last executing test programs: 6.082393903s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x30, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_GATE_ANNOUNCEMENTS={0x5}, @NL80211_MESHCONF_HWMP_RANN_INTERVAL={0x6, 0x10, 0x4}]}]}, 0x30}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000002180), 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x4, 0x3, &(0x7f0000000000)=@framed={{0x18, 0x2}}, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x47, 0x10001, 0x8, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000000), 0x20000000}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_unlink_exit\x00'}, 0x10) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000140)={r4, &(0x7f0000000000), &(0x7f0000000040)=""/98}, 0x20) sendto$inet(r0, &(0x7f0000000480)="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", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmsg(r0, &(0x7f00000033c0)={&(0x7f00000003c0)=@ethernet={0x0, @dev}, 0x80, &(0x7f0000002040)=[{0x0, 0xae09}, {&(0x7f00000021c0)=""/4096, 0x1000}], 0x2, &(0x7f0000001f80)=""/178, 0xb2}, 0x120) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYBLOB="98030000", @ANYRES16, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603"], 0x398}}, 0x0) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00'}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r8, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff0802110000010569ea7fa08e8df3d0edd086922799ded6be01d09a95b66d3d"], 0x398}}, 0x0) 5.975715102s ago: executing program 3: bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001940)={0x20, r3, 0x1, 0x0, 0x0, {0x1a}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}]}]}, 0x20}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@getstats={0x1c, 0x5e, 0x20, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x2}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40084}, 0x20000010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xb, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711063000000000085100000f8ffffff85170000050000009500000000000000c7caa69d4a95108455dcc178d65a37720cab273f"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', r1, 0x0, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x16) 5.899462243s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r5, 0x107, 0x16, &(0x7f0000000000)={0x2, &(0x7f0000000180)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x6}]}, 0x10) syz_emit_ethernet(0x56, &(0x7f0000000a40)={@local, @broadcast, @void, {@mpls_mc={0x8848, {[], @ipv6=@tipc_packet={0x0, 0x6, "c266f8", 0x20, 0x6, 0x0, @empty, @dev, {[], @payload_direct={{{{0x20, 0x0, 0x0, 0x0, 0x0, 0x8}}}}}}}}}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r2, &(0x7f0000000340)={0x0, 0x4, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_SCAN_SSIDS={0x4}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x70, r1, 0x8, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000010) r6 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r6, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) listen(r6, 0xc) r7 = socket$inet_dccp(0x2, 0x6, 0x0) r8 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r8, &(0x7f00000002c0)={0x2c, 0x2000}, 0x10) connect$inet(r7, &(0x7f0000e5c000)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_int(r7, 0x10d, 0x8d, &(0x7f0000000040), &(0x7f0000000080)=0x4) 5.768188142s ago: executing program 3: r0 = socket(0x10, 0x803, 0x0) sendmsg$sock(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000080)="85", 0x1}, {&(0x7f0000000900)="9ee0e8f4f45b9da56ae57931bc8742", 0xf}], 0x2}, 0x0) sendto(r0, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x331}, {&(0x7f0000000280)=""/85, 0x5c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x596}, {&(0x7f00000007c0)=""/154, 0x32}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41, 0x11c8}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 5.690413938s ago: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 5.225824598s ago: executing program 3: bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001780)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nbd(&(0x7f00000007c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000004c0)={0x0, 0x300, &(0x7f0000000480)={&(0x7f0000000140)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000ffdbdf25010000000c00040002000000000000000c00060001000000000000000c00020007000000000000000c00080001000000000000001c0007"], 0x60}}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), r0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) r4 = socket$inet6(0xa, 0x6, 0x0) listen(r4, 0x0) setsockopt(r4, 0x10d, 0x800000000d, &(0x7f0000000080)="03", 0x1) sendmsg$can_raw(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x20008000) read$alg(r3, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r3, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f0000000000), 0x248800) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000001380)={'vcan0\x00', 0x0}) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000003c0)={'lo\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4c00000010000100"/20, @ANYRES32=r11, @ANYBLOB="0000000000000000080004000300000024002b8008000800", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB='\b\x00\b\x00', @ANYRES32, @ANYBLOB="08000300020000fe"], 0x4c}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(r6, &(0x7f0000000cc0)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000b00)={0x34, r7, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x34}}, 0x0) getpeername$packet(r3, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000280)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000340)={'syztnl1\x00', &(0x7f00000002c0)={'ip6tnl0\x00', 0x0, 0x2f, 0x6, 0x0, 0xf31, 0x54, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, @private0, 0x20, 0x10, 0x1, 0xfffffffb}}) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000000480)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)={0xd4, r7, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@ETHTOOL_A_FEATURES_HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}]}, @ETHTOOL_A_FEATURES_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @ETHTOOL_A_FEATURES_HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0xd4}, 0x1, 0x0, 0x0, 0x800}, 0x8014) syz_emit_ethernet(0x5e, &(0x7f0000000140)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "083ff2", 0x28, 0x6, 0x0, @remote, @mcast2, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, {[@md5sig={0x13, 0x12, "fb6b9acd8f4e1c92833a2f1e90339d18"}]}}}}}}}}, 0x0) 2.164732931s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2408480) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x1, 0x73, 0x11, 0x32}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x10000, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) 2.11212346s ago: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 2.049066084s ago: executing program 0: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) socket$nl_route(0x10, 0x3, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond_slave_0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r1, 0x0, 0x10548, 0x0) 1.829079671s ago: executing program 1: sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x5e0810}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x3, 0x2, 0x5}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000f7b9123600000000009500000700000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x80) r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x0, 0x0, @dev, 0x2}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000240), 0x8) ioctl$FITRIM(r2, 0xc0185879, &(0x7f00000002c0)={0x8, 0x8000, 0x3ff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='pwc_handler_enter\x00', r2}, 0x10) 1.794607995s ago: executing program 0: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 1.690107631s ago: executing program 4: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 1.667580806s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='veth1\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x10010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.kill\x00', 0x7a05, 0x1700) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000080)=0x10002, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r5, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) 1.432645197s ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r0, 0x0, 0x485, 0x0, 0x0) 1.419788734s ago: executing program 4: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg(r2, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400020060ec970001983a00fc020018c6ba35000000000000000700ff020000000000000000000000000001000000000000000000000000000000000000000000000000860090780000000000000000000000000000ee3f000000002b036f8c006e75021d683910c3090b3188a7c747eb2278a273c1b80029442911892704"], 0xfdef) 1.412329239s ago: executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet6_udp(0xa, 0x2, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000340)=[@in6={0xa, 0x0, 0x0, @remote, 0x28da}]}, &(0x7f0000000240)=0x10) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000140)=ANY=[@ANYBLOB="e0000000100009"], 0xe0}], 0x1}, 0x0) connect$pppl2tp(r0, &(0x7f0000000240)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x8, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}}, 0x32) writev(r0, &(0x7f0000000180)=[{&(0x7f0000000080)='v', 0x34000}], 0x1) 1.317379668s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x27}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x2, 0x2, 0x4}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r0, 0x5451, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 1.209189791s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080), &(0x7f0000000180)=0x4) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f00000002c0)='veth1\x00', 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='blkio.bfq.io_serviced_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000080), 0x10010) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cgroup.kill\x00', 0x7a05, 0x1700) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) socket$key(0xf, 0x3, 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r5, 0x6, 0x19, &(0x7f0000000080)=0x10002, 0x4) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e24, @multicast1}, 0x10) connect$inet(r5, &(0x7f0000000200)={0x2, 0x4e24, @local}, 0x10) sendto$inet(r5, &(0x7f0000000100)="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", 0xfffffffffffffdb0, 0x4040004, 0x0, 0xfffffffb) 1.172426461s ago: executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) ioctl$PPPIOCGIDLE32(r1, 0x8008743f, &(0x7f0000000080)) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'batadv0\x00', &(0x7f0000000340)=@ethtool_rxnfc={0x31, 0x0, 0x0, {0x0, @ah_ip4_spec={@empty, @dev}, {}, @usr_ip4_spec={@multicast1, @loopback}, {0x0, @dev}}}}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000002000010000000000000000000a00000000000000000000000c001400", @ANYRES16], 0x28}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0xb00, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000120001"], 0xe8}}, 0x0) 997.819453ms ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) setsockopt$CAIFSO_REQ_PARAM(r0, 0x116, 0x80, &(0x7f0000000180)="8d6c95b29d69e6a79ca0cb15b6427bb6920e679880b0aa2caa8271312943a4d65b31950861ccec983353e655ab8478704a86b9ce68f2c3f441718ec9f87f45cdfa8468e01c0508c379d93d52af06b3aa70ac3c30cfbc7f14db236c5e98c347e6100bcdebffd13bf122b62fe803f0f7114dc0f1b1a91b25ea1431b6802e071d063beb9d0ccb0feb6432d82e8af244", 0x8e) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) bind$tipc(r1, &(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x40}}}, 0x10) bind$tipc(r1, &(0x7f00000000c0)=@name={0x1e, 0x2, 0x9d3354bba4295a8d, {{0x42}}}, 0x10) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r0, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x12, 0x7}, &(0x7f0000000140)=0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x5, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000080), 0x8, 0x10, &(0x7f0000000000)={0x0, 0xd}, 0x10}, 0x90) r4 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r4, 0x0, 0x40, &(0x7f00000001c0)=@nat={'nat\x00', 0x1b, 0x5, 0x398, 0x1d0, 0x2c8, 0xffffffff, 0x128, 0x128, 0x3f0, 0x3f0, 0xffffffff, 0x3f0, 0x3f0, 0x5, 0x0, {[{{@ip={@broadcast, @remote, 0x0, 0x0, 'vlan1\x00', 'nicvf0\x00', {}, {}, 0x0, 0x4}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@multicast1, @ipv6=@local, @icmp_id}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @remote, @remote, @icmp_id, @gre_key}}}}, {{@ip={@rand_addr, @remote, 0x0, 0x0, 'veth0_to_hsr\x00', 'sit0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60}}, {{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000002c0)={r2, 0x10, &(0x7f0000000280)=[@in={0x2, 0x4e21, @local}]}, &(0x7f0000000300)=0x10) unshare(0x8040080) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x40, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$packet_int(r7, 0x107, 0xf, &(0x7f0000000080)=0xf3e, 0x62) sendto$packet(r7, &(0x7f00000000c0)="3f041200eee812002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c1506fdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x81, @local}, @in6={0xa, 0x0, 0x0, @loopback}], 0x38) sendto$inet6(r3, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000580)={0x7}, 0xe) recvmmsg(r3, &(0x7f0000000100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/32, 0x5}}], 0x196, 0x0, 0x0) 969.958111ms ago: executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000500), 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendmsg$inet(r0, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000880)=[{&(0x7f0000000000)="14fafa37bf25f04bda99eefbbdd8d76b8136ee6cfdee25bdb2d1873ce347c7b623dd3140cfb2326fa1bf9f1dc2375eeba25df45aefdb3c49a4e7ffab4ed7181180bde98af644d11f", 0x48}, {&(0x7f0000000240)="16a6fca1943502d7ac24a672321690c0215b73b201e67576ef51abd7cb2bcd21ebc41893e255eea9bba2639084f4dec0", 0x30}, {&(0x7f0000000580)="c3e361cabaa484b0c035139c64932a377f926342f6b052b6a3b273c187a5e0c26fe049092a54eb9b6be2ac2df69e6a36fad43d88851aa162b6aa0d4734e36aad318ea99586ca9f6429200684", 0x4c}], 0x3}, 0x0) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 882.523777ms ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x8d}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f00000002c0)=0x2408480) write$cgroup_int(r0, &(0x7f0000000380), 0x1040c) close(r0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cgroup.controllers\x00', 0x275a, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000300)='sched_switch\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x0, 0x3, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x1, 0x73, 0x11, 0x32}, [], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x10000, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x4, 0x42, 0x40, 0x0, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r3}, 0x38) 681.675402ms ago: executing program 1: getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000180)={0x0, @multicast1, @broadcast}, &(0x7f00000001c0)=0xc) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000200), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f00000002c0)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x68, &(0x7f0000000380)=[{}], 0x8, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0x45, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x7, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@exit]}, &(0x7f0000000040)='syzkaller\x00', 0xdc, 0xc7, &(0x7f0000000080)=""/199, 0x40f00, 0x6, '\x00', r0, 0x31, r1, 0x8, &(0x7f0000000240)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x4, 0x0, 0x15b4, 0x7}, 0x10, r2, 0xffffffffffffffff, 0x7, 0x0, &(0x7f00000005c0)=[{0x1, 0x5, 0x2, 0x7}, {0x3, 0x5, 0x1, 0xb}, {0x5, 0x2, 0x5, 0x2}, {0x0, 0x1, 0x4, 0x7}, {0x1, 0x2, 0x0, 0x6}, {0x1, 0x2, 0xe, 0x3}, {0x4, 0x3, 0x1, 0xa}], 0x10, 0x5}, 0x90) r4 = socket$netlink(0x10, 0x3, 0xe) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDEL6RD(r5, 0x89fa, &(0x7f0000000740)={'sit0\x00', &(0x7f0000000700)={@ipv4={'\x00', '\xff\xff', @broadcast}, @remote, 0x3, 0x1a}}) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r4, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x2c, r6, 0x2, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x1}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES={0x8, 0x3, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8000}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000008c0)={'wg0\x00'}) pipe(&(0x7f0000000900)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r7, 0x84, 0xa, &(0x7f0000000940)={0x6, 0x6, 0x200, 0xb154, 0x8, 0x3, 0x79, 0x4}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) r9 = openat$cgroup_ro(r8, &(0x7f0000000980)='rdma.current\x00', 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r9, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x1c, 0x0, 0x200, 0x3f, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0xda76}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x20000044) r10 = accept4$alg(r8, 0x0, 0x0, 0x80800) sendmmsg$alg(r10, &(0x7f0000001a40)=[{0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000ac0)="836cf00204612871ab8d3ebba3bd0e03115deec9ba09aa0b33e509a04457831fffba48ebe25aaaa331c1eb10745661edc75fe457665e727468630986d605875da35195c814b3c0724f473a5eb9a6c64c9b2e7eea74c041d2f436d7841143c924f2de6358385c5fb4facb397cef67dfd58569162afac4cc0e689d56f98eabf2817c438fcaf93cba75551b6d0b", 0x8c}, {&(0x7f0000000b80)="cb59ddbbd3f84eb672e3e4e9b6e426d37b4bef4609a26fed7407fdc672f9cccd0470cc9905d99f24ef8acfb33de5ef894fb7dfb250e797d69011378beb3a626f7782e32327531c0c20593c092087d6e1708bff49360beff1630b660202ffc1c21f", 0x61}, {&(0x7f0000000c00)="f95a77829b5506806a5fd11eb247ad32203a0d1166b702e18ab740177c80b5e574140df70735587ae5691b09f9efaa3ffd3beba2ffc2944bd080b0e4a278c95edf7c381d70a4a2dd9423742cc9c9ca34ebb04cae4ccf4d78fb0d66e94af22b65f24eb83a44ef59101c0b474b5b8a2c68cf8b48e3129abfdd9f96efebac93686e4f177e4ef2807878f4a6a2d99cc24c871e6c084ee683f1ddb10d9277b8d9dbdbf551aa90c5bd071961fed24cc95044f50bf09baf93d16245205fc73a3a3180f37a1b8f7bb4a02d2ef485db91b29122c625182d7c0c52a72ec3a7a5c3df01bfaac2b1a8a5794cdcfc21344484b7ea8a4dd310c6a40381f3", 