 351.883807][ T51] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.934008][ T5121] Bluetooth: hci2: command tx timeout [ 352.080649][ T51] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 352.134067][ T51] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.246220][T17503] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 352.273842][T17503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 352.417123][T17516] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 352.459510][T17236] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 352.513487][T17512] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 352.532953][T17512] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 352.543271][T17236] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 352.565158][T17236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.614212][ T51] team0: left allmulticast mode [ 352.627601][ T51] team_slave_0: left allmulticast mode [ 352.639964][ T51] team_slave_1: left allmulticast mode [ 352.663933][ T51] team0: left promiscuous mode [ 352.668754][ T51] team_slave_0: left promiscuous mode [ 352.675214][ T51] team_slave_1: left promiscuous mode [ 352.682271][ T51] bridge0: port 3(team0) entered disabled state [ 352.699671][ T51] bridge_slave_1: left allmulticast mode [ 352.706533][ T51] bridge_slave_1: left promiscuous mode [ 352.715914][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.727058][ T51] bridge_slave_0: left allmulticast mode [ 352.737533][ T51] bridge_slave_0: left promiscuous mode [ 352.745875][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.013050][T17533] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.614032][ T5121] Bluetooth: hci3: command tx timeout [ 354.086692][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 354.102548][ T51] bond_slave_0: left promiscuous mode [ 354.112500][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 354.122790][ T51] bond_slave_1: left promiscuous mode [ 354.130506][ T51] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 354.139842][ T51] batadv0: left promiscuous mode [ 354.146628][ T51] bond0 (unregistering): Released all slaves [ 354.160761][T17236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 354.174641][T17539] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 354.192700][T17539] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 354.302790][ T51] Êü: left promiscuous mode [ 354.658540][T17481] chnl_net:caif_netlink_parms(): no params data found [ 354.676452][ T51] IPVS: stopping backup sync thread 11240 ... [ 354.915304][T17566] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 354.958420][T17562] 0ªX¹¦D: renamed from gretap0 (while UP) [ 354.976079][T17562] 0ªX¹¦D: entered allmulticast mode [ 354.981796][T17562] net_ratelimit: 44 callbacks suppressed [ 354.981815][T17562] A link change request failed with some changes committed already. Interface 10ªX¹¦D may have been left with an inconsistent configuration, please check. [ 355.066933][T17569] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 355.147652][T17481] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.164563][T17481] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.190982][T17481] bridge_slave_0: entered allmulticast mode [ 355.200441][T17481] bridge_slave_0: entered promiscuous mode [ 355.221225][T17236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 355.259204][T17583] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 355.282275][T17481] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.293364][T17481] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.324098][T17481] bridge_slave_1: entered allmulticast mode [ 355.336034][T17481] bridge_slave_1: entered promiscuous mode [ 355.475544][T17481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.501233][T17481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.629819][T17481] team0: Port device team_slave_0 added [ 355.659811][T17481] team0: Port device team_slave_1 added [ 355.688881][T17236] 8021q: adding VLAN 0 to HW filter on device team0 [ 355.696574][ T5121] Bluetooth: hci3: command tx timeout [ 355.874053][T17605] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 355.911484][T17481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.950593][T17481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.992745][T17481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.042232][T17481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.063290][T17481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.091188][T17481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 356.109580][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.116750][ T5117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 356.173174][T17612] __nla_validate_parse: 4 callbacks suppressed [ 356.173195][T17612] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 356.201156][T17612] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 356.322879][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 356.330093][ T5117] bridge0: port 2(bridge_slave_1) entered forwarding state [ 356.374534][T17629] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 356.430550][T17481] hsr_slave_0: entered promiscuous mode [ 356.438939][T17481] hsr_slave_1: entered promiscuous mode [ 356.453253][T17481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.472403][T17481] Cannot create hsr debugfs directory [ 356.495013][T17631] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 356.514363][T17631] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 356.829969][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.850629][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.892641][ T51] batman_adv: batadv0: Interface deactivated: macsec0 [ 356.932648][ T51] batman_adv: batadv0: Removing interface: macsec0 [ 356.961125][ T51] dummy0: left promiscuous mode [ 356.989152][ T51] veth0_macvtap: left promiscuous mode [ 357.001980][ T51] veth1_vlan: left promiscuous mode [ 357.013098][ T51] veth0_vlan: left promiscuous mode [ 357.065438][T17643] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 357.082241][T17643] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 357.095909][T17643] netlink: 88156 bytes leftover after parsing attributes in process `syz-executor.3'. [ 357.727899][ T51] team0 (unregistering): Port device team_slave_1 removed [ 357.774200][ T5121] Bluetooth: hci3: command tx timeout [ 357.790264][ T51] team0 (unregistering): Port device team_slave_0 removed [ 358.241505][T17657] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 358.264129][T17657] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 358.678434][T17674] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 358.929670][T17236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.093542][T17689] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.116942][T17689] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 359.184658][T17236] veth0_vlan: entered promiscuous mode [ 359.205785][T17236] veth1_vlan: entered promiscuous mode [ 359.375815][T17481] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 359.410734][T17481] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 359.435830][T17236] veth0_macvtap: entered promiscuous