[ OK ] Reached target Login Prompts. [ OK ] Reached target Multi-User System. [ OK ] Reached target Graphical Interface. Starting Update UTMP about System Runlevel Changes... [ OK ] Started Update UTMP about System Runlevel Changes. Debian GNU/Linux 9 syzkaller ttyS0 Warning: Permanently added '10.128.0.31' (ECDSA) to the list of known hosts. 2021/10/18 14:39:55 fuzzer started 2021/10/18 14:39:55 dialing manager at 10.128.0.169:45165 2021/10/18 14:39:55 syscalls: 1698 2021/10/18 14:39:55 code coverage: enabled 2021/10/18 14:39:55 comparison tracing: enabled 2021/10/18 14:39:55 extra coverage: enabled 2021/10/18 14:39:55 setuid sandbox: enabled 2021/10/18 14:39:55 namespace sandbox: enabled 2021/10/18 14:39:55 Android sandbox: /sys/fs/selinux/policy does not exist 2021/10/18 14:39:55 fault injection: enabled 2021/10/18 14:39:55 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2021/10/18 14:39:55 net packet injection: enabled 2021/10/18 14:39:55 net device setup: enabled 2021/10/18 14:39:55 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2021/10/18 14:39:55 devlink PCI setup: PCI device 0000:00:10.0 is not available 2021/10/18 14:39:55 USB emulation: enabled 2021/10/18 14:39:55 hci packet injection: enabled 2021/10/18 14:39:55 wifi device emulation: enabled 2021/10/18 14:39:55 802.15.4 emulation: enabled 2021/10/18 14:39:55 fetching corpus: 0, signal 0/2000 (executing program) syzkaller login: [ 66.976363][ T6528] cgroup: Unknown subsys name 'net' [ 66.988567][ T6528] cgroup: Unknown subsys name 'rlimit' 2021/10/18 14:39:56 fetching corpus: 50, signal 43628/47114 (executing program) 2021/10/18 14:39:56 fetching corpus: 100, signal 55496/60563 (executing program) 2021/10/18 14:39:56 fetching corpus: 150, signal 63748/70303 (executing program) 2021/10/18 14:39:56 fetching corpus: 200, signal 69202/77201 (executing program) 2021/10/18 14:39:57 fetching corpus: 250, signal 73946/83371 (executing program) 2021/10/18 14:39:57 fetching corpus: 300, signal 78627/89458 (executing program) 2021/10/18 14:39:57 fetching corpus: 350, signal 84845/96922 (executing program) 2021/10/18 14:39:57 fetching corpus: 400, signal 89475/102840 (executing program) 2021/10/18 14:39:58 fetching corpus: 450, signal 94476/109054 (executing program) 2021/10/18 14:39:58 fetching corpus: 500, signal 97208/113049 (executing program) 2021/10/18 14:39:58 fetching corpus: 550, signal 101085/118087 (executing program) 2021/10/18 14:39:58 fetching corpus: 600, signal 104046/122203 (executing program) 2021/10/18 14:39:58 fetching corpus: 650, signal 109395/128532 (executing program) 2021/10/18 14:39:59 fetching corpus: 700, signal 112046/132353 (executing program) 2021/10/18 14:39:59 fetching corpus: 750, signal 115451/136796 (executing program) 2021/10/18 14:39:59 fetching corpus: 800, signal 117701/140148 (executing program) 2021/10/18 14:39:59 fetching corpus: 850, signal 119720/143260 (executing program) [ 71.115454][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.121891][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 2021/10/18 14:40:00 fetching corpus: 900, signal 122498/147026 (executing program) 2021/10/18 14:40:00 fetching corpus: 950, signal 124546/150129 (executing program) 2021/10/18 14:40:00 fetching corpus: 1000, signal 126381/152996 (executing program) 2021/10/18 14:40:00 fetching corpus: 1050, signal 128292/155908 (executing program) 2021/10/18 14:40:01 fetching corpus: 1100, signal 129946/158605 (executing program) 2021/10/18 14:40:01 fetching corpus: 1150, signal 132613/162124 (executing program) 2021/10/18 14:40:01 fetching corpus: 1200, signal 134558/165030 (executing program) 2021/10/18 14:40:01 fetching corpus: 1250, signal 136086/167575 (executing program) 2021/10/18 14:40:01 fetching corpus: 1300, signal 138296/170692 (executing program) 2021/10/18 14:40:02 fetching corpus: 1350, signal 140427/173679 (executing program) 2021/10/18 14:40:02 fetching corpus: 1400, signal 142434/176512 (executing program) 2021/10/18 14:40:02 fetching corpus: 1450, signal 143935/178946 (executing program) 2021/10/18 14:40:02 fetching corpus: 1500, signal 145166/181127 (executing program) 2021/10/18 14:40:03 fetching corpus: 1550, signal 146473/183373 (executing program) 2021/10/18 14:40:03 fetching corpus: 1600, signal 147937/185696 (executing program) 2021/10/18 14:40:03 fetching corpus: 1650, signal 149578/188167 (executing program) 2021/10/18 14:40:03 fetching corpus: 1700, signal 150926/190386 (executing program) 2021/10/18 14:40:04 fetching corpus: 1750, signal 152913/193140 (executing program) 2021/10/18 14:40:04 fetching corpus: 1800, signal 154027/195150 (executing program) 2021/10/18 14:40:04 fetching corpus: 1850, signal 155585/197502 (executing program) 2021/10/18 14:40:04 fetching corpus: 1900, signal 156751/199562 (executing program) 2021/10/18 14:40:05 fetching corpus: 1950, signal 157888/201474 (executing program) 2021/10/18 14:40:05 fetching corpus: 1998, signal 159416/203735 (executing program) 2021/10/18 14:40:05 fetching corpus: 2048, signal 160368/205502 (executing program) 2021/10/18 14:40:05 fetching corpus: 2098, signal 161836/207683 (executing program) 2021/10/18 14:40:05 fetching corpus: 2148, signal 162837/209505 (executing program) 2021/10/18 14:40:06 fetching corpus: 2198, signal 163824/211275 (executing program) 2021/10/18 14:40:06 fetching corpus: 2248, signal 164846/213064 (executing program) 2021/10/18 14:40:06 fetching corpus: 2298, signal 165488/214531 (executing program) 2021/10/18 14:40:06 fetching corpus: 2348, signal 166589/216355 (executing program) 2021/10/18 14:40:07 fetching corpus: 2398, signal 169328/219396 (executing program) 2021/10/18 14:40:07 fetching corpus: 2447, signal 170220/221066 (executing program) 2021/10/18 14:40:07 fetching corpus: 2497, signal 171349/222824 (executing program) 2021/10/18 14:40:07 fetching corpus: 2547, signal 172544/224746 (executing program) 2021/10/18 14:40:07 fetching corpus: 2597, signal 174015/226773 (executing program) 2021/10/18 14:40:08 fetching corpus: 2647, signal 175360/228695 (executing program) 2021/10/18 14:40:08 fetching corpus: 2696, signal 176513/230463 (executing program) 2021/10/18 14:40:08 fetching corpus: 2745, signal 178553/232834 (executing program) 2021/10/18 14:40:08 fetching corpus: 2794, signal 179391/234369 (executing program) 2021/10/18 14:40:09 fetching corpus: 2843, signal 180302/235966 (executing program) 2021/10/18 14:40:09 fetching corpus: 2893, signal 181419/237644 (executing program) 2021/10/18 14:40:09 fetching corpus: 2943, signal 182456/239249 (executing program) 2021/10/18 14:40:09 fetching corpus: 2993, signal 183667/240997 (executing program) 2021/10/18 14:40:10 fetching corpus: 3043, signal 184637/242555 (executing program) 2021/10/18 14:40:10 fetching corpus: 3093, signal 185737/244162 (executing program) 2021/10/18 14:40:10 fetching corpus: 3143, signal 186633/245639 (executing program) 2021/10/18 14:40:10 fetching corpus: 3193, signal 187333/246995 (executing program) 2021/10/18 14:40:11 fetching corpus: 3243, signal 188325/248491 (executing program) 2021/10/18 14:40:11 fetching corpus: 3293, signal 188904/249777 (executing program) 2021/10/18 14:40:11 fetching corpus: 3343, signal 189743/251173 (executing program) 2021/10/18 14:40:11 fetching corpus: 3393, signal 190615/252597 (executing program) 2021/10/18 14:40:11 fetching corpus: 3443, signal 191518/254005 (executing program) 2021/10/18 14:40:11 fetching corpus: 3493, signal 192475/255492 (executing program) 2021/10/18 14:40:12 fetching corpus: 3543, signal 193102/256779 (executing program) 2021/10/18 14:40:12 fetching corpus: 3592, signal 193904/258108 (executing program) 2021/10/18 14:40:12 fetching corpus: 3642, signal 194934/259571 (executing program) 2021/10/18 14:40:12 fetching corpus: 3692, signal 195897/260984 (executing program) 2021/10/18 14:40:13 fetching corpus: 3742, signal 196699/262253 (executing program) 2021/10/18 14:40:13 fetching corpus: 3791, signal 197627/263627 (executing program) 2021/10/18 14:40:13 fetching corpus: 3840, signal 198735/265080 (executing program) 2021/10/18 14:40:13 fetching corpus: 3890, signal 199276/266242 (executing program) 2021/10/18 14:40:14 fetching corpus: 3939, signal 199965/267469 (executing program) 2021/10/18 14:40:14 fetching corpus: 3988, signal 200664/268742 (executing program) 2021/10/18 14:40:14 fetching corpus: 4037, signal 201458/269983 (executing program) 2021/10/18 14:40:14 fetching corpus: 4087, signal 202036/271111 (executing program) 2021/10/18 14:40:15 fetching corpus: 4137, signal 203286/272562 (executing program) 2021/10/18 14:40:15 fetching corpus: 4187, signal 204154/273807 (executing program) 2021/10/18 14:40:15 fetching corpus: 4236, signal 204999/275031 (executing program) 2021/10/18 14:40:15 fetching corpus: 4286, signal 205844/276266 (executing program) 2021/10/18 14:40:16 fetching corpus: 4336, signal 206698/277509 (executing program) 2021/10/18 14:40:16 fetching corpus: 4386, signal 207879/278821 (executing program) 2021/10/18 14:40:16 fetching corpus: 4435, signal 208877/280108 (executing program) 2021/10/18 14:40:16 fetching corpus: 4485, signal 209479/281151 (executing program) 2021/10/18 14:40:16 fetching corpus: 4535, signal 210457/282390 (executing program) 2021/10/18 14:40:17 fetching corpus: 4585, signal 211303/283584 (executing program) 2021/10/18 14:40:17 fetching corpus: 4635, signal 212945/285157 (executing program) 2021/10/18 14:40:17 fetching corpus: 4685, signal 213823/286305 (executing program) 2021/10/18 14:40:17 fetching corpus: 4734, signal 214486/287382 (executing program) 2021/10/18 14:40:18 fetching corpus: 4783, signal 215028/288375 (executing program) 2021/10/18 14:40:18 fetching corpus: 4832, signal 216127/289602 (executing program) 2021/10/18 14:40:18 fetching corpus: 4879, signal 216834/290634 (executing program) 2021/10/18 14:40:19 fetching corpus: 4928, signal 217618/291708 (executing program) 2021/10/18 14:40:19 fetching corpus: 4978, signal 218577/292858 (executing program) 2021/10/18 14:40:19 fetching corpus: 5028, signal 219138/293848 (executing program) 2021/10/18 14:40:19 fetching corpus: 5078, signal 219774/294834 (executing program) 2021/10/18 14:40:20 fetching corpus: 5128, signal 220364/295762 (executing program) 2021/10/18 14:40:20 fetching corpus: 5177, signal 220947/296744 (executing program) 2021/10/18 14:40:20 fetching corpus: 5227, signal 221468/297625 (executing program) 2021/10/18 14:40:20 fetching corpus: 5277, signal 222004/298513 (executing program) 2021/10/18 14:40:20 fetching corpus: 5327, signal 222573/299422 (executing program) 2021/10/18 14:40:21 fetching corpus: 5377, signal 223277/300378 (executing program) 2021/10/18 14:40:21 fetching corpus: 5427, signal 223996/301307 (executing program) 2021/10/18 14:40:21 fetching corpus: 5477, signal 224580/302269 (executing program) 2021/10/18 14:40:22 fetching corpus: 5527, signal 225179/303197 (executing program) 2021/10/18 14:40:22 fetching corpus: 5575, signal 225845/304142 (executing program) 2021/10/18 14:40:22 fetching corpus: 5624, signal 226712/305136 (executing program) 2021/10/18 14:40:22 fetching corpus: 5673, signal 227306/306050 (executing program) 2021/10/18 14:40:23 fetching corpus: 5723, signal 228014/306970 (executing program) 2021/10/18 14:40:23 fetching corpus: 5772, signal 228537/307815 (executing program) 2021/10/18 14:40:23 fetching corpus: 5821, signal 229251/308717 (executing program) 2021/10/18 14:40:23 fetching corpus: 5871, signal 229700/309546 (executing program) 2021/10/18 14:40:24 fetching corpus: 5921, signal 230152/310366 (executing program) 2021/10/18 14:40:24 fetching corpus: 5971, signal 230937/311280 (executing program) 2021/10/18 14:40:24 fetching corpus: 6021, signal 231397/312082 (executing program) 2021/10/18 14:40:24 fetching corpus: 6070, signal 231909/312894 (executing program) 2021/10/18 14:40:25 fetching corpus: 6118, signal 232510/313724 (executing program) 2021/10/18 14:40:25 fetching corpus: 6168, signal 233009/314483 (executing program) 2021/10/18 14:40:25 fetching corpus: 6216, signal 233813/315345 (executing program) 2021/10/18 14:40:26 fetching corpus: 6265, signal 234415/316131 (executing program) 2021/10/18 14:40:26 fetching corpus: 6315, signal 235242/316955 (executing program) 2021/10/18 14:40:26 fetching corpus: 6365, signal 235934/317817 (executing program) 2021/10/18 14:40:26 fetching corpus: 6415, signal 236369/318567 (executing program) 2021/10/18 14:40:27 fetching corpus: 6464, signal 236914/319348 (executing program) 2021/10/18 14:40:27 fetching corpus: 6513, signal 237513/320092 (executing program) 2021/10/18 14:40:27 fetching corpus: 6563, signal 237931/320795 (executing program) 2021/10/18 14:40:27 fetching corpus: 6610, signal 238336/321520 (executing program) 2021/10/18 14:40:28 fetching corpus: 6660, signal 238723/322217 (executing program) 2021/10/18 14:40:28 fetching corpus: 6710, signal 239060/322920 (executing program) 2021/10/18 14:40:28 fetching corpus: 6758, signal 239623/323675 (executing program) 2021/10/18 14:40:29 fetching corpus: 6808, signal 240340/324460 (executing program) 2021/10/18 14:40:29 fetching corpus: 6857, signal 240864/325159 (executing program) 2021/10/18 14:40:29 fetching corpus: 6907, signal 241444/325902 (executing program) 2021/10/18 14:40:30 fetching corpus: 6957, signal 241943/326609 (executing program) 2021/10/18 14:40:30 fetching corpus: 7007, signal 242431/327311 (executing program) 2021/10/18 14:40:30 fetching corpus: 7056, signal 242969/327987 (executing program) 2021/10/18 14:40:30 fetching corpus: 7106, signal 243607/328672 (executing program) 2021/10/18 14:40:30 fetching corpus: 7156, signal 244183/329353 (executing program) 2021/10/18 14:40:31 fetching corpus: 7206, signal 244859/330044 (executing program) 2021/10/18 14:40:31 fetching corpus: 7255, signal 245340/330675 (executing program) 2021/10/18 14:40:31 fetching corpus: 7305, signal 245846/331318 (executing program) 2021/10/18 14:40:31 fetching corpus: 7355, signal 246358/331984 (executing program) 2021/10/18 14:40:32 fetching corpus: 7405, signal 246834/332637 (executing program) 2021/10/18 14:40:32 fetching corpus: 7455, signal 247338/333283 (executing program) 2021/10/18 14:40:32 fetching corpus: 7503, signal 247833/333956 (executing program) 2021/10/18 14:40:32 fetching corpus: 7553, signal 248399/334617 (executing program) 2021/10/18 14:40:32 fetching corpus: 7602, signal 248877/335259 (executing program) 2021/10/18 14:40:33 fetching corpus: 7652, signal 249375/335868 (executing program) 2021/10/18 14:40:33 fetching corpus: 7702, signal 249851/336433 (executing program) 2021/10/18 14:40:33 fetching corpus: 7751, signal 250226/337049 (executing program) 2021/10/18 14:40:33 fetching corpus: 7801, signal 250547/337641 (executing program) 2021/10/18 14:40:34 fetching corpus: 7851, signal 251129/338195 (executing program) 2021/10/18 14:40:34 fetching corpus: 7901, signal 251803/338794 (executing program) 2021/10/18 14:40:34 fetching corpus: 7948, signal 252372/339363 (executing program) 2021/10/18 14:40:34 fetching corpus: 7997, signal 252710/339944 (executing program) 2021/10/18 14:40:35 fetching corpus: 8046, signal 253119/340488 (executing program) 2021/10/18 14:40:35 fetching corpus: 8096, signal 253639/341044 (executing program) 2021/10/18 14:40:35 fetching corpus: 8146, signal 254000/341594 (executing program) 2021/10/18 14:40:35 fetching corpus: 8196, signal 254747/342144 (executing program) 2021/10/18 14:40:35 fetching corpus: 8244, signal 255117/342669 (executing program) 2021/10/18 14:40:36 fetching corpus: 8292, signal 255537/343219 (executing program) 2021/10/18 14:40:36 fetching corpus: 8342, signal 255885/343785 (executing program) 2021/10/18 14:40:36 fetching corpus: 8392, signal 256234/344294 (executing program) 2021/10/18 14:40:36 fetching corpus: 8442, signal 256638/344816 (executing program) 2021/10/18 14:40:36 fetching corpus: 8492, signal 257019/345336 (executing program) 2021/10/18 14:40:37 fetching corpus: 8541, signal 257660/345790 (executing program) 2021/10/18 14:40:37 fetching corpus: 8591, signal 257973/345801 (executing program) 2021/10/18 14:40:37 fetching corpus: 8640, signal 258388/345801 (executing program) 2021/10/18 14:40:37 fetching corpus: 8690, signal 258865/345801 (executing program) 2021/10/18 14:40:37 fetching corpus: 8740, signal 259292/345801 (executing program) 2021/10/18 14:40:38 fetching corpus: 8790, signal 259709/345812 (executing program) 2021/10/18 14:40:38 fetching corpus: 8840, signal 260150/345812 (executing program) 2021/10/18 14:40:38 fetching corpus: 8889, signal 260453/345814 (executing program) 2021/10/18 14:40:38 fetching corpus: 8938, signal 260922/345814 (executing program) 2021/10/18 14:40:38 fetching corpus: 8988, signal 261361/345814 (executing program) 2021/10/18 14:40:38 fetching corpus: 9037, signal 261739/345814 (executing program) 2021/10/18 14:40:38 fetching corpus: 9087, signal 262125/345814 (executing program) 2021/10/18 14:40:38 fetching corpus: 9136, signal 262594/345814 (executing program) 2021/10/18 14:40:39 fetching corpus: 9186, signal 263039/345814 (executing program) 2021/10/18 14:40:39 fetching corpus: 9234, signal 263365/345816 (executing program) 2021/10/18 14:40:39 fetching corpus: 9283, signal 263746/345819 (executing program) 2021/10/18 14:40:39 fetching corpus: 9333, signal 264174/345819 (executing program) 2021/10/18 14:40:39 fetching corpus: 9382, signal 264462/345819 (executing program) 2021/10/18 14:40:39 fetching corpus: 9431, signal 264860/345819 (executing program) 2021/10/18 14:40:39 fetching corpus: 9481, signal 265219/345821 (executing program) 2021/10/18 14:40:40 fetching corpus: 9531, signal 265475/345827 (executing program) 2021/10/18 14:40:40 fetching corpus: 9579, signal 265986/345827 (executing program) 2021/10/18 14:40:40 fetching corpus: 9629, signal 266392/345827 (executing program) 2021/10/18 14:40:40 fetching corpus: 9678, signal 266736/345829 (executing program) 2021/10/18 14:40:40 fetching corpus: 9728, signal 267247/345829 (executing program) 2021/10/18 14:40:40 fetching corpus: 9778, signal 267657/345829 (executing program) 2021/10/18 14:40:40 fetching corpus: 9828, signal 268054/345829 (executing program) 2021/10/18 14:40:40 fetching corpus: 9878, signal 268403/345829 (executing program) 2021/10/18 14:40:40 fetching corpus: 9928, signal 268724/345829 (executing program) 2021/10/18 14:40:41 fetching corpus: 9977, signal 269081/345829 (executing program) 2021/10/18 14:40:41 fetching corpus: 10027, signal 269493/345829 (executing program) 2021/10/18 14:40:41 fetching corpus: 10076, signal 269902/345829 (executing program) 2021/10/18 14:40:41 fetching corpus: 10125, signal 270424/345837 (executing program) 2021/10/18 14:40:41 fetching corpus: 10175, signal 270758/345841 (executing program) 2021/10/18 14:40:41 fetching corpus: 10225, signal 271110/345841 (executing program) 2021/10/18 14:40:42 fetching corpus: 10275, signal 271430/345841 (executing program) 2021/10/18 14:40:42 fetching corpus: 10325, signal 271820/345841 (executing program) 2021/10/18 14:40:42 fetching corpus: 10375, signal 272178/345841 (executing program) 2021/10/18 14:40:42 fetching corpus: 10425, signal 272640/345841 (executing program) 2021/10/18 14:40:42 fetching corpus: 10474, signal 272975/345841 (executing program) 2021/10/18 14:40:42 fetching corpus: 10523, signal 273396/345841 (executing program) 2021/10/18 14:40:42 fetching corpus: 10571, signal 273727/345841 (executing program) 2021/10/18 14:40:42 fetching corpus: 10621, signal 274070/345841 (executing program) 2021/10/18 14:40:42 fetching corpus: 10671, signal 274523/345846 (executing program) 2021/10/18 14:40:43 fetching corpus: 10721, signal 274863/345846 (executing program) 2021/10/18 14:40:43 fetching corpus: 10771, signal 275085/345846 (executing program) 2021/10/18 14:40:43 fetching corpus: 10821, signal 275450/345846 (executing program) 2021/10/18 14:40:43 fetching corpus: 10871, signal 275871/345846 (executing program) 2021/10/18 14:40:43 fetching corpus: 10921, signal 276163/345846 (executing program) 2021/10/18 14:40:43 fetching corpus: 10970, signal 276563/345846 (executing program) 2021/10/18 14:40:43 fetching corpus: 11020, signal 276819/345846 (executing program) 2021/10/18 14:40:43 fetching corpus: 11070, signal 277187/345846 (executing program) 2021/10/18 14:40:44 fetching corpus: 11119, signal 277531/345859 (executing program) 2021/10/18 14:40:44 fetching corpus: 11168, signal 277826/345859 (executing program) 2021/10/18 14:40:44 fetching corpus: 11217, signal 278214/345859 (executing program) 2021/10/18 14:40:44 fetching corpus: 11267, signal 278468/345859 (executing program) 2021/10/18 14:40:44 fetching corpus: 11317, signal 278724/345859 (executing program) 2021/10/18 14:40:44 fetching corpus: 11367, signal 279011/345859 (executing program) 2021/10/18 14:40:44 fetching corpus: 11416, signal 279301/345859 (executing program) 2021/10/18 14:40:44 fetching corpus: 11466, signal 279634/345859 (executing program) 2021/10/18 14:40:45 fetching corpus: 11516, signal 279909/345859 (executing program) 2021/10/18 14:40:45 fetching corpus: 11566, signal 280208/345859 (executing program) 2021/10/18 14:40:45 fetching corpus: 11616, signal 280550/345859 (executing program) 2021/10/18 14:40:45 fetching corpus: 11665, signal 280856/345859 (executing program) 2021/10/18 14:40:45 fetching corpus: 11714, signal 281128/345859 (executing program) 2021/10/18 14:40:45 fetching corpus: 11764, signal 281373/345859 (executing program) 2021/10/18 14:40:45 fetching corpus: 11814, signal 281669/345859 (executing program) 2021/10/18 14:40:45 fetching corpus: 11864, signal 282178/345873 (executing program) 2021/10/18 14:40:46 fetching corpus: 11912, signal 282432/345887 (executing program) 2021/10/18 14:40:46 fetching corpus: 11962, signal 282681/345887 (executing program) 2021/10/18 14:40:46 fetching corpus: 12011, signal 282957/345887 (executing program) 2021/10/18 14:40:46 fetching corpus: 12060, signal 283267/345887 (executing program) 2021/10/18 14:40:46 fetching corpus: 12109, signal 283594/345893 (executing program) 2021/10/18 14:40:46 fetching corpus: 12158, signal 283855/345893 (executing program) 2021/10/18 14:40:46 fetching corpus: 12207, signal 284226/345893 (executing program) 2021/10/18 14:40:46 fetching corpus: 12257, signal 284453/345893 (executing program) 2021/10/18 14:40:46 fetching corpus: 12306, signal 284800/345893 (executing program) 2021/10/18 14:40:47 fetching corpus: 12352, signal 285093/345893 (executing program) 2021/10/18 14:40:47 fetching corpus: 12401, signal 285483/345896 (executing program) 2021/10/18 14:40:47 fetching corpus: 12451, signal 285769/345896 (executing program) 2021/10/18 14:40:47 fetching corpus: 12500, signal 286052/345896 (executing program) 2021/10/18 14:40:47 fetching corpus: 12550, signal 286428/345896 (executing program) 2021/10/18 14:40:47 fetching corpus: 12600, signal 286838/345896 (executing program) 2021/10/18 14:40:47 fetching corpus: 12650, signal 287094/345896 (executing program) 2021/10/18 14:40:47 fetching corpus: 12700, signal 287363/345896 (executing program) 2021/10/18 14:40:48 fetching corpus: 12750, signal 287724/345896 (executing program) 2021/10/18 14:40:48 fetching corpus: 12799, signal 288030/345896 (executing program) 2021/10/18 14:40:48 fetching corpus: 12848, signal 288512/345898 (executing program) 2021/10/18 14:40:48 fetching corpus: 12898, signal 288868/345898 (executing program) 2021/10/18 14:40:48 fetching corpus: 12947, signal 289174/345900 (executing program) 2021/10/18 14:40:48 fetching corpus: 12996, signal 289437/345900 (executing program) 2021/10/18 14:40:48 fetching corpus: 13045, signal 289716/345900 (executing program) 2021/10/18 14:40:48 fetching corpus: 13094, signal 290054/345911 (executing program) 2021/10/18 14:40:49 fetching corpus: 13143, signal 290404/345912 (executing program) 2021/10/18 14:40:49 fetching corpus: 13192, signal 290687/345912 (executing program) 2021/10/18 14:40:49 fetching corpus: 13242, signal 290976/345912 (executing program) 2021/10/18 14:40:49 fetching corpus: 13291, signal 291262/345912 (executing program) 2021/10/18 14:40:49 fetching corpus: 13339, signal 291627/345912 (executing program) 2021/10/18 14:40:49 fetching corpus: 13389, signal 291953/345912 (executing program) 2021/10/18 14:40:49 fetching corpus: 13438, signal 292294/345912 (executing program) 2021/10/18 14:40:49 fetching corpus: 13486, signal 292586/345920 (executing program) 2021/10/18 14:40:50 fetching corpus: 13536, signal 292862/345936 (executing program) 2021/10/18 14:40:50 fetching corpus: 13584, signal 293155/345947 (executing program) 2021/10/18 14:40:50 fetching corpus: 13634, signal 293469/345947 (executing program) 2021/10/18 14:40:50 fetching corpus: 13684, signal 293696/345947 (executing program) 2021/10/18 14:40:50 fetching corpus: 13734, signal 294051/345958 (executing program) 2021/10/18 14:40:50 fetching corpus: 13783, signal 294457/345961 (executing program) 2021/10/18 14:40:50 fetching corpus: 13832, signal 294726/345961 (executing program) 2021/10/18 14:40:50 fetching corpus: 13882, signal 295015/345961 (executing program) 2021/10/18 14:40:50 fetching corpus: 13932, signal 295284/345961 (executing program) 2021/10/18 14:40:51 fetching corpus: 13981, signal 295541/345961 (executing program) 2021/10/18 14:40:51 fetching corpus: 14030, signal 295901/345965 (executing program) 2021/10/18 14:40:51 fetching corpus: 14080, signal 296240/345965 (executing program) 2021/10/18 14:40:51 fetching corpus: 14130, signal 296545/345965 (executing program) 2021/10/18 14:40:51 fetching corpus: 14180, signal 296949/345965 (executing program) 2021/10/18 14:40:51 fetching corpus: 14229, signal 297357/345965 (executing program) 2021/10/18 