0xf7}, {&(0x7f0000000d00)="59a9fa80d689141d0c39f2a7b2fd0a14d25ce627860d36e97a149aca436a6fd3a93e73924825a79b", 0x28}, {&(0x7f0000000d40)="12811ac38edc485946", 0x9}, {&(0x7f0000000d80)="f74191d66cd6bb48db8fef8d4f12a9e6c94078545683f94a0ca77626a89adec07e279e6ed267f90b9d8d3341ad78b9738255b039645acf2582bef36cb6e32d6a537629e5d22e14b3d91a4b5cb878f623d9365317f7a35f22f61a0fea67dc5351a9c22280b36c88ec4b0890a1fba7a4ed7cde7cb7498c78b3b795ef1b0a6fa3efa8111ce00df865d207c51fe8f7ce2e69cc326ea4caa9e6576329ec2d1994d92bd67b44757fd9a91d5c65b0171ca74cc1e9e43be5a9a9a1bc6e9a264023918aa3fe6b1dfb94b9e728339610dd95a55d4521", 0xd1}], 0x6, &(0x7f0000000f00)=[@assoc={0x18, 0x117, 0x4, 0x8000}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x800}, @assoc={0x18, 0x117, 0x4, 0x4}, @iv={0xa0, 0x117, 0x2, 0x8b, "e7d50e699f697e804f5e5cf8f55345980d3e714571409d6d5425fd54cb3d6ac7a7ed0361ea1376f7431fbcff7a8c9849b5d5baa484bb5886f80bcfc6661ea093393801c2f47452d158ddbc407aefdf99f38193bc673c46e486669a3b74229c5742774a7d5e3e4c147ecfe3133a07f875310f7b3616ab4374dfd2dbbc87b3c5bcd089c733c6229100ab6178"}, @assoc={0x18, 0x117, 0x4, 0x80000001}, @op={0x18}], 0x130, 0x4000000}, {0x0, 0x0, &(0x7f0000001580)=[{&(0x7f0000001040)="e3560c391d15711a5320a914609ebab2af440863a7487c474ed6809588e4f1aa256ec5eef8ce50c036017263a4c5b9c938cbbed6865aaf4fe653001bfe86db4d8f31db02ae1ae6fb805f61218bb14ee1d15a0be92d8b0a3b35370675dd41fbbbffbe216d1e63abd2689469ef79e7a414521abc47984228f5223bfab4fd0849b5e4eb914e3cbfa299aab53e558a3dd76d9206e2dea24b209cc8b7805115ad66c20fad4c37b9639a", 0xa7}, {&(0x7f0000001100)="eeec2cd67db44d9b8c37dec1a5021b2fd3c3148634a8e19ccee956097263aef38113756e4e830821ea35fa95ef0ebe71634db0de3f7188d08c9aa58d80874801642192863bf72835062e1c9c9e3994ba7fd225a314aaea6490a5d5e80a440e0d96c474dab568d1c9293a4ed0ee8b65afd9210b8377f005c63cacc3ca3f9656383e5ce9d98eb4cca5223176e5195951d8fd1a0791429845f0154b4f3a12443e015d70bfed2fed6a6f3ed3688022ac1a69573050f47d", 0xb5}, {&(0x7f00000011c0)="24b4d085ee332763509b4e091776ff753efa173cbf10827fb1103c3ad1895038c465e854b1c21c625f8b3ea106b5d3df7f4b3665f338a9874be4b3d05f9ea61aee4d8816471c71bda14730413170434f9dba5daf3a7ca33568b07813ac8b1dec050bb72e2001fb1083195b22c5a6ee52dd6c57ab2f", 0x75}, {&(0x7f0000001240)="30ebda1d5c51e5f335602c3eb4ac0d39fefb9666b4fa160c8ce5209e98504eaf2004b5ccbf3cba1ca9580075795a7a0fa95f6b1924a86652a0d68a5b4ea4808230331bb65200e63007764ecca0d29fa0b7d1973c92f3261b717f20a39c1a53ddec0418b96355e793c8b3322246912bab442cac5bcc6cc391f5d8", 0x7a}, {&(0x7f00000012c0)="b3241f47ced2b195124377a85be8da9b75ccc37eb7ce0aa72cc558d9ccfc4dcc3c0aa7f8d97f40b33ce4c56337c867fdf612f5e255d5f50309540f0f4abf97a497151d7e5d1219ef95e6afe22e651d6173980aa9d6", 0x55}, {&(0x7f0000001340)="30f9b1041cd993517d5478327f882cfc312f64bdbc1d0882a3110c25e2971d28ffa6d9339d4de023433df5c58021a5d7a99180a11a2bfa44d926f5cfba29b28aee58c7d1d7ac4cda7d648e8a14a8fc28c3a762444549bb6a01053d9b4cdb32800cd84753881aa577948a4dd2bee6a0c10545343cf7e0fcbffd980196a6a1693a5b22d065020b3eda5e4402ed67afd6ae1bc4b3b6170ca12ae51cb8fe7f8a54b18b8aedc1e54fd05bdb4cab7d6ad0c105b7d1", 0xb2}, {&(0x7f0000001400)="c0dd1a63c0bbe4bca8881a66db6db2f62cd7660024a5e5893b45fbacf201059c963be422754804e1b20ef47fe206f6da1ce2c14ece0f0feae7178d49fa6a5b5e85d2dce299738d3e4b41075a0524834baf87c97cdcef3af9cb128202a61d65d4a1c7c778e0a41381889fa2fca76e5fd5f9dd190522c21d611d68a679376a3e1cf2fea240a59c800422285aab8911cbd77f1e32ed6171d9838b8950310846155aedf4694c3a06d5bb55da6d6b13451ca1f583370d366eed146088be9ef9dd520bb73ba673a50d662ee0ab", 0xca}, {&(0x7f0000001500)="22a093a20f6d7677c8ed71c3fdbb204e57319140c0ebe89842fe84ce63d0c4275098d6b5a5f179943dbdb44b4a906ba83446c15ac82bd5ebf50ae983f4696b0a722ac0260f829ae6f1ee0073fa890097e3e301c3ccaa05a1", 0x58}], 0x8, &(0x7f0000001600)=[@op={0x18}], 0x18, 0x81}, {0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001640)="ef422e34da850102e14160efe0544ad1ae806b254afc95405aa70903733e475b7fea62216e04d120d87d92c13bdc87c10aa5283df6d32bfa0518f2562172fb8946b5feb49695b85d24f9921e11be415a6b3f31f4e192caf80a486e843db949e30c63efed3e71bdc46c855de7510b9dcfd10139aa7727481a5b508531888764772d7b9febda7ee3686b8e88d4b854d731f93ccc8ee6e8936c478317234deb13e81f2fddde1b3d4f762257a781f62678266b95e1911fa6f7b6308a98e6cc5668b2fcbd6166d25db623beb4f08945faaea046690abde60c1a9c7c97", 0xda}, {&(0x7f0000001740)="55abd1fce6ee3f9d2bef088e43265373e9fdd57f7b8ec76a1872effee1d7714ca1eec9d49009f9583ec097777d0c7d4b6b55a511ba030c4e3d46bce69deae909472fb784a5ad438b4b213b25e3e34ffe203149601b819d05907a1925ba30a1b5bbbf8eb7e5c10afe45a23a0aefff0ae46a6c65e4a43ad090782f2cea6245d4256cc366ddb6eeb8bd5d6eba33031481063f606749e105b7b4b75162d7ed0dfd8a4db20b2ea6fa17c37c4a0b37bc6e", 0xae}, {&(0x7f0000001800)="be", 0x1}], 0x3, &(0x7f0000001880)=[@op={0x18}, @op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x100, 0x117, 0x2, 0xeb, "c0d4490545ca0ea0737ff45afe791dd1476877554bdeac81ee623abd420c8a65c92ddd66a445ea21a46a4f460507749c0d4502c389ed959bcff652d041da0c192a5c83e289ed5a8d25cea402028e26af2b85c332061312892437114e6d553133b9e3adb0acb22d2102b84a231095ebd2242e2ab6a2600100e7b775c7cfd2e1128ee92437abe610e5720ade139b85687aee91ecfdb2a2a9b18820e895ca865bb4f33d90dc654255460591ce6a48e0e2247fea3fb577c635b38f35445ca812d81455927b106e4b512528703d71e749db38b5539dc9623c0787bf4e9adf51ab0273bc85d82ae06aaf48da120f"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x6}, @op={0x18, 0x117, 0x3, 0x1}], 0x190, 0x200448d4}], 0x3, 0x4044843) r11 = syz_genetlink_get_family_id$gtp(&(0x7f0000001b40), r7) sendmsg$GTP_CMD_NEWPDP(r8, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x1c, r11, 0x10, 0x70bd29, 0x25dfdbfb, {}, [@GTPA_MS_ADDRESS={0x8, 0x5, @remote}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x800) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000001d80)={&(0x7f0000001c40)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0xb0, 0x1403, 0x800, 0x70bd2d, 0x25dfdbfe, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_bridge\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth0_to_hsr\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ip6erspan0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x8}, 0x40810) recvfrom(r8, &(0x7f0000001dc0)=""/191, 0xbf, 0x2, &(0x7f0000001e80)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80) setsockopt$IP_VS_SO_SET_ADDDEST(r8, 0x0, 0x487, &(0x7f0000001f00)={{0x16, @empty, 0x4e21, 0x4, 'sed\x00', 0x20, 0x7, 0xb}, {@private=0xa010101, 0x4e24, 0x2000, 0x8000, 0x1a, 0x6}}, 0x44) socket$netlink(0x10, 0x3, 0xb) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000002080)={@cgroup=r7, 0x5a46b9f8abfc1ddf, 0x0, 0x10000, &(0x7f0000001f80)=[0x0], 0x1, 0x0, &(0x7f0000001fc0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000002000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000002040)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000020c0)={@map=0x1, r3, 0x35, 0x4, 0x0, @prog_fd=r7, r12}, 0x20) r13 = accept4$ax25(r9, &(0x7f0000002100)={{0x3, @rose}, [@remote, @remote, @null, @null, @rose]}, &(0x7f0000002180)=0x48, 0x800) sendfile(r13, r9, &(0x7f00000021c0)=0x1f, 0x800) r14 = syz_genetlink_get_family_id$devlink(&(0x7f0000002240), r8) sendmsg$DEVLINK_CMD_SB_POOL_GET(r8, &(0x7f0000002340)={&(0x7f0000002200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002300)={&(0x7f0000002280)={0x6c, r14, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1e6}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x2}}]}, 0x6c}, 0x1, 0x0, 0x0, 0x802}, 0x40000) write$cgroup_subtree(r9, &(0x7f0000002380)={[{0x2b, 'devices'}, {0x2b, 'rdma'}, {0x2b, 'net_prio'}]}, 0x19) 554.576965ms ago: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 512.994381ms ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000002c0)={0x0, 0xfcffffff, &(0x7f0000000280)={&(0x7f0000000200)={0x34, r1, 0x3, 0x0, 0x0, {}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'nicvf0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x34}}, 0x0) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)={0x5c, r1, 0x8, 0x70bd25, 0x25dfdbfe, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'netdevsim0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz1\x00'}, @SMC_PNETID_ETHNAME={0x14, 0x2, 'veth1\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x5c}, 0x1, 0x0, 0x0, 0x8004}, 0x801) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x0, 0xc, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32, @ANYRES16=0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={0xffffffffffffffff, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 301.329603ms ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@empty, 0x0, 0x32}, 0x0, @in6=@loopback, 0x0, 0x0, 0x0, 0xb7, 0x1fb, 0xffffffff}}, 0xe8) sendmmsg(r0, &(0x7f0000000180), 0x400000000000077, 0x0) 55.019693ms ago: executing program 2: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket(0x1e, 0x5, 0x0) connect$tipc(r2, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x0, 0x1}}}, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x30, 0x1, 0x0, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r3}, 0x10) (async) r4 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x2c, r4, 0x1, 0x0, 0x0, {}, [@SMC_PNETID_NAME={0x9, 0x1, 'syz0\x00'}, @SMC_PNETID_IBNAME={0x9, 0x3, 'syz1\x00'}]}, 0x2c}}, 0x0) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f00000000c0)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x0, @multicast1}}}, 0x108) (async) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000a40)={0x2, {{0x2, 0x0, @multicast1}}}, 0x90) 41.864387ms ago: executing program 4: socket$packet(0x11, 0x2, 0x300) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8913, &(0x7f0000000040)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000080)={0x1d, r1}, 0x18) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) ioctl$BTRFS_IOC_BALANCE(r0, 0x5000940c, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_MCAST_RATE(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x3c}]}, 0x24}}, 0x0) 31.98993ms ago: executing program 0: r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x31, &(0x7f0000000040)=0x1, 0x4) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x4000000, 0x0, 0x0, &(0x7f0000000180)=""/12, 0xc}}], 0x1, 0x0, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) 0s ago: executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000280)='sys_enter\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000240), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000300), &(0x7f0000000340)=0x8) getsockname$packet(r4, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001400)={0x1b, 0x0, 0x0, 0x8, 0x0, r1, 0x3, '\x00', r7, r1, 0x4, 0x3}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440), ""/16, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000004c0), 0x0, 0x38, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f0000000800), 0x8, 0x61, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1e, 0x0, 0x0, &(0x7f0000000280)='GPL\x00', 0x0, 0xf5, &(0x7f0000000b00)=""/245, 0x0, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x6, 0x4}, 0x8, 0x10, 0x0, 0x0, r9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xf5d}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000002c00)={0x15, 0x13, &(0x7f0000001a40)=ANY=[@ANYBLOB="18000000ff7f0000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000b8000000000000004014060011ae00000048890000000000186a00000a00000000000000f9ffffffbf91000000000000b7ea0000020000008500000084000000b7000000000000009500000000000000"], &(0x7f0000001b00)='GPL\x00', 0x10000, 0x1000, &(0x7f0000001b40)=""/4096, 0x40f00, 0x49, '\x00', r5, 0x3, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000002b40)={0x3, 0x7, 0xfffffffe, 0x9}, 0x10, r9, r1, 0x1, &(0x7f0000002b80)=[r1], &(0x7f0000002bc0)=[{0x2, 0x1, 0x9, 0x1}], 0x10, 0x40}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="500000001000390400"/20, @ANYRES32=r7, @ANYBLOB="e3eb000000000000300012800b00010069210000746e6c00002000028014000300fc0100dffbda6500000000000000000005000400400001"], 0x50}, 0x1, 0x0, 0x0, 0x20811}, 0x0) sendmmsg$inet(r2, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0xa, @remote={0xac, 0x1c}}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @empty}}}], 0x20, 0x2000000}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000200)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl0\x00', r5, 0x29, 0xfe, 0x40, 0x9, 0x8, @private1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x8000, 0x40, 0x9, 0x7}}) sendmsg$nl_route(r4, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32=r7, @ANYBLOB="0100000004000000"], 0x20}, 0x1, 0x0, 0x0, 0x4040}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x15, 0x11, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1925, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@cb_func={0x18, 0x6, 0x4, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000400)='GPL\x00', 0xffffffff, 0xa8, &(0x7f0000000840)=""/168, 0x40f00, 0x0, '\x00', r7, 0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000500)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000540)={0x0, 0x7, 0x2, 0x3}, 0x10, r9, r0, 0x2, 0x0, &(0x7f0000000580)=[{0x3, 0x5, 0x6, 0x1}, {0x1, 0x4, 0x10, 0xc}], 0x10, 0xe85}, 0x90) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r11, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x80010, r11, 0x0) ioctl$FS_IOC_GETFSMAP(r11, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) preadv(r11, &(0x7f00000001c0)=[{0x0}, {&(0x7f0000001380)=""/4105, 0x1009}], 0x2, 0xc852, 0x0) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x9, 0x6, 0x1, 0x201, r1, 0x9, '\x00', r10, 0xffffffffffffffff, 0x5, 0x5, 0x1, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) kernel console output (not intermixed with test programs): 50][ T5236] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.577781][ T5236] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.642213][ T5424] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.2'. [ 82.895918][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 82.919266][ T5426] Zero length message leads to an empty skb [ 82.972215][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.003081][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.010258][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.051778][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.058976][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.138785][ T5116] Bluetooth: hci2: command tx timeout [ 83.445316][ T5423] dccp_close: ABORT with 4529 bytes unread [ 83.539856][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 83.576586][ T5455] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 83.726519][ T5236] veth0_vlan: entered promiscuous mode [ 83.765830][ T5236] veth1_vlan: entered promiscuous mode [ 83.854680][ T5236] veth0_macvtap: entered promiscuous mode [ 83.881993][ T5236] veth1_macvtap: entered promiscuous mode [ 83.932734][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 83.955050][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 83.976415][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.038591][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.072133][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.108274][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.134011][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.146950][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.164515][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.213794][ T5487] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.229601][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.247709][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.253607][ T5487] sctp: [Deprecated]: syz-executor.3 (pid 5487) Use of int in max_burst socket option deprecated. [ 84.253607][ T5487] Use struct sctp_assoc_value instead [ 84.268225][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.304223][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.318770][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.340917][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.362713][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.383619][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.421182][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.483328][ T5236] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.516780][ T5236] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.542543][ T5236] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.565405][ T5236] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.799978][ T5161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.813844][ T5161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.919037][ T5161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.927063][ T5161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.209295][ T5116] Bluetooth: hci2: command tx timeout [ 85.823400][ T5556] __nla_validate_parse: 4 callbacks suppressed [ 85.823419][ T5556] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.148259][ T5566] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.158500][ T5566] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.195851][ T5566] bridge0: port 2(bridge_slave_1) entered listening state [ 86.207517][ T5571] sock: sock_set_timeout: `syz-executor.4' (pid 5571) tries to set negative timeout [ 86.229994][ T29] audit: type=1804 audit(1717117389.465:2): pid=5573 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir4026113118/syzkaller.IQU4fm/29/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 86.327327][ T29] audit: type=1804 audit(1717117389.505:3): pid=5566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir4026113118/syzkaller.IQU4fm/29/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 86.607123][ T5581] netlink: set zone limit has 8 unknown bytes [ 87.068928][ T5596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.100908][ T5594] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 87.404092][ T5605] sock: sock_set_timeout: `syz-executor.2' (pid 5605) tries to set negative timeout [ 87.460834][ C1] bridge0: port 2(bridge_slave_1) entered learning state [ 88.281425][ T5638] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 88.892934][ T5658] netlink: set zone limit has 8 unknown bytes [ 88.955659][ T5663] sock: sock_set_timeout: `syz-executor.1' (pid 5663) tries to set negative timeout [ 89.075090][ T5669] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.287863][ T5675] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.799548][ T5703] sock: sock_set_timeout: `syz-executor.3' (pid 5703) tries to set negative timeout [ 89.990624][ T5711] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.800607][ T5728] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 91.199247][ T5739] netlink: set zone limit has 8 unknown bytes [ 91.373791][ T5747] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.602778][ T5761] warning: `syz-executor.2' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.779331][ T5761] xt_CT: You must specify a L4 protocol and not use inversions on it [ 92.157091][ T5783] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.144941][ T5820] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.164503][ T5821] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.448599][ T5121] Bluetooth: hci2: command 0x0405 tx timeout [ 94.415218][ T5867] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.468518][ T5867] netlink: 51 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.519552][ T5868] tipc: Started in network mode [ 94.545863][ T5867] netlink: 51 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.590903][ T5868] tipc: Node identity 124ecc6369e1, cluster identity 4711 [ 94.613357][ T5868] tipc: Enabled bearer , priority 0 [ 94.810509][ T5880] unknown channel width for channel at 909000KHz? [ 94.944335][ T5884] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.180867][ T5895] SET target dimension over the limit! [ 95.420965][ T5908] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.528567][ T5121] Bluetooth: hci2: command 0x0405 tx timeout [ 95.706887][ T5917] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 95.730108][ T5162] tipc: Node number set to 2075118691 [ 96.152099][ T5928] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.826957][ T5938] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 96.920121][ T5942] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 97.225034][ T5958] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 97.271534][ T5958] CPU: 0 PID: 5958 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-12128-g068648aab72c #0 [ 97.281584][ T5958] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 97.291678][ T5958] Call Trace: [ 97.294957][ T5958] [ 97.297886][ T5958] dump_stack_lvl+0x241/0x360 [ 97.302585][ T5958] ? __pfx_dump_stack_lvl+0x10/0x10 [ 97.307780][ T5958] ? __pfx__printk+0x10/0x10 [ 97.312381][ T5958] ? sysfs_warn_dup+0x51/0xa0 [ 97.317065][ T5958] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 97.322454][ T5958] sysfs_warn_dup+0x8e/0xa0 [ 97.326971][ T5958] sysfs_do_create_link_sd+0xbe/0x110 [ 97.332362][ T5958] device_add_class_symlinks+0x1c5/0x250 [ 97.338012][ T5958] device_add+0x553/0xbf0 [ 97.342353][ T5958] wiphy_register+0x1d3f/0x2b30 [ 97.347220][ T5958] ? __pfx_wiphy_register+0x10/0x10 [ 97.352414][ T5958] ? minstrel_ht_alloc+0x72b/0x860 [ 97.357536][ T5958] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 97.363606][ T5958] ieee80211_register_hw+0x3098/0x3d80 [ 97.369080][ T5958] ? ieee80211_register_hw+0x1161/0x3d80 [ 97.374719][ T5958] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 97.380549][ T5958] ? __asan_memset+0x23/0x50 [ 97.385162][ T5958] ? __hrtimer_init+0x170/0x250 [ 97.390016][ T5958] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 97.395766][ T5958] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 97.401829][ T5958] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 97.408245][ T5958] ? kstrndup+0x5c/0xb0 [ 97.412408][ T5958] ? __asan_memcpy+0x40/0x70 [ 97.416998][ T5958] hwsim_new_radio_nl+0xe4c/0x21d0 [ 97.422203][ T5958] ? __pfx___nla_validate_parse+0x10/0x10 [ 97.427927][ T5958] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 97.433500][ T5958] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 97.439837][ T5958] genl_rcv_msg+0xb14/0xec0 [ 97.444340][ T5958] ? mark_lock+0x9a/0x350 [ 97.448767][ T5958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 97.453812][ T5958] ? __pfx_lock_acquire+0x10/0x10 [ 97.458833][ T5958] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 97.464379][ T5958] ? __pfx___might_resched+0x10/0x10 [ 97.469686][ T5958] netlink_rcv_skb+0x1e3/0x430 [ 97.474447][ T5958] ? __pfx_genl_rcv_msg+0x10/0x10 [ 97.479473][ T5958] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 97.484766][ T5958] ? __netlink_deliver_tap+0x77e/0x7c0 [ 97.490235][ T5958] genl_rcv+0x28/0x40 [ 97.494216][ T5958] netlink_unicast+0x7ea/0x980 [ 97.498991][ T5958] ? __pfx_netlink_unicast+0x10/0x10 [ 97.504278][ T5958] ? __virt_addr_valid+0x183/0x520 [ 97.509398][ T5958] ? __check_object_size+0x49c/0x900 [ 97.514683][ T5958] ? bpf_lsm_netlink_send+0x9/0x10 [ 97.519797][ T5958] netlink_sendmsg+0x8db/0xcb0 [ 97.524568][ T5958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.529858][ T5958] ? __import_iovec+0x536/0x820 [ 97.534723][ T5958] ? aa_sock_msg_perm+0x91/0x160 [ 97.539754][ T5958] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 97.545037][ T5958] ? security_socket_sendmsg+0x87/0xb0 [ 97.550504][ T5958] ? __pfx_netlink_sendmsg+0x10/0x10 [ 97.555793][ T5958] __sock_sendmsg+0x221/0x270 [ 97.560484][ T5958] ____sys_sendmsg+0x525/0x7d0 [ 97.565267][ T5958] ? __pfx_____sys_sendmsg+0x10/0x10 [ 97.570584][ T5958] __sys_sendmsg+0x2b0/0x3a0 [ 97.575185][ T5958] ? __pfx___sys_sendmsg+0x10/0x10 [ 97.580339][ T5958] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 97.586662][ T5958] ? do_syscall_64+0x100/0x230 [ 97.591432][ T5958] ? do_syscall_64+0xb6/0x230 [ 97.596112][ T5958] do_syscall_64+0xf3/0x230 [ 97.600616][ T5958] ? clear_bhb_loop+0x35/0x90 [ 97.605308][ T5958] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 97.611231][ T5958] RIP: 0033:0x7f447807cee9 [ 97.615673][ T5958] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 97.635277][ T5958] RSP: 002b:00007f4478e610c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 97.643695][ T5958] RAX: ffffffffffffffda RBX: 00007f44781b4070 RCX: 00007f447807cee9 [ 97.651681][ T5958] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 000000000000000a [ 97.659649][ T5958] RBP: 00007f44780c947f R08: 0000000000000000 R09: 0000000000000000 [ 97.667618][ T5958] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 97.675585][ T5958] R13: 000000000000006e R14: 00007f44781b4070 R15: 00007ffeaffe7728 [ 97.683566][ T5958] [ 97.772344][ T5962] ieee802154 phy0 wpan0: encryption failed: -22 [ 97.844930][ T5960] netlink: 4096 bytes leftover after parsing attributes in process `syz-executor.2'. [ 97.858702][ T5960] netlink: 4096 bytes leftover after parsing attributes in process `syz-executor.2'. [ 98.205308][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.245735][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.256937][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.265417][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.280797][ T5116] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.291022][ T5116] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.304651][ T5116] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.335003][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.342363][ T5985] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.499343][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.606354][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.648926][ T5990] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 98.706052][ T5990] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.730024][ T5990] bond0: (slave team0): Enslaving as an active interface with an up link [ 98.771072][ T5992] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 98.784913][ T5992] bond0: (slave team0): Releasing backup interface [ 98.805726][ T5992] bridge0: port 3(team0) entered blocking state [ 98.816616][ T5992] bridge0: port 3(team0) entered disabled state [ 98.824266][ T5992] team0: entered allmulticast mode [ 98.830128][ T5992] team_slave_0: entered allmulticast mode [ 98.836218][ T5992] team_slave_1: entered allmulticast mode [ 98.850953][ T5992] team0: entered promiscuous mode [ 98.864295][ T5992] team_slave_0: entered promiscuous mode [ 98.877518][ T5992] team_slave_1: entered promiscuous mode [ 99.276082][ T35] bridge_slave_1: left allmulticast mode [ 99.299566][ T35] bridge_slave_1: left promiscuous mode [ 99.305339][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.381234][ T35] bridge_slave_0: left allmulticast mode [ 99.396273][ T35] bridge_slave_0: left promiscuous mode [ 99.410877][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.186087][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.212247][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.224949][ T35] bond0 (unregistering): Released all slaves [ 100.408512][ T5121] Bluetooth: hci2: command tx timeout [ 100.508390][ T5979] chnl_net:caif_netlink_parms(): no params data found [ 100.538437][ T6027] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 100.552647][ T6027] team0: left allmulticast mode [ 100.557533][ T6027] team_slave_0: left allmulticast mode [ 100.588340][ T6027] team_slave_1: left allmulticast mode [ 100.593871][ T6027] team0: left promiscuous mode [ 100.608351][ T6027] team_slave_0: left promiscuous mode [ 100.614218][ T6027] team_slave_1: left promiscuous mode [ 100.638742][ T6027] bridge0: port 3(team0) entered disabled state [ 100.649260][ T6027] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.658830][ T6027] bond0: (slave team0): Enslaving as an active interface with an up link [ 100.696061][ T6029] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 100.710777][ T6029] bond0: (slave team0): Releasing backup interface [ 100.725043][ T6029] bridge0: port 3(team0) entered blocking state [ 100.734820][ T6029] bridge0: port 3(team0) entered disabled state [ 100.742666][ T6029] team0: entered allmulticast mode [ 100.747998][ T6029] team_slave_0: entered allmulticast mode [ 100.754387][ T6029] team_slave_1: entered allmulticast mode [ 100.769807][ T6029] team0: entered promiscuous mode [ 100.774930][ T6029] team_slave_0: entered promiscuous mode [ 100.780967][ T6029] team_slave_1: entered promiscuous mode [ 101.065187][ T35] hsr_slave_0: left promiscuous mode [ 101.071332][ T35] hsr_slave_1: left promiscuous mode [ 101.082217][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.097667][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.113272][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.132988][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.184892][ T35] veth1_macvtap: left promiscuous mode [ 101.191561][ T35] veth0_macvtap: left promiscuous mode [ 101.197644][ T35] veth1_vlan: left promiscuous mode [ 101.208620][ T35] veth0_vlan: left promiscuous mode [ 101.767708][ T35] team0 (unregistering): Port device team_slave_1 removed [ 101.807344][ T35] team0 (unregistering): Port device team_slave_0 removed [ 102.202941][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.218439][ T6042] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.230141][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.246782][ T6051] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.325451][ T5979] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.347862][ T5979] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.365359][ T5979] bridge_slave_0: entered allmulticast mode [ 102.381390][ T5979] bridge_slave_0: entered promiscuous mode [ 102.410304][ T5979] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.444538][ T5979] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.464482][ T5979] bridge_slave_1: entered allmulticast mode [ 102.476968][ T5979] bridge_slave_1: entered promiscuous mode [ 102.488565][ T5121] Bluetooth: hci2: command tx timeout [ 102.603293][ T6075] Driver unsupported XDP return value 0 on prog (id 68) dev N/A, expect packet loss! [ 102.737971][ T5979] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 102.759513][ T6081] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.785811][ T5979] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 102.808826][ C1] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.927558][ T5979] team0: Port device team_slave_0 added [ 102.957885][ T5979] team0: Port device team_slave_1 added [ 103.025804][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 103.041523][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.092907][ T5979] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 103.120766][ T5979] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 103.127926][ T5979] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 103.163783][ T5979] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 103.343301][ T5979] hsr_slave_0: entered promiscuous mode [ 103.355292][ T5979] hsr_slave_1: entered promiscuous mode [ 103.850532][ T6106] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.403383][ T5979] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.423157][ T5979] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.465577][ T5979] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.486720][ T5979] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 104.578508][ T5121] Bluetooth: hci2: command tx timeout [ 104.975549][ T5979] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.080248][ T5979] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.122904][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.130396][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.170600][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.177923][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.246950][ T5979] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 105.670259][ T5979] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.793265][ T5979] veth0_vlan: entered promiscuous mode [ 105.811377][ T5979] veth1_vlan: entered promiscuous mode [ 105.885221][ T5979] veth0_macvtap: entered promiscuous mode [ 105.920908][ T5979] veth1_macvtap: entered promiscuous mode [ 105.967783][ T5979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.993336][ T5979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.008242][ T5979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.039566][ T5979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.059979][ T5979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.076810][ T5979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.087092][ T5979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.099858][ T5979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.144364][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.186645][ T5979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.213868][ T5979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.225029][ T5979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.261845][ T5979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.276093][ T5979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.292461][ T5979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.303815][ T5979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.326765][ T5979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.353763][ T5979] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.389298][ T6156] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.392860][ T6158] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.419842][ T5979] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.445116][ T5979] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.464957][ T5979] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.487184][ T5979] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.650742][ T5121] Bluetooth: hci2: command tx timeout [ 106.704462][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.715864][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.742329][ T6161] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 106.854372][ T2801] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.876367][ T2801] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.966241][ T6161] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.117289][ T6169] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 108.695968][ T6203] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 108.794846][ T6209] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.881957][ T6209] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 109.274813][ T6223] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 109.690284][ T6230] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.247013][ T6244] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 110.290593][ T6244] team0: Device ipvlan1 failed to register rx_handler [ 110.515009][ T6256] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.550039][ T6253] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 110.684347][ T6265] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.271992][ T6280] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 111.644701][ T6284] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 112.044970][ T6293] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.215311][ T6298] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.356112][ T6301] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 112.657249][ T6314] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 113.109001][ T6340] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 113.265998][ T6346] pim6reg: entered allmulticast mode [ 113.483283][ T6356] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 113.500430][ T6355] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 