mode [ 359.444705][T17481] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 359.459369][T17236] veth1_macvtap: entered promiscuous mode [ 359.469133][T17481] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 359.529683][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.554569][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.571844][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 359.582807][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.597844][T17236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.630298][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.642125][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.654200][T17236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 359.665089][T17236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 359.680874][T17236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.723537][T17236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.732939][T17236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.742496][T17236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.752602][T17236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.854305][ T5121] Bluetooth: hci3: command tx timeout [ 359.955345][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.974214][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.045746][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.053991][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.151773][T17481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.242036][T17481] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.292216][T12268] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.299441][T12268] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.319897][T17704] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 360.357250][T12268] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.364531][T12268] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.958594][T17481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.117805][T17481] veth0_vlan: entered promiscuous mode [ 361.165246][T17481] veth1_vlan: entered promiscuous mode [ 361.267474][T17481] veth0_macvtap: entered promiscuous mode [ 361.295888][T17481] veth1_macvtap: entered promiscuous mode [ 361.352183][T17481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.374066][T17481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.395592][T17481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.417393][T17481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.439022][T17481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.453270][T17481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.492167][T17481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.560873][T17481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.588373][T17481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.602284][T17481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.616173][T17481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.626427][T17481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.637531][T17481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.659395][T17481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.669504][T17756] __nla_validate_parse: 7 callbacks suppressed [ 361.669523][T17756] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 361.700375][T17756] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 361.751402][T17481] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.763135][T17481] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.775777][T17762] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 361.786441][T17481] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.795856][T17481] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.825684][T17760] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 361.839667][T17760] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 361.870901][T17762] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 361.900381][T17765] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 362.125932][ T8805] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.142763][ T8805] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.203649][T17780] syz-executor.1[17780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.204837][T17780] syz-executor.1[17780] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 362.243181][ T5163] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 362.281326][ T5163] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 362.444733][T17788] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 362.490351][ T29] audit: type=1804 audit(1717207796.665:14): pid=17790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3300376570/syzkaller.CQk97Y/0/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 362.738862][T17800] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 362.772337][T17800] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 363.016654][T17810] syz-executor.0[17810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.016803][T17810] syz-executor.0[17810] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 363.093384][T17815] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 363.498325][T17832] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 363.518608][T17832] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 363.543205][T17832] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 363.575168][T17832] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 363.599734][T17832] sctp: [Deprecated]: syz-executor.3 (pid 17832) Use of int in maxseg socket option. [ 363.599734][T17832] Use struct sctp_assoc_value instead [ 363.649423][T17837] sctp: [Deprecated]: syz-executor.3 (pid 17837) Use of int in maxseg socket option. [ 363.649423][T17837] Use struct sctp_assoc_value instead [ 363.960720][T17855] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 363.980324][T17855] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 365.053323][T17899] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 365.849956][T17940] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 366.795475][T17995] A link change request failed with some changes committed already. Interface veth1_to_team may have been left with an inconsistent configuration, please check. [ 366.827348][T17995] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 366.943428][T18005] __nla_validate_parse: 16 callbacks suppressed [ 366.943448][T18005] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 367.029744][T18010] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.422554][T18034] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20003 [ 367.512699][T18022] ieee802154 phy0 wpan0: encryption failed: -22 [ 367.784251][T18053] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 368.126703][T18067] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 368.154505][T18067] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 368.191403][T18070] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 368.361546][T18074] ipvlan0: entered promiscuous mode [ 368.444628][T18073] ipvlan0: left promiscuous mode [ 368.613393][T18086] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.631512][T18092] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 