14:40:51 fetching corpus: 14278, signal 297621/345968 (executing program) 2021/10/18 14:40:52 fetching corpus: 14326, signal 297962/345971 (executing program) 2021/10/18 14:40:52 fetching corpus: 14375, signal 298202/345971 (executing program) 2021/10/18 14:40:52 fetching corpus: 14425, signal 298465/345971 (executing program) 2021/10/18 14:40:52 fetching corpus: 14472, signal 298727/345971 (executing program) 2021/10/18 14:40:52 fetching corpus: 14522, signal 298948/345971 (executing program) 2021/10/18 14:40:52 fetching corpus: 14571, signal 299613/345971 (executing program) 2021/10/18 14:40:52 fetching corpus: 14619, signal 299936/345971 (executing program) 2021/10/18 14:40:52 fetching corpus: 14668, signal 300226/345971 (executing program) 2021/10/18 14:40:52 fetching corpus: 14717, signal 300487/345971 (executing program) 2021/10/18 14:40:53 fetching corpus: 14767, signal 300859/345971 (executing program) 2021/10/18 14:40:53 fetching corpus: 14816, signal 301135/345971 (executing program) 2021/10/18 14:40:53 fetching corpus: 14866, signal 301413/345971 (executing program) 2021/10/18 14:40:53 fetching corpus: 14915, signal 301756/345971 (executing program) 2021/10/18 14:40:53 fetching corpus: 14964, signal 302055/345971 (executing program) 2021/10/18 14:40:53 fetching corpus: 15014, signal 302321/345971 (executing program) 2021/10/18 14:40:53 fetching corpus: 15062, signal 302524/345971 (executing program) 2021/10/18 14:40:53 fetching corpus: 15112, signal 302753/345971 (executing program) 2021/10/18 14:40:53 fetching corpus: 15162, signal 302988/345971 (executing program) 2021/10/18 14:40:54 fetching corpus: 15211, signal 303334/345971 (executing program) 2021/10/18 14:40:54 fetching corpus: 15260, signal 303841/345971 (executing program) 2021/10/18 14:40:54 fetching corpus: 15309, signal 304089/345971 (executing program) 2021/10/18 14:40:54 fetching corpus: 15359, signal 304351/345971 (executing program) 2021/10/18 14:40:54 fetching corpus: 15409, signal 304618/345971 (executing program) 2021/10/18 14:40:54 fetching corpus: 15458, signal 304885/345971 (executing program) 2021/10/18 14:40:54 fetching corpus: 15507, signal 305112/345982 (executing program) 2021/10/18 14:40:55 fetching corpus: 15556, signal 305437/345993 (executing program) 2021/10/18 14:40:55 fetching corpus: 15605, signal 305762/345993 (executing program) 2021/10/18 14:40:55 fetching corpus: 15655, signal 306041/345993 (executing program) 2021/10/18 14:40:55 fetching corpus: 15705, signal 306274/345995 (executing program) 2021/10/18 14:40:55 fetching corpus: 15755, signal 306571/345995 (executing program) 2021/10/18 14:40:55 fetching corpus: 15804, signal 306813/345995 (executing program) 2021/10/18 14:40:55 fetching corpus: 15853, signal 307210/345995 (executing program) 2021/10/18 14:40:55 fetching corpus: 15902, signal 307407/345995 (executing program) 2021/10/18 14:40:56 fetching corpus: 15952, signal 307741/345997 (executing program) 2021/10/18 14:40:56 fetching corpus: 16002, signal 307966/345998 (executing program) 2021/10/18 14:40:56 fetching corpus: 16052, signal 308205/345998 (executing program) 2021/10/18 14:40:56 fetching corpus: 16102, signal 308442/345998 (executing program) 2021/10/18 14:40:56 fetching corpus: 16152, signal 308701/346018 (executing program) 2021/10/18 14:40:56 fetching corpus: 16201, signal 308903/346018 (executing program) 2021/10/18 14:40:56 fetching corpus: 16251, signal 309166/346018 (executing program) 2021/10/18 14:40:56 fetching corpus: 16300, signal 309375/346018 (executing program) 2021/10/18 14:40:57 fetching corpus: 16348, signal 309659/346018 (executing program) 2021/10/18 14:40:57 fetching corpus: 16394, signal 309947/346021 (executing program) 2021/10/18 14:40:57 fetching corpus: 16444, signal 310207/346023 (executing program) 2021/10/18 14:40:57 fetching corpus: 16493, signal 310422/346023 (executing program) 2021/10/18 14:40:57 fetching corpus: 16541, signal 310669/346023 (executing program) 2021/10/18 14:40:57 fetching corpus: 16591, signal 310991/346023 (executing program) 2021/10/18 14:40:57 fetching corpus: 16641, signal 311322/346032 (executing program) 2021/10/18 14:40:57 fetching corpus: 16690, signal 311706/346038 (executing program) 2021/10/18 14:40:58 fetching corpus: 16740, signal 311937/346038 (executing program) 2021/10/18 14:40:58 fetching corpus: 16790, signal 312159/346038 (executing program) 2021/10/18 14:40:58 fetching corpus: 16839, signal 312378/346038 (executing program) 2021/10/18 14:40:58 fetching corpus: 16888, signal 312650/346038 (executing program) 2021/10/18 14:40:58 fetching corpus: 16937, signal 312923/346038 (executing program) 2021/10/18 14:40:58 fetching corpus: 16987, signal 313089/346038 (executing program) 2021/10/18 14:40:58 fetching corpus: 17036, signal 313319/346041 (executing program) 2021/10/18 14:40:59 fetching corpus: 17086, signal 313580/346052 (executing program) 2021/10/18 14:40:59 fetching corpus: 17135, signal 313786/346052 (executing program) 2021/10/18 14:40:59 fetching corpus: 17183, signal 313931/346052 (executing program) 2021/10/18 14:40:59 fetching corpus: 17232, signal 314190/346052 (executing program) 2021/10/18 14:40:59 fetching corpus: 17282, signal 314429/346052 (executing program) 2021/10/18 14:40:59 fetching corpus: 17331, signal 314656/346052 (executing program) 2021/10/18 14:40:59 fetching corpus: 17379, signal 314892/346052 (executing program) 2021/10/18 14:40:59 fetching corpus: 17428, signal 315141/346054 (executing program) 2021/10/18 14:40:59 fetching corpus: 17478, signal 315326/346054 (executing program) 2021/10/18 14:41:00 fetching corpus: 17528, signal 315619/346054 (executing program) 2021/10/18 14:41:00 fetching corpus: 17578, signal 315905/346054 (executing program) 2021/10/18 14:41:00 fetching corpus: 17628, signal 316164/346054 (executing program) 2021/10/18 14:41:00 fetching corpus: 17677, signal 316346/346054 (executing program) 2021/10/18 14:41:00 fetching corpus: 17727, signal 316586/346054 (executing program) 2021/10/18 14:41:00 fetching corpus: 17775, signal 316852/346056 (executing program) 2021/10/18 14:41:00 fetching corpus: 17825, signal 317085/346056 (executing program) 2021/10/18 14:41:01 fetching corpus: 17875, signal 317339/346056 (executing program) 2021/10/18 14:41:01 fetching corpus: 17925, signal 317592/346056 (executing program) 2021/10/18 14:41:01 fetching corpus: 17975, signal 317937/346056 (executing program) 2021/10/18 14:41:01 fetching corpus: 18024, signal 318123/346056 (executing program) [ 132.548199][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.554601][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 2021/10/18 14:41:01 fetching corpus: 18074, signal 318301/346056 (executing program) 2021/10/18 14:41:01 fetching corpus: 18124, signal 318564/346056 (executing program) 2021/10/18 14:41:01 fetching corpus: 18174, signal 318775/346056 (executing program) 2021/10/18 14:41:01 fetching corpus: 18222, signal 318983/346058 (executing program) 2021/10/18 14:41:01 fetching corpus: 18270, signal 319197/346072 (executing program) 2021/10/18 14:41:02 fetching corpus: 18320, signal 319358/346072 (executing program) 2021/10/18 14:41:02 fetching corpus: 18369, signal 319571/346072 (executing program) 2021/10/18 14:41:02 fetching corpus: 18419, signal 319784/346077 (executing program) 2021/10/18 14:41:02 fetching corpus: 18468, signal 319948/346077 (executing program) 2021/10/18 14:41:02 fetching corpus: 18516, signal 320142/346077 (executing program) 2021/10/18 14:41:02 fetching corpus: 18563, signal 320377/346082 (executing program) 2021/10/18 14:41:02 fetching corpus: 18612, signal 320549/346082 (executing program) 2021/10/18 14:41:03 fetching corpus: 18662, signal 320836/346082 (executing program) 2021/10/18 14:41:03 fetching corpus: 18712, signal 321004/346082 (executing program) 2021/10/18 14:41:03 fetching corpus: 18762, signal 321247/346082 (executing program) 2021/10/18 14:41:03 fetching corpus: 18812, signal 321515/346082 (executing program) 2021/10/18 14:41:03 fetching corpus: 18862, signal 321689/346082 (executing program) 2021/10/18 14:41:03 fetching corpus: 18912, signal 321885/346082 (executing program) 2021/10/18 14:41:03 fetching corpus: 18959, signal 322199/346084 (executing program) 2021/10/18 14:41:03 fetching corpus: 19009, signal 322426/346084 (executing program) 2021/10/18 14:41:03 fetching corpus: 19059, signal 322669/346095 (executing program) 2021/10/18 14:41:03 fetching corpus: 19108, signal 322844/346102 (executing program) 2021/10/18 14:41:04 fetching corpus: 19157, signal 323076/346102 (executing program) 2021/10/18 14:41:04 fetching corpus: 19206, signal 323239/346102 (executing program) 2021/10/18 14:41:04 fetching corpus: 19256, signal 323441/346102 (executing program) 2021/10/18 14:41:04 fetching corpus: 19305, signal 323636/346102 (executing program) 2021/10/18 14:41:04 fetching corpus: 19353, signal 323855/346102 (executing program) 2021/10/18 14:41:04 fetching corpus: 19402, signal 324191/346103 (executing program) 2021/10/18 14:41:05 fetching corpus: 19452, signal 324537/346110 (executing program) 2021/10/18 14:41:05 fetching corpus: 19501, signal 324832/346112 (executing program) 2021/10/18 14:41:05 fetching corpus: 19548, signal 325056/346112 (executing program) 2021/10/18 14:41:05 fetching corpus: 19598, signal 325374/346112 (executing program) 2021/10/18 14:41:05 fetching corpus: 19646, signal 325532/346112 (executing program) 2021/10/18 14:41:05 fetching corpus: 19696, signal 325726/346112 (executing program) 2021/10/18 14:41:06 fetching corpus: 19745, signal 325903/346112 (executing program) 2021/10/18 14:41:06 fetching corpus: 19795, signal 326105/346112 (executing program) 2021/10/18 14:41:06 fetching corpus: 19844, signal 326302/346112 (executing program) 2021/10/18 14:41:06 fetching corpus: 19894, signal 326502/346112 (executing program) 2021/10/18 14:41:06 fetching corpus: 19943, signal 326744/346114 (executing program) 2021/10/18 14:41:06 fetching corpus: 19991, signal 326897/346114 (executing program) 2021/10/18 14:41:06 fetching corpus: 20039, signal 327146/346114 (executing program) 2021/10/18 14:41:07 fetching corpus: 20089, signal 327349/346126 (executing program) 2021/10/18 14:41:07 fetching corpus: 20138, signal 327512/346126 (executing program) 2021/10/18 14:41:07 fetching corpus: 20187, signal 327708/346126 (executing program) 2021/10/18 14:41:07 fetching corpus: 20237, signal 327865/346126 (executing program) 2021/10/18 14:41:07 fetching corpus: 20287, signal 328036/346126 (executing program) 2021/10/18 14:41:07 fetching corpus: 20337, signal 328271/346126 (executing program) 2021/10/18 14:41:07 fetching corpus: 20387, signal 328460/346130 (executing program) 2021/10/18 14:41:07 fetching corpus: 20437, signal 328691/346130 (executing program) 2021/10/18 14:41:08 fetching corpus: 20487, signal 328883/346133 (executing program) 2021/10/18 14:41:08 fetching corpus: 20537, signal 329076/346133 (executing program) 2021/10/18 14:41:08 fetching corpus: 20587, signal 329299/346133 (executing program) 2021/10/18 14:41:08 fetching corpus: 20636, signal 329440/346133 (executing program) 2021/10/18 14:41:08 fetching corpus: 20686, signal 329632/346133 (executing program) 2021/10/18 14:41:08 fetching corpus: 20736, signal 329859/346133 (executing program) 2021/10/18 14:41:08 fetching corpus: 20784, signal 330029/346133 (executing program) 2021/10/18 14:41:08 fetching corpus: 20834, signal 330202/346133 (executing program) 2021/10/18 14:41:08 fetching corpus: 20884, signal 330409/346133 (executing program) 2021/10/18 14:41:09 fetching corpus: 20933, signal 330637/346133 (executing program) 2021/10/18 14:41:09 fetching corpus: 20982, signal 330993/346140 (executing program) 2021/10/18 14:41:09 fetching corpus: 21032, signal 331151/346140 (executing program) 2021/10/18 14:41:09 fetching corpus: 21082, signal 331361/346140 (executing program) 2021/10/18 14:41:09 fetching corpus: 21132, signal 331524/346141 (executing program) 2021/10/18 14:41:09 fetching corpus: 21182, signal 331778/346141 (executing program) 2021/10/18 14:41:09 fetching corpus: 21231, signal 332011/346148 (executing program) 2021/10/18 14:41:10 fetching corpus: 21281, signal 332259/346151 (executing program) 2021/10/18 14:41:10 fetching corpus: 21330, signal 332443/346151 (executing program) 2021/10/18 14:41:10 fetching corpus: 21380, signal 332605/346151 (executing program) 2021/10/18 14:41:10 fetching corpus: 21429, signal 332829/346151 (executing program) 2021/10/18 14:41:10 fetching corpus: 21478, signal 333099/346151 (executing program) 2021/10/18 14:41:10 fetching corpus: 21527, signal 333443/346151 (executing program) 2021/10/18 14:41:10 fetching corpus: 21577, signal 333644/346151 (executing program) 2021/10/18 14:41:10 fetching corpus: 21627, signal 333946/346151 (executing program) 2021/10/18 14:41:11 fetching corpus: 21677, signal 334135/346153 (executing program) 2021/10/18 14:41:11 fetching corpus: 21727, signal 334309/346153 (executing program) 2021/10/18 14:41:11 fetching corpus: 21777, signal 334527/346153 (executing program) 2021/10/18 14:41:11 fetching corpus: 21827, signal 334800/346153 (executing program) 2021/10/18 14:41:11 fetching corpus: 21876, signal 334944/346154 (executing program) 2021/10/18 14:41:11 fetching corpus: 21925, signal 335162/346154 (executing program) 2021/10/18 14:41:11 fetching corpus: 21973, signal 335349/346159 (executing program) 2021/10/18 14:41:12 fetching corpus: 22022, signal 335503/346159 (executing program) 2021/10/18 14:41:12 fetching corpus: 22072, signal 335787/346160 (executing program) 2021/10/18 14:41:12 fetching corpus: 22120, signal 335934/346160 (executing program) 2021/10/18 14:41:12 fetching corpus: 22170, signal 336231/346160 (executing program) 2021/10/18 14:41:12 fetching corpus: 22220, signal 336408/346160 (executing program) 2021/10/18 14:41:12 fetching corpus: 22270, signal 336663/346161 (executing program) 2021/10/18 14:41:12 fetching corpus: 22320, signal 336890/346161 (executing program) 2021/10/18 14:41:12 fetching corpus: 22370, signal 337066/346163 (executing program) 2021/10/18 14:41:13 fetching corpus: 22420, signal 337244/346163 (executing program) 2021/10/18 14:41:13 fetching corpus: 22469, signal 337411/346163 (executing program) 2021/10/18 14:41:13 fetching corpus: 22519, signal 337672/346163 (executing program) 2021/10/18 14:41:13 fetching corpus: 22569, signal 337915/346163 (executing program) 2021/10/18 14:41:13 fetching corpus: 22617, signal 338068/346163 (executing program) 2021/10/18 14:41:13 fetching corpus: 22664, signal 338267/346163 (executing program) 2021/10/18 14:41:13 fetching corpus: 22713, signal 338478/346163 (executing program) 2021/10/18 14:41:13 fetching corpus: 22760, signal 338619/346170 (executing program) 2021/10/18 14:41:14 fetching corpus: 22810, signal 338807/346171 (executing program) 2021/10/18 14:41:14 fetching corpus: 22858, signal 339014/346171 (executing program) 2021/10/18 14:41:14 fetching corpus: 22906, signal 339236/346171 (executing program) 2021/10/18 14:41:14 fetching corpus: 22956, signal 339393/346172 (executing program) 2021/10/18 14:41:14 fetching corpus: 23004, signal 339549/346172 (executing program) 2021/10/18 14:41:14 fetching corpus: 23054, signal 339738/346172 (executing program) 2021/10/18 14:41:14 fetching corpus: 23104, signal 339931/346172 (executing program) 2021/10/18 14:41:15 fetching corpus: 23154, signal 340173/346172 (executing program) 2021/10/18 14:41:15 fetching corpus: 23204, signal 340366/346172 (executing program) 2021/10/18 14:41:15 fetching corpus: 23254, signal 340587/346172 (executing program) 2021/10/18 14:41:15 fetching corpus: 23304, signal 340774/346172 (executing program) 2021/10/18 14:41:15 fetching corpus: 23354, signal 341009/346172 (executing program) 2021/10/18 14:41:15 fetching corpus: 23403, signal 341165/346178 (executing program) 2021/10/18 14:41:15 fetching corpus: 23453, signal 341359/346178 (executing program) 2021/10/18 14:41:15 fetching corpus: 23503, signal 341514/346180 (executing program) 2021/10/18 14:41:15 fetching corpus: 23553, signal 341763/346185 (executing program) 2021/10/18 14:41:16 fetching corpus: 23602, signal 341921/346185 (executing program) 2021/10/18 14:41:16 fetching corpus: 23651, signal 342085/346185 (executing program) 2021/10/18 14:41:16 fetching corpus: 23701, signal 342222/346185 (executing program) 2021/10/18 14:41:16 fetching corpus: 23751, signal 342384/346185 (executing program) 2021/10/18 14:41:16 fetching corpus: 23798, signal 342531/346185 (executing program) 2021/10/18 14:41:16 fetching corpus: 23847, signal 342720/346185 (executing program) 2021/10/18 14:41:16 fetching corpus: 23868, signal 342800/346187 (executing program) 2021/10/18 14:41:16 fetching corpus: 23868, signal 342800/346189 (executing program) 2021/10/18 14:41:16 fetching corpus: 23868, signal 342800/346189 (executing program) 2021/10/18 14:41:18 starting 6 fuzzer processes 14:41:18 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000540)={0x28, 0x7, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}}, 0x0) 14:41:18 executing program 1: r0 = socket$inet6(0xa, 0x3, 0x4) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000000c0)={@dev}, 0x14) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f00000003c0)={@dev}, 0x14) 14:41:18 executing program 2: r0 = socket$inet(0x2, 0x2, 0x2000000088) bind(r0, &(0x7f0000000080)=@in={0x2, 0x4e20}, 0x7c) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000280)={0x2, 0x8004e20}, 0x10) recvmmsg(r0, &(0x7f00000004c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x22, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 14:41:19 executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000840)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0xcac}}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:41:19 executing program 4: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet_udp(0x2, 0x2, 0x0) writev(r2, &(0x7f0000000200)=[{&(0x7f00000000c0)="580000001400ad", 0x7}], 0x1) close(r3) socket$netlink(0x10, 0x3, 0xf) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xfef0) splice(r1, 0x0, r3, 0x0, 0x80000001, 0x0) 14:41:20 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c00000010001fff0000248f1c872d2b02005bee", @ANYRES32=0x0, @ANYBLOB="ff7f000009000000140012800a00010076786c616e0000000400028008000a0026710b4925d8"], 0x3c}, 0x1, 0x8000a0ffffffff, 0x0, 0x40890}, 0x4040894) r0 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r0, &(0x7f00000000c0), 0x41bc075f6e065b0, 0x4c00000000000000) [ 151.407252][ T6545] chnl_net:caif_netlink_parms(): no params data found [ 151.706378][ T6545] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.716701][ T6545] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.735076][ T6545] device bridge_slave_0 entered promiscuous mode [ 151.771878][ T6545] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.786700][ T6545] bridge0: port 2(bridge_slave_1) entered disabled state [ 151.809269][ T6545] device bridge_slave_1 entered promiscuous mode [ 151.865565][ T6545] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.878019][ T6547] chnl_net:caif_netlink_parms(): no params data found [ 151.897017][ T6545] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.963233][ T6545] team0: Port device team_slave_0 added [ 151.981465][ T6545] team0: Port device team_slave_1 added [ 152.035339][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.042888][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.069301][ T6545] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.093660][ T6547] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.102379][ T6547] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.110973][ T6547] device bridge_slave_0 entered promiscuous mode [ 152.119210][ T6545] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.128191][ T6545] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.174067][ T6545] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.191384][ T6547] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.207906][ T6547] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.216486][ T6547] device bridge_slave_1 entered promiscuous mode [ 152.291670][ T6545] device hsr_slave_0 entered promiscuous mode [ 152.299844][ T6545] device hsr_slave_1 entered promiscuous mode [ 152.326887][ T6547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.339472][ T6547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.463804][ T6547] team0: Port device team_slave_0 added [ 152.484058][ T6547] team0: Port device team_slave_1 added [ 152.498558][ T6551] chnl_net:caif_netlink_parms(): no params data found [ 152.552329][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.559454][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.586779][ T6547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 152.612760][ T6547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 152.620296][ T6547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 152.647861][ T6547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 152.762699][ T6547] device hsr_slave_0 entered promiscuous mode [ 152.769493][ T6547] device hsr_slave_1 entered promiscuous mode [ 152.776994][ T6547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 152.784838][ T6547] Cannot create hsr debugfs directory [ 152.930205][ T6545] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 152.945406][ T6551] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.954415][ T6551] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.962631][ T69] Bluetooth: hci0: command 0x0409 tx timeout [ 152.974900][ T6551] device bridge_slave_0 entered promiscuous mode [ 152.985644][ T6551] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.993769][ T6551] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.002077][ T6551] device bridge_slave_1 entered promiscuous mode [ 153.014638][ T6545] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.028529][ T6545] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.081871][ T6545] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.094002][ T6551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.106624][ T6551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.177626][ T6551] team0: Port device team_slave_0 added [ 153.188886][ T6551] team0: Port device team_slave_1 added [ 153.269355][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.276932][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.281375][ T20] Bluetooth: hci1: command 0x0409 tx timeout [ 153.305546][ T6551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.349126][ T6551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.360837][ T6551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.387443][ T6551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.518792][ T6547] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 153.529982][ T6829] chnl_net:caif_netlink_parms(): no params data found [ 153.547664][ T6547] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 153.559301][ T6551] device hsr_slave_0 entered promiscuous mode [ 153.567990][ T6551] device hsr_slave_1 entered promiscuous mode [ 153.574551][ T6551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.582379][ T6551] Cannot create hsr debugfs directory [ 153.610910][ T6547] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 153.657390][ T6547] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 153.737079][ T6829] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.745054][ T6829] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.754792][ T6829] device bridge_slave_0 entered promiscuous mode [ 153.756059][ T69] Bluetooth: hci3: command 0x0409 tx timeout [ 153.765455][ T6829] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.774498][ T6829] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.783430][ T6829] device bridge_slave_1 entered promiscuous mode [ 153.860970][ T6829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.875090][ T6829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.889338][ T6545] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.938323][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 153.947740][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 153.964401][ T6829] team0: Port device team_slave_0 added [ 153.977782][ T6545] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.002526][ T6829] team0: Port device team_slave_1 added [ 154.054181][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.061987][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.089342][ T6829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.119511][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.131470][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.141067][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.148378][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.160407][ T6829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.169188][ T6829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.195969][ T6829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.236265][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.252185][ T6829] device hsr_slave_0 entered promiscuous mode [ 154.260054][ T6829] device hsr_slave_1 entered promiscuous mode [ 154.268305][ T6829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.276540][ T6829] Cannot create hsr debugfs directory [ 154.282542][ T6551] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 154.296380][ T6551] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 154.304603][ T7751] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.316244][ T7751] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.324585][ T7751] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.331716][ T7751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.358672][ T6551] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 154.369265][ T6551] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 154.410676][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.421562][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.431741][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.441085][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.450357][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 154.459242][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 154.476987][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 154.507396][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 154.516115][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 154.534462][ T6547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.553652][ T6545] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 154.564872][ T6545] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 154.589970][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 154.598638][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 154.646187][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 154.653771][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 154.662427][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.670988][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.720876][ T6545] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.729544][ T6547] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.760934][ T6551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 154.780346][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 154.791060][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 154.801288][ T2933] bridge0: port 1(bridge_slave_0) entered blocking state [ 154.808446][ T2933] bridge0: port 1(bridge_slave_0) entered forwarding state [ 154.816845][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 154.866086][ T7] Bluetooth: hci5: command 0x0409 tx timeout [ 154.879546][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 154.890519][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 154.900280][ T20] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.907450][ T20] bridge0: port 2(bridge_slave_1) entered forwarding state [ 154.915239][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 154.924314][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 154.933501][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 154.941651][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 154.950067][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 154.959814][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 154.972812][ T6551] 8021q: adding VLAN 0 to HW filter on device team0 [ 154.983284][ T6829] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 155.001523][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.009501][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.019408][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.026070][ T7] Bluetooth: hci0: command 0x041b tx timeout [ 155.029296][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.042151][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.051078][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.061544][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.075946][ T6829] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 155.090592][ T6829] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 155.107364][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 155.117179][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 155.125518][ T7346] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.132932][ T7346] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.141203][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.150105][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.158616][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 155.167419][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 155.175945][ T7346] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.183147][ T7346] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.196883][ T6547] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.204883][ T6829] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 155.229887][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 155.237897][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 155.263629][ T6545] device veth0_vlan entered promiscuous mode [ 155.272929][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.281339][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.291376][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 155.301191][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.309615][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.341194][ T6547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.346624][ T7] Bluetooth: hci1: command 0x041b tx timeout [ 155.362547][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 155.371838][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 155.380865][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.388902][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.396635][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 155.405123][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 155.413956][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 155.423509][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 155.441783][ T6551] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 155.453162][ T6551] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 155.472370][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 155.480278][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 155.489586][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 155.503802][ T6545] device veth1_vlan entered promiscuous mode [ 155.526400][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.561920][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 155.570166][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 155.579003][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.588204][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.607521][ T6551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 155.638987][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.648205][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.661345][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 155.670499][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 155.687653][ T6547] device veth0_vlan entered promiscuous mode [ 155.705148][ T6829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.712044][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.720542][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.743580][ T6545] device veth0_macvtap entered promiscuous mode [ 155.763459][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 155.773245][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 155.784316][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 155.796653][ T6547] device veth1_vlan entered promiscuous mode [ 155.812081][ T6545] device veth1_macvtap entered promiscuous mode [ 155.828271][ T2933] Bluetooth: hci3: command 0x041b tx timeout [ 155.834554][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.846908][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 155.854988][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 155.867619][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 155.875245][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 155.886865][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 155.895042][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 155.905410][ T6829] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.913228][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 155.921089][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 155.932176][ T6551] device veth0_vlan entered promiscuous mode [ 155.957975][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.970565][ T6551] device veth1_vlan entered promiscuous mode [ 155.978292][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 155.987840][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 155.997017][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.017229][ T6545] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.030138][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.039168][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.048876][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.058095][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.067316][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 156.076676][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 156.085076][ T1052] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.092231][ T1052] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.101504][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 156.112974][ T6547] device veth0_macvtap entered promiscuous mode [ 156.135912][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 156.143905][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.152911][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 156.161871][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 156.171385][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.178619][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.186694][ T7] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 156.197898][ T6545] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.208722][ T6545] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.217686][ T6545] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.227086][ T6545] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.239696][ T6547] device veth1_macvtap entered promiscuous mode [ 156.272499][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.281733][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 156.291500][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 156.300486][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 156.309993][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 156.319727][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 156.348880][ T6551] device veth0_macvtap entered promiscuous mode [ 156.360470][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 156.369317][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 156.395750][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 156.404279][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 156.417988][ T6551] device veth1_macvtap entered promiscuous mode [ 156.470525][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 156.479217][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 156.489861][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 156.500688][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.513313][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.526695][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.542028][ T6547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.565761][ T6547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.578123][ T6547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.592910][ T6547] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.603039][ T6547] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.612703][ T6547] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.622063][ T6547] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.638644][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.647287][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.656714][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 156.665044][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 156.673874][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.682913][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.707626][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.718652][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.729221][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 156.739802][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.751536][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 156.762892][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.774174][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.784251][ T6551] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 156.795589][ T6551] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 156.807800][ T6551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 156.821723][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 156.833433][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 156.842911][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 156.852245][ T7880] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 156.867679][ T6829] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 156.879839][ T1114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.880731][ T6551] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.896671][ T1114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 156.902506][ T6551] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.913765][ T6551] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.927711][ T6551] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.954132][ T2933] Bluetooth: hci5: command 0x041b tx timeout [ 156.964147][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.080902][ T1114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.090533][ T6829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.098014][ T1114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.105416][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 157.106358][ T2932] Bluetooth: hci0: command 0x040f tx timeout [ 157.121065][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 157.151025][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.261658][ T7910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.305063][ T7910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.326748][ T153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.334895][ T153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.391421][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.405047][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.423776][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 157.426366][ T2932] Bluetooth: hci1: command 0x040f tx timeout [ 157.435522][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.452885][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 157.462125][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.474155][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 157.495464][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:41:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) [ 157.706539][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 157.715283][ T1052] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready 14:41:26 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0xfffffffffffffd81) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000020301010104000000000000000000000800010002"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 14:41:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:41:26 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CANCEL_CHANNEL_SWITCH(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x1c, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) [ 157.800341][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 157.817866][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 157.869779][ T6829] device veth0_vlan entered promiscuous mode [ 157.887920][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 157.898375][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 157.906034][ T2932] Bluetooth: hci3: command 0x040f tx timeout [ 157.925483][ T6829] device veth1_vlan entered promiscuous mode 14:41:26 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:41:26 executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)={0x14, 0x16, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x700}}, 0x14}}, 0x0) recvmmsg$unix(r0, &(0x7f0000003100)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) [ 158.017223][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 158.028970][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 158.038620][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 158.048345][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 158.061488][ T6829] device veth0_macvtap entered promiscuous mode [ 158.092819][ T6829] device veth1_macvtap entered promiscuous mode 14:41:27 executing program 0: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff038}, {0x6}]}, 0x10) sendmmsg(r0, &(0x7f0000005b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) 14:41:27 executing program 1: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x85, 0x0, &(0x7f0000000100)) [ 158.170186][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 158.211260][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.234986][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 158.254772][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.265163][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 158.277553][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.314726][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.354380][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 158.374995][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 158.391958][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 158.403381][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 158.416311][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.429810][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.453027][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.475851][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.489770][ T6829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 158.500709][ T6829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.512530][ T6829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.531599][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 158.540567][ T7525] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 158.555982][ T6829] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.568075][ T6829] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.578151][ T6829] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.587358][ T6829] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.684824][ T7910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.747938][ T7910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.779631][ T20] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 158.828498][ T7910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.844512][ T7910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.857519][ T2933] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 158.958460][ T7999] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.967609][ T7999] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.976464][ T7999] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 158.985184][ T7999] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.018181][ T7999] netdevsim netdevsim5 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.026448][ T1052] Bluetooth: hci5: command 0x040f tx timeout [ 159.027354][ T7999] netdevsim netdevsim5 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.042396][ T7999] netdevsim netdevsim5 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.051598][ T7999] netdevsim netdevsim5 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.186013][ T2933] Bluetooth: hci0: command 0x0419 tx timeout [ 159.505737][ T2933] Bluetooth: hci1: command 0x0419 tx timeout [ 159.986133][ T5] Bluetooth: hci3: command 0x0419 tx timeout [ 161.116531][ T5] Bluetooth: hci5: command 0x0419 tx timeout [ 178.439618][ T8036] chnl_net:caif_netlink_parms(): no params data found [ 178.525762][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 178.533417][ T8036] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.541875][ T8036] device bridge_slave_0 entered promiscuous mode [ 178.551015][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 178.558286][ T8036] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.567583][ T8036] device bridge_slave_1 entered promiscuous mode [ 178.597102][ T8036] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 178.612037][ T8036] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 178.646548][ T8036] team0: Port device team_slave_0 added [ 178.657103][ T8036] team0: Port device team_slave_1 added [ 178.681548][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 178.691487][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.721060][ T8036] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 178.733683][ T8036] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 178.740723][ T8036] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.766864][ T8036] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 178.807594][ T8036] device hsr_slave_0 entered promiscuous mode [ 178.814315][ T8036] device hsr_slave_1 entered promiscuous mode [ 178.821245][ T8036] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 178.831169][ T8036] Cannot create hsr debugfs directory [ 178.962719][ T8036] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 178.971655][ T8036] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 178.981545][ T8036] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 178.991680][ T8036] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 179.019183][ T8036] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.026477][ T8036] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.034451][ T8036] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.041602][ T8036] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.095574][ T8036] 8021q: adding VLAN 0 to HW filter on device bond0 [ 179.111471][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 179.121015][ T5] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.129454][ T5] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.139782][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 179.153697][ T8036] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.168602][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 179.177561][ T5] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.184645][ T5] bridge0: port 1(bridge_slave_0) entered forwarding state [ 179.205781][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 179.214549][ T5] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.221676][ T5] bridge0: port 2(bridge_slave_1) entered forwarding state [ 179.237298][ T7821] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 179.247569][ T7821] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 179.261463][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 179.275300][ T7821] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 179.286522][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 179.299286][ T8036] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 179.318938][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 179.326624][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 179.342170][ T8036] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.367108][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 179.392835][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 179.401319][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 179.410840][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 179.422483][ T8036] device veth0_vlan entered promiscuous mode [ 179.438797][ T8036] device veth1_vlan entered promiscuous mode [ 179.464221][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 179.473490][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 179.486261][ T8036] device veth0_macvtap entered promiscuous mode [ 179.497565][ T8036] device veth1_macvtap entered promiscuous mode [ 179.517581][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.528382][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.538979][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.549870][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.559866][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.570706][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.584891][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 179.596763][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.608983][ T8036] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 179.618495][ T7821] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 179.627641][ T7821] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 179.636777][ T7821] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 179.645839][ T7821] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 179.661474][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.672216][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.684105][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.696162][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.706658][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.717886][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.728855][ T8036] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 179.739701][ T8036] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 179.760519][ T8036] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 179.769836][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 179.779507][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 179.791977][ T8036] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.801624][ T8036] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.811140][ T8036] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.820107][ T8036] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 179.904219][ T7910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.934963][ T7910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.961974][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 179.980821][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 179.993830][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 180.007978][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:41:48 executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'chacha20-simd\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="b7f2288a911993f0265df5cf1cdd8b55b062950b86bc01abc8464d4f8a906151", 0x20) r1 = accept$alg(r0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000006c40)=[{{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)=""/21, 0x15}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f00000000c0)="8d455533a8fd49b30dbfe07c920d1ff4bcc8c4722d", 0x15}], 0x1, &(0x7f00000019c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) 14:41:48 executing program 1: socketpair(0x1e, 0x1, 0x0, &(0x7f0000000140)={0x0, 0x0}) recvmsg$kcm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000380), 0x10000023, &(0x7f00000002c0)=""/77, 0x42e}, 0x0) recvmmsg(r0, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f00000003c0)=""/180, 0xb4}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0, 0x0) recvmsg$kcm(r0, &(0x7f0000000200)={&(0x7f0000000040)=@ax25, 0xfe76, &(0x7f0000000000)=[{&(0x7f0000000080)=""/151, 0x2f5530}], 0x8, &(0x7f00000001c0)=""/4, 0x10036, 0x7301}, 0x3f9c) sendmsg(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000280), 0x4e, &(0x7f0000000000), 0x0, 0x3f00}, 0x0) [ 180.305585][ T7821] Bluetooth: hci4: command 0x0409 tx timeout [ 182.394949][ T1055] Bluetooth: hci4: command 0x041b tx timeout [ 184.465018][ T1055] Bluetooth: hci4: command 0x040f tx timeout [ 186.547469][ T1055] Bluetooth: hci4: command 0x0419 tx timeout [ 191.022449][ T8410] chnl_net:caif_netlink_parms(): no params data found [ 191.103662][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.112668][ T8410] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.121592][ T8410] device bridge_slave_0 entered promiscuous mode [ 191.130930][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.138190][ T8410] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.146763][ T8410] device bridge_slave_1 entered promiscuous mode [ 191.178654][ T8410] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.191570][ T8410] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.231707][ T8410] team0: Port device team_slave_0 added [ 191.240792][ T8410] team0: Port device team_slave_1 added [ 191.270447][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.278349][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.305110][ T8410] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.318791][ T8410] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.326233][ T8410] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.352824][ T8410] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.395369][ T8410] device hsr_slave_0 entered promiscuous mode [ 191.402413][ T8410] device hsr_slave_1 entered promiscuous mode [ 191.409078][ T8410] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.417579][ T8410] Cannot create hsr debugfs directory [ 191.553757][ T8410] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 191.563007][ T8410] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 191.579973][ T8410] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 191.598400][ T8410] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 191.622323][ T8410] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.629596][ T8410] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.637030][ T8410] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.644270][ T8410] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.697549][ T8410] 8021q: adding VLAN 0 to HW filter on device bond0 [ 191.714457][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 191.722455][ T2932] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.733749][ T2932] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.742861][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 191.761768][ T8410] 8021q: adding VLAN 0 to HW filter on device team0 [ 191.776397][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 191.784769][ T1055] bridge0: port 1(bridge_slave_0) entered blocking state [ 191.791819][ T1055] bridge0: port 1(bridge_slave_0) entered forwarding state [ 191.806007][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 191.814305][ T1055] bridge0: port 2(bridge_slave_1) entered blocking state [ 191.821463][ T1055] bridge0: port 2(bridge_slave_1) entered forwarding state [ 191.847301][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 191.857420][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 191.875804][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 191.884250][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 191.900366][ T8410] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 191.912447][ T8410] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 191.921537][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 191.944879][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 191.952353][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 191.966899][ T8410] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 192.041994][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 192.051093][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 192.078105][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 192.086467][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 192.102791][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 192.111046][ T1055] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 192.121230][ T8410] device veth0_vlan entered promiscuous mode [ 192.133913][ T8410] device veth1_vlan entered promiscuous mode [ 192.163208][ T8410] device veth0_macvtap entered promiscuous mode [ 192.171338][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 192.180878][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 192.191124][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 192.201036][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 192.211395][ T7346] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 192.223126][ T8410] device veth1_macvtap entered promiscuous mode [ 192.251297][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.262632][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.273368][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.284043][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.296966][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.308520][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.320280][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.331797][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.342718][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3d) already exists on: batadv_slave_0 [ 192.354066][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.366409][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 192.376011][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 192.383896][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 192.393968][ T5] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 192.406129][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.417882][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.427884][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.441220][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.451179][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.461808][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.472189][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.483005][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.493202][ T8410] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_1 [ 192.504065][ T8410] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 192.516149][ T8410] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 192.527748][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 192.537862][ T2932] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 192.549515][ T8410] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.558884][ T8410] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.568451][ T8410] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.577591][ T8410] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 192.661824][ T8] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.674602][ T8] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.684796][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 192.737160][ T8] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 192.752654][ T8] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.763188][ T8367] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready 14:42:01 executing program 4: r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000180)={0x18, 0x0, {0x2, @dev, 'wg1\x00'}}, 0x1e) connect$pppoe(r0, &(0x7f0000000000)={0x18, 0x0, {0x2, @multicast, 'tunl0\x00'}}, 0x1e) 14:42:01 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_sync_file_enter\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 14:42:01 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0xfffffffffffffd81) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000020301010104000000000000000000000800010002"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 14:42:01 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00008feff0)={&(0x7f00000001c0)={0x2, 0xd, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}, @sadb_x_policy={0x8, 0x12, 0x2, 0x2, 0x0, 0x0, 0x0, {0x10, 0x2b, 0xffffff03, 0x0, 0x0, 0x0, 0x0, @in6=@loopback, @in=@remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x80}}, 0x0) 14:42:01 executing program 2: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8913, &(0x7f0000000240)={'veth0_vlan\x00'}) 14:42:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008000, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x80000008, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) [ 192.866944][ T8367] Bluetooth: hci2: command 0x0409 tx timeout 14:42:01 executing program 2: r0 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r0, 0x10c, 0x2, &(0x7f0000005e40), &(0x7f0000005e80)=0x4) 14:42:01 executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000c80)={'wpan0\x00', 0x0}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000280)={0x48, r3, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_DEVICE={0xc, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6}]}, @NL802154_ATTR_SEC_DEVICE={0x20, 0x23, 0x0, 0x1, [@NL802154_DEV_ATTR_EXTENDED_ADDR={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ATTR_PAN_ID={0x6}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x5f}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r1}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x810) 14:42:01 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000140)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_GATEWAYS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)={0x24, r1, 0x711, 0x0, 0x0, {0x8, 0x0, 0xdc11}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r4}]}, 0x24}}, 0x0) 14:42:01 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008000, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x80000008, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 14:42:02 executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="28000000300001030000000066f3069a08f9e3ab1400010010000100040001000000890000c3000000c9faffffffb7f66878de0103287ddfa42b3828fe1519c0c4c73aa8571fa11c76f00677c5ebb234821234a4307b446136fe33809298a0aa4136d852db5cec"], 0x28}}, 0x0) r0 = socket(0x200000100000011, 0x803, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) bind$packet(r0, &(0x7f0000000000)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @random='\x00\x00\x00\x00\b\x00'}, 0x14) write$binfmt_aout(r0, &(0x7f0000000040)=ANY=[@ANYBLOB="8000000000000020000011000806000108000604"], 0x120) [ 193.137247][ T8786] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 193.170960][ T8788] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:42:02 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_sync_file_enter\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 14:42:02 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_sync_file_enter\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 14:42:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000005400)={0x0, 0x0, &(0x7f0000000040)=[{0x0}, {0x0, 0x404}], 0x2}, 0x0) sendmsg$netlink(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="180000001e0001ef"], 0x18}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000000000), 0x8000000000000b5, 0x0, 0x0) 14:42:02 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0xfffffffffffffd81) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000020301010104000000000000000000000800010002"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 14:42:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008000, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x80000008, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) 14:42:02 executing program 2: r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'gre0\x00', &(0x7f0000000140)={'gretap0\x00', 0x0, 0x0, 0x700, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast, @broadcast}}}}) 14:42:02 executing program 5: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="340000002c00c9fe2bbd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="01000a000f000c00f3ff060006"], 0x34}}, 0x0) 14:42:02 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_sync_file_enter\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 14:42:02 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_sync_file_enter\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) [ 193.874145][ T8821] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.5'. 14:42:02 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x2}, 0x10) bpf$LINK_DETACH(0xf, &(0x7f0000000040)=r2, 0x4) 14:42:02 executing program 4: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_sync_file_enter\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) 14:42:02 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000040)="3900000013001104680907070000000f0000ff3f04000000170a001700000000040037000a00030001632564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) 14:42:02 executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x24008000, &(0x7f0000000bc0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x1}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0x4e, &(0x7f0000000000)=0x80000008, 0x4) bind$inet6(r0, &(0x7f0000f65000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) [ 193.986574][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 193.992983][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 14:42:02 executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_sync_file_enter\x00', r1}, 0x10) write$cgroup_type(r0, &(0x7f0000000000), 0x248800) [ 194.065496][ T8827] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 194.078749][ T8827] device gretap0 entered promiscuous mode [ 194.138311][ T8829] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 194.159655][ T8829] 0ªu: renamed from gretap0 [ 194.190789][ T8829] device c0ªu left promiscuous mode 14:42:03 executing program 1: syz_emit_ethernet(0x7a, &(0x7f0000000240)={@broadcast, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "7ddd9e", 0x44, 0x3c, 0x0, @dev, @local}}}}, 0x0) [ 194.231256][ T8829] A link change request failed with some changes committed already. Interface c0ªu may have been left with an inconsistent configuration, please check. [ 194.300627][ T8827] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 194.360090][ T8827] device c0ªu entered promiscuous mode [ 194.425424][ T8829] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 194.442939][ T8829] 1ªu: renamed from c0ªu [ 194.455632][ T8829] device c1ªu left promiscuous mode [ 194.470418][ T8829] A link change request failed with some changes committed already. Interface c1ªu may have been left with an inconsistent configuration, please check. 14:42:03 executing program 3: pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000000)={@mcast1}, 0xfffffffffffffd81) close(r2) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1400000010efa8c68d000000000000000000000a2000000002030100000000f787060000000000000900010001"], 0xcc}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000020301010104000000000000000000000800010002"], 0x1c}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 14:42:03 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x2}, 0x10) bpf$LINK_DETACH(0xf, &(0x7f0000000040)=r2, 0x4) 14:42:03 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x2}}]}, 0x1c}}, 0x0) 14:42:03 executing program 0: sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x4c}}, 0x0) r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x89b0, &(0x7f0000000140)) 14:42:03 executing program 1: r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendto$inet(r1, &(0x7f0000000180), 0x214, 0x0, 0x0, 0x31b) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000440)={0x0, 0x2}, 0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f00000000c0), &(0x7f0000000100)=0x8) 14:42:03 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000040)="3900000013001104680907070000000f0000ff3f04000000170a001700000000040037000a00030001632564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) [ 194.859276][ T8852] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 194.900409][ T8852] device c1ªu entered promiscuous mode [ 194.933110][ T8860] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 194.944757][ T2932] Bluetooth: hci2: command 0x041b tx timeout 14:42:03 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x2}, 0x10) bpf$LINK_DETACH(0xf, &(0x7f0000000040)=r2, 0x4) 14:42:03 executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-cast6-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) write$binfmt_script(r1, &(0x7f0000000600)=ANY=[], 0xfec8) recvmmsg(r1, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000b80)=""/140, 0x8c}], 0x1}}], 0x1, 0x0, 0x0) [ 194.984942][ T8860] 0ªu: renamed from c1ªu [ 195.007606][ T8860] device c0ªu left promiscuous mode [ 195.033167][ T8860] A link change request failed with some changes committed already. Interface c0ªu may have been left with an inconsistent configuration, please check. 14:42:03 executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x7b, 0x0, &(0x7f0000001d40)) 14:42:03 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) getpid() ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454ca, 0x4af006) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x11d55c, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) 14:42:04 executing program 2: bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000100)={r1, r0, 0x2}, 0x10) bpf$LINK_DETACH(0xf, &(0x7f0000000040)=r2, 0x4) 14:42:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000040)="3900000013001104680907070000000f0000ff3f04000000170a001700000000040037000a00030001632564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) [ 195.290330][ T8884] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 195.345730][ T8884] device c0ªu entered promiscuous mode [ 195.454186][ T8886] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 195.468939][ T8886] 1ªu: renamed from c0ªu [ 195.482000][ T8886] device c1ªu left promiscuous mode [ 195.510082][ T8886] A link change request failed with some changes committed already. Interface c1ªu may have been left with an inconsistent configuration, please check. 14:42:04 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r0, 0x8943, &(0x7f0000000040)={'dummy0\x00', @ifru_settings={0x0, 0x0, @sync=0x0}}) 14:42:04 executing program 4: r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8924, &(0x7f0000000000)={'batadv_slave_1\x00'}) 14:42:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x103, 0x3}, 0x20) 14:42:04 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f0000000080)=[{&(0x7f0000000000)="390000001300090468fe0700000000000000ff3f04000000480100100000000004002b000a00010014a4ee1ee438d2fd000000000000007200", 0x39}], 0x1) writev(r0, &(0x7f0000001400)=[{&(0x7f0000000040)="3900000013001104680907070000000f0000ff3f04000000170a001700000000040037000a00030001632564aa75b9a64411f6bbf44dc48f57", 0x39}], 0x1) 14:42:04 executing program 3: epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)) [ 195.790476][ T8882] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 195.820675][ T8882] device ipvlan0 entered promiscuous mode [ 195.889342][ T8917] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.5'. [ 195.908993][ T8917] device c1ªu entered promiscuous mode 14:42:04 executing program 3: r0 = socket(0x1000000010, 0x80002, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={0x0}}, 0x0) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="380000002400ffffff7f000000003c0005000000", @ANYRES32=r3, @ANYBLOB="00000000ffffffff00000000090001006866736300000000080002"], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000002400)=@newtfilter={0x7c, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0x10}, {}, {0x3}}, [@filter_kind_options=@f_fw={{0x7}, {0x50, 0x2, [@TCA_FW_ACT={0x4c, 0x4, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x9}}}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x7c}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 14:42:04 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x103, 0x3}, 0x20) 14:42:04 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100007000) pipe(&(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="770080000000000000121a0800000700210062620000080022"], 0x24}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100007800) [ 195.984348][ T8926] 0ªu: renamed from c1ªu [ 196.009144][ T8926] device c0ªu left promiscuous mode 14:42:04 executing program 1: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r0, &(0x7f0000000000)="412ad1", 0x3, 0x0, &(0x7f0000000080)={0x2, 0x0, @private=0xa010101}, 0x10) [ 196.039428][ T8926] A link change request failed with some changes committed already. Interface c0ªu may have been left with an inconsistent configuration, please check. [ 196.085879][ T25] audit: type=1804 audit(1634568124.897:2): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir087594768/syzkaller.N14vI3/9/cgroup.controllers" dev="sda1" ino=13958 res=1 errno=0 [ 196.243643][ T25] audit: type=1804 audit(1634568125.017:3): pid=8932 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir087594768/syzkaller.N14vI3/9/cgroup.controllers" dev="sda1" ino=13958 res=1 errno=0 [ 196.815800][ T8882] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 196.843051][ T8882] device ipvlan2 entered promiscuous mode [ 197.034748][ T2932] Bluetooth: hci2: command 0x040f tx timeout 14:42:05 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) getpid() ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454ca, 0x4af006) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x11d55c, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) 14:42:05 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x103, 0x3}, 0x20) 14:42:05 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 14:42:05 executing program 1: sendmsg$TIPC_NL_PEER_REMOVE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYRESOCT], 0x14}}, 0x0) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) ioctl$PPPIOCGDEBUG(r0, 0x4010744d, &(0x7f0000000080)) 14:42:05 executing program 5: bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x7, [@struct={0x5}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x5f]}}, &(0x7f0000000140)=""/182, 0x2b, 0xb6, 0x1}, 0x20) 14:42:05 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100007000) pipe(&(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="770080000000000000121a0800000700210062620000080022"], 0x24}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100007800) 14:42:06 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100007000) pipe(&(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="770080000000000000121a0800000700210062620000080022"], 0x24}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100007800) [ 197.229997][ T25] audit: type=1804 audit(1634568126.047:4): pid=8983 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir087594768/syzkaller.N14vI3/10/cgroup.controllers" dev="sda1" ino=13964 res=1 errno=0 14:42:06 executing program 2: r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@loopback, 0x800, 0x0, 0x103, 0x3}, 0x20) [ 197.399803][ T25] audit: type=1804 audit(1634568126.217:5): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir288692593/syzkaller.ILuvVT/10/cgroup.controllers" dev="sda1" ino=13954 res=1 errno=0 14:42:06 executing program 1: r0 = socket$inet6(0xa, 0x401000000001, 0x0) close(r0) r1 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000180)=0x6, 0x4) sendto$inet6(r1, &(0x7f0000000240)="73fee4fd2ea95ce9b1fb4e99e634a70be1fcec97a9f7e9b19a1e6a5742a290acc68024a610a97a0f", 0x28, 0x0, 0x0, 0x0) [ 197.561762][ T25] audit: type=1804 audit(1634568126.257:6): pid=8983 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir087594768/syzkaller.N14vI3/10/cgroup.controllers" dev="sda1" ino=13964 res=1 errno=0 14:42:06 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000003000010000000000000000000000001354000100500001000b000100"], 0x68}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) [ 197.747225][ T25] audit: type=1804 audit(1634568126.447:7): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir288692593/syzkaller.ILuvVT/10/cgroup.controllers" dev="sda1" ino=13954 res=1 errno=0 14:42:06 executing program 1: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x3, [@var={0x1, 0x0, 0x0, 0xe, 0x2}, @ptr={0x0, 0x0, 0x0, 0x2, 0x1}]}, {0x0, [0x5f]}}, &(0x7f0000001340)=""/250, 