last executing test programs: 33.558800691s ago: executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000082ffffff8d000000000d069500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) r2 = socket$inet(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x10000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="ecff000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fdffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpu.stat\x00', 0x26e1, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004662b, 0x7ff3843f8fff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r10, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r8, 0x89e2, &(0x7f0000000200)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) recvfrom(r10, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) sendmmsg$unix(r10, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="bec4dd9dcd2985ce38d350d6a03a19c1bfd3da7c0c585b536f14364afdef1945740215235fb16a75f5e0feacc8efaa7f1841d60268ad4c56ba4eeec933e7bd284a1855889bb67459153867c464e5fceaa8bdafcb0b6aa32b4e0d0db3fb6d8dce06000b6fb4665b2fdffbcea62e7848eaf346448ca8b3ecb281406d14a1143c879c97691eba70ae57e82225d68fc6aff65b12d1884224f34df5199a24e6e12c4ec5aa998971686f5c4e6d79f01d0e476f7ef00e289bb8100cb42d05433ca4d5f7eccb0eaff3a64278fd9f8d3b0221", 0xce}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000380)="f5180eac01b3e2d60876d6c04a8a5aebbc729e05008053af253df31944ee790d00cff84ec69919f7ac767ac79606bcadd11f", 0x32}], 0x3, &(0x7f00000019c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, r2, r10, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r9, r5, r10, r8, r0, r7, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r4, r1, 0xffffffffffffffff]}}], 0x158, 0x24000084}}], 0x1, 0x4004000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r5) 32.750561094s ago: executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000840)=[{&(0x7f00000002c0)="b5960437b4d340f9fd6adcdd04ecf56c02abe178b7f13618a24db1d4fb0860319dbff2b5012bcba0f1106f85018477ac75b7780be3ca92da6b3af1", 0x3b}, {&(0x7f0000000300)="0f58aaef1a4a46a6a6721b2419f513f461168c6886594d1caf46d961fad8f5a89f8210425725ee1f65743d444ff6d589cdf9cfc8b88945a912ce90bc0e63dd99aca2c86f7dd1290524c81f966759326014daacba93", 0x55}, {&(0x7f00000004c0)="29f6b12d0033be53b9e416fa1ee711b7bf2a9ef3f05754d167c406abc9018adabfae6e90eb302ba5968f1a06a06c31908a982fb2ef2d600b584f2dea9ca7e9c9d10a11568308341c5b9110e057962094130bd05aa2011f07c03b18", 0x5b}], 0x3, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000940)="1a3aea00d80d146a8530d8fc515967214a680f76cc9c30ab50b02e2a2d91ef8a28edb7f523a5fc8c95c887da52531aff92f1e055c1c939ed106af67283d9b9830367a88ab26e844a8e53a4765546cacbd6d0de3db2", 0x55}, {&(0x7f00000009c0)="e2a94210897bdfe3b85b5fd15e767004af1a50ce90c7252d915dba6ea31f5489fe021887961ddb7189795e397e64e392c8", 0x31}, {&(0x7f0000000a00)="571244bd6680335e46979df364379054a4bd6aa8b21cf78a2318ced7e64f7ef89f760de1bbfd", 0x26}, {&(0x7f0000000a80)='+', 0x1}], 0x4}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x23, 0x0, "093f38050b94725997f7ff898a3f9ab16a8731bf2ce9e46bca4cef5a7c35015b7a97f697e89d86377518bf274943a186c89a051c531b5ad251ff1e26b7fe42b3eb4ddd4dc049ad87c56cd0c3628976cc"}, 0xd8) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 32.549113055s ago: executing program 2: r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="0701000077939c37a3559618"], &(0x7f0000000740)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x90) r1 = socket(0x1, 0x803, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0x7ff, @empty, 0x20}}, 0x80, 0x0, 0x0, &(0x7f0000000b40)=ANY=[@ANYBLOB="180000000000001710010000010000000000000c0afe000006cb2e111baed9307f502f1e4b9fe074a48730a12ed59749bed29bf8e7350c4380802b7e9bb181132a334a2ead40cb2a9aa53a65e5ac6a227459947a3a1eb463fa7fdb94de7776bc802e1c7f78ff240651742a46c2eda656a29dbab03439f367aa3d735a8a9b4e35381b2569c8b51fd36360197c17e3d93a9264948e1d2a5a6b75670ad759d0119f94a5347d7302fdc420726d41a328f32915f2aae4819165f0cbbcdc42ac5492e5f56f8cb9da6e35864a45572eae45cb95730e679f762324a685e0042c5da7745ee31bc62158da8afea4cb125243"], 0x18}, 0x0) (async) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000f2e84bbf8f5d59d20001000000700000000000000091f072a124a4d30b3589c4b097a9b19b4af101ad47db39fd297ab3f84a1f63e33c8d3af3565f00f0cb8fe3605a97"], 0x18}, 0x0) close(r2) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c40)=@bpf_ext={0x1c, 