368.840472][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 369.117076][T18121] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.152480][T18125] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 369.273229][T18133] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 369.961013][T18169] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 372.497878][T18217] __nla_validate_parse: 3 callbacks suppressed [ 372.497900][T18217] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 372.625310][T18225] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 373.044370][T18246] team_slave_1: entered promiscuous mode [ 373.225702][T18260] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 373.303372][T18260] dummy0: entered promiscuous mode [ 373.322431][T18260] team0: Port device dummy0 added [ 373.453608][T18268] Cannot find add_set index 0 as target [ 373.922698][T18283] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 373.981107][T18300] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 374.195819][T18315] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 374.490022][T18335] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 374.878799][T18357] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 375.309496][T18388] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 375.339231][T18381] team0: No ports can be present during mode change [ 375.419114][T18395] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 375.439073][T18395] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 375.477938][T18397] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 375.792536][T18414] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 376.476798][T18449] IPVS: set_ctl: invalid protocol: 50 172.20.20.15:20003 [ 376.811803][T18470] syzkaller1: entered promiscuous mode [ 376.827992][T18470] syzkaller1: entered allmulticast mode [ 376.936298][ C0] dccp_v4_rcv: dropped packet with invalid checksum [ 377.506156][T18508] __nla_validate_parse: 3 callbacks suppressed [ 377.506170][T18508] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 377.843492][T18528] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 378.005987][T18538] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 378.308400][T18548] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.328157][T18548] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.709867][T18578] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.824740][T18581] bond1: entered promiscuous mode [ 378.829932][T18581] bond1: entered allmulticast mode [ 378.836583][T18581] 8021q: adding VLAN 0 to HW filter on device bond1 [ 378.873159][T18584] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 378.926771][T18586] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 378.965719][T18586] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 378.978175][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.987377][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.004849][T18584] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 379.069845][T18592] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 379.082309][T18592] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 379.615844][ T29] audit: type=1804 audit(1717207813.795:15): pid=18620 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1005722107/syzkaller.k31QOt/1009/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 380.748671][T18677] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 381.385433][T18725] can: request_module (can-proto-0) failed. [ 381.619546][T18743] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 382.338189][T18781] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 382.472637][T18797] veth0_macvtap: left promiscuous mode [ 382.607221][T18806] Cannot find set identified by id 0 to match [ 382.721851][T18806] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 382.761426][T18810] __nla_validate_parse: 23 callbacks suppressed [ 382.761449][T18810] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 382.919928][T18817] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 382.964012][T18817] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 383.024112][T18821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.298748][T18836] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 383.394784][T18836] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 383.511190][T18844] Cannot find set identified by id 0 to match [ 383.587244][T18844] mac80211_hwsim hwsim41 wlan1: entered promiscuous mode [ 383.642617][T18852] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 383.681694][T18852] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 383.727585][T18853] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 383.900115][T18864] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 383.974092][T18868] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 384.062844][ T29] audit: type=1804 audit(1717207818.235:16): pid=18871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1378539415/syzkaller.fsPKOE/972/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 384.128693][T18871] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 384.212240][T18869] syz-executor.1 (18869) used greatest stack depth: 18592 bytes left [ 384.668202][T18889] x_tables: ip6_tables: esp match: only valid for protocol 50 [ 384.745496][T18889] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 385.045032][ T29] audit: type=1804 audit(1717207819.225:17): pid=18904 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1378539415/syzkaller.fsPKOE/977/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 385.714654][T18931] Cannot find set identified by id 0 to match [ 385.916147][T18936] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 386.285407][ T29] audit: type=1804 audit(1717207820.425:18): pid=18945 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3721210195/syzkaller.3ecI1u/107/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 386.834571][T18972] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 386.908256][T18973] syz-executor.2 uses old SIOCAX25GETINFO [ 388.008242][T19016] __nla_validate_parse: 21 callbacks suppressed [ 388.008263][T19016] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 388.059353][ T29] audit: type=1804 audit(1717207822.235:19): pid=19017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1643242369/syzkaller.Kx1GOb/1023/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 388.134676][T19023] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 388.275785][T19030] sctp: [Deprecated]: syz-executor.0 (pid 19030) Use of struct sctp_assoc_value in delayed_ack socket option. [ 388.275785][T19030] Use struct sctp_sack_info instead [ 388.369781][T19035] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 388.430341][T19035] dummy0: entered promiscuous mode [ 388.446072][T19035] team0: Port device dummy0 added [ 388.468837][T19039] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 388.490584][T19039] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 388.946802][T19058] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 389.100837][ T29] audit: type=1800 audit(1717207823.275:20): pid=19069 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=6AA3 