last executing test programs: 8.717609027s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000002680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000023c0)={0x1c, r1, 0x221, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x8, 0x6, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x4}]}]}, 0x1c}}, 0x0) 8.542927454s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x0, 0x0, 0x0, 0x4}, 0x48) 8.470240014s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2463e30050000000", @ANYRES32=0x0], 0x24}, 0x1, 0x5502000000000000}, 0x0) socket$packet(0x11, 0x0, 0x300) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000740)={{{@in=@local, @in6=@dev}}, {{@in6=@loopback}, 0x0, @in=@remote}}, &(0x7f00000004c0)=0xe8) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_NOOP(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000200)={&(0x7f00000005c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000228bd7000fedbdf250000000006001a004e220000140000060002000000008f06301c010000000000000000000105001200f80000000800feff0901010205002100000000000004e5000099b9327a1a2577caddfdea22a7bbb900002f142c534385413a4798f3118fdd27bf7f38c332c9efdd0ae3e8e416e5a5e55c991a706d0d8894"], 0x54}, 0x1, 0x0, 0x0, 0x20008000}, 0x8855) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000000c0)=""/40, 0x28, 0x2, &(0x7f0000000100)={0xa, 0x4e20, 0x6, @local, 0x9b2}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x4a, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaa0000aaaa86dd600a843500040600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e2214d17d91ffb49d7c812b149030ee5c1e4c310d8dc6b19f76b632d3d62fd074f0cc3de0889705d3bce45fae52", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000000090780000"], 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x18, 0x1, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x800}, 0x0) bind$l2tp(0xffffffffffffffff, 0x0, 0x0) sendto$l2tp(0xffffffffffffffff, &(0x7f0000000040), 0x0, 0x0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x3, 0x0, 0x1, 0x3316, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x3, 0x2}, 0x48) r3 = socket$xdp(0x2c, 0x3, 0x0) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002040)={&(0x7f0000000d80)=ANY=[@ANYBLOB='8\a\x00\x00', @ANYRES16=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="1400020077673200000000000000000093146e56100782000000001400020063616966300000000000000000000000080003000000000014000200697036746e6c3000000000000000000008000100", @ANYRES32=0x0, @ANYBLOB="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"], 0x738}}, 0x0) r4 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003b000b05d25a806c8c6f94f90224fc600e0005000a000200053582c137153e3704000880fc0b09000300", 0x33fe0}], 0x1}, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000100)={0x0, 0xffffff7f, 0x1000, 0x0, 0x1}, 0x20) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x8, &(0x7f0000000040), &(0x7f0000000180)=0x30) 8.240094648s ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r2, &(0x7f0000000140), 0xb) readv(r3, &(0x7f0000000000)=[{&(0x7f0000000140)=""/205, 0xcd}], 0x1) tee(r1, r4, 0xaf5, 0x0) 7.938661163s ago: executing program 3: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x40}, {0x28, 0x0, 0x0, 0xbf0b}, {0x6}]}, 0x10) syz_emit_ethernet(0x32, &(0x7f00000009c0)=ANY=[], 0x0) 7.850004854s ago: executing program 3: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000200)="ad00"/16, 0x10) read$alg(r1, &(0x7f0000000080)=""/16, 0x10) recvmmsg(r1, &(0x7f0000002440), 0x3ffffffffffff67, 0x0, 0x0) 1.087492446s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_PORT={0x5, 0x2, 0x4}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}}, 0x0) 1.028996537s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x9e, 0x9, 0x4, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x80, 0xd, 0x1}}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@gettfilter={0x6c, 0x2e, 0x10, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9, 0xa}, {0xffe0, 0x10}, {0xfff2, 0xb}}, [{0x8, 0xb, 0x8e4}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0xfffff2fa}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x4000043}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x1}]}, 0x6c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000025c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_HASH={0x8}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x73}}]}}]}, 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, 0x24}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={0x0}}, 0x34008090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, 0x0, &(0x7f0000000040)=0xbd) ioctl(r9, 0x1, &(0x7f0000000880)="823ff84f3e33e940f507e80432b054cf3dc040e3bcba823e1a8b368184d31a2faf8f3b432fa2d18c9fdaa02313542625c2596721e2a790aaf00a438c238bf34726ca320fda42f40aa13c09700e5a5b475bd403856d434a9c954e597c0b40f00eb09be76cec551fe0a586e916945470a25e48b7c90b59666c5e2131427e33e5cc17b7eb30") r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="080005000300000068a797260dc025666d544c00dd9fb86fde02d69a68ef534d5348965635273a60c0c26f89e6ffb52f08fce326b4d5522dc7e0b846068908bbf07a913ccbbb6fcd9bff5f"], 0x24}}, 0x0) 995.383443ms ago: executing program 1: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) syz_emit_ethernet(0x5e, &(0x7f0000000080)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x28, 0x3a, 0x0, @local, @mcast2, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @private0, @mcast1}}}}}}, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="48040000", @ANYRES16=r2, @ANYBLOB="01e5c300000000fb04003b1c210008000300", @ANYRES32=r1, @ANYBLOB="2c0433005000de295b3acba52ee4080211000001505050505050"], 0x448}}, 0x0) 952.941267ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000000), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x304}, "35f36008c636847e", "b1528832dadd8423b4b617efc885a45d", "49d69735", "1c228c29966e0467"}, 0x28) sendmsg$inet6(r0, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000640)=ANY=[], 0x18}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000000), r1) r3 = socket$inet6(0xa, 0x2, 0x3) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x4e24, 0x0, @remote}, 0x1c) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000ac0)=@nat={'nat\x00', 0x19, 0x0, 0xc0, [0x20000a00, 0x0, 0x0, 0x20000a30, 0x20000a60], 0x0, 0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff00000000"]}, 0x138) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r5, 0x6b, 0x1, &(0x7f0000000340)=[{}], 0x20) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22}, 0x1c) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x24, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x24}}, 0x0) r7 = socket$rds(0x15, 0x5, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$sock_SIOCSIFBR(r8, 0x8941, &(0x7f0000000080)=@add_del={0x2, &(0x7f0000000040)='wg2\x00'}) ioctl$int_in(r8, 0x5421, &(0x7f00000000c0)=0x5) recvmmsg(r8, &(0x7f00000059c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f0000000380), 0x4) setsockopt$RDS_FREE_MR(r7, 0x114, 0x3, &(0x7f00000007c0), 0x10) 864.329139ms ago: executing program 2: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x31}}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 812.558416ms ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x218}}, 0x0) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040020000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c0000001800010000000000000000000a00000000000000000000000c00090008000000", @ANYRES32=r4, @ANYBLOB="14000500fe80"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_MULTIPATH={0xc, 0x9, {0x8, 0x0, 0x0, r4}}, @RTA_GATEWAY={0x14, 0x5, @dev}]}, 0x3c}}, 0x0) 790.119115ms ago: executing program 0: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x2, 0xc}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b000000095"], 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x4, 0x1, 0x4}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0}, 0xa6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$kcm(0x11, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) r2 = socket$kcm(0xa, 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='blkio.throttle.io_serviced\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(r2, 0x1, 0x3e, &(0x7f0000000000)=r3, 0x4) sendmsg$kcm(r2, &(0x7f00000002c0)={&(0x7f0000000100)=@in6={0xa, 0x4e23, 0x0, @loopback={0xffffff7f00000000}}, 0x80, 0x0}, 0x0) 675.734672ms ago: executing program 4: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$SIOCAX25ADDUID(r0, 0x89e1, &(0x7f0000000240)={0x3, @bcast, 0xee00}) 675.573982ms ago: executing program 2: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000840)={r0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 603.65394ms ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)={0x14, 0x76, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) 596.710084ms ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800003d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 576.639152ms ago: executing program 1: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000110000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000c08000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000070000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000580)=ANY=[@ANYBLOB="050000000000000071113b00000000008510000002000000850000000500000095000000000000009500a505000000006639569eb10f78610e9b1cafa338525356fc7162abccf42b5a42e067bdeef1ae1199ec34e21f0563aa507b3b4f87e8acde8dd3142b3c4ad2e8cd7f5e7b8ac25c371f2eca579918305422550b46166b26a7f45fcfdbd6117592e97eb66a920d1b6124d99a3918abc22b9144ddb13e1956210100000000000080acbff542080cd0da0316a7f67a93c629c97553b5d2b8ec74e4aa49a5d7ec8e0c2942f37d655a765980bb04d160f0683964044b0e3982284fafc99c"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="180000000900000000000000213f0000c50000000e800000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) 527.16288ms ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xa, 0x4, 0x3, 0x8}, 0x48) close(r1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6, 0x5, 0x1000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70800003d"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r2}, 0x10) write$cgroup_type(r0, &(0x7f0000000140), 0x9) 462.779102ms ago: executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendto$packet(r0, &(0x7f0000000180)="02033e00d3fc02000000ab5d71acedd7c9560385dcb1080084d7dc039806112405ce811cc352", 0xff88, 0x0, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @broadcast}, 0x14) 357.008173ms ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000000080)={'ip6gre0\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x29, 0x9e, 0x9, 0x4, 0x1, @loopback, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1, 0x80, 0xd, 0x1}}) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@gettfilter={0x6c, 0x2e, 0x10, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x9, 0xa}, {0xffe0, 0x10}, {0xfff2, 0xb}}, [{0x8, 0xb, 0x8e4}, {0x8, 0xb, 