last executing test programs: 1m49.872569574s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @empty}], 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'team0\x00', 0x200}) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x6db6e559) 1m38.409072168s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @empty}], 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'team0\x00', 0x200}) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x6db6e559) 1m25.961153423s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @empty}], 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'team0\x00', 0x200}) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x6db6e559) 1m13.791073093s ago: executing program 2: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x90) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x58, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @beacon={{{}, {}, @device_b}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3, {0x20}}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]}, 0x58}}, 0x8084) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x0, 0x1, 0x0, &(0x7f0000000040)='GPL\x00'}, 0x90) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x58, r1, 0x100, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @beacon={{{}, {}, @device_b}, 0x0, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3, {0x20}}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]}, 0x58}}, 0x8084) (async) 1m13.62409493s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) epoll_create1(0x0) socket(0x0, 0x80802, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r1, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r2}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r3, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r4}, 0x48) bpf$MAP_LOOKUP_ELEM(0x10, &(0x7f00000003c0)={r5, &(0x7f0000000580), &(0x7f0000001740)=""/248}, 0x20) 1m13.463432537s ago: executing program 2: r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000000)='bbr\x00', 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) (async) socket$nl_rdma(0x10, 0x3, 0x14) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x2, 0x0, 0x4000}, 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r2, r1, 0x2, 0x0, 0x4000}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) writev(r0, &(0x7f0000001580)=[{&(0x7f0000001240)='r', 0x1}], 0x1) (async) writev(r0, &(0x7f0000001580)=[{&(0x7f0000001240)='r', 0x1}], 0x1) 1m13.355887209s ago: executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0xffffffffffffffff, 0x7}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c0002800600010000000000080005007909538268b0966ed3bfecfddf3c1ed6004c42ae422735443a5e5a6e01ad9f7d952119b999163079d9403d3e0a7b6644cffdbeab76e12bf7f974a347984d7ccd1ac855ec74e5d023cc7616ecd716c6972e4f5863b24c5eca377e0ce6da35f9084fe9ac546d05a5ca4943bdb2a4a35405b232936d78ce641c7db42c77fb378c0ba5dbac96aae24f660a07747eb77a8e7fafa53600000000", @ANYRES32=r3, @ANYBLOB="0a000200ffffffffffff00000a000100aaaaaaaaaa000000"], 0x5c}}, 0x0) 1m13.121818133s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @empty}], 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'team0\x00', 0x200}) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x6db6e559) 54.975152367s ago: executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0xffffffffffffffff, 0x7}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c0002800600010000000000080005007909538268b0966ed3bfecfddf3c1ed6004c42ae422735443a5e5a6e01ad9f7d952119b999163079d9403d3e0a7b6644cffdbeab76e12bf7f974a347984d7ccd1ac855ec74e5d023cc7616ecd716c6972e4f5863b24c5eca377e0ce6da35f9084fe9ac546d05a5ca4943bdb2a4a35405b232936d78ce641c7db42c77fb378c0ba5dbac96aae24f660a07747eb77a8e7fafa53600000000", @ANYRES32=r3, @ANYBLOB="0a000200ffffffffffff00000a000100aaaaaaaaaa000000"], 0x5c}}, 0x0) 53.869956262s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @empty}], 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'team0\x00', 0x200}) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x6db6e559) 35.649397849s ago: executing program 2: pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) ioctl$FS_IOC_RESVSP(r0, 0x40305828, &(0x7f0000000080)={0x0, 0x2, 0xffffffffffffffff, 0x7}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="5c0000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c00128009000100766c616e000000000c0002800600010000000000080005007909538268b0966ed3bfecfddf3c1ed6004c42ae422735443a5e5a6e01ad9f7d952119b999163079d9403d3e0a7b6644cffdbeab76e12bf7f974a347984d7ccd1ac855ec74e5d023cc7616ecd716c6972e4f5863b24c5eca377e0ce6da35f9084fe9ac546d05a5ca4943bdb2a4a35405b232936d78ce641c7db42c77fb378c0ba5dbac96aae24f660a07747eb77a8e7fafa53600000000", @ANYRES32=r3, @ANYBLOB="0a000200ffffffffffff00000a000100aaaaaaaaaa000000"], 0x5c}}, 0x0) 34.408195427s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e8500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x4e21, @empty}, @in={0x2, 0x4e23, @empty}], 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000000)={'pim6reg\x00', 0x400}) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000040)={'team0\x00', 0x200}) write$binfmt_script(0xffffffffffffffff, &(0x7f00000000c0), 0x6db6e559) 32.963757355s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="030700000000000000000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200"], 0x7c}}, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x3, 0x0, &(0x7f0000004e00)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r3) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0xb1, 0x7f}, 0x48) socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r5}) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000080), 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r6, 0x0, 0x0) ioctl$PPPIOCATTCHAN(0xffffffffffffffff, 0x40047438, &(0x7f0000000040)) writev(r1, &(0x7f0000003100)=[{&(0x7f0000003040)="f8", 0x1}, {0x0}], 0x2) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000000, 0x4000010, r0, 0x3aa61000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000006e7a0000000000000000001820000078f54891e0a7a686831ef3779909eae70e9869c87277f471", @ANYRES64, @ANYBLOB="0000000000000000c3000c004000000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 32.723821863s ago: executing program 0: r0 = socket$inet6(0xa, 0x6, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, 0x0, &(0x7f0000000340)) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'wg1\x00'}) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000480)) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000540)={'syztnl0\x00', 0x0, 0x80, 0x8000, 0x80000000, 0x9, {{0x11, 0x4, 0x0, 0x6, 0x44, 0x67, 0x0, 0x2b, 0x2f, 0x0, @remote, @loopback, {[@timestamp={0x44, 0x18, 0x15, 0x0, 0x8, [0x2, 0x2, 0xfffffffe, 0x8ed6, 0x1]}, @end, @ssrr={0x89, 0xb, 0x88, [@private=0xa010100, @rand_addr=0x64010101]}, @timestamp={0x44, 0x8, 0x73, 0x0, 0x3, [0x2]}, @generic={0x83, 0x2}]}}}}}) getsockname$packet(0xffffffffffffffff, &(0x7f00000005c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000600)=0x14) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$packet(0x11, 0x2, 0x300) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=0x0], 0x168}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000001"], 0x24d8}], 0x1}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-generic\x00'}, 0x58) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000001780)={0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000180)="97dc867793fd623d278a6c9d09c26afbcbcde86b", 0x14}, {&(0x7f0000000300)="adb840948d114bcd4a368b6090e808eda54f878eedfee7ab5af4b0efe6f67f1f28f4425bcd2f162d3fee649df713362033c7f3f326b6c96d4eeb29b18026eb3675c80f4d23f319895050ad5f58d6cf26f94a4b", 0x53}, {&(0x7f00000003c0)="2564b826ad10e4c32ff9d8e68e289bd5e1f490ecd068e26fb1aad2e8ad4521805afc1a2dbb3c88eafde0a85c79f187a984f1fca11cc393e3bc37a4380dc8ae8a499432a24ed343d8435358e058477ad42e9a855081589db7ed", 0x59}], 0x3}, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f0000010012000000000000000000000000007fffffff000000ffffac14140000000000000000000a0000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f000000000000000000010000000032000000ff02040000000000000000000000000100000000000000000000000000000000000000000a000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000400000000000000000060001200726663343534332867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a000000080"], 0x150}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r6, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc00080005000400"], 0x58}}, 0x0) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x100004002) setsockopt$inet6_group_source_req(r0, 0x29, 0x2, &(0x7f0000000480)={0x6, {{0xa, 0x0, 0x0, @private1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071115100000000008510000002000000850000000000000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xd, &(0x7f0000000500)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) 32.141040227s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00128025b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473feaef3e5ba760d3793b2f943b7528ea34883a59d75b001f3d554de588973d72641bc4a506cf756740574b89d396af9b5960000001e010680dd004d"], 0x184}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="10008100", 0x5dc, 0x0, &(0x7f0000000040)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0x101, 0x4) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) 31.55573855s ago: executing program 1: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200"], 0x7c}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x3, 0x0, &(0x7f0000004e00)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0xb1, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000080), 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, 0x0, 0x0) writev(r0, &(0x7f0000003100)=[{&(0x7f0000003040)="f8", 0x1}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000000, 0x4000010, 0xffffffffffffffff, 0x3aa61000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000006e7a0000000000000000001820000078f54891e0a7a686831ef3779909eae70e9869c87277f471", @ANYRES64, @ANYBLOB="0000000000000000c3000c004000000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 31.55498388s ago: executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r0 = socket$kcm(0x2, 0xa, 0x2) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0xf0ff, &(0x7f00000000c0)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x3}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401}, @NFT_MSG_DELOBJ={0x34, 0x14, 0xa, 0x3, 0x0, 0x0, {0x3}, [@NFTA_OBJ_TYPE={0x8}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x90}}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)={0x58, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME={0x3c, 0x33, @beacon={{{}, {}, @device_b}, 0x2000000, @random, 0x0, @val, @val, @void, @val={0x4, 0x6}, @void, @void, @val={0x25, 0x3}, @val={0x2a, 0x1}, @void, @void, @void, @void, @void}}]}, 0x58}}, 0x0) 31.554613286s ago: executing program 3: socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$qrtr(0x2a, 0x2, 0x0) r1 = socket(0x40000000015, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f0000000000)=0x1, 0x4) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x0, @loopback}, 0x10) socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r1, 0x29, 0xc8, 0x0, 0xfffffffffffffe64) sendmsg$rds(r1, &(0x7f0000000140)={&(0x7f0000000040)={0x2, 0x0, @local}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@zcopy_cookie={0x18}], 0x18}, 0x4000000) setsockopt$RXRPC_SECURITY_KEYRING(r1, 0x110, 0x2, &(0x7f0000000040)='[\x00', 0x2) bind$qrtr(r0, &(0x7f0000000000)={0x2a, 0x2}, 0xc) r2 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r3) sendmsg$NLBL_MGMT_C_ADDDEF(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="4c0000eb", @ANYRES16=r4, @ANYBLOB="01000000000000000000040000001400050000030000000000000000000000000001080002000500000014000600ff010000000000000000000000000001060001002a000000"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x2f, &(0x7f0000abaff9)={0x0, 0xea60}, 0x8) sendmsg$netlink(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5e0000001000810500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b00010067656e65766500002c00028004000600050009000100000008000b4000001e82140007000000000000000000000000000000000b"], 0x5c}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000140)=ANY=[], 0x9) ioctl$FS_IOC_RESVSP(r8, 0x40305829, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0xffc}) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000000c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f00000001c0)={r9, @in={{0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, 0x9c) 31.296871724s ago: executing program 1: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x14, r0, 0x65aebf9dafbebb59, 0x0, 0x0, {{}, {@void, @void, @void}}}, 0x14}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r2, 0x10e, 0x2, &(0x7f0000000080)=0x5, 0x4) sendmsg$nl_route(r4, 0x0, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x12, 0x24, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r6, &(0x7f00000002c0), 0x20000000}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{r3}, &(0x7f0000000700), &(0x7f0000000740)=r5}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 31.265114018s ago: executing program 3: write$binfmt_script(0xffffffffffffffff, &(0x7f000000e0c0), 0x10010) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, 0xffffffffffffffff, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x0, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f00000003c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x1c, 0x0, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) (async) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="4f00030007"], 0xd) (async) setsockopt(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0x9) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[]) (async) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000080)={'gre0\x00', 0x0}) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000580)=ANY=[], 0xc8}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x10000}, 0x90) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r4, 0x8b2a, &(0x7f0000000040)) 31.237016706s ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xf, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000500000000000000ccfd000085000000120000000327060004000000180000009fdc00000000000009000000bc7ff4fffcffffff1800000000000000000000008000000018100000", @ANYRES32=r0, @ANYBLOB="00000000000000008500000012000000950000000000000085100000f8ffffff9500000100ea0000"], &(0x7f0000000040)='GPL\x00', 0x9, 0x1000, &(0x7f0000001540)=""/4096, 0x41100, 0x30, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[r0, r0, r0, 0x1, r0, r0], &(0x7f00000001c0)=[{0x2, 0x5, 0xe, 0xc}, {0x1, 0x3, 0x3, 0x6}, {0x2, 0x2, 0x1}, {0x0, 0x1, 0x1, 0x9}], 0x10, 0x8}, 0x90) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000000)) ioctl$PPPIOCSPASS(r1, 0x40107447, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x48, 0x0, 0x0, 0x80000000}, {0x6}]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x4, 0x4}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x0, 0x0, 0x1000}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket$inet6_sctp(0xa, 0x0, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0xd) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, 0x0, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @empty}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$pppoe(0x18, 0x1, 0x0) 31.206892288s ago: executing program 1: bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan1\x00'}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'wpan0\x00'}) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 31.097279315s ago: executing program 3: r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000080)={0xf8, 0x21, 0x1, 0x0, 0x0, "", [@nested={0xe6, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x2, 0x0, 0x0, @ipv6=@dev}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb"]}]}, 0xf8}], 0x1}, 0x0) 31.084605209s ago: executing program 1: r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x34, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ID={0x8}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @RPL_IPTUNNEL_SRH={0xc, 0x1, {0x0, 0x8}}}, @NHA_FDB={0x4}]}, 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0xfff, 0x5}, 0x48) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000200), r2) r4 = socket$kcm(0x10, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000002c0)="d8000000100081044e81f782db44b904021d080005000000e8fe55a1190015000600142603600e1209000d0000000401a80016000a00014006000000036010fab94dcf5c0461c1d67f6f94007134cf6ee18000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)={0x70, r3, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4c, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x7}, {0x5, 0x3, 0x7}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5, 0x3, 0x1}, {0x5}, {0x5, 0x3, 0x6}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x1}]}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}]}, 0x70}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000c80), r2) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="110100000000000000001d00000008000300", @ANYRES32=r6, @ANYBLOB="24002f800c00038008000100fdffffff080001"], 0x40}}, 0x0) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)={0x2c, r8, 0x6a5672979d8c2d89, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_LEVEL={0xc, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x2c}}, 0x0) r9 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000380), r1) sendmsg$NLBL_CALIPSO_C_ADD(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CALIPSO_A_DOI={0x8}]}, 0x1c}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x7a, 0x7a, 0x3, [@ptr={0xb, 0x0, 0x0, 0x2, 0x4}, @datasec={0x5, 0x1, 0x0, 0xf, 0x2, [{0x2, 0x80, 0x1}], "b516"}, @volatile={0x1, 0x0, 0x0, 0x9, 0x4}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x4, 0x2}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x1, 0x3, 0x7fff}}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x5, 0x1, 0x9}}]}, {0x0, [0x2e]}}, &(0x7f0000000640)=""/212, 0x97, 0xd4, 0x1, 0x70}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket(0x0, 0x1, 0x0) close(r10) r11 = socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(r10, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x14) sendmsg$GTP_CMD_DELPDP(r11, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16, @ANYBLOB="10002bbd7000fedbdf2501000000060006000400000008000100", @ANYRES32=r12, @ANYBLOB="0800020001000000f4ff070002f8ff000600066962632f000800020000000000"], 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x8800) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.933589314s ago: executing program 3: r0 = socket(0x2, 0x3, 0x100000001) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000400)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x0, 0x3654}]}, 0x10) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x18}}, 0x10) sendmsg$inet(r1, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000080), 0x4) recvmsg(r1, &(0x7f0000000580)={0x0, 0x7, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1}, 0x700) r2 = socket$netlink(0x10, 0x3, 0x4) writev(r2, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c5602117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100070c100000000000224e0000", 0x58}], 0x1) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), r2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x12, 0x0, {}, {}, {0x0, 0x9}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56}]}}]}, 0x8c}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000008000008000f", 0x1f) r4 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001a00599c6d0e000091d028ef80"], 0xfe33) r5 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$SO_TIMESTAMP(r5, 0x1, 0x3f, &(0x7f0000000040)=0xaf0, 0x4) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000080)={0xa, 0x4e23, 0x0, @mcast2}, 0x1c) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) sendto$inet(r0, &(0x7f0000000000)="832e", 0x2, 0x0, 0x0, 0x0) 30.852220523s ago: executing program 0: r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000580)={'sit0\x00', 0x0, 0x7800, 0x7, 0x400, 0x100, {{0x1f, 0x4, 0x3, 0x3, 0x7c, 0x67, 0x0, 0x0, 0x4, 0x0, @multicast1, @local, {[@ra={0x94, 0x4}, @lsrr={0x83, 0x23, 0xa0, [@empty, @dev={0xac, 0x14, 0x14, 0x23}, @remote, @dev={0xac, 0x14, 0x14, 0x3f}, @empty, @multicast1, @remote, @multicast1]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x3c, 0x31, 0x3, 0x6, [{@remote, 0x1}, {@loopback, 0x5}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}, {@multicast2, 0xffffffff}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x20}, {@rand_addr=0x64010101, 0x7}]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180)=0xffffffffffffffff, 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0x20, &(0x7f00000006c0)={&(0x7f0000000640)=""/104, 0x68, 0x0, &(0x7f0000000340)=""/10, 0xa}}, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x6}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0x14, &(0x7f0000000940)=ANY=[@ANYBLOB="180000007f0000000000000020000000185500000b0000000000000000000000180100002020752500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000006000000850000000600000018330000050000000000000000000000950000000000000018110000208897089e8e548b739fd2d85f3ce9191a1007f0", @ANYRES32, @ANYBLOB="0000000000000000b70200000000000085000000860000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x1, 0xc5, &(0x7f0000000480)=""/197, 0x40f00, 0x4, '\x00', r1, 0x15, r2, 0x8, &(0x7f0000000280)={0x9, 0x5}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0xb, 0x81, 0x7}, 0x10, r3, 0xffffffffffffffff, 0x5, &(0x7f00000007c0)=[r4], &(0x7f0000000800)=[{0x2, 0x2, 0xd, 0x1}, {0x0, 0x4, 0x4, 0xc}, {0x0, 0x5, 0x6, 0x3}, {0x0, 0x4, 0x10, 0xa}, {0x0, 0x1, 0xc, 0x4}], 0x10, 0x7}, 0x90) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f0000003c00)=@req={0x0, 0x9}, 0x10) write$ppp(r0, &(0x7f0000000300)="1632", 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000006604000008000300", @ANYRES32=r9, @ANYBLOB="0800b70004000000080026009409"], 0x4c}}, 0x0) 30.019319052s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r0, &(0x7f00000025c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)='P', 0x1}], 0x1}}, {{&(0x7f0000000100)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000002400)=[{&(0x7f0000000140)='i', 0x1}], 0x1}}], 0x2, 0x0) shutdown(r0, 0x1) setsockopt(r0, 0x84, 0x80, &(0x7f00000002c0)="1af3050000f2bd5b", 0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f0000000380)={0x0, @in6={{0xa, 0x0, 0x0, @dev}}}, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0xf, &(0x7f0000d10ffc)=0xfffffffffffffff9, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, 0x0, 0x0) socket$key(0xf, 0x3, 0x2) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001240)={&(0x7f00000004c0)=ANY=[@ANYBLOB="840100001900010000000000000000001d0109004d00128025b57e35619bf282cfcd8fba0cb7f2934efacde0a223b473feaef3e5ba760d3793b2f943b7528ea34883a59d75b001f3d554de588973d72641bc4a506cf756740574b89d396af9b5960000001e010680dd004d"], 0x184}}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x4000) socket$inet6_sctp(0xa, 0x0, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r4, &(0x7f0000000080)="10008100", 0x5dc, 0x0, &(0x7f0000000040)={0x11, 0x8100, r5, 0x1, 0x0, 0x6, @broadcast}, 0x14) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) r6 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0xf, &(0x7f0000d10ffc)=0x101, 0x4) bind$inet6(r6, &(0x7f0000000100)={0xa, 0x1, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}, 0x1c) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="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"], 0x64}}, 0x0) 1.056414535s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@ipv4_deladdr={0x34, 0x15, 0xd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r2}, [@IFA_LABEL={0x14, 0x3, 'syz_tun\x00'}, @IFA_ADDRESS={0x8, 0x1, @loopback}]}, 0x34}}, 0x0) 827.969272ms ago: executing program 0: write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) r0 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000d00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000700)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="030700000000000000000480040007801300010062726f6164636173742d6c696e6b00001900078008000300000000000800020000000000080003000000000008000200"], 0x7c}}, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x3, 0x0, &(0x7f0000004e00)) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0xb1, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r4}) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000080), 0x0) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, 0x0, 0x0) writev(r0, &(0x7f0000003100)=[{&(0x7f0000003040)="f8", 0x1}, {0x0}], 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x4000000, 0x4000010, 0xffffffffffffffff, 0x3aa61000) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x6, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000006e7a0000000000000000001820000078f54891e0a7a686831ef3779909eae70e9869c87277f471", @ANYRES64, @ANYBLOB="0000000000000000c3000c004000000095"], &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) 0s ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f00000001c0)=ANY=[@ANYBLOB="40010000170011060000000000000000ff0200000000000000000000000000010000000000000000ffffffff000000000000000000000000fe880000000000000000000000000001ffffffff00"/104, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000302d0000000000007b00000100000000000000000000000000000000000000000a00000000000000725e2e314b736d7a6f6dcd45a8c19b5ca1c4b844321ab50ce6052c5f35441e85d950e925fc37d5a036d42f73bb1659a97e073334023e1503d9518cdf78506248fcb9d4ede23262aaa583a396", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c00080008000800000000000c0015000000000000000000"], 0x140}}, 0x0) syz_emit_ethernet(0x62, &(0x7f0000000080)=ANY=[@ANYBLOB], 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000280)={'virt_wifi0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@bloom_filter={0x1e, 0x7, 0x0, 0x0, 0x2a20, 0xffffffffffffffff, 0x9f000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x9}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, r4, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x4}, 0x48) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000020000000000000000", @ANYRES32=r3], 0x20}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000280)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c40)={0xffffffffffffffff, 0xe0, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f00000007c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, &(0x7f0000000800)=[0x0, 0x0, 0x0], &(0x7f0000000840)=[0x0], 0x0, 0x8f, &(0x7f0000000900)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000a80), &(0x7f0000000ac0), 0x8, 0x17, 0x8, 0x8, &(0x7f0000000b00)}}, 0x10) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@s, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r8, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x1}, 0x48) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x4, 0x7fe2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000dc0)={0x19, 0x3b, &(0x7f0000000440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xf2f}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}}, @exit, @call={0x85, 0x0, 0x0, 0xa5}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @tail_call, @call={0x85, 0x0, 0x0, 0x41}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xf, 0x0, 0x0, 0x0, 0x522}, @printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x6}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000640)='GPL\x00', 0x3ff, 0xf4, &(0x7f0000000680)=""/244, 0x41000, 0x40, '\x00', r3, 0x30, r6, 0x8, &(0x7f0000000780)={0x4, 0x1}, 0x8, 0x10, 0x0, 0x0, r7, r8, 0x6, &(0x7f0000000d00)=[r9, r1, r10, r1, r1], &(0x7f0000000d40)=[{0x3, 0x1, 0xb}, {0x1, 0x1, 0xc, 0x7}, {0x5, 0x4, 0xf, 0x6}, {0x4, 0x2, 0x2}, {0x5, 0x3, 0xd, 0xc}, {0x2, 0x5, 0x6, 0x5}], 0x10, 0x9}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x0, 0x9}, 0x48) r11 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r12 = socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$tipc(&(0x7f0000000940), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_TOL(r12, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x68, r13, 0x501, 0x0, 0x0, {{}, {}, {0x4c, 0x18, {0x0, @media='ib\x00'}}}}, 0x68}}, 0x0) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r11, 0x118, 0x1, 0x0, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r14 = socket(0x2, 0x80805, 0x0) sendmmsg$inet(r14, &(0x7f0000000880)=[{{&(0x7f0000000080)={0x2, 0x0, @rand_addr=0xac1414bb}, 0x10, &(0x7f0000000100)=[{&(0x7f00000000c0)='Q', 0x1}], 0x1}, 0x20000000}, {{&(0x7f0000000180)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000400)=[{0x0}], 0x1}, 0xdc05}], 0x2, 0x0) kernel console output (not intermixed with test programs): ayer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.333439][ T8293] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.359765][ T8293] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.367340][ T8293] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.394923][ T8293] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.502141][ T8293] hsr_slave_0: entered promiscuous mode [ 155.510386][ T8293] hsr_slave_1: entered promiscuous mode [ 155.519088][ T8293] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.532011][ T8293] Cannot create hsr debugfs directory [ 155.590623][ T8122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.611535][ T8359] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.698195][ T8122] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.719980][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.727205][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 155.759562][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.766775][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 155.900259][ T8293] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 155.919213][ T8293] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.979608][ T8365] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.008788][ T5111] Bluetooth: hci5: command tx timeout [ 156.102821][ T8293] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.122425][ T8293] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.166627][ T8365] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 156.265410][ T8293] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.290321][ T8293] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.427034][ T8293] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 156.449135][ T29] audit: type=1804 audit(1718678079.894:91): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/242/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 156.454910][ T8293] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.538730][ T29] audit: type=1804 audit(1718678079.954:92): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/242/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 156.565170][ T5111] Bluetooth: hci0: command tx timeout [ 156.581641][ T29] audit: type=1804 audit(1718678079.954:93): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/242/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 156.613589][ T8122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 156.838803][ T8293] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 156.875579][ T8293] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 156.883070][ T8411] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 156.898982][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 156.899888][ T8293] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 156.935729][ T8293] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 157.231484][ T8122] veth0_vlan: entered promiscuous mode [ 157.292196][ T8293] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.314657][ T8122] veth1_vlan: entered promiscuous mode [ 157.426834][ T8293] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.438274][ T8122] veth0_macvtap: entered promiscuous mode [ 157.508467][ T8122] veth1_macvtap: entered promiscuous mode [ 157.512023][ T29] audit: type=1804 audit(1718678080.954:94): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/247/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 157.544755][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.552054][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.569463][ T29] audit: type=1804 audit(1718678080.954:95): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/247/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 157.577088][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.602339][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.603192][ T29] audit: type=1804 audit(1718678080.994:96): pid=8440 