dev="sda1" ino=1953 res=0 errno=0 [ 389.148760][T19073] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 389.184708][T19073] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 389.384474][T19084] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 389.404801][T19088] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 389.741659][T19102] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 389.837609][T19103] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 390.447018][T19125] vlan2: entered promiscuous mode [ 390.464147][T19125] macvtap0: entered promiscuous mode [ 390.470011][T19125] vlan2: entered allmulticast mode [ 390.487270][T19125] macvtap0: entered allmulticast mode [ 390.504039][T19125] veth0_macvtap: entered allmulticast mode [ 391.081473][T19151] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 391.248985][T19157] vlan3: entered promiscuous mode [ 391.256767][T19157] vlan3: entered allmulticast mode [ 391.288787][T19160] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 391.307521][T19160] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.317135][T19160] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.326458][T19160] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.335740][T19160] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 391.478125][T19164] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 392.784255][T19202] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 392.835470][T19202] team0: Port device netdevsim0 added [ 393.214280][T19215] __nla_validate_parse: 13 callbacks suppressed [ 393.214301][T19215] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 393.279110][T19217] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 393.312208][T19219] vlan3: entered promiscuous mode [ 393.327363][T19219] vlan3: entered allmulticast mode [ 393.395325][T19221] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 393.424734][T19221] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 393.575617][T19225] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 394.016086][T19237] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 394.031695][T19237] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 394.045846][T19237] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 394.058857][T19237] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 394.221623][T19237] infiniband syz0: set active [ 394.536970][T19259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 394.675733][T19268] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 394.762827][T19271] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 394.783803][T19271] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 394.840748][T19273] vlan3: entered promiscuous mode [ 394.876154][T19273] vlan3: entered allmulticast mode [ 395.554360][T19293] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.581109][T19293] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.629465][T19293] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 395.666747][T19293] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 396.069784][T19316] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 396.465159][T19336] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 396.491235][T19337] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.505129][T19336] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 396.559299][T19336] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.568521][T19336] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.577638][T19336] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.586396][T19336] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 396.987116][T19355] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 397.003748][T19355] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 397.108854][T19355] infiniband syz0: set active [ 397.296861][T19361] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 398.013459][T19392] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 398.105634][T19394] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 398.134194][T19394] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 398.999918][T19439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.039245][T19439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 399.215901][T19450] sctp: [Deprecated]: syz-executor.4 (pid 19450) Use of int in maxseg socket option. [ 399.215901][T19450] Use struct sctp_assoc_value instead [ 399.330564][T19457] __nla_validate_parse: 5 callbacks suppressed [ 399.330586][T19457] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 399.491652][T19459] syzkaller0: entered promiscuous mode [ 399.497404][T19459] syzkaller0: entered allmulticast mode [ 399.505789][T19465] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 399.524859][T19464] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 399.543949][T19464] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 399.570223][T19464] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.579359][T19464] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.588332][T19464] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.597360][T19464] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 399.655673][T19472] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 401.683105][T19475] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 401.712818][T19484] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.2'. [ 401.839718][T19503] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 401.902481][T19507] IPVS: Error joining to the multicast group [ 401.911162][T19509] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 401.934684][T19509] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 401.972472][T19509] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 402.132954][T19527] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 402.229234][T19531] bridge17: entered promiscuous mode [ 402.262957][T19531] bridge17: entered allmulticast mode [ 402.290153][T19538] bridge26: entered promiscuous mode [ 402.305636][T19538] bridge26: entered allmulticast mode [ 402.423498][T19545] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 403.413150][T19589] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 403.574855][T19594] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 403.810050][T19602] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 404.844869][T19611] __nla_validate_parse: 10 callbacks suppressed [ 404.844891][T19611] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 405.036919][T19615] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 405.151539][T19618] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups) [ 405.532258][T19621] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 405.930874][T19631] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 405.956777][T19631] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 406.741067][T19639] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.036041][T19647] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups) [ 407.472577][T19657] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 408.295136][T19682] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 408.542843][T19690] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 