0xf, &(0x7f0000000780)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x37d7, 0x0, 0x0, 0x0, 0x80}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='GPL\x00', 0x4, 0x25, &(0x7f0000000800)=""/37, 0x41100, 0x61, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x7, 0x4}, 0x8, 0x10, &(0x7f0000000d40)={0x1, 0x10, 0x3}, 0x10, 0x288f, r0, 0x0, &(0x7f0000001080)=[0xffffffffffffffff, 0xffffffffffffffff, r2, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x1}, 0x90) (rerun: 64) connect$bt_sco(r1, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) (async, rerun: 32) r3 = socket$inet(0xa, 0x801, 0x84) (rerun: 32) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) write$binfmt_elf64(r4, 0x0, 0x78) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000500), &(0x7f0000000540)=0x8) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000840)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="d800070002010108000000000000000000000008c4000e800c00028005000100110000000c000280050001008400000014001414bb2c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000001012c00018014000300fe88000000000000000000000000010108000400fc0000000000000001060003400001000006000340000000002c00018014000300fc02000000000000003f00000000000114000400000000000000000000000000000000016b9fdf33e5e7a34df4af0e4e700ad95108967ac191fc0c2fb8a58317f19ce300000000000000"], 0xd8}, 0x1, 0x0, 0x0, 0x40840}, 0x4) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x50) (async) syz_genetlink_get_family_id$wireguard(&(0x7f00000004c0), r4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@bloom_filter={0x1e, 0x80000000, 0x1, 0x1, 0x2020, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x5, 0x6}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x13, 0xc, &(0x7f0000000480)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x8b, '\x00', 0x0, 0x35, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff1e, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_TSINFO_GET(r7, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0000190000001400018008000100", @ANYRES32=r6, @ANYBLOB="0800030007000000"], 0x28}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000640)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000600)=0x14) syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) (async, rerun: 64) r9 = socket$caif_stream(0x25, 0x1, 0x0) (rerun: 64) sendmmsg$inet(r9, &(0x7f0000000040)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000000)="92", 0x1}], 0x1}}], 0x2, 0x7c9ce320e12d300) (async) socket$inet6_udplite(0xa, 0x2, 0x88) 32.221947956s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x31) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{}, {0x40}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x2, [{0x0, 0x1}, {}]}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x9}}}, 0x3e) 32.100618046s ago: executing program 1: bpf$MAP_CREATE(0x0, 0x0, 0x0) unshare(0x22020400) r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x600b40, 0x0) ioctl$PPPIOCATTCHAN(r0, 0x40047438, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001c0001000000000000000039f51ba0"], 0x14}}, 0x0) 32.022255368s ago: executing program 1: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000082ffffff8d000000000d069500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) r2 = socket$inet(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x10000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="ecff000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fdffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpu.stat\x00', 0x26e1, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004662b, 0x7ff3843f8fff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r10, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r8, 0x89e2, &(0x7f0000000200)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) recvfrom(r10, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) sendmmsg$unix(r10, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="bec4dd9dcd2985ce38d350d6a03a19c1bfd3da7c0c585b536f14364afdef1945740215235fb16a75f5e0feacc8efaa7f1841d60268ad4c56ba4eeec933e7bd284a1855889bb67459153867c464e5fceaa8bdafcb0b6aa32b4e0d0db3fb6d8dce06000b6fb4665b2fdffbcea62e7848eaf346448ca8b3ecb281406d14a1143c879c97691eba70ae57e82225d68fc6aff65b12d1884224f34df5199a24e6e12c4ec5aa998971686f5c4e6d79f01d0e476f7ef00e289bb8100cb42d05433ca4d5f7eccb0eaff3a64278fd9f8d3b0221", 