0x37, 0xfa, 0x1}, 0x20) 14:42:06 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100007000) pipe(&(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="770080000000000000121a0800000700210062620000080022"], 0x24}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100007800) [ 198.201246][ T25] audit: type=1804 audit(1634568127.017:8): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir087594768/syzkaller.N14vI3/11/cgroup.controllers" dev="sda1" ino=13946 res=1 errno=0 [ 198.383932][ T25] audit: type=1804 audit(1634568127.197:9): pid=9037 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir087594768/syzkaller.N14vI3/11/cgroup.controllers" dev="sda1" ino=13946 res=1 errno=0 [ 198.415461][ T8987] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 198.438009][ T8987] device ipvlan0 entered promiscuous mode 14:42:07 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) getpid() ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454ca, 0x4af006) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x11d55c, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) 14:42:07 executing program 1: bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, 0x0, &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) read(r0, &(0x7f0000000100)=""/2, 0x2) r2 = socket$inet6(0xa, 0x3, 0x2c) sendmsg$ETHTOOL_MSG_DEBUG_SET(0xffffffffffffffff, &(0x7f0000002140)={0x0, 0x0, &(0x7f0000002100)={&(0x7f0000001900)=ANY=[@ANYBLOB=','], 0x2c}}, 0x0) connect$inet6(r2, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x7, &(0x7f0000000080)=0x2, 0x4) write$binfmt_misc(r1, &(0x7f0000000080)=ANY=[], 0x2bb98205) splice(r0, 0x0, r2, 0x0, 0x4ff9c, 0x0) 14:42:07 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 14:42:07 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100007000) pipe(&(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="770080000000000000121a0800000700210062620000080022"], 0x24}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100007800) 14:42:07 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000003000010000000000000000000000001354000100500001000b000100"], 0x68}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 14:42:07 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100007000) pipe(&(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="770080000000000000121a0800000700210062620000080022"], 0x24}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100007800) [ 198.948011][ T25] audit: type=1804 audit(1634568127.767:10): pid=9057 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir288692593/syzkaller.ILuvVT/11/cgroup.controllers" dev="sda1" ino=13967 res=1 errno=0 [ 198.998978][ T9062] __nla_validate_parse: 4 callbacks suppressed [ 198.998997][ T9062] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.078303][ T25] audit: type=1804 audit(1634568127.807:11): pid=9058 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir087594768/syzkaller.N14vI3/12/cgroup.controllers" dev="sda1" ino=13968 res=1 errno=0 [ 199.116664][ T2933] Bluetooth: hci2: command 0x0419 tx timeout 14:42:08 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0x100007000) pipe(&(0x7f0000000040)) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="770080000000000000121a0800000700210062620000080022"], 0x24}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r6, r5, 0x0, 0x100007800) 14:42:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.swap.current\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000009c0)=ANY=[], 0x8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000180)) 14:42:08 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000003000010000000000000000000000001354000100500001000b000100"], 0x68}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 14:42:08 executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=@newsa={0x144, 0x10, 0x713, 0x0, 0x0, {{@in=@private, @in6=@mcast2}, {@in6=@empty, 0x0, 0x32}, @in6=@empty, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @offload={0xc}]}, 0x144}}, 0x0) 14:42:08 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) 14:42:08 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0xffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) [ 200.007228][ T9102] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 200.307978][ T9064] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 200.354379][ T9064] device ipvlan0 entered promiscuous mode 14:42:09 executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f0000000000)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x10) unshare(0x40000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4) getpid() ioctl$TUNSETPERSIST(0xffffffffffffffff, 0x400454ca, 0x4af006) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000003c0)={0x0, 0x11d55c, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=0x0, @ANYBLOB="6535060000000000140012800b0001006970766c616e0000040002800a000500040000000000000008000a00", @ANYRES32], 0x48}}, 0x0) getsockopt$TIPC_CONN_TIMEOUT(0xffffffffffffffff, 0x10f, 0x82, 0x0, 0x0) 14:42:09 executing program 1: r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000001440), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r0, 0x11, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x24}}, 0x0) 14:42:09 executing program 5: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x6234f84c1300dfc9, 0x0, 0x0, {}, [@NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0xffffff00}]}], {0x14}}, 0x6c}}, 0x0) 14:42:09 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0xffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) 14:42:09 executing program 2: pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="680000003000010000000000000000000000001354000100500001000b000100"], 0x68}}, 0x0) write$binfmt_misc(r1, &(0x7f0000000180)=ANY=[], 0xfffffc7b) r2 = socket(0x10, 0x3, 0x0) splice(r0, 0x0, r2, 0x0, 0x4ffe0, 0x0) 14:42:09 executing program 1: r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000002c0)=ANY=[@ANYBLOB="28010000031401002dbd7000fcdbdf250900020073797a32000000000800410072786500140033006d6163766c616e3100000000000000000900020073797a310000000008004100736977001400330073797a5f74756e0000000000000000000900020073797a3000000000080041007278650014003300677265300000000000000000000000000900020073797a310000000008004100736977001400330076657468305f746f5f626f6e64000000090002"], 0x128}}, 0x0) 14:42:09 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000900), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x18, r1, 0xb15, 0x0, 0x0, {0x1c}, [@HEADER={0x4}]}, 0x18}}, 0x0) 14:42:09 executing program 3: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private2}], 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000003c0)={0x0, 0x10, &(0x7f0000000300)=[@in={0x2, 0x0, @private=0xa010102}]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, 0x0, 0x0) [ 201.035386][ T9149] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.1'. [ 201.116342][ T9155] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. 14:42:10 executing program 1: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000100)=r1, 0x4) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0) 14:42:10 executing program 5: r0 = socket(0x1000000010, 0x80002, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[], 0x38}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@deltaction={0x24, 0x31, 0x305, 0x0, 0x0, {}, [@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ipt\x00'}}]}]}, 0x24}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000200), 0x10efe10675dec16, 0x0) 14:42:10 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0xffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) 14:42:10 executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x3) write$bt_hci(r0, 0x0, 0xeffd) [ 201.750954][ T25] kauditd_printk_skb: 8 callbacks suppressed [ 201.750971][ T25] audit: type=1804 audit(1634568130.567:20): pid=9176 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir087594768/syzkaller.N14vI3/16/cgroup.controllers" dev="sda1" ino=13954 res=1 errno=0 [ 201.948766][ T25] audit: type=1804 audit(1634568130.677:21): pid=9179 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir087594768/syzkaller.N14vI3/16/cgroup.controllers" dev="sda1" ino=13954 res=1 errno=0 [ 202.146084][ T9132] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 202.171978][ T9132] device ipvlan0 entered promiscuous mode 14:42:11 executing program 5: write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) 14:42:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x44}}, 0x0) 14:42:11 executing program 2: r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000340)="2e00000029000504d25a80648c63940d0124fc6004000f400a003d005a00000037153e370a00018003000000d1bd", 0x2e}], 0x1}, 0x0) 14:42:11 executing program 3: read$alg(0xffffffffffffffff, 0x0, 0x0) 14:42:11 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000400)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r2, r1, 0x0, 0xffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendfile(r4, r3, 0x0, 0x100000001) [ 202.694246][ T9192] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium 14:42:11 executing program 0: syz_open_procfs$namespace(0x0, &(0x7f0000000240)='ns/time\x00') 14:42:11 executing program 3: r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) sendmmsg(r0, &(0x7f0000002ac0)=[{{0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000580)}], 0x1}}], 0x1, 0x40) 14:42:11 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r1, 0xe2c06941fce61767}, 0x14}}, 0x0) 14:42:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x44}}, 0x0) 14:42:11 executing program 2: syz_emit_ethernet(0x6e, &(0x7f0000000200)={@multicast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f8b209", 0x38, 0x3a, 0x0, @private2, @local, {[], @time_exceed={0x2, 0x0, 0x0, 0x0, '\x00', {0x0, 0x6, "3ddf85", 0x0, 0x2f, 0x0, @local, @ipv4={'\x00', '\xff\xff', @multicast2}, [], "575fca2f9296c489"}}}}}}}, 0x0) [ 202.864541][ T25] audit: type=1804 audit(1634568131.687:22): pid=9199 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir087594768/syzkaller.N14vI3/17/cgroup.controllers" dev="sda1" ino=13985 res=1 errno=0 14:42:11 executing program 0: r0 = socket(0x2a, 0x2, 0x0) recvmmsg(r0, &(0x7f0000007b80)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) 14:42:11 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x44}}, 0x0) [ 203.021672][ T25] audit: type=1804 audit(1634568131.737:23): pid=9203 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir087594768/syzkaller.N14vI3/17/cgroup.controllers" dev="sda1" ino=13985 res=1 errno=0 14:42:11 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x2, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x64}, 0x48) 14:42:12 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r0, 0x11, 0x0, &(0x7f0000000280), 0x4) 14:42:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SET_LIMITS(r0, &(0x7f00000005c0)={&(0x7f0000000440), 0xc, &(0x7f0000000580)={&(0x7f00000004c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x18, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8}]}, 0x3c}}, 0x0) 14:42:12 executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x88, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @remote}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_TUPLE_MASTER={0x24, 0x18, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x88}}, 0x0) [ 203.407722][ T9228] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 203.443047][ T9228] netlink: 'syz-executor.0': attribute type 2 has an invalid length. 14:42:12 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000003) r2 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00'}) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @val={@void}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xe8}]}}, @echo}}}}, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000005400010000000000000000000700", @ANYRES32=r3, @ANYBLOB="20f5845642000100", @ANYRES32=r4, @ANYBLOB="00000000e0000300000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x29, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0xffffff7f0e000000}, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 14:42:12 executing program 5: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000180), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, r2, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) 14:42:12 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5}]}}}]}, 0x44}}, 0x0) 14:42:12 executing program 3: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x1, @fixed, 0x0, 0x2}, 0xe) 14:42:12 executing program 0: pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f00000000c0)={0x5}, 0x0, 0x0) 14:42:12 executing program 4: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bind$bt_l2cap(r0, &(0x7f0000001440)={0x1f, 0x3}, 0xe) 14:42:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{}, "44cd838e7eb10358", "ab5c2919e99c1f8b1e48bc3e4fb134b6", "d310624b", "6444ef8678482caf"}, 0x28) 14:42:12 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f000000e5c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_RESEND_IGMP={0x8, 0x2}]}}}]}, 0x44}}, 0x0) 14:42:12 executing program 5: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0xc, 0xe, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x26}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={r0, 0x1420, 0x46, 0x0, &(0x7f0000000100)="4d50b441e692763513ef874565580000ff0d00000000122e25d386dd227dcb6470faa27ed2a0ff3862c8112b9bd19802e274d7b70fe661176f27007b9631b3a0291d70d5f32d", 0x0, 0x219, 0x0, 0x66, 0xffffff02, &(0x7f0000000000), &(0x7f0000000380)="7045502c9fe7d72a5d725d07000000840c0fa18b214f01adde5b220866f34723aefcc876df83a6915a229aed8abea8fce9dca40354f218178eedfd571140c75e8aaafa38e2ecaa6ebfc27f5dc7301c0585450d3cfc4ceee8968d02b47f1d829da06a01f82ec4f14d3c692a59db27ece44a0e029488462d11e930e90d5deafb1b5af71d3cd3c053aa34bc8d000000"}, 0x40) [ 203.814494][ T9245] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 14:42:12 executing program 5: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x50, 0x3, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc}]}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14}], {0x14}}, 0xac}}, 0x0) 14:42:12 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 14:42:12 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{}, "44cd838e7eb10358", "ab5c2919e99c1f8b1e48bc3e4fb134b6", "d310624b", "6444ef8678482caf"}, 0x28) [ 204.305654][ T9309] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 14:42:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000003) r2 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00'}) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @val={@void}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xe8}]}}, @echo}}}}, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000005400010000000000000000000700", @ANYRES32=r3, @ANYBLOB="20f5845642000100", @ANYRES32=r4, @ANYBLOB="00000000e0000300000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x29, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0xffffff7f0e000000}, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 14:42:13 executing program 5: r0 = socket$inet_smc(0x2b, 0x1, 0x0) bind(r0, 0x0, 0x0) 14:42:13 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f000000e5c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_RESEND_IGMP={0x8, 0x2}]}}}]}, 0x44}}, 0x0) 14:42:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) [ 204.679141][ T9360] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 14:42:13 executing program 0: syz_init_net_socket$ax25(0x3, 0x2, 0xcc) 14:42:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{}, "44cd838e7eb10358", "ab5c2919e99c1f8b1e48bc3e4fb134b6", "d310624b", "6444ef8678482caf"}, 0x28) 14:42:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 14:42:13 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000003) r2 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00'}) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @val={@void}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xe8}]}}, @echo}}}}, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000005400010000000000000000000700", @ANYRES32=r3, @ANYBLOB="20f5845642000100", @ANYRES32=r4, @ANYBLOB="00000000e0000300000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x29, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0xffffff7f0e000000}, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 14:42:13 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f000000e5c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_RESEND_IGMP={0x8, 0x2}]}}}]}, 0x44}}, 0x0) 14:42:13 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x64, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x28, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}}}]}], {0x14, 0x10}}, 0xac}}, 0x0) 14:42:13 executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f00000000c0)=0x100000001, 0x1d4) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000001c0), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000040)=@gcm_128={{}, "44cd838e7eb10358", "ab5c2919e99c1f8b1e48bc3e4fb134b6", "d310624b", "6444ef8678482caf"}, 0x28) [ 204.989928][ T9388] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 14:42:13 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000003) r2 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00'}) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @val={@void}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xe8}]}}, @echo}}}}, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000005400010000000000000000000700", @ANYRES32=r3, @ANYBLOB="20f5845642000100", @ANYRES32=r4, @ANYBLOB="00000000e0000300000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x29, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0xffffff7f0e000000}, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 14:42:13 executing program 0: syz_init_net_socket$ax25(0x3, 0x2, 0xcc) 14:42:14 executing program 1: r0 = socket$inet_sctp(0x2, 0x1, 0x84) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000300)=ANY=[@ANYBLOB="15d94ab20dc8320e82139a62a5b8fae2a2c1bba4919015895da7ee36e26a6676281aa46b128727382231b0b4ac91e53295f3afdb7f876264add4788cf10fc795f73191b9eb2e1eeae73fe5fe6f7960554c29e202aec8f2d8d158c385445fd65d3d35b9107acca5042f46d14ccc3499cb14053df65ffff3af829be06ad9ba42391340ae23c5f350798dcf14e9ccd3f47ddfe2ed84b7483e017d9e91f2a13e7baa07fc7892e685a495d64b4ad94de06dfb098884a1b3728cefe83027f22de4dfb158e0e2cd434fbe34b29f67f25f962ebeef1d63fd04b814e2e2e3bc97d0cb06624094", @ANYRES32, @ANYBLOB="bf27882dbeefb0bd00f173c7ebf18492116ec820e1b553b80838ee4a4305e855d4c06500eea87b73425f2cd064e39954e774a574250808dd5c11"], 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000100)={0x0, @broadcast, 0x0, 0x0, 'nq\x00'}, 0x2c) 14:42:14 executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f000000e5c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_RESEND_IGMP={0x8, 0x2}]}}}]}, 0x44}}, 0x0) [ 205.297551][ T9440] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 205.328761][ T9426] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 14:42:14 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000040)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TUNSETLINK(r1, 0x8912, 0x400308) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) accept4(0xffffffffffffffff, &(0x7f0000000180)=@tipc=@name, &(0x7f0000000000)=0x80, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000003900190100000600000000000200000004000000180001"], 0x30}}, 0x0) sendfile(r3, r2, 0x0, 0x7fffeffe) 14:42:14 executing program 0: syz_init_net_socket$ax25(0x3, 0x2, 0xcc) 14:42:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) getsockname(r0, &(0x7f0000000600)=@can={0x1d, 0x0}, &(0x7f0000000680)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:42:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000003) r2 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00'}) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @val={@void}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xe8}]}}, @echo}}}}, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000005400010000000000000000000700", @ANYRES32=r3, @ANYBLOB="20f5845642000100", @ANYRES32=r4, @ANYBLOB="00000000e0000300000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x29, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0xffffff7f0e000000}, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 14:42:14 executing program 0: syz_init_net_socket$ax25(0x3, 0x2, 0xcc) [ 205.731700][ T9498] netlink: 'syz-executor.5': attribute type 12 has an invalid length. [ 205.753315][ T25] audit: type=1804 audit(1634568134.567:24): pid=9504 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir087594768/syzkaller.N14vI3/23/cgroup.controllers" dev="sda1" ino=13930 res=1 errno=0 14:42:14 executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000003) r2 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00'}) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @val={@void}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xe8}]}}, @echo}}}}, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000005400010000000000000000000700", @ANYRES32=r3, @ANYBLOB="20f5845642000100", @ANYRES32=r4, @ANYBLOB="00000000e0000300000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x29, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0xffffff7f0e000000}, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) [ 205.799315][ T9496] netlink: 'syz-executor.4': attribute type 1 has an invalid length. 14:42:14 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) getsockname(r0, &(0x7f0000000600)=@can={0x1d, 0x0}, &(0x7f0000000680)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:42:14 executing program 3: bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0xa8}, [@ldst={0x4}]}, &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x48) 14:42:14 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETSNDBUF(r0, 0x400454d8, &(0x7f00000001c0)=0x401) 14:42:14 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000002c0)=@req={0x3fc}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev}, 0x1c) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x80000000003) r2 = socket(0x200000000000011, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'ip6erspan0\x00'}) syz_emit_ethernet(0x32, &(0x7f0000000340)={@local, @dev, @val={@void}, {@ipv4={0x800, @icmp={{0x6, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @multicast1, {[@timestamp_prespec={0x44, 0x4, 0xe8}]}}, @echo}}}}, 0x0) bind$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) getsockname$packet(r2, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="380000005400010000000000000000000700", @ANYRES32=r3, @ANYBLOB="20f5845642000100", @ANYRES32=r4, @ANYBLOB="00000000e0000300000000"], 0x38}}, 0x0) sendmmsg(r1, &(0x7f0000000a40), 0x8000000000000b0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x20, 0x29, 0x829, 0x0, 0x0, {0x4, 0x1000000}, [@typed={0xc, 0xc, 0x0, 0x0, @u64}]}, 0x20}, 0x1, 0xffffff7f0e000000}, 0x0) socket$bt_hidp(0x1f, 0x3, 0x6) 14:42:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) getsockname(r0, &(0x7f0000000600)=@can={0x1d, 0x0}, &(0x7f0000000680)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) [ 206.127756][ T9524] netlink: 'syz-executor.2': attribute type 12 has an invalid length. 14:42:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x0, 0x0, 0x11}) [ 206.238955][ T9527] tap0: tun_chr_ioctl cmd 1074025688 [ 206.387342][ T9550] netlink: 'syz-executor.5': attribute type 12 has an invalid length. 