0x80000000}, {0x8, 0xb, 0xfffff2fa}, {0x8, 0xb, 0xfff}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x4000043}, {0x8, 0xb, 0x1}, {0x8}, {0x8, 0xb, 0x1}]}, 0x6c}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000", @ANYRES32=r3, @ANYBLOB='\x00\x00\x00'], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000025c0)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0xc}}, [@filter_kind_options=@f_u32={{0x8}, {0x28, 0x2, [@TCA_U32_HASH={0x8}, @TCA_U32_LINK={0x8, 0x3, 0x1}, @TCA_U32_SEL={0x14, 0x5, {0x0, 0x0, 0x73}}]}}]}, 0x54}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_MEASUREMENT_DURATION={0x6}]}, 0x24}}, 0x0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(0xffffffffffffffff, &(0x7f0000000bc0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000009c0)={0x0}}, 0x34008090) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r9 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IPT_SO_GET_ENTRIES(r9, 0x0, 0x41, 0x0, &(0x7f0000000040)=0xbd) ioctl(r9, 0x1, &(0x7f0000000880)="823ff84f3e33e940f507e80432b054cf3dc040e3bcba823e1a8b368184d31a2faf8f3b432fa2d18c9fdaa02313542625c2596721e2a790aaf00a438c238bf34726ca320fda42f40aa13c09700e5a5b475bd403856d434a9c954e597c0b40f00eb09be76cec551fe0a586e916945470a25e48b7c90b59666c5e2131427e33e5cc17b7eb30") r10 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r11, @ANYBLOB="080005000300000068a797260dc025666d544c00dd9fb86fde02d69a68ef534d5348965635273a60c0c26f89e6ffb52f08fce326b4d5522dc7e0b846068908bbf07a913ccbbb6fcd9bff5f"], 0x24}}, 0x0) 334.371592ms ago: executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000780), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000d80)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003100000005003500000000000a0001007770616e3100000005003600000000000500330003000400050034"], 0x40}}, 0x0) 329.539374ms ago: executing program 4: syz_emit_ethernet(0x1f, &(0x7f0000000180)=ANY=[@ANYBLOB="ffffffffffff000000e8ff000003424203"], 0x0) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r1 = socket$inet(0x2, 0x2000080001, 0x84) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x0, @private=0xa010101}, 0x10) sendto$inet(r1, &(0x7f0000000300)="99", 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @local}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) splice(r2, 0x0, r0, 0x0, 0x7ffff041, 0x0) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) recvmmsg(r3, &(0x7f0000000500)=[{{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0xd0, 0x0}}], 0x73d, 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040), 0x4) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x1) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800500030080000000080002400000000708000140000000000900010073797a30000000000900020073797a32"], 0x80}}, 0x0) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x3000003, 0x2000000064832, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000000c0)=0x9, 0x4) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="7800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c0002"], 0x78}}, 0x0) sendmmsg$inet6(r6, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171, 0x0, 0x0, 0x20000000}, 0xa}], 0x400000000000172, 0x4000300) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_buf(r7, 0x29, 0x4a, 0x0, &(0x7f00000001c0)) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000140)={0x0, @private, @local}, &(0x7f0000000240)=0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) 269.861567ms ago: executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f00000001c0)={r1, 0x1, 0x6, @multicast}, 0x10) setsockopt$packet_add_memb(r0, 0x107, 0x1, &(0x7f0000000040)={r1, 0x1, 0x6, @dev}, 0x10) setsockopt$packet_drop_memb(r0, 0x107, 0x2, &(0x7f0000000180)={0x0, 0x1, 0x6, @link_local}, 0x10) 209.230105ms ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000a80)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000a5451200000008000300", @ANYRES32=r2, @ANYBLOB="0a00060008021100000100000c004300", @ANYRESDEC], 0x34}}, 0x0) 115.016316ms ago: executing program 1: syz_emit_ethernet(0x5e, &(0x7f0000000240)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0xf, 0x4, 0x0, 0x0, 0x50, 0x0, 0x0, 0x0, 0x5, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, {[@timestamp_addr={0x44, 0x14, 0x5, 0x3, 0x0, [{@empty}, {@rand_addr=0x64010101}]}, @ssrr={0x89, 0xf, 0xce, [@multicast2, @remote, @empty]}, @generic={0x83, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5}}}}}}, 0x0) 90.911583ms ago: executing program 0: r0 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$sock_cred(r0, 0x1, 0x4a, 0x0, &(0x7f0000004600)) 63.267506ms ago: executing program 2: r0 = socket(0x10, 0x803, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000079000000090000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000070018110000", @ANYRES32=r1], 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='sys_enter\x00', r2}, 0x10) getsockname$packet(r0, 0x0, &(0x7f0000000200)) 31.04721ms ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000108500000075000000a50000002300000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) pwritev(r1, &(0x7f0000000280)=[{&(0x7f0000000340)="f7", 0x1}], 0x300, 0x0, 0x0) 0s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000740)={0x14, 0x76, 0xfcdfa0f79c183163, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.151' (ED25519) to the list of known hosts. 2024/06/02 01:31:35 fuzzer started 2024/06/02 01:31:36 dialing manager at 10.128.0.169:30016 [ 51.508679][ T5096] cgroup: Unknown subsys name 'net' [ 51.741724][ T5096] cgroup: Unknown subsys name 'rlimit' 2024/06/02 01:31:37 starting 5 executor processes [ 52.707897][ T5098] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.546063][ T5121] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.560933][ T5126] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.569399][ T5126] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.589405][ T5127] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.597058][ T5127] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.597103][ T5132] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 53.606389][ T5127] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.619298][ T5132] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.619662][ T5127] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.626600][ T5132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.635253][ T5127] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.641404][ T5132] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.648106][ T5127] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.655910][ T5132] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 53.661969][ T5127] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.668582][ T5132] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 53.676020][ T5127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.682377][ T5132] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 53.690408][ T5127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 53.696508][ T5132] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 53.703551][ T5127] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.716899][ T5132] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 53.717736][ T5127] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 53.732216][ T5133] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 53.740152][ T5132] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 53.759311][ T5133] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 53.761677][ T4491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 53.766866][ T5133] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 53.773941][ T4491] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 53.787684][ T4491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.220193][ T5122] chnl_net:caif_netlink_parms(): no params data found [ 54.260679][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 54.389351][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 54.493566][ T5122] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.501683][ T5122] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.509837][ T5122] bridge_slave_0: entered allmulticast mode [ 54.516571][ T5122] bridge_slave_0: entered promiscuous mode [ 54.564516][ T5122] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.571806][ T5122] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.578993][ T5122] bridge_slave_1: entered allmulticast mode [ 54.585624][ T5122] bridge_slave_1: entered promiscuous mode [ 54.607161][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.614926][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.622293][ T5116] bridge_slave_0: entered allmulticast mode [ 54.629569][ T5116] bridge_slave_0: entered promiscuous mode [ 54.636960][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 54.679674][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.686783][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.694771][ T5116] bridge_slave_1: entered allmulticast mode [ 54.701903][ T5116] bridge_slave_1: entered promiscuous mode [ 54.738742][ T5122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.749053][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.756221][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.763550][ T5117] bridge_slave_0: entered allmulticast mode [ 54.770352][ T5117] bridge_slave_0: entered promiscuous mode [ 54.777608][ T5129] chnl_net:caif_netlink_parms(): no params data found [ 54.809240][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.821667][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.832525][ T5122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 54.864210][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.871823][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.879513][ T5117] bridge_slave_1: entered allmulticast mode [ 54.886200][ T5117] bridge_slave_1: entered promiscuous mode [ 54.936294][ T5122] team0: Port device team_slave_0 added [ 54.944823][ T5122] team0: Port device team_slave_1 added [ 54.983642][ T5116] team0: Port device team_slave_0 added [ 54.993200][ T5116] team0: Port device team_slave_1 added [ 55.021521][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.066594][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.073637][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.099804][ T5122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.115048][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.152296][ T5122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.159303][ T5122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.185493][ T5122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.223445][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.230832][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.256934][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.270271][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.277235][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.303654][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.334473][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.342044][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.349285][ T5120] bridge_slave_0: entered allmulticast mode [ 55.355930][ T5120] bridge_slave_0: entered promiscuous mode [ 55.406194][ T5117] team0: Port device team_slave_0 added [ 55.412479][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.426949][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.434210][ T5120] bridge_slave_1: entered allmulticast mode [ 55.441599][ T5120] bridge_slave_1: entered promiscuous mode [ 55.473156][ T5129] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.480316][ T5129] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.487432][ T5129] bridge_slave_0: entered allmulticast mode [ 55.494136][ T5129] bridge_slave_0: entered promiscuous mode [ 55.513663][ T5117] team0: Port device team_slave_1 added [ 55.522673][ T5122] hsr_slave_0: entered promiscuous mode [ 55.531941][ T5122] hsr_slave_1: entered promiscuous mode [ 55.565971][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.579347][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.588711][ T5129] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.595892][ T5129] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.603812][ T5129] bridge_slave_1: entered allmulticast mode [ 55.611194][ T5129] bridge_slave_1: entered promiscuous mode [ 55.637810][ T5116] hsr_slave_0: entered promiscuous mode [ 55.644385][ T5116] hsr_slave_1: entered promiscuous mode [ 55.651169][ T5116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.659032][ T5116] Cannot create hsr debugfs directory [ 55.703223][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.710280][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.736532][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.742211][ T4491] Bluetooth: hci0: command tx timeout [ 55.749995][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.760139][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.786461][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.817402][ T5120] team0: Port device team_slave_0 added [ 55.818179][ T4491] Bluetooth: hci3: command tx timeout [ 55.823393][ T5121] Bluetooth: hci4: command tx timeout [ 55.828708][ T53] Bluetooth: hci1: command tx timeout [ 55.857776][ T5129] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.875498][ T5120] team0: Port device team_slave_1 added [ 55.898347][ T4491] Bluetooth: hci2: command tx timeout [ 55.906860][ T5129] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.949895][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.956850][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.983650][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.040499][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.047459][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.076579][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.091878][ T5129] team0: Port device team_slave_0 added [ 56.137975][ T5129] team0: Port device team_slave_1 added [ 56.159929][ T5117] hsr_slave_0: entered promiscuous mode [ 56.166239][ T5117] hsr_slave_1: entered promiscuous mode [ 56.172458][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.180518][ T5117] Cannot create hsr debugfs directory [ 56.224917][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.232179][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.258922][ T5129] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.305261][ T5129] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.312258][ T5129] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.338730][ T5129] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.379593][ T5120] hsr_slave_0: entered promiscuous mode [ 56.385864][ T5120] hsr_slave_1: entered promiscuous mode [ 56.392561][ T5120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.400541][ T5120] Cannot create hsr debugfs directory [ 56.577451][ T5129] hsr_slave_0: entered promiscuous mode [ 56.585080][ T5129] hsr_slave_1: entered promiscuous mode [ 56.592051][ T5129] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.600992][ T5129] Cannot create hsr debugfs directory [ 56.631320][ T5122] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 56.676182][ T5122] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 56.692882][ T5122] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 56.734382][ T5122] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 56.820488][ T5116] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.858591][ T5116] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.882911][ T5116] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.895436][ T5116] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.989073][ T5117] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 56.999237][ T5117] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.011940][ T5117] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.023179][ T5117] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.130900][ T5129] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 57.143179][ T5129] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 57.184600][ T5129] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 57.195297][ T5129] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.250675][ T5120] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 57.271126][ T5122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.277968][ T5120] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 57.287914][ T5120] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 57.305002][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.317410][ T5120] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 57.347995][ T5122] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.400530][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.407708][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.421715][ T784] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.428834][ T784] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.452278][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.475494][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.521466][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.552389][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.559552][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.571967][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.579264][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.637660][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.644798][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.681597][ T5170] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.688768][ T5170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.810456][ T5116] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 57.821648][ T4491] Bluetooth: hci0: command tx timeout [ 57.860259][ T5129] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.899572][ T4491] Bluetooth: hci4: command tx timeout [ 57.905010][ T4491] Bluetooth: hci3: command tx timeout [ 57.912801][ T53] Bluetooth: hci1: command tx timeout [ 57.963033][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.976876][ T5129] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.978567][ T4491] Bluetooth: hci2: command tx timeout [ 58.045622][ T5122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.067701][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.074891][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.086448][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.093618][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.136090][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.182834][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.190091][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.246539][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.283372][ T5122] veth0_vlan: entered promiscuous mode [ 58.308879][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.316034][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.355125][ T5122] veth1_vlan: entered promiscuous mode [ 58.376380][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.507132][ T5120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.535361][ T5120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.633195][ T5122] veth0_macvtap: entered promiscuous mode [ 58.667817][ T5129] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.701785][ T5122] veth1_macvtap: entered promiscuous mode [ 58.716766][ T5117] veth0_vlan: entered promiscuous mode [ 58.746628][ T5117] veth1_vlan: entered promiscuous mode [ 58.817478][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.836167][ T5122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.857422][ T5116] veth0_vlan: entered promiscuous mode [ 58.880892][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.915373][ T5116] veth1_vlan: entered promiscuous mode [ 58.931537][ T5122] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.941561][ T5122] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.951382][ T5122] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.961342][ T5122] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.982232][ T5117] veth0_macvtap: entered promiscuous mode [ 59.026388][ T5117] veth1_macvtap: entered promiscuous mode [ 59.044843][ T5129] veth0_vlan: entered promiscuous mode [ 59.087767][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.105515][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.117639][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.131039][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.141996][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.152931][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.186551][ T5120] veth0_vlan: entered promiscuous mode [ 59.203561][ T5120] veth1_vlan: entered promiscuous mode [ 59.210717][ T5116] veth0_macvtap: entered promiscuous mode [ 59.220545][ T5129] veth1_vlan: entered promiscuous mode [ 59.247195][ T5117] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.257045][ T5117] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.268244][ T5117] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.276961][ T5117] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.313338][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.319808][ T5116] veth1_macvtap: entered promiscuous mode [ 59.327072][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.367373][ T5129] veth0_macvtap: entered promiscuous mode [ 59.379190][ T5129] veth1_macvtap: entered promiscuous mode [ 59.401847][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.414721][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.425997][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.436796][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.447876][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.461017][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.472453][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.482844][ T5116] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.493769][ T5116] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.505849][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.541159][ T5116] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.550458][ T5116] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.559884][ T5116] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.569749][ T5116] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.591201][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.602293][ T2435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.607516][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.618064][ T2435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.625654][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.639662][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.649771][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.660391][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.674359][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.686585][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.697135][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.709010][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.719664][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.729506][ T5129] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.740223][ T5129] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.751753][ T5129] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.806433][ T5129] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.824383][ T5129] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.833986][ T5129] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.842844][ T5129] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.901099][ T4491] Bluetooth: hci0: command tx timeout [ 59.921718][ T5120] veth0_macvtap: entered promiscuous mode [ 59.979201][ T4491] Bluetooth: hci4: command tx timeout [ 59.984655][ T4491] Bluetooth: hci3: command tx timeout [ 59.990315][ T53] Bluetooth: hci1: command tx timeout [ 60.010612][ T785] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.022193][ T5120] veth1_macvtap: entered promiscuous mode [ 60.032544][ T785] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.058409][ T4491] Bluetooth: hci2: command tx timeout [ 60.115500][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.139142][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.150295][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.161591][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.171591][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.182154][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.192171][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.209778][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.223189][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.255248][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.266126][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.268016][ T2482] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.280780][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.296334][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.298531][ T2482] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.307053][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.325090][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.336074][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.346681][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.362315][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.388608][ T2435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.401267][ T2435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.444849][ T5120] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.457811][ T5120] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.470841][ T5120] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.479693][ T5120] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.517423][ T5208] syzkaller0: entered promiscuous mode [ 60.523134][ T5208] syzkaller0: entered allmulticast mode [ 60.568784][ T2435] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.576640][ T2435] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.584075][ T5167] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.584112][ T5167] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.859346][ T5217] Zero length message leads to an empty skb [ 61.495294][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.517515][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.737775][ T5224] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 61.785674][ T5224] team0: Device ipvlan1 failed to register rx_handler [ 61.836392][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.876009][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.896376][ T5224] syz-executor.1 (5224) used greatest stack depth: 18832 bytes left [ 61.981229][ T4491] Bluetooth: hci0: command tx timeout [ 61.995873][ T5170] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.009548][ T5170] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.059487][ T53] Bluetooth: hci1: command tx timeout [ 62.059495][ T5121] Bluetooth: hci4: command tx timeout [ 62.074865][ T4491] Bluetooth: hci3: command tx timeout [ 62.139345][ T4491] Bluetooth: hci2: command tx timeout [ 62.482729][ T5245] syzkaller0: entered promiscuous mode [ 62.493036][ T5245] syzkaller0: entered allmulticast mode [ 63.010635][ T5275] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 63.980890][ T5262] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 64.001343][ T5262] team0: Device ipvlan1 failed to register rx_handler [ 64.294006][ T5295] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 65.062229][ T5320] syzkaller0: entered promiscuous mode [ 65.091132][ T5320] syzkaller0: entered allmulticast mode [ 65.325748][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 65.396218][ T5333] vlan2: entered allmulticast mode [ 65.413471][ T5333] bond0: entered allmulticast mode [ 65.428359][ T5333] bond_slave_0: entered allmulticast mode [ 65.452652][ T5333] bond_slave_1: entered allmulticast mode [ 65.517364][ T5333] bond0: left allmulticast mode [ 65.524296][ T5339] Bluetooth: MGMT ver 1.22 [ 65.534212][ T5333] bond_slave_0: left allmulticast mode [ 65.557951][ T5333] bond_slave_1: left allmulticast mode [ 65.816220][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.076196][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 66.084976][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 66.095512][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 66.110426][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 66.123121][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 66.130600][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 67.097191][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.239473][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 67.573767][ T5388] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.856682][ T5397] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 67.913085][ T35] bridge_slave_1: left allmulticast mode [ 67.933899][ T35] bridge_slave_1: left promiscuous mode [ 67.942129][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.984392][ T35] bridge_slave_0: left allmulticast mode [ 68.003906][ T35] bridge_slave_0: left promiscuous mode [ 68.016005][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.218923][ T53] Bluetooth: hci1: command tx timeout [ 68.316721][ T5417] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 68.503580][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 68.517074][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 68.528596][ T35] bond0 (unregistering): Released all slaves [ 68.731258][ T5409] syzkaller0: entered promiscuous mode [ 68.736910][ T5409] syzkaller0: entered allmulticast mode [ 68.895192][ T5426] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.903246][ T5426] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.913907][ T5426] bridge0: entered allmulticast mode [ 68.956119][ T5428] bridge0: port 2(bridge_slave_1) entered disabled state [ 68.963826][ T5428] bridge0: port 1(bridge_slave_0) entered disabled state [ 68.983817][ T5428] bridge0: entered allmulticast mode [ 69.005111][ T5429] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.012524][ T5429] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.020392][ T5429] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.027576][ T5429] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.040273][ T5429] bridge0: entered promiscuous mode [ 69.135771][ T5430] bridge0: port 2(bridge_slave_1) entered blocking state [ 69.143035][ T5430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 69.150541][ T5430] bridge0: port 1(bridge_slave_0) entered blocking state [ 69.157704][ T5430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 69.176542][ T5430] bridge0: entered promiscuous mode [ 70.298355][ T53] Bluetooth: hci1: command tx timeout [ 70.327371][ T5449] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 70.367303][ T5457] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 70.382730][ T5455] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.499459][ T5358] chnl_net:caif_netlink_parms(): no params data found [ 70.590540][ T35] hsr_slave_0: left promiscuous mode [ 70.597953][ T35] hsr_slave_1: left promiscuous mode [ 70.676528][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.706145][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 70.769656][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 70.777094][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 70.945204][ T35] veth1_macvtap: left promiscuous mode [ 70.970954][ T35] veth0_macvtap: left promiscuous mode [ 70.976625][ T35] veth1_vlan: left promiscuous mode [ 71.004634][ T35] veth0_vlan: left promiscuous mode [ 71.204574][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 71.356867][ T5502] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 71.664231][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.672433][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.715080][ T35] team0 (unregistering): Port device team_slave_1 removed [ 71.748194][ T35] team0 (unregistering): Port device team_slave_0 removed [ 71.979294][ T5510] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 72.204926][ T5482] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.212243][ T5482] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.223847][ T5482] bridge0: left promiscuous mode [ 72.239202][ T5488] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.246355][ T5488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 72.253858][ T5488] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.261056][ T5488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 72.268918][ T5488] bridge0: entered promiscuous mode [ 72.388253][ T53] Bluetooth: hci1: command tx timeout [ 72.527568][ T5524] sctp: [Deprecated]: syz-executor.4 (pid 5524) Use of int in maxseg socket option. [ 72.527568][ T5524] Use struct sctp_assoc_value instead [ 72.762351][ T5538] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 72.791969][ T5358] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.802850][ T5358] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.811279][ T5358] bridge_slave_0: entered allmulticast mode [ 72.829233][ T5358] bridge_slave_0: entered promiscuous mode [ 72.919047][ T5358] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.944519][ T5544] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 72.963879][ T5358] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.005414][ T5358] bridge_slave_1: entered allmulticast mode [ 73.007229][ T5552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 73.050956][ T5358] bridge_slave_1: entered promiscuous mode [ 73.071349][ T5551] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.078664][ T5551] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.121722][ T5551] bridge0: left promiscuous mode [ 73.248559][ T5558] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.356765][ T5358] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.384175][ T5558] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.493472][ T5358] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.524151][ T5565] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.781000][ T5358] team0: Port device team_slave_0 added [ 73.826943][ T5358] team0: Port device team_slave_1 added [ 74.034750][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.067052][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.148661][ T5358] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.214641][ T5358] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.268557][ T5358] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.339225][ T5358] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.370125][ T5605] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 74.458280][ T53] Bluetooth: hci1: command tx timeout [ 74.689822][ T5358] hsr_slave_0: entered promiscuous mode [ 74.740853][ T5358] hsr_slave_1: entered promiscuous mode [ 74.765230][ T5358] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 74.794719][ T5358] Cannot create hsr debugfs directory [ 74.835735][ T5627] netlink: 'syz-executor.2': attribute type 13 has an invalid length. [ 74.889520][ T5627] erspan0: refused to change device tx_queue_len [ 74.898899][ T5627] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 75.547507][ T5656] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 75.604803][ T5666] sctp: [Deprecated]: syz-executor.0 (pid 5666) Use of int in maxseg socket option. [ 75.604803][ T5666] Use struct sctp_assoc_value instead [ 76.704492][ T5358] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.723744][ T5707] __nla_validate_parse: 21 callbacks suppressed [ 76.723760][ T5707] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 76.743972][ T5358] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.801957][ T25] cfg80211: failed to load regulatory.db [ 76.968492][ T5358] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.083608][ T5358] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.125847][ T5717] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 77.160502][ T5717] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 77.192353][ T5717] netlink: 128512 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.395340][ T29] audit: type=1804 audit(1717291922.292:2): pid=5726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894316214/syzkaller.nhCaNW/33/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 77.488949][ T5358] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.556281][ T5729] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.603180][ T5358] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.617434][ T5733] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 77.652462][ T5733] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 77.711138][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.718676][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.782843][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.790064][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.871934][ T5737] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 77.898411][ T5737] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 77.942525][ T5737] netlink: 128512 bytes leftover after parsing attributes in process `syz-executor.2'. [ 78.399529][ T5760] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 78.426859][ T5760] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.3'. [ 78.519405][ T5760] erspan0: refused to change device tx_queue_len [ 78.539188][ T5760] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 78.632520][ T5358] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.821856][ T5358] veth0_vlan: entered promiscuous mode [ 78.885323][ T5358] veth1_vlan: entered promiscuous mode [ 79.064980][ T5786] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 79.086178][ T5786] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 79.113628][ T5785] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 79.130086][ T5786] netlink: 128512 bytes leftover after parsing attributes in process `syz-executor.3'. [ 79.151198][ T5358] veth0_macvtap: entered promiscuous mode [ 79.157030][ T29] audit: type=1804 audit(1717291924.042:3): pid=5791 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir894316214/syzkaller.nhCaNW/39/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 79.190308][ T5785] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 79.235075][ T5358] veth1_macvtap: entered promiscuous mode [ 79.286649][ T5785] netlink: 128512 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.335973][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.382639][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.420053][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.454504][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.483634][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.521640][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.532716][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.559388][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.595108][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.683195][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.728464][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.766318][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.808072][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.817917][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.906419][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.943544][ T5358] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.957100][ T5358] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.977365][ T5358] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.007695][ T5358] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.040044][ T5358] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.052789][ T5358] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.064431][ T5358] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.283100][ T5210] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.307480][ T5210] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.439689][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.486342][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.721817][ T5851] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 80.940291][ T5865] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 81.069876][ T5875] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.571982][ T5909] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 81.657955][ T5914] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 81.727790][ T5917] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.593117][ T5960] syz_tun: entered promiscuous mode [ 82.655635][ T5960] ip6gretap0: entered promiscuous mode [ 83.244045][ T6004] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 84.027318][ T6035] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 84.074238][ T6035] File: /root/syzkaller-testdir2358668182/syzkaller.VdQ1so/74/memory.events PID: 6035 Comm: syz-executor.2 [ 84.753630][ T6093] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 84.764009][ T6093] __nla_validate_parse: 1 callbacks suppressed [ 84.764023][ T6093] netlink: 212848 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.816884][ T6093] xt_hashlimit: invalid rate [ 85.682869][ T6125] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 85.716761][ T6125] netlink: 212848 bytes leftover after parsing attributes in process `syz-executor.0'. [ 85.767024][ T6125] xt_hashlimit: invalid rate [ 85.808377][ T6129] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 85.838139][ T6129] netlink: 212848 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.923307][ T6129] xt_hashlimit: invalid rate [ 86.032417][ T6138] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 86.069701][ T6138] File: /root/syzkaller-testdir284501550/syzkaller.UwaIp6/74/memory.events PID: 6138 Comm: syz-executor.3 [ 86.247662][ T6104] IPv6: sit1: Disabled Multicast RS [ 86.290179][ T6147] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 86.304526][ T6147] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 86.316047][ T6147] 0ªX¹¦Dö»: entered allmulticast mode [ 87.139851][ T6175] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 87.186532][ T6181] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 87.211338][ T6181] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 87.242541][ T6181] 0ªX¹¦Dö»: entered allmulticast mode [ 88.757713][ T6200] IPv6: sit1: Disabled Multicast RS [ 88.807791][ T6208] IPv6: sit2: Disabled Multicast RS [ 90.224808][ T6292] Cannot find del_set index 0 as target [ 90.673302][ T6319] netlink: 240 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.977570][ T6338] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 90.989089][ T6338] netlink: 211132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 91.063033][ T6338] IPv6: addrconf: prefix option has invalid lifetime [ 91.406943][ T6367] tipc: Started in network mode [ 91.417059][ T6367] tipc: Node identity f0, cluster identity 4711 [ 91.426185][ T6367] tipc: Node number set to 240 [ 91.516541][ T6372] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.028840][ T6405] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.038740][ T6405] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 92.059737][ T6405] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 92.298472][ T53] Bluetooth: hci1: command tx timeout [ 92.343410][ T6424] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.840957][ T6448] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 92.870160][ T6448] IPv6: NLM_F_CREATE should be specified when creating new route [ 92.898788][ T6448] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 92.906289][ T6448] IPv6: NLM_F_CREATE should be set when creating new route [ 92.913596][ T6448] IPv6: NLM_F_CREATE should be set when creating new route [ 92.920880][ T6448] IPv6: NLM_F_CREATE should be set when creating new route [ 93.121890][ T6465] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 93.276470][ T6475] netlink: zone id is out of range [ 93.294967][ T6475] netlink: zone id is out of range [ 93.316896][ T6475] netlink: set zone limit has 4 unknown bytes [ 93.443746][ T6488] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 93.484287][ T6489] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 93.511249][ T6489] IPv6: NLM_F_CREATE should be specified when creating new route [ 93.529111][ T6489] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 93.536388][ T6489] IPv6: NLM_F_CREATE should be set when creating new route [ 93.543724][ T6489] IPv6: NLM_F_CREATE should be set when creating new route [ 93.550982][ T6489] IPv6: NLM_F_CREATE should be set when creating new route [ 94.065865][ T6514] netlink: zone id is out of range [ 94.100096][ T6514] netlink: zone id is out of range [ 94.112975][ T6518] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.188731][ T6514] netlink: set zone limit has 4 unknown bytes [ 94.378916][ T53] Bluetooth: hci1: command tx timeout [ 94.441826][ T4491] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 94.457737][ T4491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 94.466439][ T6533] sctp: [Deprecated]: syz-executor.3 (pid 6533) Use of int in max_burst socket option deprecated. [ 94.466439][ T6533] Use struct sctp_assoc_value instead [ 94.466840][ T4491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 94.501633][ T4491] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 94.512085][ T4491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 94.525342][ T4491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 94.766922][ T6541] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 94.790777][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.950962][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.064403][ T6522] IPv6: sit1: Disabled Multicast RS [ 95.124650][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.362710][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.764795][ T6577] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-xor(2) [ 95.897986][ T6530] chnl_net:caif_netlink_parms(): no params data found [ 95.983722][ T12] bridge_slave_1: left allmulticast mode [ 95.994390][ T12] bridge_slave_1: left promiscuous mode [ 96.020074][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.031613][ T12] bridge_slave_0: left allmulticast mode [ 96.037379][ T12] bridge_slave_0: left promiscuous mode [ 96.044817][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.560342][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.576945][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.600701][ T12] bond0 (unregistering): Released all slaves [ 96.619585][ T53] Bluetooth: hci3: command tx timeout [ 96.654474][ T6601] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2047) [ 96.682655][ T6601] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 96.729363][ T6604] hsr_slave_0: left promiscuous mode [ 96.747435][ T6604] hsr_slave_1: left promiscuous mode [ 97.044677][ T6632] team0: Port device vlan0 added [ 97.057926][ T6530] bridge0: port 1(bridge_slave_0) entered blocking state [ 97.087269][ T6530] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.122014][ T6530] bridge_slave_0: entered allmulticast mode [ 97.149576][ T6530] bridge_slave_0: entered promiscuous mode [ 97.189047][ T6530] bridge0: port 2(bridge_slave_1) entered blocking state [ 97.198016][ T6530] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.221355][ T6530] bridge_slave_1: entered allmulticast mode [ 97.242999][ T6530] bridge_slave_1: entered promiscuous mode [ 97.293099][ T6644] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.302237][ T6644] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.311043][ T6644] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.319944][ T6644] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.353542][ T6644] vxlan0: entered promiscuous mode [ 97.373965][ T6644] vxlan0: entered allmulticast mode [ 97.579002][ T12] hsr_slave_0: left promiscuous mode [ 97.605996][ T12] hsr_slave_1: left promiscuous mode [ 97.660306][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.696853][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.738895][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.766829][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.847696][ T12] veth1_macvtap: left promiscuous mode [ 97.868311][ T12] veth0_macvtap: left promiscuous mode [ 97.902188][ T12] veth1_vlan: left promiscuous mode [ 97.907547][ T12] veth0_vlan: left promiscuous mode [ 97.971744][ T4491] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.982460][ T4491] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.991243][ T4491] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.000669][ T4491] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.013828][ T4491] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.021365][ T4491] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.376221][ T12] team0 (unregistering): Port device team_slave_1 removed [ 98.417523][ T12] team0 (unregistering): Port device team_slave_0 removed [ 98.708365][ T53] Bluetooth: hci3: command tx timeout [ 98.727267][ T6530] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 98.785958][ T6670] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.794883][ T6670] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.803724][ T6670] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.812526][ T6670] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.825125][ T6670] vxlan0: entered promiscuous mode [ 98.833513][ T6670] vxlan0: entered allmulticast mode [ 98.842448][ T6530] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 98.990192][ T6530] team0: Port device team_slave_0 added [ 99.042864][ T6530] team0: Port device team_slave_1 added [ 99.240206][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.247191][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.366857][ T6530] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.401245][ T6530] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.414073][ T6530] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.486239][ T6530] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.683678][ T6530] hsr_slave_0: entered promiscuous mode [ 99.733588][ T6530] hsr_slave_1: entered promiscuous mode [ 99.763508][ T6692] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 99.808718][ T6692] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 100.039983][ T12] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.068754][ T53] Bluetooth: hci1: command tx timeout [ 100.104350][ T6699] bond0: (slave bond_slave_0): Releasing backup interface [ 100.175286][ T12] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.248877][ T6665] chnl_net:caif_netlink_parms(): no params data found [ 100.303352][ T12] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.391276][ T12] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.731726][ T6665] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.746709][ T6665] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.756170][ T6665] bridge_slave_0: entered allmulticast mode [ 100.782954][ T53] Bluetooth: hci3: command tx timeout [ 100.791733][ T6665] bridge_slave_0: entered promiscuous mode [ 100.829694][ T6665] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.836891][ T6665] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.865420][ T6665] bridge_slave_1: entered allmulticast mode [ 100.876027][ T6665] bridge_slave_1: entered promiscuous mode [ 100.955573][ T12] bridge_slave_1: left allmulticast mode [ 100.961674][ T12] bridge_slave_1: left promiscuous mode [ 100.967470][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.981075][ T12] bridge_slave_0: left allmulticast mode [ 100.992799][ T12] bridge_slave_0: left promiscuous mode [ 101.000302][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.516845][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 101.531140][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 101.542578][ T12] bond0 (unregistering): Released all slaves [ 101.562518][ T6665] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.621700][ T6665] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.776370][ T12] tipc: Left network mode [ 101.780638][ T6665] team0: Port device team_slave_0 added [ 101.790607][ T6665] team0: Port device team_slave_1 added [ 101.857868][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.893231][ T6739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 101.960128][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.967543][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.055532][ T6665] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 102.139477][ T53] Bluetooth: hci1: command tx timeout [ 102.196803][ T6665] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 102.207757][ T6665] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 102.234195][ T6665] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 102.252959][ T6530] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 102.282588][ T6530] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 102.306843][ T6530] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 102.344326][ T6530] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 102.600868][ T12] hsr_slave_0: left promiscuous mode [ 102.616270][ T12] hsr_slave_1: left promiscuous mode [ 102.625707][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 102.638974][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 102.657473][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 102.664986][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 102.687440][ T12] veth1_macvtap: left promiscuous mode [ 102.705824][ T12] veth0_macvtap: left promiscuous mode [ 102.720051][ T12] veth1_vlan: left promiscuous mode [ 102.725330][ T12] veth0_vlan: left promiscuous mode [ 102.868237][ T53] Bluetooth: hci3: command tx timeout [ 103.297272][ T12] team0 (unregistering): Port device team_slave_1 removed [ 103.356706][ T12] team0 (unregistering): Port device team_slave_0 removed [ 103.673377][ T6665] hsr_slave_0: entered promiscuous mode [ 103.683940][ T6665] hsr_slave_1: entered promiscuous mode [ 103.690662][ T6665] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 103.699928][ T6665] Cannot create hsr