408.603825][T19690] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 408.648738][T19692] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 408.933852][T19695] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups) [ 409.166866][T19702] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 409.378624][T19713] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 409.551001][ T8710] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.580904][ T8710] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.913217][T19748] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 4095 (only 8 groups) [ 409.952251][T19750] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 410.294096][T19767] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.4'. [ 410.326825][T19768] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 410.361786][T19768] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 411.233410][T19785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 411.293207][T19785] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 411.326294][T19785] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 411.650006][T19798] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 411.879887][T19814] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 411.892984][T19814] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 412.451983][T19834] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 412.509441][T19836] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 412.656304][T19839] x_tables: ip6_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT/POSTROUTING [ 412.670743][T19840] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 413.382345][T19863] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 413.419019][T19863] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 413.524787][T19871] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 413.779195][T19885] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 414.616585][T19915] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 415.038808][T19933] __nla_validate_parse: 5 callbacks suppressed [ 415.038829][T19933] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 415.082880][T19933] tipc: Started in network mode [ 415.104154][T19933] tipc: Node identity 40060020000000006e, cluster identity 8 [ 415.176934][T19939] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 415.204251][T19939] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 415.526616][T19951] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 415.676307][T19953] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 416.026136][T19968] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.033852][T19968] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.095826][T19968] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.103072][T19968] bridge0: port 2(bridge_slave_1) entered forwarding state [ 416.110642][T19968] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.117915][T19968] bridge0: port 1(bridge_slave_0) entered forwarding state [ 416.134366][T19968] bridge0: entered promiscuous mode [ 416.139630][T19968] bridge0: entered allmulticast mode [ 416.526723][T19985] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 416.844379][T20001] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 416.868793][T20003] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 416.874125][T20001] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 417.111386][T20018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 417.142533][T20020] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 417.172173][T20018] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 417.767831][T20040] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 417.789677][T20040] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 418.201905][T20060] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 418.363341][T20069] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 418.532166][T20077] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 419.545707][T20122] xt_CT: You must specify a L4 protocol and not use inversions on it [ 419.983591][T20143] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 420.077429][T20145] __nla_validate_parse: 4 callbacks suppressed [ 420.077448][T20145] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.0'. [ 420.785343][T20152] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 421.055316][T20164] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 421.907121][T20188] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'. [ 421.949370][T20189] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'. [ 422.163327][T20194] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 422.188564][T20194] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 422.205281][T20197] xt_ecn: cannot match TCP bits for non-tcp packets [ 422.560764][T20205] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 423.079265][T20215] veth1_macvtap: left promiscuous mode [ 423.110152][T20215] macsec0: entered allmulticast mode [ 423.161979][T20215] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 423.306946][T20224] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 423.332264][T20226] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.0'. [ 423.360362][T20228] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'. [ 423.780045][T20253] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 424.180085][T20274] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 424.405338][T20286] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 424.415520][T20286] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 424.626718][T20296] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 424.639956][T20296] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 424.658113][T20296] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 424.674456][T20296] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 425.159379][T20315] __nla_validate_parse: 8 callbacks suppressed [ 425.159402][T20315] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.2'. [ 425.376285][T20323] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 425.391413][T20324] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 425.399229][T20323] openvswitch: netlink: IP tunnel attribute has 3052 unknown bytes. [ 425.424515][T20324] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 425.631071][T20332] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.2'. [ 425.644663][T20332] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 425.769073][T20337] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 425.780106][T20337] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 426.008578][T20344] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 426.167301][T20351] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode broadcast(3) [ 426.580291][T20374] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.2'. [ 426.717016][T20376] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.1'. [ 427.386660][T20381] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 427.921791][T20374] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 428.136236][T20390] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 