0xce}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000380)="f5180eac01b3e2d60876d6c04a8a5aebbc729e05008053af253df31944ee790d00cff84ec69919f7ac767ac79606bcadd11f", 0x32}], 0x3, &(0x7f00000019c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, r2, r10, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r9, r5, r10, r8, r0, r7, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r4, r1, 0xffffffffffffffff]}}], 0x158, 0x24000084}}], 0x1, 0x4004000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r5) 31.994883765s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000026c0)={0x4, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000002100)=0x10) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x4, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="450a000000aacf36c11194000000000018001ad5ce8dde5eb9e90000000000009500000000000000419092b917de3c0d54cf86ec3400849b14bdefcee2b2fdcec18535dadbabcafe06b67591f383475b03735b2893fff2f2e5b26ca7da2f5395cb014c"], 0x0}, 0x90) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0xf7}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 31.807543698s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x5, 0x0, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002004007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)={0x20, r3, 0x0, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 31.75340083s ago: executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a010100000000000000000100000014000480080002400000000008000140000000000900010073797a30000000001c0008800c00014000000000000000000c000240000000000000000008000b4000000000140000001000010000000000000000000000000a71b91452feddb01627aab88cf2f53adc317498887489b7cf5ca58fd78be8cb766babfa764eeae4016ed0b608340e3f08fb4a20f7f0cd1b916441631892547eb54757387d48fb22ef830d0e1b1400000000000003ffb6fd9e6ffca37d481eea9938a01b1479ebc365c2504b2b13172dc9fbeed6a27fff5197ea024f1de7c45dff102c00a28ca932bc3ccdd0f9b77a4e777c48f4b5d5164636d8bc5061f15050c764752a6e5b847af77dbfb5cc"], 0xa0}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r2, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3e, &(0x7f0000001200)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x1c, 0x0, @wg=@data={0x4, 0x0, 0x0, "92e8b281"}}}}}}, 0x0) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_VERSION(r3, 0x0, 0x480, &(0x7f0000000080), &(0x7f0000001440)=0x40) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000040)={'macsec0\x00', 0x0}) write$bt_hci(0xffffffffffffffff, 0x0, 0x5) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="440000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b0001006970766c616e00000400028008000500", @ANYRES32=r8, @ANYBLOB="080003"], 0x44}}, 0x0) connect$inet6(r6, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$inet6_int(r6, 0x29, 0x42, &(0x7f00000000c0)=0x4, 0x4) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc, 0x2, [@TCA_TBF_PBURST={0x8}]}}]}, 0x38}}, 0x0) 31.697036254s ago: executing program 4: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000082ffffff8d000000000d069500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) r2 = socket$inet(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x10000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="ecff000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fdffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpu.stat\x00', 0x26e1, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004662b, 0x7ff3843f8fff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r10, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r8, 0x89e2, &(0x7f0000000200)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) recvfrom(r10, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) sendmmsg$unix(r10, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="bec4dd9dcd2985ce38d350d6a03a19c1bfd3da7c0c585b536f14364afdef1945740215235fb16a75f5e0feacc8efaa7f1841d60268ad4c56ba4eeec933e7bd284a1855889bb67459153867c464e5fceaa8bdafcb0b6aa32b4e0d0db3fb6d8dce06000b6fb4665b2fdffbcea62e7848eaf346448ca8b3ecb281406d14a1143c879c97691eba70ae57e82225d68fc6aff65b12d1884224f34df5199a24e6e12c4ec5aa998971686f5c4e6d79f01d0e476f7ef00e289bb8100cb42d05433ca4d5f7eccb0eaff3a64278fd9f8d3b0221", 0xce}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000380)="f5180eac01b3e2d60876d6c04a8a5aebbc729e05008053af253df31944ee790d00cff84ec69919f7ac767ac79606bcadd11f", 0x32}], 