debugfs directory [ 103.834527][ T6822] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.219618][ T53] Bluetooth: hci1: command tx timeout [ 104.394788][ T6530] 8021q: adding VLAN 0 to HW filter on device bond0 [ 104.516771][ T6530] 8021q: adding VLAN 0 to HW filter on device team0 [ 104.577263][ T5170] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.584488][ T5170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 104.619840][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.626984][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 104.686800][ T6850] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.827047][ T6665] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 104.871094][ T6665] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 104.910144][ T6665] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 104.931198][ T6665] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 105.206567][ T6877] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 105.228892][ T6867] lo speed is unknown, defaulting to 1000 [ 105.236166][ T6867] lo speed is unknown, defaulting to 1000 [ 105.283107][ T6530] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.297016][ T6867] lo speed is unknown, defaulting to 1000 [ 105.315531][ T6867] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 105.394009][ T6867] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 105.444444][ T6665] 8021q: adding VLAN 0 to HW filter on device bond0 [ 105.453779][ T6530] veth0_vlan: entered promiscuous mode [ 105.521825][ T6665] 8021q: adding VLAN 0 to HW filter on device team0 [ 105.542567][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 105.549736][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 105.568455][ T6892] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.589982][ T6867] lo speed is unknown, defaulting to 1000 [ 105.604311][ T6530] veth1_vlan: entered promiscuous mode [ 105.636328][ T6867] lo speed is unknown, defaulting to 1000 [ 105.643576][ T6892] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 105.675857][ T6892] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 105.700119][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.707255][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 105.731698][ T6867] lo speed is unknown, defaulting to 1000 [ 105.774142][ T6867] lo speed is unknown, defaulting to 1000 [ 105.782173][ T6867] lo speed is unknown, defaulting to 1000 [ 105.800596][ T6867] lo speed is unknown, defaulting to 1000 [ 105.864853][ T6530] veth0_macvtap: entered promiscuous mode [ 105.876528][ T6530] veth1_macvtap: entered promiscuous mode [ 105.910570][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.927522][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.937966][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.950156][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.964554][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.987105][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.999857][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.074891][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.101442][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.113821][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.124533][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.142913][ T6530] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.167946][ T6530] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.221847][ T6530] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.250879][ T6530] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.259743][ T6530] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.270029][ T6530] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.279575][ T6530] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.300674][ T53] Bluetooth: hci1: command tx timeout [ 106.384468][ T6665] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 106.457537][ T6917] syzkaller0: entered allmulticast mode [ 106.492118][ T6922] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.565422][ T6665] veth0_vlan: entered promiscuous mode [ 106.583101][ T6925] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 106.613585][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.625335][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.671862][ T6665] veth1_vlan: entered promiscuous mode [ 106.712405][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.743850][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.759787][ T6665] veth0_macvtap: entered promiscuous mode [ 106.772423][ T6665] veth1_macvtap: entered promiscuous mode [ 106.852760][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.882490][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.900905][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.912264][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.928714][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.943732][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.954849][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.970192][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.982735][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.991711][ T6928] lo speed is unknown, defaulting to 1000 [ 106.995265][ C0] vxcan0: j1939_tp_rxtimer: 0xffff8880485f8c00: rx timeout, send abort [ 106.999398][ T6932] smc: net device vlan0 applied user defined pnetid SYZ1 [ 107.007582][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880485f8c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 107.022090][ T6933] siw: device registration error -23 [ 107.033984][ T6935] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.057051][ T6935] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 107.074310][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.125307][ T6929] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 107.140827][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.159132][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.172507][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.185508][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.195893][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.206739][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.217179][ T6665] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.228157][ T6665] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.239654][ T6665] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.299174][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.343498][ T6665] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.353929][ T6665] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.357503][ T6946] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 107.367767][ T6665] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.387687][ T6665] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.679466][ T25] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.705705][ T25] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.706591][ T6953] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 107.810841][ T6953] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 107.867755][ T2452] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.890126][ T2452] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.899023][ T5210] lo speed is unknown, defaulting to 1000 [ 107.899618][ T6958] syzkaller0: entered allmulticast mode [ 107.937798][ T6953] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 107.974749][ T25] lo speed is unknown, defaulting to 1000 [ 108.016667][ T6966] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.070112][ T6953] syz-executor.4 (6953) used greatest stack depth: 17872 bytes left [ 108.090568][ T6966] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 108.151066][ T6974] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 108.226725][ T6976] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 108.600196][ T7000] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 108.649522][ T7000] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 108.800437][ T7007] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.913277][ T7009] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.345398][ T7021] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 109.928365][ T7045] syzkaller0: entered allmulticast mode [ 110.104629][ T7059] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 111.351833][ T7113] Illegal XDP return value 4294967274 on prog (id 208) dev N/A, expect packet loss! [ 111.596690][ T7124] validate_nla: 1 callbacks suppressed [ 111.596708][ T7124] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 111.808391][ T7131] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 111.979367][ T7138] xt_socket: unknown flags 0x4 [ 112.022332][ T7139] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 112.465950][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 112.713795][ T7162] __nla_validate_parse: 4 callbacks suppressed [ 112.713821][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 112.791273][ T7165] af_packet: tpacket_rcv: packet too big, clamped from 212960 to 3952. macoff=96 [ 112.793353][ T7162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 112.807854][ T7162] IPv6: NLM_F_CREATE should be set when creating new route [ 112.817404][ T7165] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 112.836965][ T7165] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.852655][ T7162] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 113.848281][ T7209] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.012646][ T7213] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 114.350776][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.745565][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 115.777418][ T7294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 115.784732][ T7294] IPv6: NLM_F_CREATE should be set when creating new route [ 115.836968][ T7294] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.233773][ T7313] tap0: tun_chr_ioctl cmd 1074025680 [ 116.250736][ T7313] tap0: tun_chr_ioctl cmd 2147767520 [ 116.436188][ T7324] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.555242][ T7326] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.709044][ T7326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 116.716327][ T7326] IPv6: NLM_F_CREATE should be set when creating new route [ 116.753082][ T7326] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.540621][ T7362] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.564731][ T7362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.572056][ T7362] IPv6: NLM_F_CREATE should be set when creating new route [ 117.640213][ T7362] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.803158][ T7373] syz-executor.0[7373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.804469][ T7373] syz-executor.0[7373] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.862625][ T7376] syz-executor.2[7376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.888394][ T7376] syz-executor.2[7376] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 117.996888][ T7381] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.126515][ T7386] veth0_to_hsr: entered promiscuous mode [ 118.155723][ T7385] veth0_to_hsr: left promiscuous mode [ 118.363238][ T7089] [ 118.365594][ T7089] ====================================================== [ 118.372601][ T7089] WARNING: possible circular locking dependency detected [ 118.379600][ T7089] 6.10.0-rc1-syzkaller-00110-g45c0a209dcf2 #0 Not tainted [ 118.386689][ T7089] ------------------------------------------------------ [ 118.393689][ T7089] syz-executor.3/7089 is trying to acquire lock: [ 118.399996][ T7089] ffff888021e56f18 (&sighand->siglock){-.