14:42:15 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB="18000000", @ANYRES16=0x0, @ANYBLOB="00000000d3c9ffffff0012000000040001"], 0x18}}, 0x0) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYBLOB="09000000b51d95ecc57e145e34"], 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'virt_wifi0\x00'}) ioctl(r0, 0x8b32, &(0x7f0000000040)) 14:42:15 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) getsockname(r0, &(0x7f0000000600)=@can={0x1d, 0x0}, &(0x7f0000000680)=0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x3, 0x1, &(0x7f0000000000)=@raw=[@ldst], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) 14:42:15 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETSNDBUF(r0, 0x400454d8, &(0x7f00000001c0)=0x401) [ 206.583455][ T25] audit: type=1800 audit(1634568135.397:25): pid=9547 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed comm="syz-executor.3" name="cgroup.controllers" dev="sda1" ino=14012 res=0 errno=0 14:42:15 executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x3, &(0x7f00000001c0)=@framed, &(0x7f0000000180)='syzkaller\x00', 0x2, 0xe5, &(0x7f0000000000)=""/229, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) close(r0) 14:42:15 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x0, 0x0, 0x11}) 14:42:15 executing program 5: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0x22, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x10) 14:42:15 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) close(r0) [ 206.794191][ T9569] tap0: tun_chr_ioctl cmd 1074025688 14:42:15 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x0, @dev, 0x7}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000002080)="4768b6779ecf245d5776009d49ae023c2a0082889c0b9ad4b765207d577df531ace65c5055bbaf5ecd2fd6ad994c912aa66a8f16a44df28d64af6eaa011e311171df3bd96e373024f2e678c5fd063e9e5632d1895af79115c0ec5310a4897553bce5977125e8f6101ba98172cb84b07e9a0f022a1e8f3aacaf108590583b77f26946977c453f6884ccbed36802fbe1903bd2d6e1f88b66eb3373dea9db5ca4bcb1653e411f252141746b58381138fe3df53d7e57beeb355a31378583dc24d6fa89fd1fb4bfab528f7e8ff866df719777bab32862bb25533c6fedba24d7f100f6a27915c604097c076838ccfa8cb71783f567c6ee71054a6af955c2a2a46d8662e348470cf92c1bb066eb5378112e8829b4ab28d87e77da5fbaebb764c69892ed4df60ddaaabfdd44354a3938beaf78637919c64692654b16fd3ff96c42ab63df628ffcb410f18e107182db96f3d3ed7f1df4c41d1b35a17effc437073135c6b65fe66f5b005730910ef40daf177094d16b243c0e2408cc8e0133272dfdecf1f4ed6b5f4985b2b22d91e390450a99f6796142ebbca9dbbb1723b312427fefb6deab3709b5805a0985928ba146445fd28e392cd96df4ad1c54ff2b7743b5d33f003faaebc53f6bebfeb18e1217320b1bdea469d7d64993b0081ddee032a7903f5720055908bdfde01c06e2bfc4a89702417bed42baef7d70e20a5a63ebd2306227b5507181867f516d663839c3e6ab77ee5fa6e18d431f12761b8dfba084b77a00000c99f75ea9418e2225dfc66c038294c756e09ed56261a837212d040b7ac49f535bd6003ac0738d4a2569e21effac553e8a7fafeafedb46c98283193a31e834e7d46b63ec4092f8f4006280b63371f0b6e26e0c669b2be8f62f72642c0da140b7c77592c9d46699bdd7e0c1798f17975e7c820496774016dc008d92633bab68599d1b59f3daffadfd9b780f49be8e0d117cc064ad126fc971e59b46cfb9b28f73d19efe56eabd37fd809e43c76652da1042d5095579179b0f361f6a53aafd85243ce51c15b2187dc7f147e32e89217b29f6e6519324e81490e58b9a204d54b3a7ba2e61df11bee44e62927523d16d586533a72f6dbcd982a4ecbc15e8bda501eb7f5aa03895ae910613f3da121c2e35b4296e541db1e5b17cdc49b6b76df9250ddd1ce5a8526acae0031cbabb22fdb907194a4806852a6ce30dc70e4fa562909d869679dc06af42321dfb9448c25b9de00faceadac79f4de3ac652818", 0x37d}], 0x1, &(0x7f0000000300)=[@rthdrdstopts={{0xb0, 0x29, 0x37, {0x0, 0x13, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}, @hao={0xc9, 0x10, @private2}, @jumbo, @ra, @jumbo, @pad1, @pad1, @ra, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@pad1, @pad1, @ra]}}}, @rthdrdstopts={{0xe8, 0x29, 0x37, {0x0, 0x1a, '\x00', [@generic={0x0, 0x18, "81a785ba670a43768427afa51a6db2de68aec744dd3fa0fd"}, @jumbo, @pad1, @generic={0x0, 0x42, "d9216d3ab4b8a0f8a8a930a064000e1c5e4b122d5f5a371ce9412e0b2d02a701410d06d954769207b3331036f78b85dc0fd996f4db7194c85e7740d1d6002d83d5f8"}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}}}, @rthdrdstopts={{0x18}}], 0x1d8}}], 0x1, 0x0) 14:42:15 executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000000340)={0x0, {{0x2, 0x0, @multicast2}}}, 0x108) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000000)={0x2, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x108) getsockopt$inet_buf(r0, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000140)=0xe1) 14:42:15 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETSNDBUF(r0, 0x400454d8, &(0x7f00000001c0)=0x401) 14:42:15 executing program 5: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit], {0x95, 0x0, 0x29d}}, &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) 14:42:15 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) close(r0) 14:42:16 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x0, @dev, 0x7}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000002080)="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", 0x37d}], 0x1, &(0x7f0000000300)=[@rthdrdstopts={{0xb0, 0x29, 0x37, {0x0, 0x13, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}, @hao={0xc9, 0x10, @private2}, @jumbo, @ra, @jumbo, @pad1, @pad1, @ra, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@pad1, @pad1, @ra]}}}, @rthdrdstopts={{0xe8, 0x29, 0x37, {0x0, 0x1a, '\x00', [@generic={0x0, 0x18, "81a785ba670a43768427afa51a6db2de68aec744dd3fa0fd"}, @jumbo, @pad1, @generic={0x0, 0x42, "d9216d3ab4b8a0f8a8a930a064000e1c5e4b122d5f5a371ce9412e0b2d02a701410d06d954769207b3331036f78b85dc0fd996f4db7194c85e7740d1d6002d83d5f8"}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}}}, @rthdrdstopts={{0x18}}], 0x1d8}}], 0x1, 0x0) [ 207.143751][ T9598] tap0: tun_chr_ioctl cmd 1074025688 14:42:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x0, 0x0, 0x11}) 14:42:16 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) close(r0) 14:42:16 executing program 5: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_MCAST_MSFILTER(r0, 0x29, 0x30, &(0x7f0000000000)={0x0, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2}, 0x90) 14:42:16 executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x26e1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0x13) ioctl$TUNSETSNDBUF(r0, 0x400454d8, &(0x7f00000001c0)=0x401) 14:42:16 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x0, @dev, 0x7}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000002080)="4768b6779ecf245d5776009d49ae023c2a0082889c0b9ad4b765207d577df531ace65c5055bbaf5ecd2fd6ad994c912aa66a8f16a44df28d64af6eaa011e311171df3bd96e373024f2e678c5fd063e9e5632d1895af79115c0ec5310a4897553bce5977125e8f6101ba98172cb84b07e9a0f022a1e8f3aacaf108590583b77f26946977c453f6884ccbed36802fbe1903bd2d6e1f88b66eb3373dea9db5ca4bcb1653e411f252141746b58381138fe3df53d7e57beeb355a31378583dc24d6fa89fd1fb4bfab528f7e8ff866df719777bab32862bb25533c6fedba24d7f100f6a27915c604097c076838ccfa8cb71783f567c6ee71054a6af955c2a2a46d8662e348470cf92c1bb066eb5378112e8829b4ab28d87e77da5fbaebb764c69892ed4df60ddaaabfdd44354a3938beaf78637919c64692654b16fd3ff96c42ab63df628ffcb410f18e107182db96f3d3ed7f1df4c41d1b35a17effc437073135c6b65fe66f5b005730910ef40daf177094d16b243c0e2408cc8e0133272dfdecf1f4ed6b5f4985b2b22d91e390450a99f6796142ebbca9dbbb1723b312427fefb6deab3709b5805a0985928ba146445fd28e392cd96df4ad1c54ff2b7743b5d33f003faaebc53f6bebfeb18e1217320b1bdea469d7d64993b0081ddee032a7903f5720055908bdfde01c06e2bfc4a89702417bed42baef7d70e20a5a63ebd2306227b5507181867f516d663839c3e6ab77ee5fa6e18d431f12761b8dfba084b77a00000c99f75ea9418e2225dfc66c038294c756e09ed56261a837212d040b7ac49f535bd6003ac0738d4a2569e21effac553e8a7fafeafedb46c98283193a31e834e7d46b63ec4092f8f4006280b63371f0b6e26e0c669b2be8f62f72642c0da140b7c77592c9d46699bdd7e0c1798f17975e7c820496774016dc008d92633bab68599d1b59f3daffadfd9b780f49be8e0d117cc064ad126fc971e59b46cfb9b28f73d19efe56eabd37fd809e43c76652da1042d5095579179b0f361f6a53aafd85243ce51c15b2187dc7f147e32e89217b29f6e6519324e81490e58b9a204d54b3a7ba2e61df11bee44e62927523d16d586533a72f6dbcd982a4ecbc15e8bda501eb7f5aa03895ae910613f3da121c2e35b4296e541db1e5b17cdc49b6b76df9250ddd1ce5a8526acae0031cbabb22fdb907194a4806852a6ce30dc70e4fa562909d869679dc06af42321dfb9448c25b9de00faceadac79f4de3ac652818", 0x37d}], 0x1, &(0x7f0000000300)=[@rthdrdstopts={{0xb0, 0x29, 0x37, {0x0, 0x13, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}, @hao={0xc9, 0x10, @private2}, @jumbo, @ra, @jumbo, @pad1, @pad1, @ra, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@pad1, @pad1, @ra]}}}, @rthdrdstopts={{0xe8, 0x29, 0x37, {0x0, 0x1a, '\x00', [@generic={0x0, 0x18, "81a785ba670a43768427afa51a6db2de68aec744dd3fa0fd"}, @jumbo, @pad1, @generic={0x0, 0x42, "d9216d3ab4b8a0f8a8a930a064000e1c5e4b122d5f5a371ce9412e0b2d02a701410d06d954769207b3331036f78b85dc0fd996f4db7194c85e7740d1d6002d83d5f8"}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}}}, @rthdrdstopts={{0x18}}], 0x1d8}}], 0x1, 0x0) 14:42:16 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) close(r0) [ 207.484072][ T9622] tap0: tun_chr_ioctl cmd 1074025688 14:42:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)={0x194, r1, 0x215, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x138, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "db5aa758932b64c668f39dd0b3fff3bd01bb8681e3099da562d69f45e1c95b23"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_FLAGS={0x8}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x194}}, 0x0) 14:42:16 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) close(r0) 14:42:16 executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_mems\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_elf64(r0, &(0x7f00000002c0)=ANY=[], 0xfe6f) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cgroup.controllers\x00', 0x7a05, 0x1700) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, 0x0, 0x0) write$cgroup_subtree(r2, &(0x7f0000000400)=ANY=[], 0x200600) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000180)) ioctl$EXT4_IOC_MOVE_EXT(r1, 0xc028660f, &(0x7f0000000200)={0x0, r0, 0x0, 0x0, 0x11}) 14:42:16 executing program 4: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000780)=[{{&(0x7f0000000580)={0xa, 0x4e23, 0x0, @dev, 0x7}, 0x1c, &(0x7f00000005c0)=[{&(0x7f0000002080)="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", 0x37d}], 0x1, &(0x7f0000000300)=[@rthdrdstopts={{0xb0, 0x29, 0x37, {0x0, 0x13, '\x00', [@calipso={0x7, 0x28, {0x0, 0x8, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0]}}, @hao={0xc9, 0x10, @private2}, @jumbo, @ra, @jumbo, @pad1, @pad1, @ra, @calipso={0x7, 0x40, {0x0, 0xe, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}}}, @dstopts={{0x28, 0x29, 0x37, {0x0, 0x1, '\x00', [@pad1, @pad1, @ra]}}}, @rthdrdstopts={{0xe8, 0x29, 0x37, {0x0, 0x1a, '\x00', [@generic={0x0, 0x18, "81a785ba670a43768427afa51a6db2de68aec744dd3fa0fd"}, @jumbo, @pad1, @generic={0x0, 0x42, "d9216d3ab4b8a0f8a8a930a064000e1c5e4b122d5f5a371ce9412e0b2d02a701410d06d954769207b3331036f78b85dc0fd996f4db7194c85e7740d1d6002d83d5f8"}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @ra, @calipso={0x7, 0x48, {0x0, 0x10, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}]}}}, @rthdrdstopts={{0x18}}], 0x1d8}}], 0x1, 0x0) 14:42:16 executing program 0: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) getsockopt$TIPC_CONN_TIMEOUT(r0, 0x10f, 0x82, 0x0, 0x0) 14:42:16 executing program 1: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) close(r0) 14:42:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)={0x194, r1, 0x215, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x138, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "db5aa758932b64c668f39dd0b3fff3bd01bb8681e3099da562d69f45e1c95b23"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_FLAGS={0x8}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x194}}, 0x0) 14:42:16 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000104000000000000fea7322778f2", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c000030000280050009000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="080004003047ae"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:42:16 executing program 2: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f00000000c0)) ioctl$PPPIOCSACTIVE(r0, 0x40107446, &(0x7f0000000000)={0x1, &(0x7f0000000040)=[{0x6}]}) close(r0) 14:42:16 executing program 4: socketpair(0x2, 0x5, 0x0, &(0x7f0000000000)) unshare(0x40000600) unshare(0x200) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4810}, 0x8c084) 14:42:16 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)={0x194, r1, 0x215, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x138, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "db5aa758932b64c668f39dd0b3fff3bd01bb8681e3099da562d69f45e1c95b23"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_FLAGS={0x8}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x194}}, 0x0) 14:42:17 executing program 3: r0 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000040)={'vlan0\x00', &(0x7f0000000000)=@ethtool_rxfh={0x1c, 0x0, 0x0, 0x0, 0x0, 'ec|'}}) 14:42:17 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001f00)={0x194, r1, 0x215, 0x0, 0x0, {}, [@WGDEVICE_A_PEERS={0x138, 0x8, 0x0, 0x1, [{0x90, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_ALLOWEDIPS={0x20, 0x9, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "db5aa758932b64c668f39dd0b3fff3bd01bb8681e3099da562d69f45e1c95b23"}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x0, @private}}, @WGPEER_A_FLAGS={0x8}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x0, 0x0, @dev}}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_FWMARK={0x8}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}]}, 0x194}}, 0x0) 14:42:17 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000104000000000000fea7322778f2", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c000030000280050009000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="080004003047ae"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:42:17 executing program 3: socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000013c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) 14:42:17 executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000002c0)={'wpan0\x00'}) 14:42:17 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000027c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700feffffffffffff1f"], 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) 14:42:17 executing program 4: socketpair(0x2, 0x5, 0x0, &(0x7f0000000000)) unshare(0x40000600) unshare(0x200) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4810}, 0x8c084) 14:42:17 executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'bond0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="9c0100002400070500"/20, @ANYRES32=r1, @ANYBLOB="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"], 0x19c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) 14:42:17 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xe}, @call={0x85, 0x0, 0x0, 0xf}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='ext4_mballoc_alloc\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r1, &(0x7f0000000000), 0x248800) [ 208.752399][ T25] audit: type=1804 audit(1634568137.567:26): pid=9717 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir399501621/syzkaller.lN7YON/30/cgroup.controllers" dev="sda1" ino=14020 res=1 errno=0 14:42:17 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000104000000000000fea7322778f2", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c000030000280050009000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="080004003047ae"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:42:17 executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000080)=@bridge_getneigh={0x1b, 0x1e, 0x1}, 0x20}}, 0x0) 14:42:17 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_FWMARK={0x8, 0x3, 0x1f}]}}}]}, 0x44}}, 0x0) [ 209.162067][ T25] audit: type=1804 audit(1634568137.977:27): pid=9725 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir399501621/syzkaller.lN7YON/30/cgroup.controllers" dev="sda1" ino=14020 res=1 errno=0 [ 209.225293][ T9766] netlink: 'syz-executor.5': attribute type 3 has an invalid length. 14:42:18 executing program 1: r0 = socket$unix(0x1, 0x2, 0x0) r1 = gettid() sendmsg$unix(r0, &(0x7f00000006c0)={&(0x7f0000000040)=@abs={0x1}, 0x6e, 0x0, 0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1c00000000000000010000af02000000", @ANYRES32=0x0, @ANYRES32, @ANYRES32, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32=r1, @ANYRES32=0xee00, @ANYRES32=0xee00, @ANYBLOB="000000001c000000000000000100000002000000", @ANYRES32, @ANYRES32], 0xe0}, 0x0) 14:42:18 executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB="7000000010000104000000000000fea7322778f2", @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036746e6c000030000280050009000400000005000600f0000000060012004e200000040013000500040003000010080008001a00000008000a00", @ANYRES32, @ANYBLOB="080004003047ae"], 0x70}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000140)=[{0x6, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492805, 0x0) 14:42:18 executing program 4: socketpair(0x2, 0x5, 0x0, &(0x7f0000000000)) unshare(0x40000600) unshare(0x200) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4810}, 0x8c084) 14:42:18 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000027c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700feffffffffffff1f"], 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) 14:42:18 executing program 5: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB="c520000000000000182000000024e12002"], 0x18}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x891c, &(0x7f0000000080)={'veth0_to_bridge\x00', {0x2, 0x0, @broadcast}}) 14:42:18 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000027c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700feffffffffffff1f"], 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) 14:42:18 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000027c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700feffffffffffff1f"], 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) [ 209.776229][ T25] audit: type=1804 audit(1634568138.597:28): pid=9798 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir399501621/syzkaller.lN7YON/31/cgroup.controllers" dev="sda1" ino=14016 res=1 errno=0 14:42:18 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) 14:42:18 executing program 0: r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000200)=@netrom={'nr', 0x0}, 0x10) 14:42:18 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000027c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700feffffffffffff1f"], 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) 14:42:18 executing program 4: socketpair(0x2, 0x5, 0x0, &(0x7f0000000000)) unshare(0x40000600) unshare(0x200) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_LIST(r0, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000240)={&(0x7f0000000180)={0x7c, 0x0, 0x0, 0x70bd2d, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_batadv\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @private0}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_SECCTX={0x27, 0x7, 'system_u:object_r:pam_var_run_t:s0\x00'}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4810}, 0x8c084) [ 209.946703][ T25] audit: type=1804 audit(1634568138.767:29): pid=9809 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir297794752/syzkaller.fbxbWc/44/cgroup.controllers" dev="sda1" ino=13997 res=1 errno=0 [ 210.107465][ T25] audit: type=1804 audit(1634568138.927:30): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir288692593/syzkaller.ILuvVT/36/memory.events" dev="sda1" ino=13999 res=1 errno=0 14:42:19 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x20}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x2}}]}}]}, 0x14c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@mpls_getroute={0x38, 0x1a, 0x1, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x0, 0xd8, 0xfc, 0x1, 0xff, 0x9, 0x3000}, [@RTA_TTL_PROPAGATE={0x5}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x38, 0x81, r5}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x3}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 210.247585][ T25] audit: type=1800 audit(1634568138.927:31): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=13999 res=0 errno=0 14:42:19 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) 14:42:19 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000027c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700feffffffffffff1f"], 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) [ 210.405291][ T25] audit: type=1800 audit(1634568138.957:32): pid=9823 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=collect_data cause=failed(directio) comm="syz-executor.5" name="memory.events" dev="sda1" ino=13999 res=0 errno=0 [ 210.470811][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 210.530166][ T25] audit: type=1804 audit(1634568138.957:33): pid=9820 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.5" name="/root/syzkaller-testdir288692593/syzkaller.ILuvVT/36/memory.events" dev="sda1" ino=13999 res=1 errno=0 [ 210.562071][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 14:42:19 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) 14:42:19 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000027c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700feffffffffffff1f"], 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) [ 210.624439][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 210.665505][ T25] audit: type=1804 audit(1634568139.297:34): pid=9841 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir037011270/syzkaller.YY8Y4u/27/cgroup.controllers" dev="sda1" ino=14025 res=1 errno=0 14:42:19 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) [ 210.820451][ T25] audit: type=1804 audit(1634568139.417:35): pid=9854 uid=0 auid=4294967295 ses=4294967295 subj==unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir288692593/syzkaller.ILuvVT/37/memory.events" dev="sda1" ino=14026 res=1 errno=0 [ 210.898436][ T9862] veth0_to_team: Caught tx_queue_len zero misconfig [ 210.927320][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:42:19 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) [ 210.985091][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 211.049347][ T9851] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:42:19 executing program 5: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) [ 211.286726][ T9862] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:42:20 executing program 3: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000027c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700feffffffffffff1f"], 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) [ 211.361119][ T9862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 14:42:20 executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0xf000) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0xb00000000065808, 0x0) preadv(r1, &(0x7f0000001300)=[{&(0x7f0000000200)=""/4096, 0x3ff800}], 0x1, 0x0, 0x0) [ 211.418101][ T9862] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:42:20 executing program 2: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000027c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700feffffffffffff1f"], 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) 14:42:20 executing program 5: r0 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x24, 0x0, 0x0) 14:42:20 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x20}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x2}}]}}]}, 0x14c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@mpls_getroute={0x38, 0x1a, 0x1, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x0, 0xd8, 0xfc, 0x1, 0xff, 0x9, 0x3000}, [@RTA_TTL_PROPAGATE={0x5}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x38, 0x81, r5}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x3}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 14:42:20 executing program 1: socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f00000027c0)=ANY=[], 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="010700feffffffffffff1f"], 0x1c}}, 0x0) sendfile(r3, r2, 0x0, 0x100000002) ioctl$TUNSETLINK(r0, 0x8912, 0x400308) 14:42:20 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x20}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x2}}]}}]}, 0x14c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@mpls_getroute={0x38, 0x1a, 0x1, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x0, 0xd8, 0xfc, 0x1, 0xff, 0x9, 0x3000}, [@RTA_TTL_PROPAGATE={0x5}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x38, 0x81, r5}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x3}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 14:42:20 executing program 5: r0 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) setsockopt$ax25_int(r0, 0x101, 0x1, &(0x7f0000000080), 0x4) [ 211.994162][ T9886] veth0_to_team: Caught tx_queue_len zero misconfig [ 212.057408][ T9886] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.123347][ T9886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 212.172735][ T9886] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:42:21 executing program 5: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40845}, 0x80) unshare(0x40000080) socket(0x2c, 0x3, 0x0) 14:42:21 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000009580)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) [ 212.363425][ T9896] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.427469][ T9896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 14:42:21 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x20}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x2}}]}}]}, 0x14c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@mpls_getroute={0x38, 0x1a, 0x1, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x0, 0xd8, 0xfc, 0x1, 0xff, 0x9, 0x3000}, [@RTA_TTL_PROPAGATE={0x5}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x38, 0x81, r5}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x3}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 14:42:21 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000009580)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) 14:42:21 executing program 2: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_icmp_ICMP_FILTER(r0, 0x29, 0x6, 0x0, 0x700) [ 212.482800][ T9896] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:42:21 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000009580)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) [ 212.746543][ T9908] veth0_to_team: Caught tx_queue_len zero misconfig 14:42:21 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000000)) ioctl$FIBMAP(r0, 0x1, &(0x7f0000000040)=0x7fffffff) [ 212.801928][ T9908] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 212.841161][ T9908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 14:42:21 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x20}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x2}}]}}]}, 0x14c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@mpls_getroute={0x38, 0x1a, 0x1, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x0, 0xd8, 0xfc, 0x1, 0xff, 0x9, 0x3000}, [@RTA_TTL_PROPAGATE={0x5}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x38, 0x81, r5}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x3}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 212.881469][ T9908] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:42:21 executing program 3: r0 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) recvmmsg(r0, &(0x7f0000009580)=[{{&(0x7f0000000040)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) [ 213.013516][ T9922] EXT4-fs warning (device sda1): ext4_block_to_path:105: block 2147483647 > max in inode 13914 [ 213.082554][ T9930] veth0_to_team: Caught tx_queue_len zero misconfig [ 213.137528][ T9930] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:42:22 executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x20}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x2}}]}}]}, 