428.392075][T20398] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 428.482618][T20403] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 429.172820][T20418] validate_nla: 5 callbacks suppressed [ 429.172841][T20418] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 429.223000][T20418] team0: Failed to send options change via netlink (err -105) [ 429.249229][T20418] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 429.280226][T20418] team0: Port device netdevsim0 removed [ 429.309617][T20418] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 429.464244][ T29] audit: type=1800 audit(1717207863.635:21): pid=20428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 429.484514][T20429] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 429.547168][ T29] audit: type=1804 audit(1717207863.675:22): pid=20428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1378539415/syzkaller.fsPKOE/1070/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 429.624417][ T29] audit: type=1804 audit(1717207863.695:23): pid=20428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1378539415/syzkaller.fsPKOE/1070/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 429.722833][ T29] audit: type=1804 audit(1717207863.705:24): pid=20428 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1378539415/syzkaller.fsPKOE/1070/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 430.296371][T20451] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 430.305275][T20451] __nla_validate_parse: 2 callbacks suppressed [ 430.305293][T20451] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 430.402934][T20452] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 430.462211][T20452] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 430.540199][T20456] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 430.733337][ T29] audit: type=1800 audit(1717207864.905:25): pid=20463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 430.782288][T20466] netlink: 200 bytes leftover after parsing attributes in process `syz-executor.1'. [ 430.794750][ T29] audit: type=1804 audit(1717207864.945:26): pid=20463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3300376570/syzkaller.CQk97Y/143/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 430.816692][T20466] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 430.880476][ T29] audit: type=1804 audit(1717207864.975:27): pid=20463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3300376570/syzkaller.CQk97Y/143/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 430.964613][ T29] audit: type=1804 audit(1717207864.975:28): pid=20463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3300376570/syzkaller.CQk97Y/143/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 431.202416][T20482] sctp: [Deprecated]: syz-executor.1 (pid 20482) Use of int in max_burst socket option deprecated. [ 431.202416][T20482] Use struct sctp_assoc_value instead [ 431.387937][ T29] audit: type=1800 audit(1717207865.565:29): pid=20497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 431.421559][T20496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.445140][T20496] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 431.457886][ T29] audit: type=1804 audit(1717207865.595:30): pid=20497 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3721210195/syzkaller.3ecI1u/226/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 431.541240][ T5121] block nbd0: Receive control failed (result -107) [ 431.814506][T20517] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 431.829866][T20517] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 432.513046][T20549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 432.538602][T20549] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 433.739542][T20595] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 433.785155][T20595] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 433.882766][T20598] tipc: Started in network mode [ 433.893169][T20598] tipc: Node identity team_sla, cluster identity 4711 [ 433.909711][T20598] tipc: Enabling of bearer rejected, failed to enable media [ 434.373326][T20624] xt_time: unknown flags 0x4 [ 434.934481][T20654] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 435.317984][T20672] __nla_validate_parse: 3 callbacks suppressed [ 435.318006][T20672] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 435.365864][T20672] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 435.885539][T20695] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 436.002569][T20701] vcan0: entered promiscuous mode [ 436.095634][T20703] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 436.104414][T20703] netlink: 636 bytes leftover after parsing attributes in process `syz-executor.2'. [ 436.717536][T20735] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 436.744557][T20735] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 436.879685][T20742] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 436.952978][T20742] 8021q: adding VLAN 0 to HW filter on device team1 [ 436.974877][T20745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 436.993508][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 437.028175][T20751] RDS: rds_bind could not find a transport for fc00::, load rds_tcp or rds_rdma? [ 437.038303][T20746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 437.055297][T20749] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 437.069149][T20749] netlink: 636 bytes leftover after parsing attributes in process `syz-executor.2'. [ 437.092996][T20746] 8021q: adding VLAN 0 to HW filter on device team4 [ 437.125036][T20743] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 437.567914][T20779] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 438.001134][T20799] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 438.885360][T20834] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.236941][T20857] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 439.533503][T20864] rdma_rxe: rxe_newlink: failed to add batadv_slave_1 [ 440.417965][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.424696][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.624180][T20898] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.630844][T20900] __nla_validate_parse: 13 callbacks suppressed [ 440.630906][T20900] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 440.857358][T20904] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 440.874129][T20906] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 440.905286][T20906] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 441.215342][T20913] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 441.253712][T20913] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 441.498212][T20918] Bluetooth: MGMT ver 1.22 [ 441.525053][T20918] Bluetooth: hci3: invalid length 0, exp 2 for type 22 [ 441.543241][T20918] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 441.877571][T20939] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.4'. [ 442.201128][T20958] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 442.247289][T20946] syzkaller0: entered promiscuous mode [ 442.274928][T20946] syzkaller0: entered allmulticast mode [ 442.294600][T20962] ieee802154 phy0 wpan0: encryption failed: -22 [ 443.079492][T20981] sctp: [Deprecated]: syz-executor.0 (pid 20981) Use of int in max_burst socket option. [ 443.079492][T20981] Use struct sctp_assoc_value instead [ 443.477166][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 443.477184][ T29] audit: type=1800 audit(1717207877.645:37): pid=20997 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 445.089989][T20985] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 445.099955][T20985] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 445.230700][T21020] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 445.417060][T21033] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.960790][T21052] __nla_validate_parse: 1 callbacks suppressed [ 445.960810][T21052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 445.987880][T21052] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 446.415096][T21067] bridge0: entered promiscuous mode [ 446.427779][T21067] team0: Port device bridge0 added [ 446.664894][T21075] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 446.795495][T21080] ieee802154 phy0 wpan0: encryption failed: -22 [ 447.199678][T21103] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 447.229008][T21103] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 447.497377][T21118] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 447.522192][T21118] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 447.545480][T21119] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 447.578200][T21119] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 447.913604][T21125] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 448.495590][T21146] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 448.552863][T21146] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 448.796502][T21157] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 448.828440][T21157] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 448.857312][T21159] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 449.062935][T21166] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 450.588294][T21207] openvswitch: netlink: Multiple metadata blocks provided [ 450.608742][T21212] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 450.658190][T21213] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 451.462856][T21238] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 451.530853][T21242] xt_TCPMSS: Only works on TCP SYN packets [ 451.626254][T21246] __nla_validate_parse: 6 callbacks suppressed [ 451.626272][T21246] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 451.668742][T21249] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 451.725589][T21246] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 451.972804][T21264] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 452.008601][T21264] netlink: 'syz-executor.4': attribute type 25 has an invalid length. [ 452.550016][T21280] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 452.827045][T21286] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 452.875689][T21286] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 453.647751][T21322] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 453.678151][T21325] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 453.714995][T21325] netlink: 'syz-executor.0': attribute type 25 has an invalid length. [ 454.655238][T21343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 454.694173][T21343] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 454.859427][T21354] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 454.894110][T21355] netlink: 'syz-executor.2': attribute type 25 has an invalid length. [ 455.006377][T21359] netlink: 'syz-executor.4': attribute type 24 has an invalid length. [ 455.078734][T21362] sctp: [Deprecated]: syz-executor.4 (pid 21362) Use of int in max_burst socket option deprecated. [ 455.078734][T21362] Use struct sctp_assoc_value instead [ 456.086432][T21393] IPVS: length: 200 != 24 [ 456.129485][T21393] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 456.183518][T21400] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 456.201080][T21399] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 456.658889][T21421] __nla_validate_parse: 4 callbacks suppressed [ 456.658909][T21421] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 457.125600][T21435] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 457.155016][T21435] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 457.345556][T21440] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 457.559345][T21450] ieee802154 phy0 wpan0: encryption failed: -22 [ 457.732092][T21458] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 468.094403][ T5114] Bluetooth: hci2: command 0x0406 tx timeout [ 487.091767][ T5114] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 487.101770][ T5114] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 487.111686][ T5114] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 487.119858][ T5114] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 487.132947][ T5114] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 487.143028][ T5114] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 488.048312][ T5121] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 488.064686][ T5121] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 488.074847][ T5121] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 488.084286][ T5121] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 488.093374][ T5121] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 488.102289][ T5121] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 488.323428][ T5121] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 488.332329][ T5121] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 488.364153][ T5121] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 488.390786][ T5121] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 488.399920][ T5121] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 488.408591][ T5121] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 488.792631][T21474] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 488.814121][T21474] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 488.824915][T21474] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 488.835645][ T5121] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 488.847180][ T5121] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 488.856597][ T5121] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 488.864786][ T5121] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 488.871824][T21486] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 488.895224][T21486] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 488.906708][T21486] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 488.915418][T21486] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 488.924061][ T5114] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 489.213957][T21474] Bluetooth: hci5: command tx timeout [ 490.174050][T21474] Bluetooth: hci6: command tx timeout [ 490.496777][T21474] Bluetooth: hci7: command tx timeout [ 490.974364][T21474] Bluetooth: hci8: command tx timeout [ 490.974392][ T5114] Bluetooth: hci9: command tx timeout [ 491.294033][T21474] Bluetooth: hci5: command tx timeout [ 492.254241][T21474] Bluetooth: hci6: command tx timeout [ 492.574478][T21474] Bluetooth: hci7: command tx timeout [ 493.054450][T21474] Bluetooth: hci8: command tx timeout [ 493.054463][ T5114] Bluetooth: hci9: command tx timeout [ 493.373876][T21474] Bluetooth: hci5: command tx timeout [ 494.334248][T21474] Bluetooth: hci6: command tx timeout [ 494.656155][T21474] Bluetooth: hci7: command tx timeout [ 495.133935][T21474] Bluetooth: hci9: command tx timeout [ 495.133944][ T5114] Bluetooth: hci8: command tx timeout [ 495.453787][ T5114] Bluetooth: hci5: command tx timeout [ 496.413941][ T5114] Bluetooth: hci6: command tx timeout [ 496.737095][ T5114] Bluetooth: hci7: command tx timeout [ 497.213900][ T5114] Bluetooth: hci8: command tx timeout [ 497.219358][ T5114] Bluetooth: hci9: command tx timeout [ 501.863172][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.870018][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 529.549766][T21474] Bluetooth: hci3: command 0x0405 tx timeout [ 552.302217][ T5114] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 552.312514][ T5114] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 552.321109][ T5114] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 552.330450][ T5114] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 552.339099][ T5114] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 552.347637][ T5114] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 553.284921][ T5114] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 553.296295][ T5114] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 553.305478][ T5114] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 553.316713][ T5114] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 553.325568][ T5114] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 553.333101][ T5114] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 553.415874][T21474] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 553.426872][T21474] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 553.435636][T21474] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 553.446852][T21474] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 553.474276][T21474] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 553.481890][T21474] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 553.814505][ T5114] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 553.834295][ T5114] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 553.853852][ T5114] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 553.874389][ T5114] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 553.884348][ T5114] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 553.892991][ T5114] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 554.095182][T21474] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 554.104354][T21474] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 554.114951][T21474] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 554.126265][T21474] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 554.134671][T21474] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 554.142343][T21474] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 554.423843][T21474] Bluetooth: hci10: command tx timeout [ 555.377460][T21474] Bluetooth: hci11: command tx timeout [ 555.543928][T21474] Bluetooth: hci12: command tx timeout [ 555.934176][T21474] Bluetooth: hci13: command tx timeout [ 556.174391][T21474] Bluetooth: hci14: command tx timeout [ 556.494114][T21474] Bluetooth: hci10: command tx timeout [ 557.457234][T21474] Bluetooth: hci11: command tx timeout [ 557.614147][T21474] Bluetooth: hci12: command tx timeout [ 558.014001][T21474] Bluetooth: hci13: command tx timeout [ 558.254358][T21474] Bluetooth: hci14: command tx timeout [ 558.574290][T21474] Bluetooth: hci10: command tx timeout [ 559.539379][T21474] Bluetooth: hci11: command tx timeout [ 559.694214][T21474] Bluetooth: hci12: command tx timeout [ 560.093878][T21474] Bluetooth: hci13: command tx timeout [ 560.334089][T21474] Bluetooth: hci14: command tx timeout [ 560.654261][T21474] Bluetooth: hci10: command tx timeout [ 561.623703][T21474] Bluetooth: hci11: command tx timeout [ 561.774039][T21474] Bluetooth: hci12: command tx timeout [ 562.173735][T21474] Bluetooth: hci13: command tx timeout [ 562.413915][T21474] Bluetooth: hci14: command tx timeout [ 563.304276][ T1240] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.310668][ T1240] ieee802154 phy1 wpan1: encryption failed: -22 [ 606.816124][ T30] INFO: task syz-executor.4:21427 blocked for more than 143 seconds. [ 606.824790][ T30] Not tainted 6.9.0-syzkaller-12171-gccf23c916ca3 #0 [ 606.832006][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 606.853598][ T30] task:syz-executor.4 state:D stack:24656 pid:21427 tgid:21423 ppid:5124 flags:0x00004006 2024/06/01 02:14:01 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 606.873596][ T30] Call Trace: [ 606.878970][ T30] [ 606.881942][ T30] __schedule+0x17e8/0x4a20 [ 606.903804][ T30] ? __pfx___schedule+0x10/0x10 [ 606.908725][ T30] ? __pfx_lock_release+0x10/0x10 [ 606.933645][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 606.939188][ T30] ? schedule+0x90/0x320 [ 606.943449][ T30] schedule+0x14b/0x320 [ 606.963766][ T30] schedule_preempt_disabled+0x13/0x30 [ 606.969288][ T30] __mutex_lock+0x6a4/0xd70 [ 606.978103][ T30] ? __mutex_lock+0x527/0xd70 [ 606.982845][ T30] ? ppp_exit_net+0xe3/0x3d0 [ 607.003886][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 607.008985][ T30] ? net_generic+0x1f/0x240 [ 607.023731][ T30] ppp_exit_net+0xe3/0x3d0 [ 607.028211][ T30] ? __pfx_ppp_exit_net+0x10/0x10 [ 607.033342][ T30] ? __pfx_hwsim_exit_net+0x10/0x10 [ 607.054071][ T30] ? __ip_vs_dev_cleanup_batch+0x239/0x260 [ 607.059940][ T30] setup_net+0x9a9/0xca0 [ 607.084190][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 607.089802][ T30] ? __pfx_setup_net+0x10/0x10 [ 607.114224][ T30] copy_net_ns+0x4e2/0x7b0 [ 607.118708][ T30] create_new_namespaces+0x425/0x7b0 [ 607.124127][ T30] ? bpf_lsm_capable+0x9/0x10 [ 607.128848][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 607.154794][ T30] ksys_unshare+0x619/0xc10 [ 607.159374][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 607.173607][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 607.179644][ T30] ? do_syscall_64+0x100/0x230 [ 607.193674][ T30] __x64_sys_unshare+0x38/0x40 [ 607.198505][ T30] do_syscall_64+0xf3/0x230 [ 607.203028][ T30] ? clear_bhb_loop+0x35/0x90 [ 607.224340][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 607.230339][ T30] RIP: 0033:0x7f69e207cee9 [ 607.243711][ T30] RSP: 002b:00007f69e2e560c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 607.252188][ T30] RAX: ffffffffffffffda RBX: 00007f69e21b4070 RCX: 00007f69e207cee9 [ 607.274832][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 607.282871][ T30] RBP: 00007f69e20c947f R08: 0000000000000000 R09: 0000000000000000 [ 607.314107][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 607.322150][ T30] R13: 000000000000006e R14: 00007f69e21b4070 R15: 00007ffdcdfa11a8 [ 607.344214][ T30] [ 607.347316][ T30] INFO: task syz-executor.0:21459 blocked for more than 143 seconds. [ 607.36