-.}-{2:2}, at: __lock_task_sighand+0x149/0x2d0 [ 118.409756][ T7089] [ 118.409756][ T7089] but task is already holding lock: [ 118.417102][ T7089] ffff8880b9438828 (lock#11){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 118.427452][ T7089] [ 118.427452][ T7089] which lock already depends on the new lock. [ 118.427452][ T7089] [ 118.437838][ T7089] [ 118.437838][ T7089] the existing dependency chain (in reverse order) is: [ 118.446833][ T7089] [ 118.446833][ T7089] -> #2 (lock#11){+.+.}-{2:2}: [ 118.453776][ T7089] lock_acquire+0x1ed/0x550 [ 118.458787][ T7089] __mmap_lock_do_trace_acquire_returned+0xa8/0x630 [ 118.465883][ T7089] stack_map_get_build_id_offset+0x9af/0x9d0 [ 118.472372][ T7089] __bpf_get_stack+0x4ad/0x5a0 [ 118.477643][ T7089] bpf_get_stack_raw_tp+0x1a3/0x240 [ 118.483365][ T7089] bpf_prog_16ecb682114cf56a+0x2/0x2a [ 118.489268][ T7089] bpf_trace_run2+0x2ec/0x540 [ 118.494459][ T7089] trace_tlb_flush+0x118/0x140 [ 118.499735][ T7089] switch_mm_irqs_off+0x7cb/0xae0 [ 118.505275][ T7089] __schedule+0x1066/0x4a20 [ 118.510294][ T7089] preempt_schedule_irq+0xfb/0x1c0 [ 118.515917][ T7089] irqentry_exit+0x5e/0x90 [ 118.520842][ T7089] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 118.527332][ T7089] stack_depot_save_flags+0x3e/0x830 [ 118.533128][ T7089] save_stack+0x109/0x1f0 [ 118.537972][ T7089] __set_page_owner+0x92/0x800 [ 118.543245][ T7089] post_alloc_hook+0x1f3/0x230 [ 118.548525][ T7089] get_page_from_freelist+0x2e2d/0x2ee0 [ 118.554581][ T7089] __alloc_pages_noprof+0x256/0x6c0 [ 118.560291][ T7089] alloc_pages_mpol_noprof+0x3e8/0x680 [ 118.566263][ T7089] __vmalloc_node_range_noprof+0x971/0x1460 [ 118.572664][ T7089] vmalloc_user_noprof+0x74/0x80 [ 118.578110][ T7089] kcov_ioctl+0x59/0x630 [ 118.582859][ T7089] __se_sys_ioctl+0xfc/0x170 [ 118.587956][ T7089] do_syscall_64+0xf3/0x230 [ 118.592966][ T7089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.599371][ T7089] [ 118.599371][ T7089] -> #1 (&rq->__lock){-.-.}-{2:2}: [ 118.606655][ T7089] lock_acquire+0x1ed/0x550 [ 118.611664][ T7089] _raw_spin_lock_nested+0x31/0x40 [ 118.617282][ T7089] raw_spin_rq_lock_nested+0x2a/0x140 [ 118.623164][ T7089] sched_mm_cid_exit_signals+0x17b/0x4b0 [ 118.629316][ T7089] exit_signals+0x2a1/0x5c0 [ 118.634331][ T7089] do_exit+0x6b4/0x27e0 [ 118.638991][ T7089] __pfx___ia32_sys_exit+0x0/0x10 [ 118.644532][ T7089] do_syscall_64+0xf3/0x230 [ 118.649539][ T7089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.655937][ T7089] [ 118.655937][ T7089] -> #0 (&sighand->siglock){-.-.}-{2:2}: [ 118.663744][ T7089] validate_chain+0x18e0/0x5900 [ 118.669102][ T7089] __lock_acquire+0x1346/0x1fd0 [ 118.674473][ T7089] lock_acquire+0x1ed/0x550 [ 118.679501][ T7089] _raw_spin_lock_irqsave+0xd5/0x120 [ 118.685302][ T7089] __lock_task_sighand+0x149/0x2d0 [ 118.690934][ T7089] group_send_sig_info+0x274/0x310 [ 118.696561][ T7089] bpf_send_signal_common+0x2dd/0x430 [ 118.702439][ T7089] bpf_send_signal_thread+0x16/0x20 [ 118.708144][ T7089] bpf_prog_16ecb682114cf56a+0x22/0x2a [ 118.714106][ T7089] bpf_trace_run4+0x334/0x590 [ 118.719295][ T7089] __mmap_lock_do_trace_acquire_returned+0x5c8/0x630 [ 118.726476][ T7089] lock_mm_and_find_vma+0x213/0x2f0 [ 118.732193][ T7089] exc_page_fault+0x1bf/0x8c0 [ 118.737395][ T7089] asm_exc_page_fault+0x26/0x30 [ 118.742755][ T7089] rep_movs_alternative+0x30/0x70 [ 118.748289][ T7089] _copy_from_user+0x8c/0xe0 [ 118.753389][ T7089] copy_msghdr_from_user+0xae/0x680 [ 118.759093][ T7089] do_recvmmsg+0x40f/0xae0 [ 118.764013][ T7089] __x64_sys_recvmmsg+0x199/0x250 [ 118.769540][ T7089] do_syscall_64+0xf3/0x230 [ 118.774550][ T7089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 118.780948][ T7089] [ 118.780948][ T7089] other info that might help us debug this: [ 118.780948][ T7089] [ 118.791160][ T7089] Chain exists of: [ 118.791160][ T7089] &sighand->siglock --> &rq->__lock --> lock#11 [ 118.791160][ T7089] [ 118.803327][ T7089] Possible unsafe locking scenario: [ 118.803327][ T7089] [ 118.810760][ T7089] CPU0 CPU1 [ 118.816105][ T7089] ---- ---- [ 118.821450][ T7089] lock(lock#11); [ 118.825168][ T7089] lock(&rq->__lock); [ 118.831741][ T7089] lock(lock#11); [ 118.837976][ T7089] lock(&sighand->siglock); [ 118.842552][ T7089] [ 118.842552][ T7089] *** DEADLOCK *** [ 118.842552][ T7089] [ 118.850688][ T7089] 5 locks held by syz-executor.3/7089: [ 118.856131][ T7089] #0: ffff88807d570198 (&mm->mmap_lock){++++}-{3:3}, at: lock_mm_and_find_vma+0x32/0x2f0 [ 118.866050][ T7089] #1: ffff8880b9438828 (lock#11){+.+.}-{2:2}, at: __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 118.876835][ T7089] #2: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: get_mm_memcg_path+0xb1/0x600 [ 118.886394][ T7089] #3: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run4+0x244/0x590 [ 118.895785][ T7089] #4: ffffffff8e333f60 (rcu_read_lock){....}-{1:2}, at: __lock_task_sighand+0x29/0x2d0 [ 118.905532][ T7089] [ 118.905532][ T7089] stack backtrace: [ 118.911417][ T7089] CPU: 0 PID: 7089 Comm: syz-executor.3 Not tainted 6.10.0-rc1-syzkaller-00110-g45c0a209dcf2 #0 [ 118.921812][ T7089] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 118.931858][ T7089] Call Trace: [ 118.935127][ T7089] [ 118.938048][ T7089] dump_stack_lvl+0x241/0x360 [ 118.942718][ T7089] ? __pfx_dump_stack_lvl+0x10/0x10 [ 118.947907][ T7089] ? print_circular_bug+0x130/0x1a0 [ 118.953099][ T7089] check_noncircular+0x36a/0x4a0 [ 118.958032][ T7089] ? __pfx_check_noncircular+0x10/0x10 [ 118.963487][ T7089] ? lockdep_lock+0x123/0x2b0 [ 118.968159][ T7089] ? __pfx_validate_chain+0x10/0x10 [ 118.973358][ T7089] validate_chain+0x18e0/0x5900 [ 118.978208][ T7089] ? __pfx_validate_chain+0x10/0x10 [ 118.983396][ T7089] ? reacquire_held_locks+0x3eb/0x690 [ 118.988757][ T7089] ? __pfx_validate_chain+0x10/0x10 [ 118.993942][ T7089] ? validate_chain+0x11e/0x5900 [ 118.998872][ T7089] ? __pfx_validate_chain+0x10/0x10 [ 119.004060][ T7089] ? __pfx_reacquire_held_locks+0x10/0x10 [ 119.009775][ T7089] ? mark_lock+0x9a/0x350 [ 119.014090][ T7089] ? __pfx_validate_chain+0x10/0x10 [ 119.019284][ T7089] __lock_acquire+0x1346/0x1fd0 [ 119.024135][ T7089] lock_acquire+0x1ed/0x550 [ 119.028628][ T7089] ? __lock_task_sighand+0x149/0x2d0 [ 119.033911][ T7089] ? __pfx_lock_acquire+0x10/0x10 [ 119.038925][ T7089] ? __pfx_lock_acquire+0x10/0x10 [ 119.043939][ T7089] _raw_spin_lock_irqsave+0xd5/0x120 [ 119.049214][ T7089] ? __lock_task_sighand+0x149/0x2d0 [ 119.054491][ T7089] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 119.060374][ T7089] __lock_task_sighand+0x149/0x2d0 [ 119.065476][ T7089] ? __lock_task_sighand+0x29/0x2d0 [ 119.070664][ T7089] group_send_sig_info+0x274/0x310 [ 119.075765][ T7089] ? __pfx_group_send_sig_info+0x10/0x10 [ 119.081391][ T7089] bpf_send_signal_common+0x2dd/0x430 [ 119.086750][ T7089] ? __pfx_bpf_send_signal_common+0x10/0x10 [ 119.092630][ T7089] ? bpf_trace_run4+0x244/0x590 [ 119.097475][ T7089] bpf_send_signal_thread+0x16/0x20 [ 119.102668][ T7089] bpf_prog_16ecb682114cf56a+0x22/0x2a [ 119.108110][ T7089] bpf_trace_run4+0x334/0x590 [ 119.112777][ T7089] ? exc_int3+0xe/0x80 [ 119.116833][ T7089] ? __pfx_bpf_trace_run4+0x10/0x10 [ 119.122026][ T7089] ? __mmap_lock_do_trace_acquire_returned+0x50a/0x630 [ 119.128865][ T7089] __mmap_lock_do_trace_acquire_returned+0x5c8/0x630 [ 119.135529][ T7089] ? __mmap_lock_do_trace_acquire_returned+0x8f/0x630 [ 119.142281][ T7089] lock_mm_and_find_vma+0x213/0x2f0 [ 119.147470][ T7089] exc_page_fault+0x1bf/0x8c0 [ 119.152136][ T7089] asm_exc_page_fault+0x26/0x30 [ 119.156983][ T7089] RIP: 0010:rep_movs_alternative+0x30/0x70 [ 119.162779][ T7089] Code: f9 40 73 40 83 f9 08 73 21 85 c9 74 0f 8a 06 88 07 48 ff c7 48 ff c6 48 ff c9 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 <48> 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 [ 119.182369][ T7089] RSP: 0018:ffffc9001420f930 EFLAGS: 00050206 [ 119.188426][ T7089] RAX: ffffffff84af6001 RBX: 0000000020f81038 RCX: 0000000000000038 [ 119.196382][ T7089] RDX: 0000000000000001 RSI: 0000000020f81000 RDI: ffffc9001420f9c0 [ 119.204341][ T7089] RBP: ffffc9001420fa70 R08: ffffc9001420f9f7 R09: 1ffff92002841f3e [ 119.212303][ T7089] R10: dffffc0000000000 R11: fffff52002841f3f R12: 0000000020f81000 [ 119.220262][ T7089] R13: dffffc0000000000 R14: ffffc9001420f9c0 R15: 0000000000000038 [ 119.228225][ T7089] ? _copy_from_user+0x61/0xe0 [ 119.232987][ T7089] _copy_from_user+0x8c/0xe0 [ 119.237565][ T7089] copy_msghdr_from_user+0xae/0x680 [ 119.242752][ T7089] ? __pfx___might_resched+0x10/0x10 [ 119.248030][ T7089] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 119.253830][ T7089] ? __might_fault+0xaa/0x120 [ 119.258500][ T7089] do_recvmmsg+0x40f/0xae0 [ 119.262904][ T7089] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 119.269227][ T7089] ? __pfx_do_recvmmsg+0x10/0x10 [ 119.274171][ T7089] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 119.280053][ T7089] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 119.285933][ T7089] __x64_sys_recvmmsg+0x199/0x250 [ 119.290943][ T7089] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 119.296474][ T7089] ? do_syscall_64+0x100/0x230 [ 119.301230][ T7089] ? do_syscall_64+0xb6/0x230 [ 119.305897][ T7089] do_syscall_64+0xf3/0x230 [ 119.310388][ T7089] ? clear_bhb_loop+0x35/0x90 [ 119.315054][ T7089] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.320931][ T7089] RIP: 0033:0x7f1c8287cee9 [ 119.325331][ T7089] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 119.344921][ T7089] RSP: 002b:00007f1c836080c8 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 119.353322][ T7089] RAX: ffffffffffffffda RBX: 00007f1c829b4070 RCX: 00007f1c8287cee9 2024/06/02 01:32:44 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 119.361280][ T7089] RDX: 03ffffffffffff67 RSI: 0000000020002440 RDI: 0000000000000004 [ 119.369239][ T7089] RBP: 00007f1c828c947f R08: 0000000000000000 R09: 0000000000000000 [ 119.377194][ T7089] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 119.385151][ T7089] R13: 000000000000006e R14: 00007f1c829b4070 R15: 00007ffd59698dc8 [ 119.393114][ T7089]