114.313468][ T6387] __nla_validate_parse: 1 callbacks suppressed [ 114.313489][ T6387] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.493217][ T6393] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.519994][ T6393] netlink: 51 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.579245][ T6393] netlink: 51 bytes leftover after parsing attributes in process `syz-executor.0'. [ 114.598835][ T6397] tipc: Enabling of bearer rejected, already enabled [ 114.689724][ T6402] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 114.734382][ T6404] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 115.884661][ T6467] syz_tun: entered promiscuous mode [ 115.938779][ T6467] syz_tun: left promiscuous mode [ 116.322920][ T6483] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.332294][ T6483] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.341394][ T6483] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.350153][ T6483] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 116.424665][ T6485] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.485548][ T6493] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 117.002039][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.039434][ T6520] vlan2: entered promiscuous mode [ 117.057781][ T6520] team0: entered promiscuous mode [ 117.085165][ T6520] team_slave_0: entered promiscuous mode [ 117.093664][ T6520] team_slave_1: entered promiscuous mode [ 117.115021][ T6520] team0: left promiscuous mode [ 117.120602][ T6520] team_slave_0: left promiscuous mode [ 117.126595][ T6520] team_slave_1: left promiscuous mode [ 117.148678][ T6530] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.170160][ T6533] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 117.191414][ T6530] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.210165][ T6533] lo speed is unknown, defaulting to 1000 [ 117.216947][ T6530] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.233576][ T6533] lo speed is unknown, defaulting to 1000 [ 117.243100][ T6533] lo speed is unknown, defaulting to 1000 [ 117.437601][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 117.481655][ T6547] syz_tun: entered promiscuous mode [ 117.522475][ T6547] syz_tun: left promiscuous mode [ 117.893827][ T6533] infiniband syz1: set active [ 117.902412][ T9] lo speed is unknown, defaulting to 1000 [ 117.915226][ T6533] infiniband syz1: added lo [ 117.925033][ T6574] tipc: Enabling of bearer rejected, media not registered [ 118.027453][ T6578] lo speed is unknown, defaulting to 1000 [ 118.131565][ T6533] RDS/IB: syz1: added [ 118.136492][ T6533] smc: adding ib device syz1 with port count 1 [ 118.185542][ T6533] smc: ib device syz1 port 1 has pnetid [ 118.228200][ T2529] lo speed is unknown, defaulting to 1000 [ 118.626600][ T6605] veth0_‡lan: renamed from macvlan1 (while UP) [ 118.782996][ T6533] lo speed is unknown, defaulting to 1000 [ 119.306567][ T6625] bridge0: port 3(team0) entered blocking state [ 119.327092][ T6625] bridge0: port 3(team0) entered disabled state [ 119.335459][ T6625] team0: entered allmulticast mode [ 119.341162][ T6625] team_slave_0: entered allmulticast mode [ 119.347572][ T6625] team_slave_1: entered allmulticast mode [ 119.369315][ T6625] team0: entered promiscuous mode [ 119.381137][ T6625] team_slave_0: entered promiscuous mode [ 119.397500][ T6625] team_slave_1: entered promiscuous mode [ 119.411874][ T6625] bridge0: port 3(team0) entered blocking state [ 119.418548][ T6625] bridge0: port 3(team0) entered forwarding state [ 119.428702][ T6628] tipc: Enabling of bearer rejected, media not registered [ 119.456695][ T6533] lo speed is unknown, defaulting to 1000 [ 119.886851][ T6533] lo speed is unknown, defaulting to 1000 [ 120.255229][ T6533] lo speed is unknown, defaulting to 1000 [ 120.575977][ T6533] lo speed is unknown, defaulting to 1000 [ 121.010328][ T6679] tipc: Enabling of bearer rejected, media not registered [ 122.098806][ T6695] batadv0: entered promiscuous mode [ 122.285384][ T6706] __nla_validate_parse: 34 callbacks suppressed [ 122.285402][ T6706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 122.784099][ T6740] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.1'. [ 122.854442][ T6741] Bluetooth: MGMT ver 1.22 [ 123.240320][ T6763] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 123.604942][ T6792] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.655292][ T6448] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.863005][ T6448] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.010568][ T6862] sctp: [Deprecated]: syz-executor.2 (pid 6862) Use of int in max_burst socket option deprecated. [ 125.010568][ T6862] Use struct sctp_assoc_value instead [ 125.106464][ T6448] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.170501][ T6868] tipc: Enabled bearer , priority 0 [ 125.299148][ T6448] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.507488][ T6448] team0: left allmulticast mode [ 125.523266][ T6448] team_slave_0: left allmulticast mode [ 125.536845][ T6448] team_slave_1: left allmulticast mode [ 125.551456][ T6448] team0: left promiscuous mode [ 125.562189][ T6448] team_slave_0: left promiscuous mode [ 125.586481][ T6448] team_slave_1: left promiscuous mode [ 125.602882][ T6448] bridge0: port 3(team0) entered disabled state [ 125.636011][ T6448] bridge_slave_1: left allmulticast mode [ 125.662581][ T6448] bridge_slave_1: left promiscuous mode [ 125.687422][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.717433][ T5116] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 125.727077][ T5116] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 125.735974][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 125.745658][ T6448] bridge_slave_0: left allmulticast mode [ 125.755727][ T5116] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 125.762831][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 125.774381][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 125.777341][ T6448] bridge_slave_0: left promiscuous mode [ 125.787659][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 125.798128][ T5119] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 125.807656][ T5116] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 125.807822][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 125.822292][ T5119] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 125.826369][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.829992][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 126.274292][ T6448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.285503][ T6448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.297037][ T6448] bond0 (unregistering): Released all slaves [ 126.389800][ T6881] lo speed is unknown, defaulting to 1000 [ 126.761083][ T6882] lo speed is unknown, defaulting to 1000 [ 126.786387][ T6920] macsec0: entered promiscuous mode [ 126.802316][ T6920] macsec0: entered allmulticast mode [ 126.822132][ T6920] veth1_macvtap: entered allmulticast mode [ 127.432540][ T6448] hsr_slave_0: left promiscuous mode [ 127.450006][ T6448] hsr_slave_1: left promiscuous mode [ 127.468633][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.478504][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.488071][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.496167][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.539126][ T6448] veth1_macvtap: left promiscuous mode [ 127.544834][ T6448] veth0_macvtap: left promiscuous mode [ 127.557154][ T6448] veth1_vlan: left promiscuous mode [ 127.565308][ T6448] veth0_vlan: left promiscuous mode [ 127.930480][ T5121] Bluetooth: hci2: command tx timeout [ 127.930516][ T5119] Bluetooth: hci4: command tx timeout [ 128.155462][ T6448] team0 (unregistering): Port device team_slave_1 removed [ 128.199729][ T6448] team0 (unregistering): Port device team_slave_0 removed [ 128.552415][ T6980] hsr0: entered promiscuous mode [ 128.564021][ T6983] lo speed is unknown, defaulting to 1000 [ 128.726293][ T6992] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 128.763071][ T6881] chnl_net:caif_netlink_parms(): no params data found [ 128.887140][ T6882] chnl_net:caif_netlink_parms(): no params data found [ 129.141373][ T7000] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 129.162394][ T7000] veth0_macvtap: left promiscuous mode [ 129.227889][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.250949][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.258834][ T6881] bridge_slave_0: entered allmulticast mode [ 129.278387][ T6881] bridge_slave_0: entered promiscuous mode [ 129.310220][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.317369][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.344729][ T6881] bridge_slave_1: entered allmulticast mode [ 129.368627][ T6881] bridge_slave_1: entered promiscuous mode [ 129.442305][ T7020] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.449910][ T7020] IPv6: NLM_F_CREATE should be set when creating new route [ 129.457147][ T7020] IPv6: NLM_F_CREATE should be set when creating new route [ 129.472635][ T6882] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.488603][ T6882] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.496181][ T6882] bridge_slave_0: entered allmulticast mode [ 129.505671][ T6882] bridge_slave_0: entered promiscuous mode [ 129.518220][ T6882] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.527385][ T6882] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.554539][ T6882] bridge_slave_1: entered allmulticast mode [ 129.566354][ T6882] bridge_slave_1: entered promiscuous mode [ 129.610655][ T6881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.652754][ T6881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.798028][ T6882] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.844294][ T6881] team0: Port device team_slave_0 added [ 129.857517][ T6882] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 129.926668][ T6881] team0: Port device team_slave_1 added [ 130.013951][ T5121] Bluetooth: hci4: command tx timeout [ 130.014567][ T5119] Bluetooth: hci2: command tx timeout [ 130.055387][ T6448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.071689][ T6448] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.106172][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.205427][ T6448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.216052][ T6448] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.231664][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.239313][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.267277][ T6881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.306725][ T6882] team0: Port device team_slave_0 added [ 130.319986][ T6882] team0: Port device team_slave_1 added [ 130.327908][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.349714][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.380577][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.416598][ T6448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.428161][ T6448] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.484346][ T7049] netlink: 204152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.499024][ T6882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 130.506719][ T6882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.547182][ T6882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 130.575859][ T6882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 130.586333][ T6882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 130.623738][ T6882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 130.653540][ T6448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 130.666376][ T6448] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.708979][ T7055] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 130.945205][ T6881] hsr_slave_0: entered promiscuous mode [ 130.952082][ T6881] hsr_slave_1: entered promiscuous mode [ 130.974257][ T6882] hsr_slave_0: entered promiscuous mode [ 130.984389][ T6882] hsr_slave_1: entered promiscuous mode [ 130.991556][ T6882] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 130.999325][ T6882] Cannot create hsr debugfs directory [ 131.189255][ T7058] netlink: 6204 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.199321][ T7058] netlink: 513 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.215086][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.224999][ T7058] netlink: 6204 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.278238][ T6448] bridge_slave_1: left allmulticast mode [ 131.284261][ T6448] bridge_slave_1: left promiscuous mode [ 131.299078][ T6448] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.316955][ T6448] bridge_slave_0: left allmulticast mode [ 131.339341][ T6448] bridge_slave_0: left promiscuous mode [ 131.345163][ T6448] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.369475][ T7063] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 131.866391][ T6448] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.877932][ T6448] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.893948][ T6448] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 131.904980][ T6448] bond0 (unregistering): Released all slaves [ 131.932968][ T7063] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.089251][ T5119] Bluetooth: hci4: command tx timeout [ 132.089258][ T5121] Bluetooth: hci2: command tx timeout [ 132.634382][ T6881] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 132.659726][ T6881] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 132.666777][ T7098] x_tables: eb_tables: AUDIT.0 target: invalid size 8 (kernel) != (user) 1 [ 132.736465][ T6881] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 132.859813][ T6881] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 132.893792][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.901616][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.984987][ T6448] hsr_slave_0: left promiscuous mode [ 132.996448][ T6448] hsr_slave_1: left promiscuous mode [ 133.004789][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.028247][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.036673][ T6448] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.054755][ T6448] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.102147][ T6448] veth1_macvtap: left promiscuous mode [ 133.108676][ T6448] veth0_macvtap: left promiscuous mode [ 133.117983][ T6448] veth1_vlan: left promiscuous mode [ 133.138856][ T6448] veth0_vlan: left promiscuous mode [ 133.287812][ T6448] pim6reg (unregistering): left allmulticast mode [ 133.598132][ T6448] team0 (unregistering): Port device team_slave_1 removed [ 133.636882][ T6448] team0 (unregistering): Port device team_slave_0 removed [ 134.172146][ T5121] Bluetooth: hci4: command tx timeout [ 134.172193][ T5119] Bluetooth: hci2: command tx timeout [ 134.264531][ T6881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 134.313623][ T6881] 8021q: adding VLAN 0 to HW filter on device team0 [ 134.441621][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.448839][ T5243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 134.507766][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.514929][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 134.602144][ T6882] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 134.640200][ T6882] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 134.718798][ T6882] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 134.778552][ T6882] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 135.136348][ T6882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 135.194848][ T6882] 8021q: adding VLAN 0 to HW filter on device team0 [ 135.224218][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 135.231419][ T5243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 135.255929][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 135.263055][ T5243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 135.296193][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 135.465428][ T6881] veth0_vlan: entered promiscuous mode [ 135.504191][ T6881] veth1_vlan: entered promiscuous mode [ 135.595851][ T6881] veth0_macvtap: entered promiscuous mode [ 135.627418][ T6881] veth1_macvtap: entered promiscuous mode [ 135.681472][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.705347][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.728322][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.748315][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.758128][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 135.778637][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.795722][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 135.821602][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.834483][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.844934][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.857407][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.867679][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 135.884893][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 135.897380][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 135.969781][ T6882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 136.012088][ T6881] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.053061][ T6881] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.065384][ T7201] x_tables: duplicate underflow at hook 1 [ 136.078696][ T6881] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.087418][ T6881] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.310427][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.331126][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.381125][ T6882] veth0_vlan: entered promiscuous mode [ 136.417481][ T7216] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 136.460883][ T6882] veth1_vlan: entered promiscuous mode [ 136.468671][ T6448] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 