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/247/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 157.810259][ T8122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.821284][ T8122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.831646][ T8122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.842582][ T8122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.852794][ T8122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.863444][ T8122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.874713][ T8122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.888203][ T8122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.898101][ T8122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 157.908982][ T8122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 157.920922][ T8122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 157.969154][ T8293] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 158.025729][ T8122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.044629][ T8122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.052197][ T8450] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 158.055581][ T8122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.073817][ T8122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.086350][ T8122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.097641][ T5111] Bluetooth: hci5: command tx timeout [ 158.103165][ T8122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.120959][ T8122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.131726][ T8122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.142127][ T8122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.152748][ T8122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.167020][ T8122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.211855][ T8448] x_tables: duplicate underflow at hook 4 [ 158.299289][ T8450] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 158.339031][ T8450] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 158.340014][ T8451] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 158.369883][ T8454] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 158.378316][ T8454] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.3'. [ 158.393679][ T8122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.402675][ T8122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.413339][ T8122] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.422226][ T8122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.447719][ T8450] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 158.469144][ T8450] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 158.515427][ T8451] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 158.582197][ T8450] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 158.592081][ T8450] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 158.640939][ T8293] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.842360][ T8293] veth0_vlan: entered promiscuous mode [ 158.850881][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.879220][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.930488][ T8293] veth1_vlan: entered promiscuous mode [ 158.984041][ T2395] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.008075][ T2395] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.063542][ T8293] veth0_macvtap: entered promiscuous mode [ 159.160575][ T8293] veth1_macvtap: entered promiscuous mode [ 159.197765][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.212669][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.222646][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.233567][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.245004][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.255725][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.265600][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.276334][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.286953][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.298125][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.309622][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.320477][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.331700][ T8293] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.363134][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.378424][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.398831][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.414697][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.425062][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.436027][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.447049][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.458835][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.470579][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.481532][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.504351][ T8293] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.529889][ T8293] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.546126][ T8293] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.569589][ T8293] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.581876][ T8293] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.591586][ T8293] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.600488][ T8293] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.749961][ T2395] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.762554][ T2395] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.824746][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.833463][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 160.165287][ T5111] Bluetooth: hci5: command tx timeout [ 160.191606][ T1098] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.275222][ T8512] tipc: Started in network mode [ 160.281048][ T8512] tipc: Node identity 364b50fc1365, cluster identity 4711 [ 160.346853][ T8512] tipc: Enabled bearer , priority 10 [ 160.627417][ T1098] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.744059][ T8535] batman_adv: batadv0: Adding interface: team0 [ 160.797679][ T8535] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.906904][ T8535] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 160.956795][ T8537] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.975891][ T8537] team0: entered promiscuous mode [ 160.985349][ T8537] team_slave_0: entered promiscuous mode [ 160.998124][ T8537] team_slave_1: entered promiscuous mode [ 161.023194][ T8537] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.039858][ T8537] batman_adv: batadv0: Interface activated: team0 [ 161.066233][ T8537] batman_adv: batadv0: Interface deactivated: team0 [ 161.090312][ T8537] batman_adv: batadv0: Removing interface: team0 [ 161.106941][ T8537] bridge0: port 3(team0) entered blocking state [ 161.121692][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 161.134354][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 161.142584][ T8537] bridge0: port 3(team0) entered disabled state [ 161.150776][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 161.159487][ T5120] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 161.167504][ T5120] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 161.174740][ T8537] team0: entered allmulticast mode [ 161.175251][ T5120] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 161.180650][ T8537] team_slave_0: entered allmulticast mode [ 161.213599][ T8537] team_slave_1: entered allmulticast mode [ 161.258296][ T1098] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.291806][ T8540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.412270][ T1098] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.466832][ T5163] tipc: Node number set to 623792380 [ 161.479950][ T8554] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 161.719767][ T8564] netlink: 280 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.803788][ T8571] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 161.888398][ T1098] bridge_slave_1: left allmulticast mode [ 161.894181][ T1098] bridge_slave_1: left promiscuous mode [ 161.922857][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.950502][ T1098] bridge_slave_0: left allmulticast mode [ 161.971465][ T1098] bridge_slave_0: left promiscuous mode [ 161.987951][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.248566][ T5111] Bluetooth: hci5: command tx timeout [ 162.457478][ T1098] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.472546][ T1098] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.487787][ T1098] bond0 (unregistering): Released all slaves [ 162.520401][ T8584] batman_adv: batadv0: Adding interface: team0 [ 162.535141][ T8584] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.565483][ T8584] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 162.577054][ T8585] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.602786][ T8585] team0: entered promiscuous mode [ 162.611044][ T8585] team_slave_0: entered promiscuous mode [ 162.618193][ T8585] team_slave_1: entered promiscuous mode [ 162.633402][ T8585] 8021q: adding VLAN 0 to HW filter on device team0 [ 162.640078][ T8590] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.669594][ T8585] batman_adv: batadv0: Interface activated: team0 [ 162.679526][ T8585] batman_adv: batadv0: Interface deactivated: team0 [ 162.697946][ T8585] batman_adv: batadv0: Removing interface: team0 [ 162.712295][ T8585] bridge0: port 3(team0) entered blocking state [ 162.721790][ T8585] bridge0: port 3(team0) entered disabled state [ 162.731508][ T8585] team0: entered allmulticast mode [ 162.739096][ T8585] team_slave_0: entered allmulticast mode [ 162.745037][ T8585] team_slave_1: entered allmulticast mode [ 162.760443][ T8585] bridge0: port 3(team0) entered blocking state [ 162.766935][ T8585] bridge0: port 3(team0) entered forwarding state [ 162.786334][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.798240][ T8595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.199028][ T8611] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.253793][ T8616] tipc: Enabling of bearer rejected, already enabled [ 163.285181][ T5111] Bluetooth: hci0: command tx timeout [ 163.344983][ T8622] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.415302][ T1098] hsr_slave_0: left promiscuous mode [ 163.434624][ T1098] hsr_slave_1: left promiscuous mode [ 163.453713][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 163.485231][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 163.513791][ T1098] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 163.554295][ T1098] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 163.638049][ T1098] veth1_macvtap: left promiscuous mode [ 163.667299][ T1098] veth0_macvtap: left promiscuous mode [ 163.688809][ T1098] veth1_vlan: left promiscuous mode [ 163.712624][ T1098] veth0_vlan: left promiscuous mode [ 164.788325][ T1098] team0 (unregistering): Port device team_slave_1 removed [ 164.830370][ T1098] team0 (unregistering): Port device team_slave_0 removed [ 165.228407][ T8547] chnl_net:caif_netlink_parms(): no params data found [ 165.317772][ T8640] validate_nla: 41 callbacks suppressed [ 165.317793][ T8640] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 165.354491][ T8645] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 165.366133][ T5111] Bluetooth: hci0: command tx timeout [ 165.411407][ T8645] bridge0: port 3(team0) entered disabled state [ 165.443848][ T8654] Bluetooth: MGMT ver 1.22 [ 165.444119][ T8645] team0: left allmulticast mode [ 165.464435][ T8645] team_slave_0: left allmulticast mode [ 165.470160][ T8645] team_slave_1: left allmulticast mode [ 165.477197][ T8645] team0: left promiscuous mode [ 165.483991][ T8645] team_slave_0: left promiscuous mode [ 165.490696][ T8645] team_slave_1: left promiscuous mode [ 165.496787][ T8645] bridge0: port 3(team0) entered disabled state [ 165.516196][ T8645] batman_adv: batadv0: Adding interface: team0 [ 165.522515][ T8645] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 165.548000][ T8645] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 165.563400][ T8647] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 165.580874][ T8647] team0: entered promiscuous mode [ 165.593725][ T8647] team_slave_0: entered promiscuous mode [ 165.600019][ T8647] team_slave_1: entered promiscuous mode [ 165.608473][ T8647] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.615509][ T8647] batman_adv: batadv0: Interface activated: team0 [ 165.622123][ T8647] batman_adv: batadv0: Interface deactivated: team0 [ 165.629100][ T8647] batman_adv: batadv0: Removing interface: team0 [ 165.641374][ T8647] bridge0: port 3(team0) entered blocking state [ 165.654382][ T8647] bridge0: port 3(team0) entered disabled state [ 165.663827][ T8647] team0: entered allmulticast mode [ 165.669409][ T8647] team_slave_0: entered allmulticast mode [ 165.677460][ T8647] team_slave_1: entered allmulticast mode [ 165.685837][ T8647] bridge0: port 3(team0) entered blocking state [ 165.692248][ T8647] bridge0: port 3(team0) entered forwarding state [ 165.761399][ T8668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 165.816607][ T8547] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.839559][ T8547] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.848125][ T8547] bridge_slave_0: entered allmulticast mode [ 165.856301][ T8547] bridge_slave_0: entered promiscuous mode [ 165.866939][ T8547] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.874149][ T8547] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.888360][ T8547] bridge_slave_1: entered allmulticast mode [ 165.898538][ T8547] bridge_slave_1: entered promiscuous mode [ 166.030130][ T8547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.057482][ T8547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.174184][ T8547] team0: Port device team_slave_0 added [ 166.204324][ T8547] team0: Port device team_slave_1 added [ 166.263126][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 166.286884][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.321215][ T8547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 166.362341][ T8547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 166.384906][ T8547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.433871][ T8547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 166.445092][ T29] audit: type=1804 audit(1718678089.884:97): pid=8690 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/272/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 166.512228][ T8686] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 166.526771][ T8686] team0: left promiscuous mode [ 166.537585][ T8686] team_slave_0: left promiscuous mode [ 166.543205][ T8686] team_slave_1: left promiscuous mode [ 166.586155][ T8686] batman_adv: batadv0: Adding interface: team0 [ 166.592361][ T8686] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 166.642316][ T8686] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 166.675050][ T8691] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 166.703882][ T8691] __nla_validate_parse: 4 callbacks suppressed [ 166.703902][ T8691] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 166.745604][ T8691] team_slave_0: entered promiscuous mode [ 166.751432][ T8691] team_slave_1: entered promiscuous mode [ 166.780055][ T8691] team0: entered promiscuous mode [ 166.801350][ T8691] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.809357][ T8691] batman_adv: batadv0: Interface activated: team0 [ 166.816391][ T8691] batman_adv: batadv0: Interface deactivated: team0 [ 166.823306][ T8691] batman_adv: batadv0: Removing interface: team0 [ 166.840331][ T8691] bridge0: port 3(team0) entered blocking state [ 166.847597][ T8691] bridge0: port 3(team0) entered disabled state [ 166.854145][ T8691] team0: entered allmulticast mode [ 166.859669][ T8691] team_slave_0: entered allmulticast mode [ 166.866565][ T8691] team_slave_1: entered allmulticast mode [ 166.874846][ T8691] bridge0: port 3(team0) entered blocking state [ 166.881266][ T8691] bridge0: port 3(team0) entered listening state [ 166.998724][ T8547] hsr_slave_0: entered promiscuous mode [ 167.037335][ T8547] hsr_slave_1: entered promiscuous mode [ 167.057836][ T8547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.075548][ T8547] Cannot create hsr debugfs directory [ 167.427088][ T8725] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 167.446175][ T5111] Bluetooth: hci0: command tx timeout [ 167.457291][ T8725] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 167.467827][ T8725] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.3'. [ 167.798158][ T8547] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 167.830000][ T8547] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 167.841013][ T8547] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 167.856628][ T8547] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 168.023535][ T8547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 168.074731][ T8547] 8021q: adding VLAN 0 to HW filter on device team0 [ 168.108309][ T5190] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.115534][ T5190] bridge0: port 1(bridge_slave_0) entered forwarding state [ 168.167106][ T5190] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.174273][ T5190] bridge0: port 2(bridge_slave_1) entered forwarding state [ 168.276780][ T8745] tipc: Enabled bearer , priority 10 [ 168.346236][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.383999][ T8750] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 168.540814][ T29] audit: type=1804 audit(1718678091.984:98): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir932005216/syzkaller.a5UitC/263/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 168.643055][ T29] audit: type=1804 audit(1718678092.034:99): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir932005216/syzkaller.a5UitC/263/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 168.755806][ T29] audit: type=1804 audit(1718678092.164:100): pid=8755 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir932005216/syzkaller.a5UitC/263/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 168.819639][ T8547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.010646][ T8776] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 169.130469][ T8779] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.279084][ T8784] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 169.308276][ T8784] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 169.327264][ T8784] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.377720][ T8547] veth0_vlan: entered promiscuous mode [ 169.404984][ T5163] tipc: Node number set to 3758096386 [ 169.421715][ T8547] veth1_vlan: entered promiscuous mode [ 169.499089][ T8547] veth0_macvtap: entered promiscuous mode [ 169.519624][ T8547] veth1_macvtap: entered promiscuous mode [ 169.537624][ T5111] Bluetooth: hci0: command tx timeout [ 169.602611][ T29] audit: type=1107 audit(1718678093.044:101): pid=8788 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Pn¬0K²Nº° uè!ñç$AÙË°#}Ju'¬¿î2¤ïÑì§j=ÐŒaâ' [ 169.617440][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.694930][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.704794][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.746819][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.759529][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.771774][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.782086][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.792993][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.804666][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.817807][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.833096][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 169.844601][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.888166][ T8547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 169.918079][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.950145][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 169.975949][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 169.999304][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.014038][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.025557][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.025785][ T29] audit: type=1804 audit(1718678093.474:102): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir932005216/syzkaller.a5UitC/269/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 170.039535][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.102564][ T29] audit: type=1804 audit(1718678093.534:103): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir932005216/syzkaller.a5UitC/269/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 170.118217][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.138643][ T29] audit: type=1804 audit(1718678093.534:104): pid=8801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir932005216/syzkaller.a5UitC/269/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 170.174133][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.189282][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.208333][ T8547] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.228802][ T8547] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.269530][ T8547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.291895][ T8547] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.302714][ T8547] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.341036][ T8547] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.360369][ T8547] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.543177][ T8818] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.556381][ T8823] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 170.568404][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.581845][ T8818] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.592355][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 170.705074][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 170.745402][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.003148][ T29] audit: type=1804 audit(1718678094.444:105): pid=8845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/283/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 171.013874][ T8839] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 171.041188][ T8839] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 171.049819][ T8839] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.051587][ T29] audit: type=1804 audit(1718678094.494:106): pid=8845 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/283/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 171.356319][ T8857] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.857654][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 171.857672][ T29] audit: type=1804 audit(1718678095.304:108): pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/286/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 171.926511][ T29] audit: type=1804 audit(1718678095.354:109): pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/286/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 171.976563][ T29] audit: type=1804 audit(1718678095.364:110): pid=8882 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/286/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 172.032523][ T8890] __nla_validate_parse: 1 callbacks suppressed [ 172.032541][ T8890] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.049609][ T8890] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.187394][ T8897] syz-executor.1[8897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.187548][ T8897] syz-executor.1[8897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 172.468814][ T8915] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 172.520447][ T8915] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.0'. [ 172.635409][ T8925] 8021q: adding VLAN 0 to HW filter on device bond2 [ 172.747196][ T8927] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 172.756581][ T29] audit: type=1804 audit(1718678096.204:111): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/290/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 172.792588][ T8927] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 172.802758][ T8927] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.805884][ T29] audit: type=1804 audit(1718678096.204:112): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/290/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 172.854583][ T29] audit: type=1804 audit(1718678096.204:113): pid=8933 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/290/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 172.962003][ T8935] sctp: [Deprecated]: syz-executor.3 (pid 8935) Use of struct sctp_assoc_value in delayed_ack socket option. [ 172.962003][ T8935] Use struct sctp_sack_info instead [ 173.057024][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.085799][ T8938] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 173.229603][ T11] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 173.563040][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.954180][ T11] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.005364][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 174.074277][ T5120] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 174.108817][ T5118] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 174.125490][ T5118] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 174.181334][ T5118] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 174.192670][ T11] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.215939][ T5118] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 174.224686][ T5118] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 174.407623][ T11] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 174.429622][ T5118] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 174.441116][ T5118] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 174.451773][ T5118] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 174.460327][ T5118] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 174.474206][ T5118] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 174.482783][ T5118] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 174.596448][ T8990] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 174.604590][ T8990] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 174.655787][ T8990] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.1'. [ 174.754365][ T8998] IPVS: set_ctl: invalid protocol: 0 224.0.0.2:0 [ 174.800620][ T5123] IPVS: starting estimator thread 0... [ 174.845873][ T9003] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 174.869246][ T9003] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 174.913747][ T9003] debugfs: Directory 'netdev:' with parent 'phy17' already present! [ 174.925582][ T9001] IPVS: using max 20 ests per chain, 48000 per kthread [ 175.011128][ T11] bridge_slave_1: left allmulticast mode [ 175.023058][ T11] bridge_slave_1: left promiscuous mode [ 175.033275][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.046957][ T11] bridge_slave_0: left allmulticast mode [ 175.052654][ T11] bridge_slave_0: left promiscuous mode [ 175.062659][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.477811][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 175.492589][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 175.512254][ T11] bond0 (unregistering): Released all slaves [ 175.537603][ T9010] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 175.582225][ T9010] bridge0: port 3(team0) entered disabled state [ 175.612931][ T9010] team0: left allmulticast mode [ 175.626944][ T9010] team_slave_0: left allmulticast mode [ 175.633746][ T9010] team_slave_1: left allmulticast mode [ 175.648941][ T9010] team0: left promiscuous mode [ 175.653815][ T9010] team_slave_0: left promiscuous mode [ 175.665317][ T9010] team_slave_1: left promiscuous mode [ 175.671154][ T9010] bridge0: port 3(team0) entered disabled state [ 175.694120][ T9010] batman_adv: batadv0: Adding interface: team0 [ 175.701388][ T9010] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 175.727231][ T9010] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 175.743252][ T9011] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 175.765545][ T9011] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.789523][ T9011] team_slave_0: entered promiscuous mode [ 175.795354][ T9011] team_slave_1: entered promiscuous mode [ 175.813395][ T9011] team0: entered promiscuous mode [ 175.822294][ T9011] 8021q: adding VLAN 0 to HW filter on device team0 [ 175.839804][ T9011] batman_adv: batadv0: Interface activated: team0 [ 175.852449][ T9011] batman_adv: batadv0: Interface deactivated: team0 [ 175.863940][ T9011] batman_adv: batadv0: Removing interface: team0 [ 175.871923][ T9011] bridge0: port 3(team0) entered blocking state [ 175.883932][ T9011] bridge0: port 3(team0) entered disabled state [ 175.890642][ T9011] team0: entered allmulticast mode [ 175.903872][ T9011] team_slave_0: entered allmulticast mode [ 175.909836][ T9011] team_slave_1: entered allmulticast mode [ 175.922664][ T9011] bridge0: port 3(team0) entered blocking state [ 175.929065][ T9011] bridge0: port 3(team0) entered listening state [ 176.168466][ T5111] Bluetooth: hci2: command 0x0406 tx timeout [ 176.168528][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 176.177391][ T5118] Bluetooth: hci1: command 0x0406 tx timeout [ 176.325187][ T5121] Bluetooth: hci0: command tx timeout [ 176.406075][ T8976] chnl_net:caif_netlink_parms(): no params data found [ 176.431986][ T8986] chnl_net:caif_netlink_parms(): no params data found [ 176.506669][ T11] hsr_slave_0: left promiscuous mode [ 176.527030][ T11] hsr_slave_1: left promiscuous mode [ 176.533219][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 176.545876][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.565486][ T5121] Bluetooth: hci5: command tx timeout [ 176.566063][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 176.595016][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 176.637793][ T11] veth1_macvtap: left promiscuous mode [ 176.643398][ T11] veth0_macvtap: left promiscuous mode [ 176.663278][ T11] veth1_vlan: left promiscuous mode [ 176.672898][ T11] veth0_vlan: left promiscuous mode [ 177.584675][ T11] team0 (unregistering): Port device team_slave_1 removed [ 177.642565][ T11] team0 (unregistering): Port device team_slave_0 removed [ 178.170002][ T9048] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 178.183343][ T9048] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 178.191553][ T9048] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.406262][ T5121] Bluetooth: hci0: command tx timeout [ 178.498692][ T9066] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 178.533091][ T9066] bridge0: port 3(team0) entered disabled state [ 178.551212][ T9066] team0: left allmulticast mode [ 178.561702][ T9066] team_slave_0: left allmulticast mode [ 178.570564][ T9066] team_slave_1: left allmulticast mode [ 178.582814][ T9066] team0: left promiscuous mode [ 178.588454][ T9066] team_slave_0: left promiscuous mode [ 178.594116][ T9066] team_slave_1: left promiscuous mode [ 178.606196][ T9066] bridge0: port 3(team0) entered disabled state [ 178.621193][ T9066] batman_adv: batadv0: Adding interface: team0 [ 178.627735][ T9066] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.653535][ T9066] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 178.656054][ T5121] Bluetooth: hci5: command tx timeout [ 178.666336][ T9070] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 178.680016][ T9070] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.722517][ T9070] team_slave_0: entered promiscuous mode [ 178.728334][ T9070] team_slave_1: entered promiscuous mode [ 178.737904][ T9070] team0: entered promiscuous mode [ 178.756128][ T9070] 8021q: adding VLAN 0 to HW filter on device team0 [ 178.775231][ T9070] batman_adv: batadv0: Interface activated: team0 [ 178.782119][ T9070] batman_adv: batadv0: Interface deactivated: team0 [ 178.792825][ T9070] batman_adv: batadv0: Removing interface: team0 [ 178.814408][ T9070] bridge0: port 3(team0) entered blocking state [ 178.821847][ T9070] bridge0: port 3(team0) entered disabled state [ 178.828816][ T9070] team0: entered allmulticast mode [ 178.833964][ T9070] team_slave_0: entered allmulticast mode [ 178.839997][ T9070] team_slave_1: entered allmulticast mode [ 178.848362][ T9070] bridge0: port 3(team0) entered blocking state [ 178.854777][ T9070] bridge0: port 3(team0) entered listening state [ 178.888898][ T9079] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.041555][ T8976] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.044432][ T9095] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.058930][ T8976] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.067486][ T9095] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.081721][ T9098] sctp: [Deprecated]: syz-executor.0 (pid 9098) Use of int in max_burst socket option deprecated. [ 179.081721][ T9098] Use struct sctp_assoc_value instead [ 179.105357][ T8976] bridge_slave_0: entered allmulticast mode [ 179.135196][ T8976] bridge_slave_0: entered promiscuous mode [ 179.161932][ T8976] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.198073][ T8976] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.246024][ T8976] bridge_slave_1: entered allmulticast mode [ 179.271850][ T8976] bridge_slave_1: entered promiscuous mode [ 179.300897][ T9093] bridge0: entered promiscuous mode [ 179.321278][ T8986] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.346195][ T8986] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.366026][ T8986] bridge_slave_0: entered allmulticast mode [ 179.379602][ T8986] bridge_slave_0: entered promiscuous mode [ 179.466004][ T9092] bridge0: left promiscuous mode [ 179.473504][ T8986] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.532566][ T8986] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.575405][ T8986] bridge_slave_1: entered allmulticast mode [ 179.584572][ T8986] bridge_slave_1: entered promiscuous mode [ 179.667572][ T8976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.698149][ T8976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.757306][ T8986] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.868532][ T8976] team0: Port device team_slave_0 added [ 179.901049][ T8976] team0: Port device team_slave_1 added [ 179.920492][ T8986] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.926103][ T9125] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 179.962095][ T9117] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 179.975189][ T9117] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 179.996920][ T9117] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.157144][ T29] audit: type=1804 audit(1718678103.604:114): pid=9136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/305/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 180.157450][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 180.201347][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.214598][ T29] audit: type=1804 audit(1718678103.644:115): pid=9136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/305/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 180.233501][ T8976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 180.271502][ T8976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 180.278806][ T8976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.307293][ T29] audit: type=1804 audit(1718678103.644:116): pid=9136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/305/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 180.360947][ T8976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.395993][ T9135] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 180.413437][ T9135] bridge0: port 3(team0) entered disabled state [ 180.421718][ T9135] team0: left allmulticast mode [ 180.426912][ T9135] team_slave_0: left allmulticast mode [ 180.432617][ T9135] team_slave_1: left allmulticast mode [ 180.438425][ T9135] team0: left promiscuous mode [ 180.443783][ T9135] team_slave_0: left promiscuous mode [ 180.449620][ T9135] team_slave_1: left promiscuous mode [ 180.455948][ T9135] bridge0: port 3(team0) entered disabled state [ 180.467078][ T9135] batman_adv: batadv0: Adding interface: team0 [ 180.473366][ T9135] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 180.499874][ T5121] Bluetooth: hci0: command tx timeout [ 180.507620][ T9135] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 180.536673][ T8986] team0: Port device team_slave_0 added [ 180.576189][ T2451] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.595899][ T9144] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.606735][ T9137] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 180.615716][ T9137] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.625270][ T9137] team0: entered promiscuous mode [ 180.630323][ T9137] team_slave_0: entered promiscuous mode [ 180.636044][ T9144] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.1'. [ 180.646695][ T9137] team_slave_1: entered promiscuous mode [ 180.653064][ T9137] 8021q: adding VLAN 0 to HW filter on device team0 [ 180.660350][ T9137] batman_adv: batadv0: Interface activated: team0 [ 180.680837][ T9137] batman_adv: batadv0: Interface deactivated: team0 [ 180.696932][ T9137] batman_adv: batadv0: Removing interface: team0 [ 180.717626][ T9137] bridge0: port 3(team0) entered blocking state [ 180.724017][ T9137] bridge0: port 3(team0) entered disabled state [ 180.735529][ T5121] Bluetooth: hci5: command tx timeout [ 180.735624][ T9137] team0: entered allmulticast mode [ 180.746338][ T9137] team_slave_0: entered allmulticast mode [ 180.752078][ T9137] team_slave_1: entered allmulticast mode [ 180.760700][ T9146] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 180.873235][ T9152] bridge0: entered promiscuous mode [ 180.880828][ T8986] team0: Port device team_slave_1 added [ 180.894771][ T9152] sctp: [Deprecated]: syz-executor.1 (pid 9152) Use of int in max_burst socket option deprecated. [ 180.894771][ T9152] Use struct sctp_assoc_value instead [ 180.924797][ T29] audit: type=1804 audit(1718678104.364:117): pid=9155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/306/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 180.983876][ T29] audit: type=1804 audit(1718678104.404:118): pid=9155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/306/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 181.029823][ T2451] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.034612][ T29] audit: type=1804 audit(1718678104.404:119): pid=9155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/306/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 181.170351][ T9151] bridge0: left promiscuous mode [ 181.230205][ T2451] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.267341][ T8976] hsr_slave_0: entered promiscuous mode [ 181.279495][ T8976] hsr_slave_1: entered promiscuous mode [ 181.302676][ T8976] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.324246][ T8976] Cannot create hsr debugfs directory [ 181.337613][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.344610][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.373776][ T8986] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.386953][ T8986] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.393925][ T8986] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.420748][ T8986] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.625810][ T2451] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.760244][ T8986] hsr_slave_0: entered promiscuous mode [ 181.768996][ T8986] hsr_slave_1: entered promiscuous mode [ 181.778947][ T8986] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.790563][ T8986] Cannot create hsr debugfs directory [ 182.023625][ T5109] cgroup: fork rejected by pids controller in /syz1 [ 182.158386][ T9194] delete_channel: no stack [ 182.220428][ T5109] bond0: (slave syz_tun): Releasing backup interface [ 182.488311][ T2451] team0: left allmulticast mode [ 182.507300][ T2451] team_slave_0: left allmulticast mode [ 182.512924][ T2451] team_slave_1: left allmulticast mode [ 182.525213][ T2451] bridge0: port 3(team0) entered disabled state [ 182.556316][ T2451] bridge_slave_1: left allmulticast mode [ 182.562038][ T2451] bridge_slave_1: left promiscuous mode [ 182.573712][ T5121] Bluetooth: hci0: command tx timeout [ 182.595901][ T2451] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.616412][ T2451] bridge_slave_0: left allmulticast mode [ 182.622119][ T2451] bridge_slave_0: left promiscuous mode [ 182.638491][ T2451] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.805625][ T5121] Bluetooth: hci5: command tx timeout [ 182.821069][ T9213] x_tables: duplicate underflow at hook 3 [ 183.039454][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 183.060375][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 183.071801][ T5116] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 183.090120][ T5116] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 183.105224][ T5116] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 183.119362][ T5116] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 183.354526][ T2451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.372397][ T2451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.383641][ T2451] bond0 (unregistering): Released all slaves [ 183.580417][ T2451] tipc: Disabling bearer [ 183.587921][ T2451] tipc: Left network mode [ 183.719884][ T9227] IPVS: nq: SCTP 172.20.20.170:0 - no destination available [ 183.811394][ T9232] __nla_validate_parse: 5 callbacks suppressed [ 183.811414][ T9232] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 184.075849][ T2451] hsr_slave_0: left promiscuous mode [ 184.082239][ T2451] hsr_slave_1: left promiscuous mode [ 184.101047][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.121072][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.129650][ T2451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.145012][ T2451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.193640][ T2451] veth1_macvtap: left promiscuous mode [ 184.199519][ T2451] veth0_macvtap: left promiscuous mode [ 184.205392][ T2451] veth1_vlan: left promiscuous mode [ 184.212001][ T2451] veth0_vlan: left promiscuous mode [ 184.902886][ T2451] team_slave_1 (unregistering): left promiscuous mode [ 184.914048][ T2451] team0 (unregistering): Port device team_slave_1 removed [ 184.953851][ T2451] team_slave_0 (unregistering): left promiscuous mode [ 184.964168][ T2451] team0 (unregistering): Port device team_slave_0 removed [ 185.181067][ T29] audit: type=1804 audit(1718678108.624:120): pid=9270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3804348408/syzkaller.nn294M/183/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 185.206124][ T5121] Bluetooth: hci1: command tx timeout [ 185.245927][ T9270] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 185.552278][ T9214] chnl_net:caif_netlink_parms(): no params data found [ 185.872531][ T9214] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.899420][ T9214] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.917501][ T9214] bridge_slave_0: entered allmulticast mode [ 185.926775][ T9214] bridge_slave_0: entered promiscuous mode [ 185.975852][ T9214] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.988222][ T9214] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.995609][ T9214] bridge_slave_1: entered allmulticast mode [ 186.002809][ T9214] bridge_slave_1: entered promiscuous mode [ 186.090787][ T8986] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 186.105034][ T8986] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 186.128426][ T9214] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 186.143605][ T9214] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.155803][ T9298] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 186.166007][ T9298] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 186.188739][ T8986] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 186.224282][ T8986] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 186.259619][ T9214] team0: Port device team_slave_0 added [ 186.272613][ T9214] team0: Port device team_slave_1 added [ 186.314665][ T9214] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.322112][ T9214] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.362453][ T9214] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.374108][ T8976] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 186.391293][ T9214] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.398925][ T9214] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.425434][ T9214] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.441368][ T8976] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 186.452173][ T8976] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 186.481289][ T8976] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 186.559622][ T9214] hsr_slave_0: entered promiscuous mode [ 186.572635][ T9214] hsr_slave_1: entered promiscuous mode [ 186.581842][ T9214] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.589851][ T9214] Cannot create hsr debugfs directory [ 186.833121][ T9214] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.872103][ T8986] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.930100][ T9214] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.968701][ T8986] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.078769][ T9214] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.080556][ T9305] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.124852][ T5123] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.132003][ T5123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.176560][ T8976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 187.183522][ T9214] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 187.243586][ T9214] batman_adv: batadv1: Removing interface: netdevsim0 [ 187.271443][ T9214] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 187.285308][ T5121] Bluetooth: hci1: command tx timeout [ 187.344669][ T5123] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.351809][ T5123] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.456248][ T25] af_packet: tpacket_rcv: packet too big, clamped from 80 to 4294967272. macoff=96 [ 187.497301][ T8976] 8021q: adding VLAN 0 to HW filter on device team0 [ 187.559932][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 187.567147][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.621895][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.629281][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.683261][ T9322] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.705802][ T9322] block nbd0: not configured, cannot reconfigure [ 187.795977][ T9214] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.850505][ T8976] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.899946][ T9214] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.920131][ T9214] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 187.950577][ T9214] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.242962][ T8986] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.280542][ T9214] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.351539][ T9214] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.396316][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.403421][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.427382][ T8976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.444867][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.452033][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.537961][ T8986] veth0_vlan: entered promiscuous mode [ 188.561650][ T8986] veth1_vlan: entered promiscuous mode [ 188.694247][ T8986] veth0_macvtap: entered promiscuous mode [ 188.741703][ T8986] veth1_macvtap: entered promiscuous mode [ 188.785861][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.815032][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.835659][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.855304][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.875032][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.892246][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.903835][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.915926][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.925824][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.936477][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.948564][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.977432][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.996153][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.038799][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.050204][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.075270][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.094914][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.111115][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.127218][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.138981][ T8986] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.149656][ T8986] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.161330][ T8986] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.172847][ T8986] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.184578][ T8986] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.196093][ T8986] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.204796][ T8986] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.227451][ T9360] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.338305][ T8976] veth0_vlan: entered promiscuous mode [ 189.365966][ T5121] Bluetooth: hci1: command tx timeout [ 189.426575][ T9214] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 189.479288][ T8976] veth1_vlan: entered promiscuous mode [ 189.528438][ T2451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.536649][ T2451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.629111][ T9214] veth0_vlan: entered promiscuous mode [ 189.646549][ T9214] veth1_vlan: entered promiscuous mode [ 189.671654][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.682433][ T9370] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 189.694901][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.698200][ T29] audit: type=1800 audit(1718678113.134:121): pid=9372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 189.734733][ T9370] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 189.743338][ T9370] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.753891][ T29] audit: type=1804 audit(1718678113.174:122): pid=9372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3804348408/syzkaller.nn294M/196/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 189.787653][ T29] audit: type=1804 audit(1718678113.184:123): pid=9372 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3804348408/syzkaller.nn294M/196/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 189.820518][ T8976] veth0_macvtap: entered promiscuous mode [ 189.873810][ T8976] veth1_macvtap: entered promiscuous mode [ 189.990748][ T9214] veth0_macvtap: entered promiscuous mode [ 190.019696][ T9214] veth1_macvtap: entered promiscuous mode [ 190.049628][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.061935][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.080281][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.092985][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.103340][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.120103][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.131796][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.142347][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.152592][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.163321][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.174239][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.185456][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.196900][ T8976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.214059][ T9378] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.250483][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.261370][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.271543][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.304760][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.319381][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.336683][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.355311][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.374860][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.384774][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.399837][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.411051][ T8976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.422156][ T8976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.434207][ T8976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.481716][ T29] audit: type=1804 audit(1718678113.904:124): pid=9387 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3804348408/syzkaller.nn294M/199/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 190.522323][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.550599][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.561805][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.574379][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.584360][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.595740][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.605668][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.616363][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.627964][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.639337][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.658182][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.668954][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.679650][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 190.690419][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.715494][ T9214] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.728672][ T9392] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 190.747622][ T8976] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.760477][ T8976] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.769911][ T8976] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.778879][ T8976] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.798422][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.811983][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.819631][ T9394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.823053][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.842193][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.854094][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.864610][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.875190][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.886409][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.896295][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.907302][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.917391][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.929382][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.939561][ T9214] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.956698][ T9214] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.969809][ T9214] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 191.030316][ T9214] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.041338][ T9214] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.053657][ T9214] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.062982][ T9214] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 191.206576][ T9398] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.280085][ T61] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.413239][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.445371][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.456070][ T5121] Bluetooth: hci1: command tx timeout [ 191.523855][ T29] audit: type=1804 audit(1718678114.964:125): pid=9406 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/342/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 191.576249][ T2451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.610898][ T2451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.627218][ T8423] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.646900][ T8423] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.692541][ T8423] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.711033][ T8423] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.901105][ T61] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.983092][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.983643][ T29] audit: type=1804 audit(1718678115.424:126): pid=9413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3294779534/syzkaller.hnup7j/0/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 192.044214][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 192.054479][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 192.070256][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 192.079930][ T5116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 192.094264][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.146489][ T29] audit: type=1804 audit(1718678115.444:127): pid=9413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3294779534/syzkaller.hnup7j/0/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 192.224161][ T29] audit: type=1804 audit(1718678115.444:128): pid=9413 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3294779534/syzkaller.hnup7j/0/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 192.292969][ T61] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.372893][ T9421] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 192.391779][ T61] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.608937][ T9430] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.744035][ T61] bridge_slave_1: left allmulticast mode [ 192.758566][ T61] bridge_slave_1: left promiscuous mode [ 192.768147][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.784013][ T61] bridge_slave_0: left allmulticast mode [ 192.796066][ T61] bridge_slave_0: left promiscuous mode [ 192.805618][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.179538][ T5116] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 193.191415][ T5116] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 193.213043][ T5116] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 193.223542][ T5116] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 193.247847][ T5116] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 193.255409][ T5116] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 193.517926][ T9451] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 193.567102][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.581806][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.594375][ T61] bond0 (unregistering): Released all slaves [ 193.694574][ T9456] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.755927][ T29] audit: type=1804 audit(1718678117.194:129): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3294779534/syzkaller.hnup7j/3/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 193.856117][ T29] audit: type=1804 audit(1718678117.194:130): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3294779534/syzkaller.hnup7j/3/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 193.926516][ C0] bridge0: port 3(team0) entered learning state [ 193.959620][ T29] audit: type=1804 audit(1718678117.204:131): pid=9460 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3294779534/syzkaller.hnup7j/3/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 194.165285][ T5121] Bluetooth: hci0: command tx timeout [ 194.286708][ T9478] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 194.297022][ T9470] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.305722][ T9478] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.389840][ T9478] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 194.404616][ T61] hsr_slave_0: left promiscuous mode [ 194.425567][ T61] hsr_slave_1: left promiscuous mode [ 194.446009][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.453719][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.472560][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.484699][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.536387][ T61] veth1_macvtap: left promiscuous mode [ 194.541968][ T61] veth0_macvtap: left promiscuous mode [ 194.548016][ T61] veth1_vlan: left promiscuous mode [ 194.553339][ T61] veth0_vlan: left promiscuous mode [ 195.368700][ T5121] Bluetooth: hci5: command tx timeout [ 195.515405][ T61] team0 (unregistering): Port device team_slave_1 removed [ 195.565517][ T61] team0 (unregistering): Port device team_slave_0 removed [ 195.963830][ T9414] chnl_net:caif_netlink_parms(): no params data found [ 196.217891][ T9414] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.225680][ T9414] bridge0: port 1(bridge_slave_0) entered disabled state [ 196.232943][ T9414] bridge_slave_0: entered allmulticast mode [ 196.240532][ T9414] bridge_slave_0: entered promiscuous mode [ 196.245260][ T5121] Bluetooth: hci0: command tx timeout [ 196.262037][ T9414] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.285563][ T9414] bridge0: port 2(bridge_slave_1) entered disabled state [ 196.313375][ T9414] bridge_slave_1: entered allmulticast mode [ 196.333799][ T9414] bridge_slave_1: entered promiscuous mode [ 196.497505][ T9522] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 196.513376][ T9522] bridge0: port 3(team0) entered disabled state [ 196.525183][ T29] audit: type=1804 audit(1718678119.964:132): pid=9531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3804348408/syzkaller.nn294M/218/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 196.557403][ T9522] team0: left allmulticast mode [ 196.562349][ T9522] team_slave_0: left allmulticast mode [ 196.572389][ T9522] team_slave_1: left allmulticast mode [ 196.574985][ T29] audit: type=1804 audit(1718678119.974:133): pid=9531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3804348408/syzkaller.nn294M/218/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 196.578122][ T9522] team0: left promiscuous mode [ 196.616376][ T9522] team_slave_0: left promiscuous mode [ 196.627707][ T9522] team_slave_1: left promiscuous mode [ 196.632750][ T29] audit: type=1804 audit(1718678119.974:134): pid=9531 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3804348408/syzkaller.nn294M/218/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 196.639719][ T9522] bridge0: port 3(team0) entered disabled state [ 196.678715][ T9522] batman_adv: batadv0: Adding interface: team0 [ 196.689080][ T9522] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.716595][ T9522] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 196.747873][ T9524] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 196.767826][ T9524] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.791851][ T9524] team0: entered promiscuous mode [ 196.803564][ T9524] team_slave_0: entered promiscuous mode [ 196.811132][ T9524] team_slave_1: entered promiscuous mode [ 196.819087][ T9524] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.826462][ T9524] batman_adv: batadv0: Interface activated: team0 [ 196.832939][ T9524] batman_adv: batadv0: Interface deactivated: team0 [ 196.839782][ T9524] batman_adv: batadv0: Removing interface: team0 [ 196.847297][ T9524] bridge0: port 3(team0) entered blocking state [ 196.853621][ T9524] bridge0: port 3(team0) entered disabled state [ 196.860533][ T9524] team0: entered allmulticast mode [ 196.865926][ T9524] team_slave_0: entered allmulticast mode [ 196.871720][ T9524] team_slave_1: entered allmulticast mode [ 196.880897][ T9524] bridge0: port 3(team0) entered blocking state [ 196.887433][ T9524] bridge0: port 3(team0) entered forwarding state [ 196.902210][ T9414] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 197.035871][ T9414] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 197.066126][ T9538] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 197.130761][ T9414] team0: Port device team_slave_0 added [ 197.215511][ T9414] team0: Port device team_slave_1 added [ 197.242211][ T9445] chnl_net:caif_netlink_parms(): no params data found [ 197.309568][ T9552] tipc: Started in network mode [ 197.314500][ T9552] tipc: Node identity ac1414aa, cluster identity 4711 [ 197.338104][ T9552] tipc: Enabled bearer , priority 10 [ 197.353690][ T9548] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 197.445461][ T5121] Bluetooth: hci5: command tx timeout [ 197.486985][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 197.493979][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.536991][ T9414] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 197.558448][ T29] audit: type=1804 audit(1718678121.004:135): pid=9565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3804348408/syzkaller.nn294M/223/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 197.622514][ T61] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.632899][ T29] audit: type=1804 audit(1718678121.034:136): pid=9565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3804348408/syzkaller.nn294M/223/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 197.673300][ T29] audit: type=1804 audit(1718678121.034:137): pid=9565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3804348408/syzkaller.nn294M/223/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 