0x3, &(0x7f00000019c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, r2, r10, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r9, r5, r10, r8, r0, r7, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r4, r1, 0xffffffffffffffff]}}], 0x158, 0x24000084}}], 0x1, 0x4004000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r5) 31.617023649s ago: executing program 0: r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r0, &(0x7f0000000300), 0x48, 0x0, 0x0, 0xfffffffffffffdfd) 31.545840399s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001200)={0x26, 'aead\x00', 0x0, 0x0, 'pcrypt(rfc7539(cts-cbc-aes-neon,sha224))\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) sendmsg$nl_route_sched_retired(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=@delqdisc={0x4c, 0x25, 0x0, 0x0, 0x0, {}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x4c}}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r2, &(0x7f0000000180)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000002c0)="8252", 0x2}], 0x1}}], 0x1, 0x4000c000) sendto$inet6(r2, &(0x7f0000000300), 0x48, 0x0, 0x0, 0xfffffffffffffdfd) 31.501807076s ago: executing program 3: r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000540), 0x3c) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000200)=@gcm_256={{0x304}, "00e0f07600", "832b4d7f53010000002d5af0d5c6c3a500", '`\a-N', "298f0e6df9ae9b3d"}, 0x38) sendfile(r2, r3, &(0x7f0000000100)=0x5, 0x100000000010001) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000680)=ANY=[@ANYBLOB="5c000000010101010000000000000000050000003c0001800c00028005000100000000002c000180140003000000000000000000000000000000000014000400ff0200000000000000000000000000010c00198008000100cd000000b4c2bb206ca449b0a569335e45600c8656242fccf56514ffdbb9903cec5d25c16228d56fc2528f803a164f0283d6e02eb7320e4dd90c80623df34f61a56a7ed35dae5e4f79e8eb2666ec6cc5ffb7d9d7554cc8a702d69de01af30ec55a26b4bd945ba339486911cbfe4b10169faee365511d0aaebf2c5b74f1f9919af057ee1bad98dd82d5d9d4c014739a7119b2a8b2fa9139b84d16107493ffc80a430b5f1801facbabbcc06a4de27d1964f7279e38ce24b2dfae9dae70d9528a3ec3b1"], 0x5c}}, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) sendmmsg$inet(r4, &(0x7f0000006fc0)=[{{&(0x7f0000003200)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f00000034c0)=ANY=[@ANYBLOB="180000000000000086d3a9a319c568fe4ee042fe1b000000"], 0x18}}], 0x1, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'veth1_to_hsr\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0xb) r9 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bind$packet(r9, &(0x7f00000000c0)={0x11, 0x0, r10, 0x1, 0x0, 0x6, @random="e4bb98e2876d"}, 0x14) getsockname$packet(r9, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00T\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=r11, @ANYBLOB="20000100", @ANYRES32=r7, @ANYBLOB="000000080000000000000000000000000000000002339486dd0000dfc520d1f937ebfe56ef6de080f2ce3a17"], 0x38}, 0x1, 0xf00}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000640)={'erspan0\x00', &(0x7f0000000540)={'ip_vti0\x00', r11, 0x7, 0x0, 0x0, 0x4, {{0x38, 0x4, 0x3, 0x0, 0xe0, 0x67, 0x0, 0x5, 0x29, 0x0, @broadcast, @remote, {[@timestamp_prespec={0x44, 0xc, 0xa4, 0x3, 0x8, [{@empty}]}, @timestamp_addr={0x44, 0x34, 0xcc, 0x1, 0x0, [{@empty, 0x9}, {@broadcast, 0x5}, {@empty, 0x81}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local, 0x70c9}, {@private=0xa010102, 0x6}]}, @cipso={0x86, 0x1c, 0xffffffffffffffff, [{0x2, 0xb, "c39746e18c236ccc5f"}, {0x1, 0x4, "a019"}, {0x5, 0x7, "3cfceccbe0"}]}, @cipso={0x86, 0x54, 0xfffffffffffffffd, [{0x2, 0x5, "81be81"}, {0x5, 0x10, "fa89262b1b764722274d75279c5d"}, {0x0, 0x5, "33d7f1"}, {0x2, 0xb, "23ba7b4ef18641d10c"}, {0x1, 0x5, "8bf370"}, {0x6, 0xe, "41289fcb8d5bbc7bc5d32dcd"}, {0x2, 0x3, "f0"}, {0x0, 0x8, "8eb0eb28904b"}, {0x7, 0xb, "679681b4f2a947aa83"}]}, @lsrr={0x83, 0x1b, 0x7, [@dev={0xac, 0x14, 0x14, 0x23}, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x2d}, @dev={0xac, 0x14, 0x14, 0x17}, @dev={0xac, 0x14, 0x14, 0x26}]}]}}}}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_ext={0x1c, 0x31, &(0x7f0000000a40)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1d}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x800}}, @map_idx={0x18, 0x3, 0x5, 0x0, 0xf}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xffff}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f0000000500)='syzkaller\x00', 0x8, 