136.489296][ T6448] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.576319][ T6882] veth0_macvtap: entered promiscuous mode [ 136.604859][ T6882] veth1_macvtap: entered promiscuous mode [ 136.655664][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.672554][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.683069][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.711602][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.722749][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.738255][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.750175][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 136.784136][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.807128][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 136.838113][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.854657][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.865897][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.894420][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.904755][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.921329][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.936845][ T6882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 136.948531][ T6882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 136.962738][ T6882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 136.996998][ T6882] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.013776][ T6882] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.024245][ T6882] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.037875][ T6882] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 137.056969][ T7236] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 137.073333][ T7236] mac80211_hwsim hwsim6 veth0_: renamed from wlan1 (while UP) [ 137.216338][ T6445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.224406][ T6445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.255405][ T6440] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 137.264322][ T6440] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 137.364829][ T7247] lo speed is unknown, defaulting to 1000 [ 137.469123][ T7254] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.723692][ T7267] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 137.771820][ T7265] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 137.798391][ T7265] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 137.826204][ T7265] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.152501][ T7275] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.565018][ T7289] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.3'. [ 139.068696][ T7308] Cannot find add_set index 1 as target [ 139.118556][ T7306] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 139.398533][ T7318] SET target dimension over the limit! [ 139.475672][ T7318] xt_SECMARK: invalid mode: 0 [ 140.047971][ T7345] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 140.080438][ T7345] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.087727][ T7345] IPv6: NLM_F_CREATE should be set when creating new route [ 140.095034][ T7345] IPv6: NLM_F_CREATE should be set when creating new route [ 140.399688][ T7369] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 140.460240][ T7369] bond1: entered promiscuous mode [ 140.465730][ T7369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.535843][ T7373] bond1: (slave bridge1): making interface the new active one [ 140.573506][ T7373] bridge1: entered promiscuous mode [ 140.624630][ T7373] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 140.660094][ T7375] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.676591][ T7375] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 140.769286][ T7388] Cannot find add_set index 0 as target [ 140.795954][ T7389] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 140.816747][ T7389] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.657826][ T7432] __nla_validate_parse: 1 callbacks suppressed [ 141.657844][ T7432] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.708494][ T7432] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 141.915847][ T7452] vcan0: Master is either lo or non-ether device [ 142.177682][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.551183][ T7485] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.574859][ T7485] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.594105][ T7533] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.606117][ T7533] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 144.492653][ T7579] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.555436][ T29] audit: type=1804 audit(1717117447.785:4): pid=7575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3767616474/syzkaller.4vinqy/187/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 144.565520][ T7575] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.696151][ T7575] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.866744][ T7591] tap0: tun_chr_ioctl cmd 2151715885 [ 146.975442][ T7625] __nla_validate_parse: 1 callbacks suppressed [ 146.975460][ T7625] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.333834][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 147.352032][ T7656] team0: Caught tx_queue_len zero misconfig [ 147.664148][ T7671] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.071960][ T7675] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.108489][ T7675] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.131873][ T7675] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.500985][ T7689] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 148.709743][ T7705] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.228305][ T7731] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 149.744413][ T7743] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 150.153153][ T7765] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 150.180851][ T7765] veth1_macvtap: left promiscuous mode [ 150.191755][ T7765] macsec0: entered promiscuous mode [ 150.242685][ T7765] veth1_macvtap: entered promiscuous mode [ 150.254547][ T7765] macsec0: left promiscuous mode [ 150.264146][ T7765] macsec0: entered allmulticast mode [ 150.282303][ T7765] veth1_macvtap: entered allmulticast mode [ 150.503853][ T7784] vxcan1: tx address claim with dlc 1 [ 150.572399][ T7784] lo speed is unknown, defaulting to 1000 [ 151.260583][ T7797] bridge0: port 4(geneve1) entered blocking state [ 151.292183][ T7797] bridge0: port 4(geneve1) entered disabled state [ 151.324931][ T7797] geneve1: entered allmulticast mode [ 151.335649][ T7797] geneve1: entered promiscuous mode [ 151.346327][ T7797] bridge0: port 4(geneve1) entered blocking state [ 151.353012][ T7797] bridge0: port 4(geneve1) entered forwarding state [ 151.619486][ T7817] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 153.600292][ T7854] vxcan1: tx address claim with dlc 1 [ 153.662457][ T7854] lo speed is unknown, defaulting to 1000 [ 153.954430][ T7867] __nla_validate_parse: 7 callbacks suppressed [ 153.954450][ T7867] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.004523][ T7867] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.037154][ T7867] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.072944][ T7867] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 154.112401][ T7867] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.781374][ T7908] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.802989][ T7908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.856485][ T7908] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.2'. [ 156.940374][ T7908] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 156.980671][ T7908] netlink: 31 bytes leftover after parsing attributes in process `syz-executor.2'. [ 157.084716][ T7916] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 157.118542][ T7916] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 157.128481][ T7916] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.1'. [ 157.255043][ T7914] bridge_slave_1: left allmulticast mode [ 157.274649][ T7914] bridge_slave_1: left promiscuous mode [ 157.299877][ T7914] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.336954][ T7914] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 157.792873][ T7925] vxcan1: tx address claim with dlc 1 [ 157.950186][ T7925] lo speed is unknown, defaulting to 1000 [ 159.540946][ T7958] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 159.580797][ T7958] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 159.660555][ T7958] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 159.753232][ T7955] bridge_slave_1: left allmulticast mode [ 159.765425][ T7955] bridge_slave_1: left promiscuous mode [ 159.783938][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.836979][ T7955] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 160.215317][ T7975] ipip0: entered promiscuous mode [ 161.379404][ T8011] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 163.054188][ T8051] vxcan1: tx address claim with dlc 1 [ 163.186059][ T8051] lo speed is unknown, defaulting to 1000 [ 164.547525][ T8076] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.2'. [ 164.586044][ T8076] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.2'. [ 165.019611][ T8090] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 165.651589][ T8116] syz-executor.4[8116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.651770][ T8116] syz-executor.4[8116] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 165.692018][ T8116] xt_nat: multiple ranges no longer supported [ 165.714730][ T8119] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.727170][ T8116] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.737614][ T8119] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.875804][ T8126] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.015333][ T8137] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 166.055874][ T8137] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 166.088885][ T8137] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.2'. [ 166.305649][ T8142] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 166.506846][ T29] audit: type=1800 audit(1717117469.745:5): pid=8170 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 166.597401][ T8159] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 166.662210][ T8159] team0: Device veth1_macvtap failed to register rx_handler [ 166.767864][ T8179] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.141987][ T8208] lo speed is unknown, defaulting to 1000 [ 167.166583][ T8213] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.386746][ T8223] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.450745][ T8228] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 167.748177][ T8230] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 167.830309][ T8230] team0: Device veth1_macvtap failed to register rx_handler [ 167.936090][ T8246] team0: Device vlan2 is already an upper device of the team interface [ 168.229687][ T8262] ieee802154 phy0 wpan0: encryption failed: -90 [ 168.291171][ T8264] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 169.172088][ T8290] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 169.304024][ T8290] team0: Device veth1_macvtap failed to register rx_handler [ 169.377735][ T8300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.603555][ T8311] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.896361][ T8329] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 169.964247][ T8329] team0: Port device dummy0 added [ 170.449763][ T8344] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 170.475241][ T8344] team0: Device veth1_macvtap failed to register rx_handler [ 170.530134][ T8362] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 170.694067][ T8367] sch_tbf: burst 0 is lower than device ip6tnl0 mtu (1620) ! [ 170.725825][ T8370] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 170.780532][ T8371] __nla_validate_parse: 4 callbacks suppressed [ 170.780551][ T8371] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 170.819753][ T8367] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 170.883448][ T8370] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 170.895628][ T8370] bond2: (slave batadv1): Enslaving as a backup interface with an up link [ 170.916831][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 170.996348][ T8374] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 171.069028][ T8374] bond2 (unregistering): Released all slaves [ 171.521931][ T8407] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 171.652171][ T8411] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 171.695441][ T8413] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.790616][ T8415] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.667756][ T8447] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.738220][ T8454] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.740528][ T8456] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.887681][ T8460] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.384187][ T8492] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 173.859705][ T8511] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 173.956308][ T8511] bond2: entered promiscuous mode [ 173.974072][ T8511] 8021q: adding VLAN 0 to HW filter on device bond2 [ 174.092073][ T8515] bond2: (slave bridge2): making interface the new active one [ 174.130277][ T8515] bridge2: entered promiscuous mode [ 174.147832][ T8515] bond2: (slave bridge2): Enslaving as an active interface with an up link [ 174.818171][ T8552] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.858188][ T8555] x_tables: duplicate underflow at hook 1 [ 174.866554][ T8552] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.874168][ T8552] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.903700][ T8552] bridge0: entered promiscuous mode [ 174.917795][ T8552] bridge0: entered allmulticast mode [ 174.926520][ T8561] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE. [ 175.786921][ T8587] team0: Port device macvlan2 added [ 175.854105][ T8587] __nla_validate_parse: 13 callbacks suppressed [ 175.854122][ T8587] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.086407][ T8605] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.874256][ T8622] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 176.913629][ T29] audit: type=1804 audit(1717117480.155:6): pid=8621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1540038894/syzkaller.TuJJIv/106/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 176.927725][ T8620] af_packet: tpacket_rcv: packet too big, clamped from 56584 to 3976. macoff=72 [ 176.971417][ T8625] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.385804][ T8639] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.500069][ T8646] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 177.545318][ T8646] bridge1: port 1(erspan0) entered blocking state [ 177.568435][ T8646] bridge1: port 1(erspan0) entered disabled state [ 177.577677][ T8649] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 177.585545][ T8646] erspan0: entered allmulticast mode [ 177.599147][ T8646] erspan0: entered promiscuous mode [ 177.744702][ T8652] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.767805][ T8654] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 177.956478][ T8656] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 178.273926][ T8662] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.530807][ T8668] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.855443][ T8681] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.913999][ T8685] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 178.967411][ T8685] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 180.387444][ T8753] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 180.406371][ T8753] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 180.453492][ T8753] bridge_slave_1: left allmulticast mode [ 180.469969][ T8753] bridge_slave_1: left promiscuous mode [ 180.491075][ T8753] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.523232][ T8753] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 180.995238][ T8786] __nla_validate_parse: 7 callbacks suppressed [ 180.995256][ T8786] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 181.442986][ T8794] xt_CT: You must specify a L4 protocol and not use inversions on it [ 181.521625][ T8797] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.676981][ T8797] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.762740][ T8804] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 181.857680][ T8805] netlink: 720 bytes leftover after parsing attributes in process `syz-executor.1'. [ 181.878668][ T8804] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 182.028170][ T8812] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 182.081108][ T8812] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 182.144862][ T8812] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.271003][ T8825] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.279038][ T8823] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.323225][ T8829] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 182.396847][ T8829] bond1: entered promiscuous mode [ 182.404680][ T8829] 8021q: adding VLAN 0 to HW filter on device bond1 [ 182.454780][ T8832] bond1: (slave bridge1): making interface the new active one [ 182.472719][ T8832] bridge1: entered promiscuous mode [ 182.480014][ T8832] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 182.543610][ T8835] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.053481][ T8864] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 183.061707][ T8862] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.115476][ T8864] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 183.142598][ T8864] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.239988][ T8858] bridge_slave_1: left