197.732908][ T9414] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 197.745111][ T9414] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 197.771669][ T9414] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 197.906852][ T61] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 197.963651][ T9445] bridge0: port 1(bridge_slave_0) entered blocking state [ 197.978564][ T9445] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.994718][ T9445] bridge_slave_0: entered allmulticast mode [ 198.018391][ T9445] bridge_slave_0: entered promiscuous mode [ 198.149376][ T9578] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 198.168143][ T61] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.182813][ T9445] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.195170][ T9445] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.202579][ T9445] bridge_slave_1: entered allmulticast mode [ 198.210157][ T9445] bridge_slave_1: entered promiscuous mode [ 198.236644][ T9587] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.283702][ T9414] hsr_slave_0: entered promiscuous mode [ 198.308261][ T9414] hsr_slave_1: entered promiscuous mode [ 198.315480][ T9414] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 198.325162][ T5121] Bluetooth: hci0: command tx timeout [ 198.332160][ T9414] Cannot create hsr debugfs directory [ 198.392668][ T61] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.417413][ T9445] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 198.453279][ T9445] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 198.463697][ T784] tipc: Node number set to 2886997162 [ 198.484437][ T9595] trusted_key: syz-executor.1 sent an empty control message without MSG_MORE. [ 198.617739][ T29] audit: type=1804 audit(1718678122.064:138): pid=9601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/359/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 198.658993][ T29] audit: type=1804 audit(1718678122.104:139): pid=9601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/359/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 198.725814][ T29] audit: type=1804 audit(1718678122.134:140): pid=9601 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir140126807/syzkaller.lLRGfu/359/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 198.744066][ T9445] team0: Port device team_slave_0 added [ 198.829615][ T9445] team0: Port device team_slave_1 added [ 198.839381][ T9604] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.927728][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 198.934730][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 198.980707][ T9445] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 199.008205][ T9445] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 199.025190][ T9445] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 199.075444][ T29] audit: type=1800 audit(1718678122.514:141): pid=9614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 199.076870][ T9445] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 199.252744][ T9619] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.297648][ T9619] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 199.420011][ T61] team0: left allmulticast mode [ 199.425619][ T61] team_slave_1: left allmulticast mode [ 199.432848][ T61] bridge0: port 3(team0) entered disabled state [ 199.452597][ T61] bridge_slave_1: left allmulticast mode [ 199.460384][ T61] bridge_slave_1: left promiscuous mode [ 199.466959][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.481109][ T61] bridge_slave_0: left allmulticast mode [ 199.490479][ T61] bridge_slave_0: left promiscuous mode [ 199.496684][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.510983][ T61] team0: left allmulticast mode [ 199.516623][ T61] team_slave_0: left allmulticast mode [ 199.522095][ T61] team_slave_1: left allmulticast mode [ 199.528666][ T5121] Bluetooth: hci5: command tx timeout [ 199.534422][ T61] bridge0: port 3(team0) entered disabled state [ 199.543836][ T61] bridge_slave_1: left allmulticast mode [ 199.554362][ T61] bridge_slave_1: left promiscuous mode [ 199.569439][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.579899][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.598150][ T61] bridge_slave_1: left allmulticast mode [ 199.603895][ T61] bridge_slave_1: left promiscuous mode [ 199.612703][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.621872][ T61] bridge_slave_0: left allmulticast mode [ 199.628347][ T61] bridge_slave_0: left promiscuous mode [ 199.634073][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.405253][ T5121] Bluetooth: hci0: command tx timeout [ 200.833629][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 200.851260][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 200.862105][ T61] bond0 (unregistering): Released all slaves [ 200.992403][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.007149][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.020566][ T61] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 201.032295][ T61] bond0 (unregistering): Released all slaves [ 201.131736][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.142675][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.153012][ T61] bond0 (unregistering): Released all slaves [ 201.164250][ T9623] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 201.171554][ T9623] IPv6: NLM_F_CREATE should be set when creating new route [ 201.178825][ T9623] IPv6: NLM_F_CREATE should be set when creating new route [ 201.241910][ T9445] hsr_slave_0: entered promiscuous mode [ 201.275394][ T9445] hsr_slave_1: entered promiscuous mode [ 201.281873][ T9445] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.314179][ T9445] Cannot create hsr debugfs directory [ 201.347742][ T9639] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 201.468099][ T61] tipc: Left network mode [ 201.606224][ T5121] Bluetooth: hci5: command tx timeout [ 201.697607][ T9648] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 201.723083][ T9649] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 201.768047][ T9648] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 201.878453][ T9414] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 201.927647][ T9651] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.960965][ T9414] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 202.044303][ T9414] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 202.055189][ T9414] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 202.360201][ T9663] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.522247][ T9666] sctp: [Deprecated]: syz-executor.1 (pid 9666) Use of int in max_burst socket option. [ 202.522247][ T9666] Use struct sctp_assoc_value instead [ 202.548894][ T61] hsr_slave_0: left promiscuous mode [ 202.566550][ T61] hsr_slave_1: left promiscuous mode [ 202.582474][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.601900][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.611269][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.631897][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.665424][ T61] hsr_slave_0: left promiscuous mode [ 202.677736][ T61] hsr_slave_1: left promiscuous mode [ 202.694526][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.705268][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.736272][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.756133][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.820140][ T61] hsr_slave_0: left promiscuous mode [ 202.853608][ T61] hsr_slave_1: left promiscuous mode [ 202.897239][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.904726][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.924185][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.944976][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.107303][ T61] veth1_macvtap: left promiscuous mode [ 203.112909][ T61] veth0_macvtap: left promiscuous mode [ 203.128078][ T61] veth1_vlan: left promiscuous mode [ 203.134664][ T61] veth0_vlan: left allmulticast mode [ 203.140520][ T61] veth0_vlan: left promiscuous mode [ 203.152027][ T61] veth1_macvtap: left promiscuous mode [ 203.157866][ T61] veth1_vlan: left promiscuous mode [ 203.172237][ T61] veth1_macvtap: left promiscuous mode [ 203.177938][ T61] veth0_macvtap: left promiscuous mode [ 203.186459][ T61] veth1_vlan: left promiscuous mode [ 203.192416][ T61] veth0_vlan: left promiscuous mode [ 203.992700][ T61] team_slave_1 (unregistering): left promiscuous mode [ 204.005697][ T61] team0 (unregistering): Port device team_slave_1 removed [ 204.801629][ T61] team_slave_1 (unregistering): left promiscuous mode [ 204.820462][ T61] team0 (unregistering): Port device team_slave_1 removed [ 204.860667][ T61] team_slave_0 (unregistering): left promiscuous mode [ 204.868905][ T61] team0 (unregistering): Port device team_slave_0 removed [ 205.614132][ T61] team0 (unregistering): Port device team_slave_1 removed [ 205.653902][ T61] team0 (unregistering): Port device team_slave_0 removed [ 206.065971][ T9414] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.107479][ T9682] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 206.179288][ T9445] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 206.245829][ T9445] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 206.286259][ T9445] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 206.344929][ T9445] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 206.356830][ T9696] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 206.407761][ T9414] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.506773][ T784] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.514023][ T784] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.617054][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.624258][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.824682][ T9713] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.0'. [ 206.858929][ T9718] sctp: [Deprecated]: syz-executor.3 (pid 9718) Use of int in max_burst socket option. [ 206.858929][ T9718] Use struct sctp_assoc_value instead [ 207.119011][ T9445] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.173440][ T9728] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 207.207467][ T9445] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.253983][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.261195][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.316829][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.324018][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.527971][ T9414] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.718146][ T9414] veth0_vlan: entered promiscuous mode [ 207.852250][ T9414] veth1_vlan: entered promiscuous mode [ 208.001888][ T9414] veth0_macvtap: entered promiscuous mode [ 208.043641][ T9414] veth1_macvtap: entered promiscuous mode [ 208.121404][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.141856][ T9761] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 208.160994][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.180207][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.190811][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.205703][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.234196][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.246229][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.258776][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.283454][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.393669][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.422542][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.447851][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.460001][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.505038][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.515886][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.525923][ T9414] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.537598][ T9414] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.583598][ T9414] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.624611][ T9445] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.670297][ T9773] bridge_slave_0: left allmulticast mode [ 208.706263][ T9773] bridge_slave_0: left promiscuous mode [ 208.712097][ T9773] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.758050][ T9773] bridge_slave_1: left allmulticast mode [ 208.763750][ T9773] bridge_slave_1: left promiscuous mode [ 208.792580][ T9773] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.822039][ T9773] bond0: (slave bond_slave_0): Releasing backup interface [ 208.850883][ T9773] bond0: (slave bond_slave_1): Releasing backup interface [ 208.904433][ T9773] team0: Port device team_slave_0 removed [ 208.922535][ T9773] team0: Port device team_slave_1 removed [ 208.934595][ T9773] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.943778][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.962168][ T9773] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.971381][ T9773] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.995947][ T9414] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.007139][ T9414] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.022684][ T9414] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.033851][ T9414] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.055319][ T9792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 209.357725][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.383581][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.494174][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.528273][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.596007][ T9445] veth0_vlan: entered promiscuous mode [ 209.623722][ T9445] veth1_vlan: entered promiscuous mode [ 209.792648][ T9445] veth0_macvtap: entered promiscuous mode [ 209.812124][ T9445] veth1_macvtap: entered promiscuous mode [ 209.870093][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.901507][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.915151][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.930540][ T9830] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.936849][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.951070][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.962970][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.979717][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.990926][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.004579][ T9445] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.022341][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.042355][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.073033][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.095415][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.108329][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.119190][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.131131][ T9445] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.141803][ T9445] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.153886][ T9445] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.173249][ T9445] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.201405][ T9445] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.211044][ T9445] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.220442][ T9445] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.233435][ T9837] syzkaller1: entered promiscuous mode [ 210.242787][ T9837] syzkaller1: entered allmulticast mode [ 210.467161][ T9842] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.501050][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.633095][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.654973][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.736856][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.744788][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.991295][ T9867] sctp: [Deprecated]: syz-executor.0 (pid 9867) Use of int in max_burst socket option. [ 210.991295][ T9867] Use struct sctp_assoc_value instead [ 211.178868][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.352678][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.390594][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.401993][ T5116] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.410536][ T5116] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.426878][ T5116] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.449982][ T5116] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.466100][ T5116] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.515583][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.535903][ T9883] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 211.993579][ T12] bridge_slave_1: left allmulticast mode [ 212.005657][ T12] bridge_slave_1: left promiscuous mode [ 212.011445][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.045359][ T12] bridge_slave_0: left allmulticast mode [ 212.051059][ T12] bridge_slave_0: left promiscuous mode [ 212.071211][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.647708][ T5121] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 212.659713][ T5121] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 212.671737][ T5121] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 212.688182][ T5121] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 212.704146][ T5121] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 212.716790][ T5121] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 212.740604][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.751992][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.767526][ T12] bond0 (unregistering): Released all slaves [ 212.930081][ T9926] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.006324][ T9925] IPVS: length: 183 != 8 [ 213.166386][ T9937] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.176790][ T9938] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 213.188537][ T9938] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 213.197019][ T9938] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.235977][ T9878] chnl_net:caif_netlink_parms(): no params data found [ 213.323615][ T12] hsr_slave_0: left promiscuous mode [ 213.353056][ T12] hsr_slave_1: left promiscuous mode [ 213.363112][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.381392][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.393354][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.401477][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.407848][ T9952] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.435597][ T9952] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.450558][ T12] veth1_macvtap: left promiscuous mode [ 213.456604][ T12] veth0_macvtap: left promiscuous mode [ 213.458526][ T9952] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 213.462523][ T12] veth1_vlan: left promiscuous mode [ 213.477374][ T12] veth0_vlan: left promiscuous mode [ 213.480670][ T9952] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.526258][ T5121] Bluetooth: hci0: command tx timeout [ 213.952896][ T12] team0 (unregistering): Port device team_slave_1 removed [ 214.013705][ T12] team0 (unregistering): Port device team_slave_0 removed [ 214.607631][ T9878] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.625611][ T9878] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.633099][ T9878] bridge_slave_0: entered allmulticast mode [ 214.707758][ T9878] bridge_slave_0: entered promiscuous mode [ 214.756929][ T9878] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.764101][ T9878] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.807489][ T5121] Bluetooth: hci5: command tx timeout [ 214.841130][ T9878] bridge_slave_1: entered allmulticast mode [ 214.852156][ T9878] bridge_slave_1: entered promiscuous mode [ 214.987753][ T9921] chnl_net:caif_netlink_parms(): no params data found [ 215.061536][ T9878] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.110706][ T9994] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 215.135314][ T9994] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.159889][ T9994] erspan0: refused to change device tx_queue_len [ 215.177509][ T9994] A link change request failed with some changes committed already. Interface erspan0 may have been left with an inconsistent configuration, please check. [ 215.199592][ T9878] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.310664][T10003] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 215.324697][T10003] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 215.332317][T10001] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.333300][T10003] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.3'. [ 215.360468][ T9878] team0: Port device team_slave_0 added [ 215.614917][ T5121] Bluetooth: hci0: command tx timeout [ 216.894997][ T5121] Bluetooth: hci5: command tx timeout [ 217.685027][ T5121] Bluetooth: hci0: command tx timeout [ 218.965116][ T5121] Bluetooth: hci5: command tx timeout [ 219.765077][ T5121] Bluetooth: hci0: command tx timeout [ 221.045159][ T5121] Bluetooth: hci5: command tx timeout [ 232.485067][ T5116] Bluetooth: hci4: command 0x0406 tx timeout [ 245.656232][ T5116] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 245.672276][ T5120] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 245.681305][ T5120] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 245.693649][ T5120] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 245.700836][ T5118] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 245.712122][ T5120] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 245.719872][ T5118] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 245.728018][ T5118] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 245.728787][ T5120] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 245.743628][ T5120] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 245.745063][ T5118] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 245.760699][ T5120] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 246.429317][ T5121] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 246.439249][ T5121] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 246.451211][ T5121] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 246.469527][ T5121] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 246.477209][ T5121] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 246.494907][ T5121] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 247.845096][ T5121] Bluetooth: hci7: command tx timeout [ 247.845200][ T5120] Bluetooth: hci6: command tx timeout [ 248.565102][ T5121] Bluetooth: hci8: command tx timeout [ 249.925118][ T5121] Bluetooth: hci7: command tx timeout [ 249.931734][ T5121] Bluetooth: hci6: command tx timeout [ 250.644998][ T5121] Bluetooth: hci8: command tx timeout [ 252.005089][ T5120] Bluetooth: hci7: command tx timeout [ 252.011971][ T5121] Bluetooth: hci6: command tx timeout [ 252.725061][ T5121] Bluetooth: hci8: command tx timeout [ 254.085088][ T5121] Bluetooth: hci6: command tx timeout [ 254.090543][ T5121] Bluetooth: hci7: command tx timeout [ 254.805043][ T5121] Bluetooth: hci8: command tx timeout [ 276.458499][ T5120] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 276.468567][ T5120] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 276.476595][ T5120] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 276.486853][ T5120] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 276.494473][ T5120] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 276.502682][ T5120] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 277.735817][ T5120] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 277.754509][ T5120] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 277.763414][ T5120] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 277.772285][ T5120] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 277.780544][ T5120] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 277.789543][ T5120] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 278.575065][ T5120] Bluetooth: hci9: command tx timeout [ 279.845208][ T5120] Bluetooth: hci10: command tx timeout [ 280.644925][ T5120] Bluetooth: hci9: command tx timeout [ 281.925493][ T5120] Bluetooth: hci10: command tx timeout [ 282.734837][ T5120] Bluetooth: hci9: command tx timeout [ 284.005013][ T5120] Bluetooth: hci10: command tx timeout [ 284.812161][ T5120] Bluetooth: hci9: command tx timeout [ 286.085180][ T5120] Bluetooth: hci10: command tx timeout [ 309.300332][ T5121] Bluetooth: hci1: command 0x0406 tx timeout [ 310.703376][ T5120] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 310.713341][ T5120] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 310.745029][ T5120] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 310.775133][ T5120] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 310.783095][ T5120] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 310.798411][ T5120] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 310.845393][ T5120] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 310.855896][ T5120] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 310.870258][ T5120] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 310.879823][ T5120] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 310.889310][ T5120] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 310.899803][ T5120] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 311.427082][ T5121] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 311.445372][ T5121] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 311.455574][ T5121] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 311.464193][ T5121] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 311.473513][ T5121] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 311.482033][ T5121] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 312.885981][ T5121] Bluetooth: hci11: command tx timeout [ 312.965068][ T5121] Bluetooth: hci12: command tx timeout [ 313.525048][ T5121] Bluetooth: hci13: command tx timeout [ 314.967381][ T5121] Bluetooth: hci11: command tx timeout [ 315.045141][ T5121] Bluetooth: hci12: command tx timeout [ 315.605135][ T5121] Bluetooth: hci13: command tx timeout [ 317.045172][ T5121] Bluetooth: hci11: command tx timeout [ 317.125104][ T5121] Bluetooth: hci12: command tx timeout [ 317.693965][ T5121] Bluetooth: hci13: command tx timeout [ 319.124990][ T5121] Bluetooth: hci11: command tx timeout [ 319.207937][ T5121] Bluetooth: hci12: command tx timeout [ 319.764958][ T5121] Bluetooth: hci13: command tx timeout [ 334.899365][ T5116] Bluetooth: hci5: command 0x0406 tx timeout [ 334.908131][ T5120] Bluetooth: hci0: command 0x0406 tx timeout [ 341.699746][ T5116] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 341.710580][ T5116] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 341.720450][ T5116] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 341.729966][ T5116] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 341.738399][ T5116] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 341.747373][ T5116] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 342.836584][ T5121] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 342.847049][ T5121] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 342.855806][ T5121] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 342.864074][ T5121] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 342.872150][ T5121] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 342.881657][ T5121] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 343.845168][ T5121] Bluetooth: hci14: command tx timeout [ 344.965405][ T5121] Bluetooth: hci15: command tx timeout [ 345.925083][ T5121] Bluetooth: hci14: command tx timeout [ 347.045148][ T5121] Bluetooth: hci15: command tx timeout [ 348.005022][ T5121] Bluetooth: hci14: command tx timeout [ 349.125632][ T5121] Bluetooth: hci15: command tx timeout [ 350.085251][ T5121] Bluetooth: hci14: command tx timeout [ 351.211705][ T5121] Bluetooth: hci15: command tx timeout [ 370.739746][ T5121] Bluetooth: hci7: command 0x0406 tx timeout [ 370.739772][ T53] Bluetooth: hci6: command 0x0406 tx timeout [ 370.745984][ T5111] Bluetooth: hci8: command 0x0406 tx timeout [ 375.820266][ T5118] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 375.831106][ T5118] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 375.855235][ T5118] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 375.874950][ T5118] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 375.905090][ T5118] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 375.914926][ T5118] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 375.964446][ T5120] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 375.974284][ T5120] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 375.983378][ T5120] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 376.008531][ T5120] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 376.020834][ T5120] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 376.028641][ T5120] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 376.451923][ T5118] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 376.475289][ T5118] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 376.487302][ T5118] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 376.495798][ T5118] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 376.505257][ T5118] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 376.512859][ T5118] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 378.005066][ T5118] Bluetooth: hci16: command tx timeout [ 378.084991][ T5118] Bluetooth: hci17: command tx timeout [ 378.565397][ T5118] Bluetooth: hci18: command tx timeout [ 378.889603][ T30] INFO: task kworker/u8:1:12 blocked for more than 143 seconds. [ 378.899561][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 2024/06/18 02:38:22 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 378.933514][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 378.957531][ T30] task:kworker/u8:1 state:D stack:21200 pid:12 tgid:12 ppid:2 flags:0x00004000 [ 379.016957][ T30] Workqueue: netns cleanup_net [ 379.021844][ T30] Call Trace: [ 379.044912][ T30] [ 379.047998][ T30] __schedule+0x17e8/0x4a20 [ 379.052664][ T30] ? __pfx___schedule+0x10/0x10 [ 379.077658][ T30] ? __pfx_lock_release+0x10/0x10 [ 379.082966][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 379.104923][ T30] ? kthread_data+0x52/0xd0 [ 379.109484][ T30] ? schedule+0x90/0x320 [ 379.113893][ T30] ? wq_worker_sleeping+0x66/0x240 [ 379.154882][ T30] ? schedule+0x90/0x320 [ 379.174800][ T30] schedule+0x14b/0x320 [ 379.179044][ T30] schedule_preempt_disabled+0x13/0x30 [ 379.184600][ T30] __mutex_lock+0x6a4/0xd70 [ 379.204766][ T30] ? __mutex_lock+0x527/0xd70 [ 379.209538][ T30] ? gate_exit_net+0x30/0x100 [ 379.214254][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 379.234774][ T30] ? __pfx_call_rcu+0x10/0x10 [ 379.239520][ T30] ? __pfx_gate_exit_net+0x10/0x10 [ 379.244682][ T30] gate_exit_net+0x30/0x100 [ 379.274829][ T30] ? __pfx_gate_exit_net+0x10/0x10 [ 379.280090][ T30] cleanup_net+0x89d/0xcc0 [ 379.284537][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 379.307886][ T30] ? process_scheduled_works+0x945/0x1830 [ 379.313752][ T30] process_scheduled_works+0xa2c/0x1830 [ 379.324802][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 379.330841][ T30] ? assign_work+0x364/0x3d0 [ 379.354909][ T30] worker_thread+0x86d/0xd70 [ 379.359578][ T30] ? __kthread_parkme+0x169/0x1d0 [ 379.374794][ T30] ? __pfx_worker_thread+0x10/0x10 [ 379.379969][ T30] kthread+0x2f0/0x390 [ 379.384076][ T30] ? __pfx_worker_thread+0x10/0x10 [ 379.404940][ T30] ? __pfx_kthread+0x10/0x10 [ 379.409609][ T30] ret_from_fork+0x4b/0x80 [ 379.414222][ T30] ? __pfx_kthread+0x10/0x10 [ 379.434854][ T30] ret_from_fork_asm+0x1a/0x30 [ 379.439703][ T30] [ 379.442873][ T30] INFO: task kworker/1:1:45 blocked for more than 143 seconds. [ 379.474830][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 379.482800][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 379.514979][ T30] task:kworker/1:1 state:D stack:22384 pid:45 tgid:45 ppid:2 flags:0x00004000 [ 379.535050][ T30] Workqueue: events linkwatch_event [ 379.540403][ T30] Call Trace: [ 379.543702][ T30] [ 379.564147][ T30] __schedule+0x17e8/0x4a20 [ 379.584126][ T30] ? __pfx___schedule+0x10/0x10 [ 379.624850][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 379.630985][ T30] ? __pfx_lock_release+0x10/0x10 [ 379.674840][ T30] ? kick_pool+0x45c/0x620 [ 379.679325][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 379.684539][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 379.714859][ T30] ? schedule+0x90/0x320 [ 379.719257][ T30] schedule+0x14b/0x320 [ 379.723436][ T30] schedule_preempt_disabled+0x13/0x30 [