0x14c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@mpls_getroute={0x38, 0x1a, 0x1, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x0, 0xd8, 0xfc, 0x1, 0xff, 0x9, 0x3000}, [@RTA_TTL_PROPAGATE={0x5}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x38, 0x81, r5}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x3}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) 14:42:22 executing program 2: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x2f, &(0x7f00000000c0)=0xffffffff, 0x4) [ 213.228103][ T9930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready 14:42:22 executing program 1: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x83, 0x0, 0x0) [ 213.315939][ T9930] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 213.435808][ T9943] veth0_to_team: Caught tx_queue_len zero misconfig [ 213.495597][ T9947] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready [ 213.527526][ T9947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.546003][ T9947] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:42:22 executing program 5: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40845}, 0x80) unshare(0x40000080) socket(0x2c, 0x3, 0x0) 14:42:22 executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r3, 0x0, 0x10000, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000040)=0x101) ioctl$int_in(r2, 0x5452, &(0x7f0000000080)=0x9d) write$binfmt_elf64(r1, &(0x7f0000000040)=ANY=[], 0x10034) 14:42:22 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x28, 0x2, 0x7, 0x101, 0x0, 0x0, {}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8}, @NFACCT_FILTER_MASK={0x8}]}]}, 0x28}}, 0x0) 14:42:22 executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000002b40)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000003400)={0x0, 0x0, &(0x7f00000033c0)={&(0x7f0000002b80)={0x5c, r1, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 14:42:22 executing program 2: r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000140)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f0000000040)={&(0x7f0000000180)={0x1d, r1, 0x580f02}, 0x10, &(0x7f0000000240)={&(0x7f00000000c0)={0x1, 0x183f, 0x0, {0x0, 0x2710}, {0x0, 0x2710}, {}, 0x300, @canfd={{}, 0x0, 0x0, 0x0, 0x0, "6d56b7ef1cc28bce4772d897a0be70b1930bad4bf11958492799e1d7d5d044a54c8ce818b6acf34f7ae875e3a790562e6f94300a0c49f2b8740cc7f1ee97e6ef"}}, 0x80}}, 0x0) 14:42:22 executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPCTNL_MSG_EXP_GET(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$NL80211_CMD_TDLS_MGMT(r1, &(0x7f0000000440)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x48, 0x0, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TDLS_PEER_CAPABILITY={0x8, 0xcb, 0x20}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x8}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x9}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x5}, @NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x6}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x40) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'veth0_to_team\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000780)=@newqdisc={0x14c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x11c, 0x2, [@TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x0, 0x2}}]}}]}, 0x14c}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)=@mpls_getroute={0x38, 0x1a, 0x1, 0x70bd28, 0x25dfdbff, {0x1c, 0x14, 0x0, 0xd8, 0xfc, 0x1, 0xff, 0x9, 0x3000}, [@RTA_TTL_PROPAGATE={0x5}, @RTA_OIF={0x8}, @RTA_MULTIPATH={0xc, 0x9, {0x6, 0x38, 0x81, r5}}]}, 0x38}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {0x3}, [@IFLA_MASTER={0x8, 0xd}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) [ 213.818009][ T9977] veth0_to_team: Caught tx_queue_len zero misconfig 14:42:22 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan1\x00'}) syz_genetlink_get_family_id$mptcp(0x0, r0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) [ 213.878279][ T9977] IPv6: ADDRCONF(NETDEV_CHANGE): vcan0: link becomes ready 14:42:22 executing program 2: unshare(0x40000000) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x84, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_TARGET={0x8}]}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @TCA_RATE={0x6}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0xb4}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getqdisc={0x28, 0x26, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x7, 0x10}, {0xc, 0x4}, {0xfff2, 0xffff}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044011}, 0x8d5) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x48}}, 0x0) r6 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 213.924767][ T9977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 213.965593][ T9977] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready 14:42:22 executing program 0: r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_opts(r0, 0x0, 0x4, 0x0, 0x0) [ 214.190071][T10000] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 214.219978][T10000] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 14:42:23 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x7c, 0x0, 0xa, 0x8, 0x6, 0x81}) 14:42:23 executing program 1: r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r0, &(0x7f0000000000)={0x1f, @none}, 0x8) connect$bt_sco(r0, &(0x7f0000000680)={0x1f, @none}, 0x8) 14:42:23 executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000300)={0x12, 0xbc, 0x8, 0x101}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000080)={@map=r1, r0, 0x7}, 0xb) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e23, @multicast1}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000280)={r1, &(0x7f0000000140), &(0x7f0000000240)=@udp=r2}, 0x20) sendmmsg(r2, &(0x7f0000005440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000440)="99", 0x1}], 0x1}}], 0x2, 0x0) [ 214.583247][T10008] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 214.609340][T10008] netlink: 'syz-executor.2': attribute type 5 has an invalid length. 14:42:23 executing program 5: sendmsg$ETHTOOL_MSG_LINKINFO_GET(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x0, 0x0, 0x40845}, 0x80) unshare(0x40000080) socket(0x2c, 0x3, 0x0) 14:42:23 executing program 0: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0xa}]}]}}, &(0x7f0000000000)=""/228, 0x2e, 0xe4, 0x1}, 0x20) 14:42:23 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x7c, 0x0, 0xa, 0x8, 0x6, 0x81}) 14:42:23 executing program 4: r0 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r0, &(0x7f00000001c0)="1c0000001200050f0c1000000049b23e9b200a00080001c000000001", 0x1c, 0x0, 0x0, 0x0) recvmsg(r0, &(0x7f00000003c0)={0x0, 0x59, &(0x7f0000000940)=[{&(0x7f0000005200)=""/4096, 0x1000}, {&(0x7f0000000980)=""/4100, 0x1004}, {&(0x7f00000019c0)=""/4085, 0xff5}], 0x3}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000100)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a505000000007751e8ba639a6788a341cca555fef3b423cdacfa7e32fe0231368b2264f9dc3f45f9f60700b0e1a38d8665522be18bd10a48b043ccc42646d25dfd73a015e0ca7fc2506a0f68a7d06d7535f7866907dc6736dfb265a0e3ccae669e173a649c1cfd6587d452d64e7cc957d77578f4c35235138d5521f9453559c35da860e8efbc6f2b2a3e3173d5661cfeec79c66c54c3000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) recvfrom$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r0, &(0x7f0000000000)=""/114, 0xfffffffffffffd1b, 0x0, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="9000000020001f", 0x7, 0x0, 0x0, 0x0) r1 = socket(0x11, 0x800000003, 0x0) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c58110308d9123127ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000100)=0x14) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000140)={r3, 0x3, 0x6, @dev}, 0x10) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000180)={r3, 0x1, 0x6, @multicast}, 0x10) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000)="58ad000011", 0x5, 0x0, 0x0, 0x0) r4 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r4, &(0x7f0000000000)='.', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 14:42:23 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x7c, 0x0, 0xa, 0x8, 0x6, 0x81}) 14:42:23 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000100)={0x30, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x9b}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x30}}, 0x0) 14:42:23 executing program 2: unshare(0x40000000) r0 = socket(0x11, 0x800000003, 0x0) bind(r0, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r0, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000000)=0x14) r2 = socket(0x11, 0x800000003, 0x0) bind(r2, &(0x7f0000000080)=@generic={0x11, "0000010000000000080044944eeba71a4976e252922cb18f6e2e2aba000000012e0b3836005404b0e0301a4ce875f2e3ff5f163ee340b7679500800000000000000101013c5811039e15775027ecce66fd792bbf0e5bf5ff1b0816f3f6db1c00010000000000000049740000000000000006ad8e5ecc326d3a09ffc2c654"}, 0x80) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000640)=0x14) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000140)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x84, 0x2, [@TCA_CODEL_TARGET={0x8}, @TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_LIMIT={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_ECN={0x8}, @TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x8}, @TCA_CODEL_TARGET={0x8}]}}, @qdisc_kind_options=@q_bfifo={{0xa}, {0x8}}, @TCA_RATE={0x6}, @TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}]}, 0xb4}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)=@getqdisc={0x28, 0x26, 0x10, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0x7, 0x10}, {0xc, 0x4}, {0xfff2, 0xffff}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4044011}, 0x8d5) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x48}}, 0x0) r6 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r6, &(0x7f0000008440)=[{{0x0, 0x536, 0x0}}], 0x400000000000107, 0x0) [ 215.095280][T10087] device lo entered promiscuous mode 14:42:24 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}}, 0x0) 14:42:24 executing program 3: r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SFACILITIES(r0, 0x89e3, &(0x7f00000000c0)={0x7c, 0x0, 0xa, 0x8, 0x6, 0x81}) [ 215.149681][T10087] netlink: 44266 bytes leftover after parsing attributes in process `syz-executor.4'. 14:42:24 executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_EXTERNAL_AUTH(r2, &(0x7f0000000380)={&(0x7f0000000000), 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, r1, 0x97230a453050d803, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_BSSID={0xa}]}, 0x28}}, 0x0) 14:42:24 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f00000000c0)='GPL\x00', 0x4, 0x1000, &(0x7f000062b000)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000006c0)=@newlink={0x44, 0x10, 0x801, 0x0, 0x0, {}, [@IFLA_XDP={0x1c, 0x2b, 0x0, 0x1, [@IFLA_XDP_EXPECTED_FD={0x8, 0x8, r1}, @IFLA_XDP_FLAGS={0x8, 0x3, 0x19}, @IFLA_XDP_FD={0x8}]}, @IFLA_GROUP={0x8}]}, 0x44}}, 0x0) [ 215.408944][T10107] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 215.430427][T10107] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 216.463579][ T9239] Bluetooth: hci2: command 0x0405 tx timeout [ 255.427971][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.434262][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 [ 277.974629][T10110] Bluetooth: hci1: command 0x0406 tx timeout [ 277.974647][ T7880] Bluetooth: hci0: command 0x0406 tx timeout [ 277.974731][ T7880] Bluetooth: hci3: command 0x0406 tx timeout [ 277.994996][ T7880] Bluetooth: hci5: command 0x0406 tx timeout [ 303.572353][ T9240] Bluetooth: hci4: command 0x0406 tx timeout [ 313.821481][ T7880] Bluetooth: hci2: command 0x0406 tx timeout [ 316.853589][ T1359] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.859921][ T1359] ieee802154 phy1 wpan1: encryption failed: -22 [ 373.807451][ T26] INFO: task kworker/u4:1:10 blocked for more than 143 seconds. [ 373.815438][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 373.823675][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 373.834537][ T26] task:kworker/u4:1 state:D stack:25936 pid: 10 ppid: 2 flags:0x00004000 [ 373.846933][ T26] Workqueue: netns cleanup_net [ 373.854380][ T26] Call Trace: [ 373.860148][ T26] __schedule+0xb44/0x5960 [ 373.864716][ T26] ? find_held_lock+0x2d/0x110 [ 373.871973][ T26] ? __mutex_lock+0x9c2/0x12f0 [ 373.876789][ T26] ? io_schedule_timeout+0x140/0x140 [ 373.884372][ T26] schedule+0xd3/0x270 [ 373.890745][ T26] schedule_preempt_disabled+0xf/0x20 [ 373.896151][ T26] __mutex_lock+0xa34/0x12f0 [ 373.905416][ T26] ? ip6gre_exit_batch_net+0x88/0x760 [ 373.913091][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 373.920952][ T26] ? rcu_read_lock_sched_held+0x3a/0x70 [ 373.926606][ T26] ? pde_put+0x15d/0x1e0 [ 373.934404][ T26] ? pde_put+0x15d/0x1e0 [ 373.941179][ T26] ip6gre_exit_batch_net+0x88/0x760 [ 373.946417][ T26] ? remove_proc_entry+0x460/0x460 [ 373.954368][ T26] ? ip6gre_tunnel_find+0x640/0x640 [ 373.962263][ T26] ? rxrpc_destroy_all_locals+0x40/0x170 [ 373.970369][ T26] ? rxrpc_init_net+0xdd0/0xdd0 [ 373.975264][ T26] ? ip6gre_tunnel_find+0x640/0x640 [ 373.982880][ T26] ops_exit_list+0x10d/0x160 [ 373.989661][ T26] cleanup_net+0x4ea/0xb00 [ 373.994114][ T26] ? unregister_pernet_device+0x70/0x70 [ 374.002740][ T26] process_one_work+0x9bf/0x16b0 [ 374.013078][ T26] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 374.020700][ T26] ? rwlock_bug.part.0+0x90/0x90 [ 374.025677][ T26] ? _raw_spin_lock_irq+0x41/0x50 [ 374.033269][ T26] worker_thread+0x658/0x11f0 [ 374.040428][ T26] ? process_one_work+0x16b0/0x16b0 [ 374.045661][ T26] kthread+0x3e5/0x4d0 [ 374.052191][ T26] ? set_kthread_struct+0x130/0x130 [ 374.060017][ T26] ret_from_fork+0x1f/0x30 [ 374.064637][ T26] INFO: task syz-executor.5:10074 blocked for more than 143 seconds. [ 374.075241][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 374.083452][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.092540][ T26] task:syz-executor.5 state:D stack:26984 pid:10074 ppid: 6829 flags:0x00004004 [ 374.103468][ T26] Call Trace: [ 374.106901][ T26] __schedule+0xb44/0x5960 [ 374.111832][ T26] ? find_held_lock+0x2d/0x110 [ 374.116628][ T26] ? __mutex_lock+0x9c2/0x12f0 [ 374.122022][ T26] ? io_schedule_timeout+0x140/0x140 [ 374.127939][ T26] schedule+0xd3/0x270 [ 374.132040][ T26] schedule_preempt_disabled+0xf/0x20 [ 374.137943][ T26] __mutex_lock+0xa34/0x12f0 [ 374.142558][ T26] ? wg_netns_pre_exit+0x15/0x190 [ 374.148219][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 374.153817][ T26] ? slab_free_freelist_hook+0x81/0x190 [ 374.160354][ T26] ? ip6_tnl_newlink+0x590/0x590 [ 374.165397][ T26] ? ip6_tnl_newlink+0x590/0x590 [ 374.170808][ T26] ? wg_stop+0x180/0x180 [ 374.175107][ T26] wg_netns_pre_exit+0x15/0x190 [ 374.180490][ T26] ? wg_stop+0x180/0x180 [ 374.184776][ T26] setup_net+0x587/0xa30 [ 374.189495][ T26] ? ops_init+0x470/0x470 [ 374.193845][ T26] ? rcu_read_lock_sched_held+0x3a/0x70 [ 374.199924][ T26] copy_net_ns+0x319/0x760 [ 374.204380][ T26] create_new_namespaces+0x3f6/0xb20 [ 374.210134][ T26] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 374.215876][ T26] ksys_unshare+0x445/0x920 [ 374.220956][ T26] ? unshare_fd+0x1c0/0x1c0 [ 374.225503][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 374.232096][ T26] __x64_sys_unshare+0x2d/0x40 [ 374.236892][ T26] do_syscall_64+0x35/0xb0 [ 374.241802][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 374.248227][ T26] RIP: 0033:0x7fab9cfbaa39 [ 374.252655][ T26] RSP: 002b:00007fab9a530188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 374.261948][ T26] RAX: ffffffffffffffda RBX: 00007fab9d0bdf60 RCX: 00007fab9cfbaa39 [ 374.270411][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000080 [ 374.278938][ T26] RBP: 00007fab9d014c5f R08: 0000000000000000 R09: 0000000000000000 [ 374.286927][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 374.295398][ T26] R13: 00007fff372f4a4f R14: 00007fab9a530300 R15: 0000000000022000 [ 374.303827][ T26] INFO: task syz-executor.4:10076 blocked for more than 143 seconds. [ 374.312283][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 374.318630][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.327647][ T26] task:syz-executor.4 state:D stack:27616 pid:10076 ppid: 8410 flags:0x00000004 [ 374.336875][ T26] Call Trace: [ 374.342798][ T26] __schedule+0xb44/0x5960 [ 374.347638][ T26] ? find_held_lock+0x2d/0x110 [ 374.352428][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 374.357366][ T26] ? io_schedule_timeout+0x140/0x140 [ 374.362682][ T26] schedule+0xd3/0x270 [ 374.367281][ T26] schedule_preempt_disabled+0xf/0x20 [ 374.372719][ T26] __mutex_lock+0xa34/0x12f0 [ 374.377554][ T26] ? packet_release+0x3f1/0xcc0 [ 374.382508][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 374.388191][ T26] ? packet_release+0x3b2/0xcc0 [ 374.393052][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 374.398044][ T26] ? rwlock_bug.part.0+0x90/0x90 [ 374.403013][ T26] packet_release+0x3f1/0xcc0 [ 374.407795][ T26] ? packet_recvmsg+0x1150/0x1150 [ 374.412867][ T26] ? down_write+0xe0/0x150 [ 374.417434][ T26] ? __down_timeout+0x10/0x10 [ 374.422127][ T26] ? locks_remove_file+0x2f9/0x570 [ 374.427438][ T26] ? fcntl_setlk+0xd50/0xd50 [ 374.432107][ T26] __sock_release+0xcd/0x280 [ 374.436762][ T26] sock_close+0x18/0x20 [ 374.441080][ T26] __fput+0x288/0x9f0 [ 374.445135][ T26] ? __sock_release+0x280/0x280 [ 374.452349][ T26] task_work_run+0xdd/0x1a0 [ 374.456901][ T26] exit_to_user_mode_prepare+0x27e/0x290 [ 374.462834][ T26] syscall_exit_to_user_mode+0x19/0x60 [ 374.469321][ T26] do_syscall_64+0x42/0xb0 [ 374.473774][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 374.481191][ T26] RIP: 0033:0x7fce6ae6667b [ 374.485649][ T26] RSP: 002b:00007ffd1fb28ca0 EFLAGS: 00000293 ORIG_RAX: 0000000000000003 [ 374.495565][ T26] RAX: 0000000000000000 RBX: 0000000000000006 RCX: 00007fce6ae6667b [ 374.504301][ T26] RDX: 0000001b3152be00 RSI: ffffffff8135b322 RDI: 0000000000000005 [ 374.513076][ T26] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000001b31526678 [ 374.521905][ T26] R10: 0000000000001499 R11: 0000000000000293 R12: 00007fce6afb7b60 [ 374.531835][ T26] R13: 00007fce6afb7b60 R14: 00007fce6afb6f60 R15: 0000000000034810 [ 374.541449][ T26] ? __cpu_to_node+0x82/0xb0 [ 374.546205][ T26] INFO: task syz-executor.4:10087 blocked for more than 144 seconds. [ 374.555182][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 374.561804][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.571395][ T26] task:syz-executor.4 state:D stack:25240 pid:10087 ppid: 8410 flags:0x00004004 [ 374.580881][ T26] Call Trace: [ 374.584194][ T26] __schedule+0xb44/0x5960 [ 374.588883][ T26] ? find_held_lock+0x2d/0x110 [ 374.593668][ T26] ? __mutex_lock+0x9c2/0x12f0 [ 374.598580][ T26] ? io_schedule_timeout+0x140/0x140 [ 374.603902][ T26] schedule+0xd3/0x270 [ 374.608197][ T26] schedule_preempt_disabled+0xf/0x20 [ 374.613731][ T26] __mutex_lock+0xa34/0x12f0 [ 374.618475][ T26] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 374.624815][ T26] ? netdev_run_todo+0x6fa/0xa80 [ 374.629874][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 374.635430][ T26] ? lockdep_hardirqs_on+0x79/0x100 [ 374.640816][ T26] ? __sanitizer_cov_trace_const_cmp1+0x22/0x80 [ 374.647092][ T26] ? put_device+0x1b/0x30 [ 374.651820][ T26] ? free_netdev+0x3e0/0x5b0 [ 374.656433][ T26] netdev_run_todo+0x6fa/0xa80 [ 374.661585][ T26] ? find_held_lock+0x2d/0x110 [ 374.666379][ T26] ? generic_xdp_install+0x4a0/0x4a0 [ 374.673176][ T26] ? rtnetlink_rcv_msg+0x388/0xb80 [ 374.679462][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 374.684342][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 374.691262][ T26] ? valid_bridge_getlink_req.constprop.0+0x600/0x600 [ 374.698517][ T26] rtnetlink_rcv_msg+0x420/0xb80 [ 374.703527][ T26] ? rtnl_newlink+0xa0/0xa0 [ 374.708528][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 374.713411][ T26] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 374.719659][ T26] netlink_rcv_skb+0x153/0x420 [ 374.724548][ T26] ? rtnl_newlink+0xa0/0xa0 [ 374.729551][ T26] ? netlink_ack+0xa60/0xa60 [ 374.734163][ T26] ? netlink_deliver_tap+0x1a2/0xc30 [ 374.739911][ T26] ? netlink_deliver_tap+0x1b1/0xc30 [ 374.745245][ T26] netlink_unicast+0x533/0x7d0 [ 374.750496][ T26] ? netlink_attachskb+0x880/0x880 [ 374.755640][ T26] ? __virt_addr_valid+0x5d/0x2d0 [ 374.761154][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 374.767978][ T26] ? __phys_addr_symbol+0x2c/0x70 [ 374.773482][ T26] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 374.781734][ T26] ? __check_object_size+0x16e/0x3f0 [ 374.787222][ T26] netlink_sendmsg+0x86d/0xda0 [ 374.792016][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 374.796978][ T26] ? __fget_files+0x23d/0x3e0 [ 374.801851][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 374.808227][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 374.813191][ T26] sock_sendmsg+0xcf/0x120 [ 374.817775][ T26] __sys_sendto+0x21c/0x320 [ 374.822300][ T26] ? __ia32_sys_getpeername+0xb0/0xb0 [ 374.827777][ T26] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 374.833781][ T26] ? __context_tracking_exit+0xb8/0xe0 [ 374.839571][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 374.844442][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 374.849457][ T26] __x64_sys_sendto+0xdd/0x1b0 [ 374.854396][ T26] ? lockdep_hardirqs_on+0x79/0x100 [ 374.859757][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 374.865671][ T26] do_syscall_64+0x35/0xb0 [ 374.870190][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 374.876472][ T26] RIP: 0033:0x7fce6aeb3a39 [ 374.881136][ T26] RSP: 002b:00007fce68429188 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 374.892226][ T26] RAX: ffffffffffffffda RBX: 00007fce6afb6f60 RCX: 00007fce6aeb3a39 [ 374.900438][ T26] RDX: 0000000000010a73 RSI: 0000000020000000 RDI: 0000000000000007 [ 374.908541][ T26] RBP: 00007fce6af0dc5f R08: 0000000000000000 R09: 4b6ae4f95a5de35b [ 374.916530][ T26] R10: 0000000000000800 R11: 0000000000000246 R12: 0000000000000000 [ 374.924666][ T26] R13: 00007ffd1fb28c3f R14: 00007fce68429300 R15: 0000000000022000 [ 374.932903][ T26] INFO: task syz-executor.2:10099 blocked for more than 144 seconds. [ 374.941166][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 374.947064][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 374.955906][ T26] task:syz-executor.2 state:D stack:27488 pid:10099 ppid: 8036 flags:0x00004004 [ 374.965307][ T26] Call Trace: [ 374.968679][ T26] __schedule+0xb44/0x5960 [ 374.973119][ T26] ? find_held_lock+0x2d/0x110 [ 374.978449][ T26] ? __mutex_lock+0x9c2/0x12f0 [ 374.983270][ T26] ? io_schedule_timeout+0x140/0x140 [ 374.988677][ T26] schedule+0xd3/0x270 [ 374.992763][ T26] schedule_preempt_disabled+0xf/0x20 [ 375.000429][ T26] __mutex_lock+0xa34/0x12f0 [ 375.005052][ T26] ? ip_tunnel_init_net+0x2d5/0x9d0 [ 375.010511][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 375.016076][ T26] ? ip_tunnel_init_net+0x14e/0x9d0 [ 375.022588][ T26] ip_tunnel_init_net+0x2d5/0x9d0 [ 375.028421][ T26] ? ip_tunnel_changelink+0x540/0x540 [ 375.033849][ T26] ? erspan_init_net+0x30/0x30 [ 375.039766][ T26] ops_init+0xaf/0x470 [ 375.043870][ T26] setup_net+0x40f/0xa30 [ 375.049126][ T26] ? down_read_killable+0x1a9/0x480 [ 375.054408][ T26] ? ops_init+0x470/0x470 [ 375.059841][ T26] ? rcu_read_lock_sched_held+0x3a/0x70 [ 375.065418][ T26] copy_net_ns+0x319/0x760 [ 375.070295][ T26] create_new_namespaces+0x3f6/0xb20 [ 375.075615][ T26] unshare_nsproxy_namespaces+0xc1/0x1f0 [ 375.082402][ T26] ksys_unshare+0x445/0x920 [ 375.086934][ T26] ? unshare_fd+0x1c0/0x1c0 [ 375.092049][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 375.098495][ T26] __x64_sys_unshare+0x2d/0x40 [ 375.103285][ T26] do_syscall_64+0x35/0xb0 [ 375.110263][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 375.116186][ T26] RIP: 0033:0x7f5d76715a39 [ 375.121095][ T26] RSP: 002b:00007f5d73c8b188 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 375.130038][ T26] RAX: ffffffffffffffda RBX: 00007f5d76818f60 RCX: 00007f5d76715a39 [ 375.138592][ T26] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 375.146581][ T26] RBP: 00007f5d7676fc5f R08: 0000000000000000 R09: 0000000000000000 [ 375.154975][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.163152][ T26] R13: 00007fffc70e366f R14: 00007f5d73c8b300 R15: 0000000000022000 [ 375.171443][ T26] INFO: task syz-executor.0:10120 blocked for more than 144 seconds. [ 375.179886][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 375.186090][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.194882][ T26] task:syz-executor.0 state:D stack:27568 pid:10120 ppid: 6545 flags:0x00000004 [ 375.204274][ T26] Call Trace: [ 375.209696][ T26] __schedule+0xb44/0x5960 [ 375.214199][ T26] ? find_held_lock+0x2d/0x110 [ 375.222636][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 375.229260][ T26] ? io_schedule_timeout+0x140/0x140 [ 375.234586][ T26] schedule+0xd3/0x270 [ 375.238793][ T26] schedule_preempt_disabled+0xf/0x20 [ 375.244219][ T26] __mutex_lock+0xa34/0x12f0 [ 375.250837][ T26] ? nl80211_pre_doit+0x23/0x620 [ 375.255912][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 375.261919][ T26] ? __nla_parse+0x3d/0x50 [ 375.266433][ T26] ? nl80211_set_qos_map+0x800/0x800 [ 375.272475][ T26] nl80211_pre_doit+0x23/0x620 [ 375.278045][ T26] ? nl80211_set_qos_map+0x800/0x800 [ 375.283357][ T26] genl_family_rcv_msg_doit+0x1ee/0x320 [ 375.290556][ T26] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 375.299543][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 375.305818][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 375.313458][ T26] ? ns_capable+0xd9/0x100 [ 375.318723][ T26] genl_rcv_msg+0x328/0x580 [ 375.323253][ T26] ? genl_get_cmd+0x480/0x480 [ 375.329176][ T26] ? nl80211_notify_iface+0x180/0x180 [ 375.334650][ T26] ? lock_release+0x720/0x720 [ 375.339959][ T26] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 375.345277][ T26] netlink_rcv_skb+0x153/0x420 [ 375.351639][ T26] ? genl_get_cmd+0x480/0x480 [ 375.356348][ T26] ? netlink_ack+0xa60/0xa60 [ 375.361338][ T26] ? netlink_deliver_tap+0x1b1/0xc30 [ 375.366652][ T26] genl_rcv+0x24/0x40 [ 375.371341][ T26] netlink_unicast+0x533/0x7d0 [ 375.376168][ T26] ? netlink_attachskb+0x880/0x880 [ 375.382511][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 375.390296][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 375.396566][ T26] ? __phys_addr_symbol+0x2c/0x70 [ 375.402854][ T26] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 375.409434][ T26] ? __check_object_size+0x16e/0x3f0 [ 375.414746][ T26] netlink_sendmsg+0x86d/0xda0 [ 375.420770][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 375.425736][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 375.432379][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 375.437837][ T26] sock_sendmsg+0xcf/0x120 [ 375.442283][ T26] ____sys_sendmsg+0x6e8/0x810 [ 375.447388][ T26] ? kernel_sendmsg+0x50/0x50 [ 375.452411][ T26] ? do_recvmmsg+0x6d0/0x6d0 [ 375.457015][ T26] ? lock_chain_count+0x20/0x20 [ 375.462209][ T26] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 375.468353][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 375.473491][ T26] ___sys_sendmsg+0xf3/0x170 [ 375.478433][ T26] ? sendmsg_copy_msghdr+0x160/0x160 [ 375.483829][ T26] ? __fget_files+0x21b/0x3e0 [ 375.493167][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 375.499005][ T26] ? __fget_files+0x23d/0x3e0 [ 375.503808][ T26] ? __fget_light+0xea/0x280 [ 375.508889][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 375.515164][ T26] __sys_sendmsg+0xe5/0x1b0 [ 375.520472][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 375.525543][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 375.532648][ T26] do_syscall_64+0x35/0xb0 [ 375.537708][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 375.543636][ T26] RIP: 0033:0x7fcb681aea39 [ 375.549038][ T26] RSP: 002b:00007fcb65724188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.557779][ T26] RAX: ffffffffffffffda RBX: 00007fcb682b1f60 RCX: 00007fcb681aea39 [ 375.565812][ T26] RDX: 0000000000000000 RSI: 0000000020000340 RDI: 0000000000000004 [ 375.577713][ T26] RBP: 00007fcb68208c5f R08: 0000000000000000 R09: 0000000000000000 [ 375.585768][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.594372][ T26] R13: 00007ffff152a26f R14: 00007fcb65724300 R15: 0000000000022000 [ 375.602695][ T26] INFO: task syz-executor.1:10131 blocked for more than 145 seconds. [ 375.610979][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 375.616884][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 375.625835][ T26] task:syz-executor.1 state:D stack:27568 pid:10131 ppid: 6547 flags:0x00004004 [ 375.635271][ T26] Call Trace: [ 375.639255][ T26] __schedule+0xb44/0x5960 [ 375.643752][ T26] ? find_held_lock+0x2d/0x110 [ 375.650761][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 375.655564][ T26] ? io_schedule_timeout+0x140/0x140 [ 375.661101][ T26] schedule+0xd3/0x270 [ 375.665215][ T26] schedule_preempt_disabled+0xf/0x20 [ 375.671535][ T26] __mutex_lock+0xa34/0x12f0 [ 375.676162][ T26] ? nl80211_pre_doit+0x23/0x620 [ 375.682835][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 375.690113][ T26] ? __nla_parse+0x3d/0x50 [ 375.694991][ T26] ? nl80211_set_qos_map+0x800/0x800 [ 375.701255][ T26] nl80211_pre_doit+0x23/0x620 [ 375.706064][ T26] ? nl80211_set_qos_map+0x800/0x800 [ 375.712826][ T26] genl_family_rcv_msg_doit+0x1ee/0x320 [ 375.718546][ T26] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 375.725949][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 375.733226][ T26] ? ns_capable+0xd9/0x100 [ 375.738714][ T26] genl_rcv_msg+0x328/0x580 [ 375.743245][ T26] ? genl_get_cmd+0x480/0x480 [ 375.750505][ T26] ? nl80211_start_nan+0x840/0x840 [ 375.755657][ T26] ? lock_release+0x720/0x720 [ 375.761232][ T26] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 375.766557][ T26] netlink_rcv_skb+0x153/0x420 [ 375.772903][ T26] ? genl_get_cmd+0x480/0x480 [ 375.778612][ T26] ? netlink_ack+0xa60/0xa60 [ 375.783245][ T26] ? netlink_deliver_tap+0x1b1/0xc30 [ 375.790263][ T26] genl_rcv+0x24/0x40 [ 375.794251][ T26] netlink_unicast+0x533/0x7d0 [ 375.801620][ T26] ? netlink_attachskb+0x880/0x880 [ 375.806766][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 375.814040][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 375.821223][ T26] ? __phys_addr_symbol+0x2c/0x70 [ 375.826361][ T26] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 375.833038][ T26] ? __check_object_size+0x16e/0x3f0 [ 375.839250][ T26] netlink_sendmsg+0x86d/0xda0 [ 375.844039][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 375.849960][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 375.856209][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 375.862537][ T26] sock_sendmsg+0xcf/0x120 [ 375.867003][ T26] ____sys_sendmsg+0x6e8/0x810 [ 375.872723][ T26] ? kernel_sendmsg+0x50/0x50 [ 375.878451][ T26] ? do_recvmmsg+0x6d0/0x6d0 [ 375.883069][ T26] ? lock_chain_count+0x20/0x20 [ 375.888542][ T26] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 375.894556][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 375.900665][ T26] ___sys_sendmsg+0xf3/0x170 [ 375.905470][ T26] ? sendmsg_copy_msghdr+0x160/0x160 [ 375.912865][ T26] ? __fget_files+0x21b/0x3e0 [ 375.918504][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 375.923387][ T26] ? __fget_files+0x23d/0x3e0 [ 375.929570][ T26] ? __fget_light+0xea/0x280 [ 375.934186][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 375.941821][ T26] __sys_sendmsg+0xe5/0x1b0 [ 375.946345][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 375.951750][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 375.958069][ T26] do_syscall_64+0x35/0xb0 [ 375.962516][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 375.970804][ T26] RIP: 0033:0x7f24f2feea39 [ 375.975242][ T26] RSP: 002b:00007f24f0564188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 375.985829][ T26] RAX: ffffffffffffffda RBX: 00007f24f30f1f60 RCX: 00007f24f2feea39 [ 375.995055][ T26] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 376.004540][ T26] RBP: 00007f24f3048c5f R08: 0000000000000000 R09: 0000000000000000 [ 376.013273][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.023647][ T26] R13: 00007fff92420a6f R14: 00007f24f0564300 R15: 0000000000022000 [ 376.032370][ T26] INFO: task syz-executor.1:10143 blocked for more than 145 seconds. [ 376.040885][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 376.046794][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.055958][ T26] task:syz-executor.1 state:D stack:28168 pid:10143 ppid: 6547 flags:0x00000004 [ 376.067247][ T26] Call Trace: [ 376.070557][ T26] __schedule+0xb44/0x5960 [ 376.074997][ T26] ? find_held_lock+0x2d/0x110 [ 376.081566][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 376.086356][ T26] ? io_schedule_timeout+0x140/0x140 [ 376.092139][ T26] schedule+0xd3/0x270 [ 376.096305][ T26] schedule_preempt_disabled+0xf/0x20 [ 376.103084][ T26] __mutex_lock+0xa34/0x12f0 [ 376.109332][ T26] ? nl80211_pre_doit+0x23/0x620 [ 376.114305][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 376.120761][ T26] ? __nla_parse+0x3d/0x50 [ 376.125185][ T26] ? nl80211_set_qos_map+0x800/0x800 [ 376.135186][ T26] nl80211_pre_doit+0x23/0x620 [ 376.140628][ T26] ? nl80211_set_qos_map+0x800/0x800 [ 376.145923][ T26] genl_family_rcv_msg_doit+0x1ee/0x320 [ 376.152071][ T26] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x290/0x290 [ 376.159908][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 376.166182][ T26] ? ns_capable+0xd9/0x100 [ 376.172035][ T26] genl_rcv_msg+0x328/0x580 [ 376.176572][ T26] ? genl_get_cmd+0x480/0x480 [ 376.182795][ T26] ? nl80211_start_nan+0x840/0x840 [ 376.189186][ T26] ? lock_release+0x720/0x720 [ 376.189236][ T26] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 376.189270][ T26] netlink_rcv_skb+0x153/0x420 [ 376.189299][ T26] ? genl_get_cmd+0x480/0x480 [ 376.209672][ T26] ? netlink_ack+0xa60/0xa60 [ 376.214301][ T26] ? netlink_deliver_tap+0x1b1/0xc30 [ 376.219674][ T26] genl_rcv+0x24/0x40 [ 376.223681][ T26] netlink_unicast+0x533/0x7d0 [ 376.228651][ T26] ? netlink_attachskb+0x880/0x880 [ 376.233781][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 376.240947][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 376.251559][ T26] ? __phys_addr_symbol+0x2c/0x70 [ 376.256595][ T26] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 376.264053][ T26] ? __check_object_size+0x16e/0x3f0 [ 376.273459][ T26] netlink_sendmsg+0x86d/0xda0 [ 376.279575][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 376.284528][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 376.298696][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 376.303681][ T26] sock_sendmsg+0xcf/0x120 [ 376.308422][ T26] ____sys_sendmsg+0x6e8/0x810 [ 376.313660][ T26] ? kernel_sendmsg+0x50/0x50 [ 376.318551][ T26] ? do_recvmmsg+0x6d0/0x6d0 [ 376.323157][ T26] ? lock_chain_count+0x20/0x20 [ 376.328115][ T26] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 376.334200][ T26] ___sys_sendmsg+0xf3/0x170 [ 376.338986][ T26] ? sendmsg_copy_msghdr+0x160/0x160 [ 376.344293][ T26] ? __fget_files+0x21b/0x3e0 [ 376.351235][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 376.356129][ T26] ? __fget_files+0x23d/0x3e0 [ 376.361025][ T26] ? __fget_light+0xea/0x280 [ 376.365628][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 376.371999][ T26] __sys_sendmsg+0xe5/0x1b0 [ 376.376647][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 376.382063][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 376.388066][ T26] do_syscall_64+0x35/0xb0 [ 376.392503][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 376.398590][ T26] RIP: 0033:0x7f24f2feea39 [ 376.403017][ T26] RSP: 002b:00007f24f0522188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.411907][ T26] RAX: ffffffffffffffda RBX: 00007f24f30f20e0 RCX: 00007f24f2feea39 [ 376.420062][ T26] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 376.431367][ T26] RBP: 00007f24f3048c5f R08: 0000000000000000 R09: 0000000000000000 [ 376.442178][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.452952][ T26] R13: 00007fff92420a6f R14: 00007f24f0522300 R15: 0000000000022000 [ 376.464534][ T26] INFO: task syz-executor.3:10133 blocked for more than 146 seconds. [ 376.475331][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 376.483989][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.495397][ T26] task:syz-executor.3 state:D stack:26736 pid:10133 ppid: 6551 flags:0x00000004 [ 376.507198][ T26] Call Trace: [ 376.510503][ T26] __schedule+0xb44/0x5960 [ 376.515363][ T26] ? find_held_lock+0x2d/0x110 [ 376.520290][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 376.525066][ T26] ? io_schedule_timeout+0x140/0x140 [ 376.531047][ T26] schedule+0xd3/0x270 [ 376.535148][ T26] schedule_preempt_disabled+0xf/0x20 [ 376.541243][ T26] __mutex_lock+0xa34/0x12f0 [ 376.545868][ T26] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 376.551447][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 376.557023][ T26] ? rtnetlink_rcv_msg+0x388/0xb80 [ 376.563113][ T26] rtnetlink_rcv_msg+0x3be/0xb80 [ 376.568278][ T26] ? rtnl_newlink+0xa0/0xa0 [ 376.572819][ T26] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 376.578415][ T26] netlink_rcv_skb+0x153/0x420 [ 376.583229][ T26] ? rtnl_newlink+0xa0/0xa0 [ 376.587825][ T26] ? netlink_ack+0xa60/0xa60 [ 376.592425][ T26] ? netlink_deliver_tap+0x1a2/0xc30 [ 376.597911][ T26] ? netlink_deliver_tap+0x1b1/0xc30 [ 376.603220][ T26] netlink_unicast+0x533/0x7d0 [ 376.608439][ T26] ? netlink_attachskb+0x880/0x880 [ 376.613663][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 376.620896][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 376.628116][ T26] ? __phys_addr_symbol+0x2c/0x70 [ 376.633172][ T26] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 376.644568][ T26] ? __check_object_size+0x16e/0x3f0 [ 376.650511][ T26] netlink_sendmsg+0x86d/0xda0 [ 376.655286][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 376.665379][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 376.672300][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 376.684791][ T26] sock_sendmsg+0xcf/0x120 [ 376.689422][ T26] ____sys_sendmsg+0x6e8/0x810 [ 376.694301][ T26] ? kernel_sendmsg+0x50/0x50 [ 376.699143][ T26] ? do_recvmmsg+0x6d0/0x6d0 [ 376.703749][ T26] ? lock_chain_count+0x20/0x20 [ 376.708687][ T26] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 376.714695][ T26] ___sys_sendmsg+0xf3/0x170 [ 376.720192][ T26] ? sendmsg_copy_msghdr+0x160/0x160 [ 376.725519][ T26] ? __fget_files+0x21b/0x3e0 [ 376.730263][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 376.735136][ T26] ? __fget_files+0x23d/0x3e0 [ 376.742034][ T26] ? __fget_light+0xea/0x280 [ 376.746674][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 376.753059][ T26] __sys_sendmsg+0xe5/0x1b0 [ 376.757688][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 376.762736][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 376.768818][ T26] do_syscall_64+0x35/0xb0 [ 376.773257][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 376.779319][ T26] RIP: 0033:0x7f6ea3da6a39 [ 376.783743][ T26] RSP: 002b:00007f6ea131c188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.792301][ T26] RAX: ffffffffffffffda RBX: 00007f6ea3ea9f60 RCX: 00007f6ea3da6a39 [ 376.800381][ T26] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 376.808517][ T26] RBP: 00007f6ea3e00c5f R08: 0000000000000000 R09: 0000000000000000 [ 376.816519][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.825556][ T26] R13: 00007ffdc2e8a57f R14: 00007f6ea131c300 R15: 0000000000022000 [ 376.833674][ T26] INFO: task syz-executor.3:10145 blocked for more than 146 seconds. [ 376.841936][ T26] Not tainted 5.15.0-rc5-syzkaller #0 [ 376.850062][ T26] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 376.864156][ T26] task:syz-executor.3 state:D stack:27552 pid:10145 ppid: 6551 flags:0x00000004 [ 376.874073][ T26] Call Trace: [ 376.882194][ T26] __schedule+0xb44/0x5960 [ 376.886645][ T26] ? find_held_lock+0x2d/0x110 [ 376.892352][ T26] ? __mutex_lock+0x9c0/0x12f0 [ 376.897524][ T26] ? io_schedule_timeout+0x140/0x140 [ 376.902863][ T26] schedule+0xd3/0x270 [ 376.906951][ T26] schedule_preempt_disabled+0xf/0x20 [ 376.912803][ T26] __mutex_lock+0xa34/0x12f0 [ 376.917530][ T26] ? rtnetlink_rcv_msg+0x3be/0xb80 [ 376.922673][ T26] ? mutex_lock_io_nested+0x1150/0x1150 [ 376.929486][ T26] ? rtnetlink_rcv_msg+0x388/0xb80 [ 376.934661][ T26] rtnetlink_rcv_msg+0x3be/0xb80 [ 376.939808][ T26] ? rtnl_newlink+0xa0/0xa0 [ 376.944334][ T26] ? netdev_core_pick_tx+0x2e0/0x2e0 [ 376.949705][ T26] netlink_rcv_skb+0x153/0x420 [ 376.954480][ T26] ? rtnl_newlink+0xa0/0xa0 [ 376.961229][ T26] ? netlink_ack+0xa60/0xa60 [ 376.965867][ T26] ? netlink_deliver_tap+0x1a2/0xc30 [ 376.971352][ T26] ? netlink_deliver_tap+0x1b1/0xc30 [ 376.976670][ T26] netlink_unicast+0x533/0x7d0 [ 376.981531][ T26] ? netlink_attachskb+0x880/0x880 [ 376.986654][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 376.993095][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 376.999433][ T26] ? __phys_addr_symbol+0x2c/0x70 [ 377.004470][ T26] ? __sanitizer_cov_trace_cmp8+0x1d/0x70 [ 377.010855][ T26] ? __check_object_size+0x16e/0x3f0 [ 377.016171][ T26] netlink_sendmsg+0x86d/0xda0 [ 377.021117][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 377.026872][ T26] ? __sanitizer_cov_trace_const_cmp4+0x1c/0x70 [ 377.033389][ T26] ? netlink_unicast+0x7d0/0x7d0 [ 377.038445][ T26] sock_sendmsg+0xcf/0x120 [ 377.042879][ T26] ____sys_sendmsg+0x6e8/0x810 [ 377.047816][ T26] ? kernel_sendmsg+0x50/0x50 [ 377.052508][ T26] ? do_recvmmsg+0x6d0/0x6d0 [ 377.057234][ T26] ? lock_chain_count+0x20/0x20 [ 377.062101][ T26] ? lockdep_hardirqs_on_prepare+0x400/0x400 [ 377.070308][ T26] ___sys_sendmsg+0xf3/0x170 [ 377.074925][ T26] ? sendmsg_copy_msghdr+0x160/0x160 [ 377.080344][ T26] ? __fget_files+0x21b/0x3e0 [ 377.085034][ T26] ? lock_downgrade+0x6e0/0x6e0 [ 377.090067][ T26] ? __fget_files+0x23d/0x3e0 [ 377.094856][ T26] ? __fget_light+0xea/0x280 [ 377.099569][ T26] ? __sanitizer_cov_trace_const_cmp8+0x1d/0x70 [ 377.105840][ T26] __sys_sendmsg+0xe5/0x1b0 [ 377.110493][ T26] ? __sys_sendmsg_sock+0x30/0x30 [ 377.115543][ T26] ? syscall_enter_from_user_mode+0x21/0x70 [ 377.121537][ T26] do_syscall_64+0x35/0xb0 [ 377.125969][ T26] entry_SYSCALL_64_after_hwframe+0x44/0xae [ 377.132672][ T26] RIP: 0033:0x7f6ea3da6a39 [ 377.137243][ T26] RSP: 002b:00007f6ea12da188 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.145675][ T26] RAX: ffffffffffffffda RBX: 00007f6ea3eaa0e0 RCX: 00007f6ea3da6a39 [ 377.153788][ T26] RDX: 0000000000000000 RSI: 0000000020000140 RDI: 0000000000000003 [ 377.161883][ T26] RBP: 00007f6ea3e00c5f R08: 0000000000000000 R09: 0000000000000000 [ 377.170302][ T26] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.180709][ T26] R13: 00007ffdc2e8a57f R14: 00007f6ea12da300 R15: 0000000000022000 [ 377.188838][ T26] [ 377.188838][ T26] Showing all locks held in the system: [ 377.196555][ T26] 4 locks held by kworker/u4:1/10: [ 377.202730][ T26] #0: ffff888140123138 ((wq_completion)netns){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 377.217363][ T26] #1: ffffc90000cf7db0 (net_cleanup_work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 377.227670][ T26] #2: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x9b/0xb00 [ 377.238172][ T26] #3: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: ip6gre_exit_batch_net+0x88/0x760 [ 377.248108][ T26] 1 lock held by khungtaskd/26: [ 377.252967][ T26] #0: ffffffff8b981ee0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x53/0x260 [ 377.263087][ T26] 1 lock held by in:imklog/6242: [ 377.268221][ T26] #0: ffff888024cde870 (&f->f_pos_lock){+.+.}-{3:3}, at: __fdget_pos+0xe9/0x100 [ 377.277538][ T26] 3 locks held by kworker/0:7/9239: [ 377.282738][ T26] #0: ffff88802551fd38 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 377.294684][ T26] #1: ffffc90003fe7db0 ((addr_chk_work).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 377.307408][ T26] #2: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0xa/0x20 [ 377.317159][ T26] 2 locks held by syz-executor.5/10074: [ 377.322741][ T26] #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 377.332689][ T26] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: wg_netns_pre_exit+0x15/0x190 [ 377.342946][ T26] 2 locks held by syz-executor.4/10076: [ 377.348674][ T26] #0: ffff88802b57ac10 (&sb->s_type->i_mutex_key#13){+.+.}-{3:3}, at: __sock_release+0x86/0x280 [ 377.359369][ T26] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: packet_release+0x3f1/0xcc0 [ 377.368729][ T26] 1 lock held by syz-executor.4/10087: [ 377.374191][ T26] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: netdev_run_todo+0x6fa/0xa80 [ 377.383514][ T26] 2 locks held by syz-executor.2/10099: [ 377.389260][ T26] #0: ffffffff8d0d5750 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x2f5/0x760 [ 377.400598][ T26] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x2d5/0x9d0 [ 377.414763][ T26] 1 lock held by syz-executor.2/10114: [ 377.421662][ T26] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 377.436813][ T26] 3 locks held by kworker/1:19/10112: [ 377.442325][ T26] #0: ffff888010c65d38 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_one_work+0x8a3/0x16b0 [ 377.454286][ T26] #1: ffffc90003d3fdb0 ((reg_check_chans).work){+.+.}-{0:0}, at: process_one_work+0x8d7/0x16b0 [ 377.454363][ T26] #2: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x83/0xe10 [ 377.475823][ T26] 2 locks held by syz-executor.0/10120: [ 377.481499][ T26] #0: ffffffff8d17b2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 377.490008][ T26] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x23/0x620 [ 377.499559][ T26] 2 locks held by syz-executor.1/10131: [ 377.505200][ T26] #0: ffffffff8d17b2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 377.513804][ T26] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x23/0x620 [ 377.523159][ T26] 2 locks held by syz-executor.1/10143: [ 377.528907][ T26] #0: ffffffff8d17b2f0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x15/0x40 [ 377.537190][ T26] #1: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: nl80211_pre_doit+0x23/0x620 [ 377.547841][ T26] 1 lock held by syz-executor.3/10133: [ 377.553319][ T26] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 377.562962][ T26] 1 lock held by syz-executor.3/10145: [ 377.568699][ T26] #0: ffffffff8d0e8ea8 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x3be/0xb80 [ 377.580743][ T26] [ 377.583088][ T26] ============================================= [ 377.583088][ T26] [ 377.591952][ T26] NMI backtrace for cpu 0 [ 377.596291][ T26] CPU: 0 PID: 26 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 377.604431][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.614486][ T26] Call Trace: [ 377.617754][ T26] dump_stack_lvl+0xcd/0x134 [ 377.622403][ T26] nmi_cpu_backtrace.cold+0x47/0x144 [ 377.627685][ T26] ? lapic_can_unplug_cpu+0x80/0x80 [ 377.632945][ T26] nmi_trigger_cpumask_backtrace+0x1ae/0x220 [ 377.638978][ T26] watchdog+0xc1d/0xf50 [ 377.643175][ T26] ? reset_hung_task_detector+0x30/0x30 [ 377.648713][ T26] kthread+0x3e5/0x4d0 [ 377.652782][ T26] ? set_kthread_struct+0x130/0x130 [ 377.657966][ T26] ret_from_fork+0x1f/0x30 [ 377.663288][ T26] Sending NMI from CPU 0 to CPUs 1: [ 377.668820][ C1] NMI backtrace for cpu 1 [ 377.668830][ C1] CPU: 1 PID: 1212 Comm: kworker/u4:5 Not tainted 5.15.0-rc5-syzkaller #0 [ 377.668850][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.668863][ C1] Workqueue: phy5 ieee80211_iface_work [ 377.668932][ C1] RIP: 0010:lock_release+0xcb/0x720 [ 377.668957][ C1] Code: 48 0f a3 1d 17 75 12 0c 0f 82 60 04 00 00 48 c7 c3 0c e1 6e 8d 48 b8 00 00 00 00 00 fc ff df 48 89 da 48 c1 ea 03 0f b6 14 02 <48> 89 d8 83 e0 07 83 c0 03 38 d0 7c 08 84 d2 0f 85 5b 05 00 00 44 [ 377.668974][ C1] RSP: 0018:ffffc9000517f3b0 EFLAGS: 00000a07 [ 377.668988][ C1] RAX: dffffc0000000000 RBX: ffffffff8d6ee10c RCX: 0000000000000001 [ 377.669001][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 377.669012][ C1] RBP: 1ffff92000a2fe78 R08: 0000000000000000 R09: ffff8880b9d32a0b [ 377.669025][ C1] R10: ffffed10173a6541 R11: 0000000000000000 R12: ffffffff8b981ee0 [ 377.669038][ C1] R13: ffff88801ced0c80 R14: ffff88807cab8d60 R15: ffff88801bc3985a [ 377.669051][ C1] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 377.669070][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 377.669083][ C1] CR2: 00007f37f0888ad0 CR3: 000000000b68e000 CR4: 00000000003506e0 [ 377.669095][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 377.669106][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 377.669118][ C1] Call Trace: [ 377.669125][ C1] ? sta_info_get+0x199/0x390 [ 377.669168][ C1] ? lock_downgrade+0x6e0/0x6e0 [ 377.669194][ C1] sta_info_get+0x1bf/0x390 [ 377.669213][ C1] ? sta_info_hash_lookup+0xb0/0xb0 [ 377.669232][ C1] ? mark_lock+0xef/0x17b0 [ 377.669252][ C1] ? ieee80211_get_channel_khz+0x14a/0x1e0 [ 377.669279][ C1] ieee80211_rx_mgmt_probe_beacon+0x518/0x17c0 [ 377.669304][ C1] ? ieee80211_ibss_add_sta+0x740/0x740 [ 377.669324][ C1] ? __lock_acquire+0x162f/0x54a0 [ 377.669370][ C1] ? mark_lock+0xef/0x17b0 [ 377.669390][ C1] ? mark_lock+0xef/0x17b0 [ 377.669408][ C1] ? mark_lock+0xef/0x17b0 [ 377.669433][ C1] ? lock_chain_count+0x20/0x20 [ 377.669454][ C1] ? lock_chain_count+0x20/0x20 [ 377.669475][ C1] ieee80211_ibss_rx_queued_mgmt+0xd37/0x1610 [ 377.669496][ C1] ? mark_lock+0xef/0x17b0 [ 377.669515][ C1] ? ieee80211_ibss_rx_no_sta+0x830/0x830 [ 377.669538][ C1] ? __lock_acquire+0x162f/0x54a0 [ 377.669562][ C1] ? mark_lock+0xef/0x17b0 [ 377.669581][ C1] ? mark_lock+0xef/0x17b0 [ 377.669602][ C1] ? lock_chain_count+0x20/0x20 [ 377.669625][ C1] ? find_held_lock+0x2d/0x110 [ 377.669645][ C1] ? ieee80211_iface_work+0x28e/0xd00 [ 377.669666][ C1] ? mark_held_locks+0x9f/0xe0 [ 377.669687][ C1] ? _raw_spin_unlock_irqrestore+0x50/0x70 [ 377.669715][ C1] ieee80211_iface_work+0xa65/0xd00 [ 377.669737][ C1] process_one_work+0x9bf/0x16b0 [ 377.669759][ C1] ? pwq_dec_nr_in_flight+0x2a0/0x2a0 [ 377.669780][ C1] ? rwlock_bug.part.0+0x90/0x90 [ 377.669800][ C1] ? _raw_spin_lock_irq+0x41/0x50 [ 377.669825][ C1] worker_thread+0x658/0x11f0 [ 377.669847][ C1] ? process_one_work+0x16b0/0x16b0 [ 377.669866][ C1] kthread+0x3e5/0x4d0 [ 377.669886][ C1] ? set_kthread_struct+0x130/0x130 [ 377.669908][ C1] ret_from_fork+0x1f/0x30 [ 377.689965][ T26] Kernel panic - not syncing: hung_task: blocked tasks [ 377.689982][ T26] CPU: 0 PID: 26 Comm: khungtaskd Not tainted 5.15.0-rc5-syzkaller #0 [ 377.690005][ T26] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011 [ 377.690017][ T26] Call Trace: [ 377.690026][ T26] dump_stack_lvl+0xcd/0x134 [ 377.690059][ T26] panic+0x2b0/0x6dd [ 377.690118][ T26] ? __warn_printk+0xf3/0xf3 [ 377.690147][ T26] ? lapic_can_unplug_cpu+0x80/0x80 [ 377.690175][ T26] ? preempt_schedule_thunk+0x16/0x18 [ 377.690202][ T26] ? nmi_trigger_cpumask_backtrace+0x191/0x220 [ 377.690231][ T26] ? watchdog.cold+0x130/0x158 [ 377.690268][ T26] watchdog.cold+0x141/0x158 [ 377.690294][ T26] ? reset_hung_task_detector+0x30/0x30 [ 377.690325][ T26] kthread+0x3e5/0x4d0 [ 377.690351][ T26] ? set_kthread_struct+0x130/0x130 [ 377.690380][ T26] ret_from_fork+0x1f/0x30 [ 377.690890][ T26] Kernel Offset: disabled [ 378.083049][ T26] Rebooting in 86400 seconds..