allmulticast mode [ 183.253552][ T8858] bridge_slave_1: left promiscuous mode [ 183.274311][ T8858] bridge0: port 2(bridge_slave_1) entered disabled state [ 183.293794][ T8858] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 183.467746][ T8880] macvlan2: entered promiscuous mode [ 183.479161][ T8880] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 183.494166][ T8880] macvlan2: entered allmulticast mode [ 183.506820][ T8880] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 183.514805][ T8880] team0: Port device macvlan2 added [ 184.050467][ T8913] validate_nla: 1 callbacks suppressed [ 184.050504][ T8913] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 184.095232][ T8913] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 184.261513][ T8921] tipc: Can't bind to reserved service type 0 [ 184.969355][ T8951] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 185.019165][ T8951] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 185.740624][ T8994] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 185.757006][ T8994] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 185.846939][ T8981] infiniband syz1: set active [ 185.904471][ T8981] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 185.928502][ T25] lo speed is unknown, defaulting to 1000 [ 186.064831][ T9009] __nla_validate_parse: 11 callbacks suppressed [ 186.064850][ T9009] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.102547][ T9009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 186.204060][ T9014] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 186.307778][ T9016] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.510455][ T9027] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 186.520943][ T9027] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 186.553178][ T9027] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.1'. [ 186.858907][ T9008] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 186.878867][ T9031] sctp: [Deprecated]: syz-executor.1 (pid 9031) Use of int in max_burst socket option. [ 186.878867][ T9031] Use struct sctp_assoc_value instead [ 187.509530][ T9051] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 187.527844][ T9052] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 187.781952][ T9071] x_tables: duplicate underflow at hook 2 [ 187.866118][ T9074] sctp: [Deprecated]: syz-executor.2 (pid 9074) Use of int in max_burst socket option. [ 187.866118][ T9074] Use struct sctp_assoc_value instead [ 187.883729][ T9075] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 187.913957][ T9075] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 188.430407][ T9061] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 188.550344][ T9085] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.924919][ T9098] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.475115][ T9121] sctp: [Deprecated]: syz-executor.0 (pid 9121) Use of int in max_burst socket option. [ 189.475115][ T9121] Use struct sctp_assoc_value instead [ 189.874997][ T9133] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.062846][ T9116] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 190.845161][ T9170] sctp: [Deprecated]: syz-executor.4 (pid 9170) Use of int in max_burst socket option. [ 190.845161][ T9170] Use struct sctp_assoc_value instead [ 191.288612][ T5116] Bluetooth: hci3: command 0x0406 tx timeout [ 191.294803][ T5124] Bluetooth: hci1: command 0x0406 tx timeout [ 191.366000][ T9192] netlink: 'syz-executor.0': attribute type 64 has an invalid length. [ 191.388797][ T9192] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.893047][ T2801] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.952368][ T5121] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 191.962640][ T5121] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 191.970856][ T5121] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 191.979682][ T5121] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 191.987852][ T5121] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 191.997126][ T5121] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 192.040268][ T2801] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.092708][ T9212] lo speed is unknown, defaulting to 1000 [ 192.143914][ T2801] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.267420][ T2801] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.320766][ T9197] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 192.440800][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.462923][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.475681][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.486920][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.503228][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.515918][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.535443][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 192.562788][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.611446][ T2801] bridge_slave_0: left allmulticast mode [ 192.634363][ T2801] bridge_slave_0: left promiscuous mode [ 192.643615][ T2801] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.760020][ T9243] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.483493][ T2801] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.510923][ T2801] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.531089][ T2801] bond0 (unregistering): Released all slaves [ 194.091463][ T5121] Bluetooth: hci2: command tx timeout [ 194.185098][ T9305] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.237461][ T9305] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.288177][ T9313] syz-executor.0[9313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.325061][ T9212] chnl_net:caif_netlink_parms(): no params data found [ 194.344903][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.358078][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.373703][ T9313] syz-executor.0[9313] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 194.536668][ T9312] lo speed is unknown, defaulting to 1000 [ 194.674930][ T2801] hsr_slave_0: left promiscuous mode [ 194.696554][ T2801] hsr_slave_1: left promiscuous mode [ 194.734907][ T2801] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.748356][ T2801] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.759768][ T9329] netlink: 4824 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.805585][ T2801] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.820223][ T2801] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.905800][ T2801] veth0_macvtap: left promiscuous mode [ 194.908922][ T9332] syz-executor.3 (9332) used greatest stack depth: 18064 bytes left [ 194.919519][ T2801] veth1_vlan: left promiscuous mode [ 194.919712][ T2801] veth0_vlan: left promiscuous mode [ 195.704314][ T2801] team0 (unregistering): Port device team_slave_1 removed [ 195.743928][ T2801] team0 (unregistering): Port device team_slave_0 removed [ 196.152519][ T9342] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 196.179415][ T5121] Bluetooth: hci2: command tx timeout [ 196.306236][ T9212] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.325774][ T9212] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.339619][ T9212] bridge_slave_0: entered allmulticast mode [ 196.352837][ T9212] bridge_slave_0: entered promiscuous mode [ 196.406143][ T9212] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.427216][ T9212] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.435074][ T9212] bridge_slave_1: entered allmulticast mode [ 196.444512][ T9212] bridge_slave_1: entered promiscuous mode [ 196.583604][ T9212] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 196.636285][ T9212] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 196.766863][ T9212] team0: Port device team_slave_0 added [ 196.796043][ T9212] team0: Port device team_slave_1 added [ 196.903769][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.925795][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.957231][ T9379] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 196.962029][ T9212] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.979036][ T9212] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.986091][ T9212] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.013009][ T9212] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.030098][ T9379] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 197.071064][ T9381] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 197.121850][ T9212] hsr_slave_0: entered promiscuous mode [ 197.137418][ T9212] hsr_slave_1: entered promiscuous mode [ 197.147545][ T9212] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 197.162090][ T9212] Cannot create hsr debugfs directory [ 197.503825][ T9405] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.807020][ T9417] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 197.817362][ T9421] vxcan1: tx drop: invalid sa for name 0x0000000000000003 [ 197.855140][ T9417] geneve0: entered promiscuous mode [ 197.920462][ T9417] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 197.985301][ T9433] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 198.074857][ T9212] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 198.096131][ T9212] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 198.124884][ T9212] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 198.150045][ T9212] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 198.248725][ T5121] Bluetooth: hci2: command tx timeout [ 198.293041][ T9444] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.316428][ T9445] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.371099][ T9212] 8021q: adding VLAN 0 to HW filter on device bond0 [ 198.417307][ T9212] 8021q: adding VLAN 0 to HW filter on device team0 [ 198.445679][ T2529] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.452891][ T2529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.475823][ T2529] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.483025][ T2529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.504782][ T9449] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 198.517866][ T9449] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.556551][ T9449] erspan0: refused to change device tx_queue_len [ 198.571956][ T9449] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 198.984347][ T9470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.103550][ T9476] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.122002][ T9212] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 199.342138][ T9482] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 199.357168][ T9212] veth0_vlan: entered promiscuous mode [ 199.394137][ T9484] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.405209][ T9212] veth1_vlan: entered promiscuous mode [ 199.409363][ T9487] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.4'. [ 199.437706][ T9487] x_tables: ip_tables: osf match: only valid for protocol 6 [ 199.501684][ T9212] veth0_macvtap: entered promiscuous mode [ 199.574399][ T9212] veth1_macvtap: entered promiscuous mode [ 199.665845][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.691008][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.705976][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.723976][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.753007][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.764344][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.775541][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 199.786164][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.801415][ T9212] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 199.814171][ T9498] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 199.907832][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.937049][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 199.956703][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 199.985464][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.028657][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.048419][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.058884][ T9212] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 200.069441][ T9212] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 200.084997][ T9212] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 200.134044][ T9212] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.162092][ T9212] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.190927][ T9212] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.219539][ T9212] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 200.328864][ T5121] Bluetooth: hci2: command tx timeout [ 200.577551][ T1059] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.596281][ T1059] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 200.671222][ T6328] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 200.702221][ T6328] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.153804][ T9555] vlan2: entered promiscuous mode [ 201.175912][ T9555] bridge0: entered promiscuous mode [ 201.188186][ T9555] vlan2: entered allmulticast mode [ 201.194349][ T9555] bridge0: entered allmulticast mode [ 201.213419][ T9555] bridge0: left allmulticast mode [ 201.230972][ T9555] bridge0: left promiscuous mode [ 201.320590][ T9557] bond0: (slave vlan3): Error -34 calling dev_set_mtu [ 201.366197][ T9561] bridge0: port 2(team0) entered blocking state [ 201.389643][ T9561] bridge0: port 2(team0) entered disabled state [ 201.406471][ T9561] team0: entered allmulticast mode [ 201.428889][ T9561] team_slave_0: entered allmulticast mode [ 201.434642][ T9561] team_slave_1: entered allmulticast mode [ 201.456673][ T9561] team0: entered promiscuous mode [ 201.497057][ T9561] team_slave_0: entered promiscuous mode [ 201.519546][ T9561] team_slave_1: entered promiscuous mode [ 201.528221][ T9561] bridge0: port 2(team0) entered blocking state [ 201.534618][ T9561] bridge0: port 2(team0) entered forwarding state [ 202.517892][ T9624] __nla_validate_parse: 11 callbacks suppressed [ 202.517911][ T9624] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 202.595105][ T9630] batadv0: entered promiscuous mode [ 202.613623][ T9630] batadv0: left promiscuous mode [ 202.983685][ T9650] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.999867][ T9650] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.012376][ T9649] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.381503][ T9673] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 203.538593][ T9684] batadv0: entered promiscuous mode [ 203.568410][ T9684] batadv0: left promiscuous mode [ 203.610182][ T9683] can: request_module (can-proto-0) failed. [ 203.627101][ T9683] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.651284][ T9683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.666214][ T9692] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 203.684723][ T9683] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.716307][ T9697] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.956016][ T9711] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 204.679466][ T9736] caif0: Master is either lo or non-ether device [ 204.775760][ T9738] batadv0: entered promiscuous mode [ 204.798655][ T9738] batadv0: left promiscuous mode [ 204.970055][ T9740] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 205.075799][ T9742] can: request_module (can-proto-0) failed. [ 205.497448][ T9774] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 205.803251][ T9778] caif0: Master is either lo or non-ether device [ 205.936379][ T9787] batadv0: entered promiscuous mode [ 205.976028][ T9787] batadv0: left promiscuous mode [ 206.035978][ T9794] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 206.065938][ T9794] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 206.842563][ T9819] caif0: Master is either lo or non-ether device [ 207.025618][ T9842] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 207.050558][ T9842] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 207.101381][ T9837] bridge_slave_1: left allmulticast mode [ 207.107312][ T9837] bridge_slave_1: left promiscuous mode [ 207.113750][ T9837] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.131929][ T9837] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 207.684696][ T9869] __nla_validate_parse: 15 callbacks suppressed [ 207.684714][ T9869] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.974137][ T9874] caif0: Master is either lo or non-ether device [ 208.209236][ T9892] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 208.233226][ T9892] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 208.245698][ T9892] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.340315][ T9896] SET target dimension over the limit! [ 208.628141][ T9914] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 208.646323][ T9913] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 208.680233][ T9916] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.026906][ T9936] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 209.072701][ T9936] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 209.086520][ T9936] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.187774][ T9940] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.287706][ T9944] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 209.444586][ T9954] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.487583][ T9959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.503465][ T9959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.513650][ T9959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.526112][ T9961] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 209.532338][ T9959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.544556][ T9959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.556936][ T9959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.567077][ T9959] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.577842][ T9959] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.802010][ T9977] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 209.824000][ T9977] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.955906][ T9980] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.976989][ T9980] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 210.226329][ T9992] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.830710][T10023] EXT4-fs warning (device sda1): ext4_block_to_path:107: block 2147483647 > max in inode 1952 [ 211.332272][T10033] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 211.483986][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 211.493215][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 211.503949][ T5119] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 211.512603][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 211.520599][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 211.528183][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 211.637838][ T6450] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.703385][T10039] caif0: Master is either lo or non-ether device [ 211.801707][ T6450] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.802426][T10054] validate_nla: 3 callbacks suppressed [ 211.802443][T10054] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 211.848215][T10054] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 211.864173][T10037] lo speed is unknown, defaulting to 1000 [ 211.927995][ T6450] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.023826][ T6450] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.254140][ T6450] bridge_slave_0: left allmulticast mode [ 212.262600][ T6450] bridge_slave_0: left promiscuous mode [ 212.269805][ T6450] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.295738][T10089] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 213.334957][T10089] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 213.375143][T10089] __nla_validate_parse: 4 callbacks suppressed [ 213.375161][T10089] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.459196][ T6450] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.487201][ T6450] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.513808][ T6450] bond0 (unregistering): Released all slaves [ 213.608551][ T5119] Bluetooth: hci2: command tx timeout [ 214.000621][T10037] chnl_net:caif_netlink_parms(): no params data found [ 214.140075][T10114] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode 802.3ad(4) [ 214.399485][T10037] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.421171][T10037] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.436495][T10037] bridge_slave_0: entered allmulticast mode [ 214.455870][T10037] bridge_slave_0: entered promiscuous mode [ 214.495372][ T6450] hsr_slave_0: left promiscuous mode [ 214.509281][ T6450] hsr_slave_1: left promiscuous mode [ 214.515498][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.523487][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.544892][ T6450] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.567942][ T6450] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.622482][ T6450] veth1_macvtap: left promiscuous mode [ 214.633331][ T6450] veth0_macvtap: left promiscuous mode [ 214.640522][ T6450] veth1_vlan: left promiscuous mode [ 214.655653][ T6450] veth0_vlan: left promiscuous mode [ 215.270366][T10136] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 215.294782][T10136] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 215.303223][T10136] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.667648][ T6450] team0 (unregistering): Port device team_slave_1 removed [ 215.698501][ T5119] Bluetooth: hci2: command tx timeout [ 215.713023][ T6450] team0 (unregistering): Port device team_slave_0 removed [ 216.114643][T10037] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.122374][T10037] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.129820][T10037] bridge_slave_1: entered allmulticast mode [ 216.137898][T10037] bridge_slave_1: entered promiscuous mode [ 216.161796][T10131] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 216.183323][T10141] caif0: Master is either lo or non-ether device [ 216.245441][T10037] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.276721][T10037] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.433596][T10037] team0: Port device team_slave_0 added [ 216.466679][T10037] team0: Port device team_slave_1 added [ 216.597341][T10037] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.623166][T10037] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.676101][T10169] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.679328][T10037] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.722469][T10037] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.755272][T10037] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.791957][T10037] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.886863][T10037] hsr_slave_0: entered promiscuous mode [ 216.905433][T10174] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 216.914350][T10174] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 216.915085][T10037] hsr_slave_1: entered promiscuous mode [ 216.933199][T10037] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.936487][T10174] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.942173][T10037] Cannot create hsr debugfs directory [ 217.132215][T10178] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.170563][T10180] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.355478][T10182] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 217.665220][T10193] tipc: Enabling of bearer rejected, failed to enable media [ 217.695187][T10193] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 217.768496][ T5119] Bluetooth: hci2: command tx timeout [ 217.791603][T10202] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 217.827194][T10202] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 217.859645][T10202] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.861016][T10037] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 217.902724][T10037] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 217.928060][T10037] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 217.953525][T10037] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 218.041937][T10210] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 218.074530][T10213] netlink: 172 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.206738][T10037] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.233152][T10221] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 218.265856][T10037] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.290797][T10224] caif0: Master is either lo or non-ether device [ 218.331088][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.338286][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.351068][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.358217][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.688176][T10037] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.726458][T10244] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 218.746545][T10244] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 218.772794][T10244] __nla_validate_parse: 1 callbacks suppressed [ 218.772809][T10244] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.828745][T10037] veth0_vlan: entered promiscuous mode [ 218.867373][T10037] veth1_vlan: entered promiscuous mode [ 218.967390][T10037] veth0_macvtap: entered promiscuous mode [ 219.017079][T10251] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.080833][T10037] veth1_macvtap: entered promiscuous mode [ 219.169756][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.194332][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.218383][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.240286][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.255708][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.266421][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.297158][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.307900][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.325168][T10037] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.368876][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.395085][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.412047][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.422992][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.433354][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.445663][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.456564][T10037] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.472309][T10037] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.485830][T10037] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.524921][T10037] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.547860][T10037] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.559252][T10037] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.587109][T10037] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.820836][T10285] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 219.844980][T10285] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 219.853580][ T5119] Bluetooth: hci2: command tx timeout [ 219.868150][T10285] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 219.869707][ T2529] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.914901][ T2529] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.993784][ T5161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.005115][ T5161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.103476][T10290] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.560293][T10322] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.754926][T10326] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 220.994622][T10330] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 221.489749][T10355] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.605065][T10349] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.022812][ T29] audit: type=1804 audit(1717117525.265:7): pid=10375 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1458195681/syzkaller.Ysc7YN/220/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 222.083284][T10375] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.129419][ T29] audit: type=1804 audit(1717117525.365:8): pid=10383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir1458195681/syzkaller.Ysc7YN/220/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 222.436789][T10395] validate_nla: 4 callbacks suppressed [ 222.436808][T10395] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 222.464257][T10395] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 222.706726][T10408] lo speed is unknown, defaulting to 1000 [ 222.862228][T10416] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 222.882742][T10416] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 223.235171][T10421] lo speed is unknown, defaulting to 1000 [ 223.650920][T10440] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 223.690521][T10440] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 223.911996][T10449] __nla_validate_parse: 4 callbacks suppressed [ 223.912016][T10449] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 223.952363][T10449] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.391701][T10422] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.458405][T10459] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 224.467926][T10459] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 225.473615][T10486] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.484995][T10486] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.494537][T10487] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.515784][T10490] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 225.540212][T10490] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 225.563689][T10490] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.187435][T10518] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.221771][T10520] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.414357][T10531] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 226.847145][T10550] dummy0: entered promiscuous mode [ 226.859534][T10550] dummy0: entered allmulticast mode [ 226.883200][T10550] team0: Port device dummy0 added [ 226.930884][T10548] lo speed is unknown, defaulting to 1000 [ 226.994437][ T29] audit: type=1804 audit(1717117530.235:9): pid=10562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir889380560/syzkaller.rKjCHM/311/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 227.029471][ T29] audit: type=1804 audit(1717117530.265:10): pid=10558 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir879882886/syzkaller.h3xOMy/324/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 227.606185][T10583] validate_nla: 9 callbacks suppressed [ 227.606204][T10583] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 227.648492][T10583] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 227.873656][T10588] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 227.926482][T10588] dummy0: entered promiscuous mode [ 227.935596][T10588] dummy0: entered allmulticast mode [ 227.960195][T10588] team0: Port device dummy0 added [ 228.366163][T10595] tun0: tun_chr_ioctl cmd 2147767511 [ 228.452052][T10611] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 228.484204][T10611] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 228.821961][ T29] audit: type=1804 audit(1717117532.065:11): pid=10623 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1458195681/syzkaller.Ysc7YN/234/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 228.827557][T10622] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 229.062850][T10632] __nla_validate_parse: 7 callbacks suppressed [ 229.062873][T10632] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 229.084873][T10632] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 229.099060][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.109828][T10615] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.340707][T10640] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.375709][T10642] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 229.424698][T10642] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 229.479961][T10642] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 229.504606][T10642] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 229.570841][T10650] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 229.592871][T10650] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 229.635159][T10650] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.983159][T10663] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 230.013206][T10663] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 230.114555][T10669] macvlan2: entered promiscuous mode [ 230.144749][T10669] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 230.201065][T10669] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 230.544094][T10686] macvlan2: entered promiscuous mode [ 230.603558][T10686] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 230.639858][T10686] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 232.640536][T10745] bridge0: entered promiscuous mode [ 232.654367][T10745] bridge0: left promiscuous mode [ 232.904727][T10751] ipvlan2: entered promiscuous mode [ 232.924038][T10751] ipvlan2: entered allmulticast mode [ 232.930587][T10753] validate_nla: 1 callbacks suppressed [ 232.930604][T10753] netlink: 'syz-executor.4': attribute type 20 has an invalid length. [ 232.948397][T10751] mac80211_hwsim hwsim28 wlan1: entered allmulticast mode [ 234.203671][T10779] __nla_validate_parse: 10 callbacks suppressed [ 234.203691][T10779] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 234.236297][T10779] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 234.357364][T10786] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 234.418896][T10786] geneve0: entered promiscuous mode [ 234.500953][T10786] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 234.542022][T10792] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 234.684037][T10796] bond0: (slave bond_slave_0): Releasing backup interface [ 234.957384][T10803] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 235.037791][T10809] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 235.059261][T10809] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.176542][T10813] TCP segment has incorrect auth options set for [fe80::bb].0->[ff02::1].20002 [] [ 235.225461][T10815] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.236853][T10815] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.897461][T10845] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 235.931894][T10846] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 235.976458][T10845] geneve0: entered promiscuous mode [ 236.052163][T10845] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 236.092505][T10848] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.109073][T10848] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.131350][T10850] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.3'. [ 236.536697][T10873] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 236.695528][T10876] x_tables: ip6_tables: mh match: only valid for protocol 135 [ 237.610269][T10909] tipc: Started in network mode [ 237.621068][T10909] tipc: Node identity ac14142e, cluster identity 4711 [ 237.649575][T10909] tipc: New replicast peer: 0.0.0.0 [ 237.659855][T10909] tipc: Enabled bearer , priority 10 [ 237.674016][T10911] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 238.348843][T10930] batadv0: entered promiscuous mode [ 238.673278][T10949] tipc: New replicast peer: 0.0.0.0 [ 238.689709][T10949] tipc: Enabled bearer , priority 10 [ 238.778411][ T5162] tipc: Node number set to 2886997038 [ 239.197157][T10959] ip6tnl1: entered promiscuous mode [ 239.211028][T10959] ip6tnl1: entered allmulticast mode [ 239.579035][T10974] veth0_vlan: entered allmulticast mode [ 239.660255][T10981] __nla_validate_parse: 12 callbacks suppressed [ 239.660274][T10981] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.878562][T10988] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 239.908429][T10988] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.775204][T11015] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.459489][T11029] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.508385][T11029] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.689581][T11045] tipc: Started in network mode [ 241.704480][T11045] tipc: Node identity ac14142e, cluster identity 4711 [ 241.722135][T11045] tipc: New replicast peer: 0.0.0.0 [ 241.732258][T11045] tipc: Enabled bearer , priority 10 [ 241.833852][T11057] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 242.503977][T11084] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.546126][T11084] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 242.563789][T11086] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 242.579831][T11084] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 242.585753][T11086] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.1'. [ 242.608115][T11084] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 242.629497][T11086] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 242.637765][T11086] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 242.849991][ T5162] tipc: Node number set to 2886997038 [ 243.154751][T11103] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 243.310822][T11090] infiniband syz2: set active [ 243.349147][T11090] infiniband syz2: added veth1_to_bridge [ 243.452727][T11090] RDS/IB: syz2: added [ 243.481685][T11090] smc: adding ib device syz2 with port count 1 [ 243.522367][T11090] smc: ib device syz2 port 1 has pnetid [ 245.009536][T11162] __nla_validate_parse: 5 callbacks suppressed [ 245.009556][T11162] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.150325][T11172] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.172417][T11172] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.210371][T11173] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 245.266627][T11173] geneve0: entered promiscuous mode [ 245.355593][T11173] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 245.975798][T11187] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.999278][T11191] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.066269][T11187] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.082973][T11187] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 246.118401][T11187] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 246.330921][T11200] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 246.663173][T11212] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.686530][T11212] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.082671][T11222] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 247.214246][T11226] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 248.693805][T11279] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 248.705378][T11279] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 249.148891][T11294] Cannot find set identified by id 0 to match [ 249.647217][T11318] syzkaller0: entered promiscuous mode [ 249.667743][T11318] syzkaller0: entered allmulticast mode [ 251.914418][T11343] __nla_validate_parse: 12 callbacks suppressed [ 251.914432][T11343] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.066818][T11370] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.272572][T11381] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.291888][T11381] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.448214][T11387] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.865892][T11399] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.164211][T11407] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 253.247870][T11409] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 253.431256][T11417] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 253.459910][T11417] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 253.469565][T11417] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.525086][T11415] syzkaller0: entered promiscuous mode [ 253.562186][T11415] syzkaller0: entered allmulticast mode [ 253.897972][T11437] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.2'. [ 254.012804][T11448] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 254.137245][T11460] syzkaller1: entered promiscuous mode [ 254.148072][T11460] syzkaller1: entered allmulticast mode [ 254.168099][T11460] dccp_invalid_packet: P.type (CLOSEREQ) not Data || [Data]Ack, while P.X == 0 [ 255.776253][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.788257][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.459556][T11495] Bluetooth: MGMT ver 1.22 [ 257.373053][T11543] __nla_validate_parse: 7 callbacks suppressed [ 257.373073][T11543] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.406318][T11547] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.432342][T11547] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.772822][T11559] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 258.105054][T11580] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.124492][T11580] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 258.240431][T11585] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 258.841754][T11610] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.124086][T11620] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.155869][T11620] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 259.265878][T11622] smc: net device ip6tnl0 applied user defined pnetid SYZ2 [ 259.455038][T11631] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.354856][T11658] can: request_module (can-proto-0) failed. [ 260.553416][T11674] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 260.570838][T11674] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 260.590277][T11674] gretap1: entered promiscuous mode [ 260.599642][T11674] gretap1: entered allmulticast mode [ 260.672084][T11681] smc: net device ip6tnl0 applied user defined pnetid SYZ2 [ 261.775463][T11720] can: request_module (can-proto-0) failed. [ 262.059217][ T29] audit: type=1800 audit(1717117565.295:12): pid=11737 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 262.690888][T11760] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 263.125453][T11786] __nla_validate_parse: 4 callbacks suppressed [ 263.125468][T11786] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 263.572646][T11788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 264.054244][T11800] smc: net device ip6tnl0 applied user defined pnetid SYZ2 [ 265.102506][T11830] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.122996][T11873] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 266.169890][T11874] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 267.803816][T11926] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 267.954092][T11932] netlink: 160124 bytes leftover after parsing attributes in process `syz-executor.2'. [ 267.973042][T11932] openvswitch: netlink: IP tunnel attribute has 3056 unknown bytes. [ 268.091232][ T5119] Bluetooth: hci4: command 0x0406 tx timeout [ 269.195646][T11972] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 270.097867][T12003] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 271.180875][T12033] ------------[ cut here ]------------ [ 271.186420][T12033] wlan1: Failed check-sdata-in-driver check, flags: 0x0 [ 271.194127][T12035] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 271.214142][T12033] WARNING: CPU: 0 PID: 12033 at net/mac80211/main.c:410 ieee80211_link_info_change_notify+0x273/0x330 [ 271.225410][T12033] Modules linked in: [ 271.227266][T12038] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 271.229409][T12033] CPU: 0 PID: 12033 Comm: syz-executor.4 Not tainted 6.9.0-syzkaller-12128-g068648aab72c #0 [ 271.229488][T12033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 271.229503][T12033] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 2024/05/31 01:06:14 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 271.229543][T12033] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 20 28 e1 8c 48 89 ee e8 0e f9 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 271.229562][T12033] RSP: 0018:ffffc9000b7e7318 EFLAGS: 00010246 [ 271.229584][T12033] RAX: 919e75d47b958200 RBX: 1ffff1100fafba9e RCX: 0000000000040000 [ 271.301043][T12033] RDX: ffffc90009c31000 RSI: 0000000000004060 RDI: 0000000000004061 [ 271.309360][T12033] RBP: ffff88807d7dc130 R08: ffffffff815847a2 R09: fffffbfff1c3996c [ 271.317355][T12033] R10: dffffc0000000000 R11: fffffbfff1c3996c R12: dffffc0000000000 [ 271.325428][T12033] R13: 0000000002000000 R14: ffff88807d7dcca0 R15: ffff88807d7dd4f0 [ 271.333493][T12033] FS: 00007fd0d12ab6c0(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 271.342512][T12033] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 271.349271][T12033] CR2: 0000000000000000 CR3: 0000000067d6e000 CR4: 00000000003506f0 [ 271.357265][T12033] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 271.365413][T12033] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 271.373614][T12033] Call Trace: [ 271.376922][T12033] [ 271.379914][T12033] ? __warn+0x163/0x4e0 [ 271.384108][T12033] ? ieee80211_link_info_change_notify+0x273/0x330 [ 271.390771][T12033] ? report_bug+0x2b3/0x500 [ 271.395324][T12033] ? ieee80211_link_info_change_notify+0x273/0x330 [ 271.401933][T12033] ? handle_bug+0x3e/0x70 [ 271.406441][T12033] ? exc_invalid_op+0x1a/0x50 [ 271.411219][T12033] ? asm_exc_invalid_op+0x1a/0x20 [ 271.416287][T12033] ? __warn_printk+0x292/0x360 [ 271.421193][T12033] ? ieee80211_link_info_change_notify+0x273/0x330 [ 271.427745][T12033] ? ieee80211_link_info_change_notify+0x272/0x330 [ 271.434374][T12033] ieee80211_set_mcast_rate+0x46/0x60 [ 271.439835][T12033] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 271.445928][T12033] nl80211_set_mcast_rate+0xaff/0xeb0 [ 271.451603][T12033] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 271.457569][T12033] genl_rcv_msg+0xb14/0xec0 [ 271.462186][T12033] ? mark_lock+0x9a/0x350 [ 271.466551][T12033] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.471720][T12033] ? __pfx_lock_acquire+0x10/0x10 [ 271.476787][T12033] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 271.482268][T12033] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 271.488190][T12033] ? __pfx_nl80211_post_doit+0x10/0x10 [ 271.493750][T12033] ? __pfx___might_resched+0x10/0x10 [ 271.499108][T12033] netlink_rcv_skb+0x1e3/0x430 [ 271.503892][T12033] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.509306][T12033] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.514633][T12033] ? __netlink_deliver_tap+0x77e/0x7c0 [ 271.520193][T12033] genl_rcv+0x28/0x40 [ 271.524201][T12033] netlink_unicast+0x7ea/0x980 [ 271.529232][T12033] ? __pfx_netlink_unicast+0x10/0x10 [ 271.534546][T12033] ? __virt_addr_valid+0x183/0x520 [ 271.539733][T12033] ? __check_object_size+0x49c/0x900 [ 271.545048][T12033] ? bpf_lsm_netlink_send+0x9/0x10 [ 271.550251][T12033] netlink_sendmsg+0x8db/0xcb0 [ 271.555050][T12033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.560417][T12033] ? __import_iovec+0x536/0x820 [ 271.565296][T12033] ? aa_sock_msg_perm+0x91/0x160 [ 271.570313][T12033] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 271.575618][T12033] ? security_socket_sendmsg+0x87/0xb0 [ 271.581231][T12033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 271.586551][T12033] __sock_sendmsg+0x221/0x270 [ 271.591312][T12033] ____sys_sendmsg+0x525/0x7d0 [ 271.596129][T12033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 271.601521][T12033] __sys_sendmsg+0x2b0/0x3a0 [ 271.606158][T12033] ? __pfx___sys_sendmsg+0x10/0x10 [ 271.611816][T12033] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 271.618167][T12033] ? do_syscall_64+0x100/0x230 [ 271.623056][T12033] ? do_syscall_64+0xb6/0x230 [ 271.627760][T12033] do_syscall_64+0xf3/0x230 [ 271.632456][T12033] ? clear_bhb_loop+0x35/0x90 [ 271.637164][T12033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.643147][T12033] RIP: 0033:0x7fd0d047cee9 [ 271.647585][T12033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 271.667334][T12033] RSP: 002b:00007fd0d12ab0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 271.675916][T12033] RAX: ffffffffffffffda RBX: 00007fd0d05b3fa0 RCX: 00007fd0d047cee9 [ 271.683948][T12033] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000006 [ 271.692134][T12033] RBP: 00007fd0d04c947f R08: 0000000000000000 R09: 0000000000000000 [ 271.700225][T12033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 271.708300][T12033] R13: 000000000000000b R14: 00007fd0d05b3fa0 R15: 00007ffcfd82f318 [ 271.716494][T12033] [ 271.719624][T12033] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 271.726926][T12033] CPU: 0 PID: 12033 Comm: syz-executor.4 Not tainted 6.9.0-syzkaller-12128-g068648aab72c #0 [ 271.737066][T12033] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 271.747135][T12033] Call Trace: [ 271.750430][T12033] [ 271.753380][T12033] dump_stack_lvl+0x241/0x360 [ 271.758083][T12033] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.763333][T12033] ? __pfx__printk+0x10/0x10 [ 271.767947][T12033] ? _printk+0xd5/0x120 [ 271.772140][T12033] ? vscnprintf+0x5d/0x90 [ 271.776494][T12033] panic+0x349/0x860 [ 271.780441][T12033] ? __warn+0x172/0x4e0 [ 271.784626][T12033] ? __pfx_panic+0x10/0x10 [ 271.789062][T12033] ? show_trace_log_lvl+0x4e6/0x520 [ 271.794308][T12033] __warn+0x346/0x4e0 [ 271.798313][T12033] ? ieee80211_link_info_change_notify+0x273/0x330 [ 271.804847][T12033] report_bug+0x2b3/0x500 [ 271.809203][T12033] ? ieee80211_link_info_change_notify+0x273/0x330 [ 271.815738][T12033] handle_bug+0x3e/0x70 [ 271.819915][T12033] exc_invalid_op+0x1a/0x50 [ 271.824445][T12033] asm_exc_invalid_op+0x1a/0x20 [ 271.829318][T12033] RIP: 0010:ieee80211_link_info_change_notify+0x273/0x330 [ 271.836461][T12033] Code: 08 00 00 48 85 c0 48 0f 44 e9 42 0f b6 04 23 84 c0 0f 85 ab 00 00 00 41 8b 17 48 c7 c7 20 28 e1 8c 48 89 ee e8 0e f9 69 f6 90 <0f> 0b 90 90 e9 da fe ff ff 89 e9 80 e1 07 80 c1 03 38 c1 0f 8c 13 [ 271.856087][T12033] RSP: 0018:ffffc9000b7e7318 EFLAGS: 00010246 [ 271.862174][T12033] RAX: 919e75d47b958200 RBX: 1ffff1100fafba9e RCX: 0000000000040000 [ 271.870159][T12033] RDX: ffffc90009c31000 RSI: 0000000000004060 RDI: 0000000000004061 [ 271.878126][T12033] RBP: ffff88807d7dc130 R08: ffffffff815847a2 R09: fffffbfff1c3996c [ 271.886098][T12033] R10: dffffc0000000000 R11: fffffbfff1c3996c R12: dffffc0000000000 [ 271.894068][T12033] R13: 0000000002000000 R14: ffff88807d7dcca0 R15: ffff88807d7dd4f0 [ 271.902056][T12033] ? __warn_printk+0x292/0x360 [ 271.906834][T12033] ? ieee80211_link_info_change_notify+0x272/0x330 [ 271.913346][T12033] ieee80211_set_mcast_rate+0x46/0x60 [ 271.918721][T12033] ? __pfx_ieee80211_set_mcast_rate+0x10/0x10 [ 271.924791][T12033] nl80211_set_mcast_rate+0xaff/0xeb0 [ 271.930175][T12033] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 271.936086][T12033] genl_rcv_msg+0xb14/0xec0 [ 271.940619][T12033] ? mark_lock+0x9a/0x350 [ 271.944963][T12033] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.950017][T12033] ? __pfx_lock_acquire+0x10/0x10 [ 271.955058][T12033] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 271.960457][T12033] ? __pfx_nl80211_set_mcast_rate+0x10/0x10 [ 271.966405][T12033] ? __pfx_nl80211_post_doit+0x10/0x10 [ 271.971865][T12033] ? __pfx___might_resched+0x10/0x10 [ 271.977159][T12033] netlink_rcv_skb+0x1e3/0x430 [ 271.981924][T12033] ? __pfx_genl_rcv_msg+0x10/0x10 [ 271.986951][T12033] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 271.992247][T12033] ? __netlink_deliver_tap+0x77e/0x7c0 [ 271.997714][T12033] genl_rcv+0x28/0x40 [ 272.001713][T12033] netlink_unicast+0x7ea/0x980 [ 272.006504][T12033] ? __pfx_netlink_unicast+0x10/0x10 [ 272.011795][T12033] ? __virt_addr_valid+0x183/0x520 [ 272.016909][T12033] ? __check_object_size+0x49c/0x900 [ 272.022200][T12033] ? bpf_lsm_netlink_send+0x9/0x10 [ 272.027342][T12033] netlink_sendmsg+0x8db/0xcb0 [ 272.032119][T12033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.037404][T12033] ? __import_iovec+0x536/0x820 [ 272.042258][T12033] ? aa_sock_msg_perm+0x91/0x160 [ 272.047197][T12033] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 272.052478][T12033] ? security_socket_sendmsg+0x87/0xb0 [ 272.057940][T12033] ? __pfx_netlink_sendmsg+0x10/0x10 [ 272.063231][T12033] __sock_sendmsg+0x221/0x270 [ 272.067910][T12033] ____sys_sendmsg+0x525/0x7d0 [ 272.072690][T12033] ? __pfx_____sys_sendmsg+0x10/0x10 [ 272.078000][T12033] __sys_sendmsg+0x2b0/0x3a0 [ 272.082602][T12033] ? __pfx___sys_sendmsg+0x10/0x10 [ 272.087752][T12033] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 272.094084][T12033] ? do_syscall_64+0x100/0x230 [ 272.098850][T12033] ? do_syscall_64+0xb6/0x230 [ 272.103525][T12033] do_syscall_64+0xf3/0x230 [ 272.108028][T12033] ? clear_bhb_loop+0x35/0x90 [ 272.112725][T12033] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.118616][T12033] RIP: 0033:0x7fd0d047cee9 [ 272.123034][T12033] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 272.142662][T12033] RSP: 002b:00007fd0d12ab0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 272.151095][T12033] RAX: ffffffffffffffda RBX: 00007fd0d05b3fa0 RCX: 00007fd0d047cee9 [ 272.159077][T12033] RDX: 0000000000000000 RSI: 00000000200003c0 RDI: 0000000000000006 [ 272.167051][T12033] RBP: 00007fd0d04c947f R08: 0000000000000000 R09: 0000000000000000 [ 272.175022][T12033] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 272.183024][T12033] R13: 000000000000000b R14: 00007fd0d05b3fa0 R15: 00007ffcfd82f318 [ 272.191035][T12033] [ 272.194346][T12033] Kernel Offset: disabled [ 272.198793][T12033] Rebooting in 86400 seconds..