0x4d, &(0x7f00000008c0)=""/77, 0x41000, 0x0, '\x00', r11, 0x0, r3, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000940)={0x0, 0xd, 0x7, 0x5}, 0x10, 0x12611, r3, 0x5, &(0x7f0000000980)=[0xffffffffffffffff, r3, r3, r3, r3, r3, r3], &(0x7f00000009c0)=[{0x5, 0x5, 0x3, 0x8}, {0x4, 0x5, 0xf}, {0x0, 0x5, 0x1, 0x5}, {0x2, 0x5, 0x9, 0x2}, {0x1, 0x3, 0x9, 0x4}], 0x10, 0x7}, 0x90) socket$nl_route(0x10, 0x3, 0x0) r12 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r12, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000000)=ANY=[@ANYBLOB="640100001000010000000000feff0000ac1414aa000000000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ffffffff000000000000000000000000000000006c000000fe8000000000000000000000080000bb0000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000b0000000000240020"], 0x164}}, 0x0) 31.411354735s ago: executing program 3: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0x9}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$inet(r1, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_80211_join_ibss(&(0x7f00000001c0)='wlan1\x00', 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xffffffffffffff69, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/1989], 0x7bb) 31.193829135s ago: executing program 3: r0 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet(0x2, 0x6, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f0000000280)=0x27fe, 0x4) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000400)={0x0, &(0x7f00000003c0)}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @local}, 0x10) sendmsg$inet(r0, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r0, &(0x7f0000000580)={0x0, 0x2, &(0x7f0000000500)=[{&(0x7f0000000740)=""/4096, 0xa15b0}], 0x1, 0x0, 0xd00}, 0x0) 31.120978733s ago: executing program 1: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="0701000077939c37a3559618"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x90) r0 = socket(0x1, 0x803, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) connect$bt_sco(r0, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000500), &(0x7f0000000540)=0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x81, 0xa9, 0x101, 0xc, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast1, 0x700, 0x10, 0x0, 0x80000001}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4005) 31.05779673s ago: executing program 2: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000340)={0x26, 'hash\x00', 0x0, 0x0, 'blake2b-160-generic\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0xd, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="850000001900000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = getpid() setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet(0x2, 0x1, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x27, &(0x7f0000000100)={@multicast2, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aa002593d0c96c52c7dea8c271a4c60930e27e10dcd8e0c8f1b508000000000000000000000802907800000000e000000211009078e000"], 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3c0000001000030400000006000000005dcc0300", @ANYRES32=r6, @ANYBLOB="71e79fd800000000140012800c0001006d616376746170001400028008000500", @ANYRES32=r7], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@newtfilter={0x24, 0x10, 0xc27, 0x0, 0x0, {0x0, 0x0, 0x74, r6, {0xf, 0x2}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000440)={'syztnl0\x00', r6, 0x10, 0x1, 0x2, 0x8c, {{0x2b, 0x4, 0x2, 0x3, 0xac, 0x66, 0x0, 0x3, 0x4, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, {[@timestamp_addr={0x44, 0x14, 0x9, 0x1, 0x5, [{@local, 0x3}, {@rand_addr=0x64010101, 0x1}]}, @timestamp={0x44, 0x28, 0xa3, 0x0, 0x4, [0x9, 0x9, 0x10000, 0x8000, 0x7, 0x6, 0x9, 0x6, 0x81]}, @end, @ssrr={0x89, 0x1b, 0xaa, [@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, @multicast1, @remote, @local]}, @generic={0x94, 0x3, 'i'}, @timestamp={0x44, 0x18, 0xa, 0x0, 0xe, [0x31, 0xc8, 0x1, 0x0, 0x0]}, @rr={0x7, 0xb, 0xa0, [@dev={0xac, 0x14, 0x14, 0x39}, @multicast1]}, @rr={0x7, 0x17, 0x57, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @multicast2, @remote]}]}}}}}) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x0, 0x3ff}}}}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) write$binfmt_aout(r9, &(0x7f0000000d00)=ANY=[@ANYRESOCT, @ANYRES8, @ANYRESOCT=0x0, @ANYRESOCT, @ANYRES16, @ANYBLOB="4dced7826eeda5ee16664c4c7c825aa281265d44e2ac624fbe850a8519132f3ac66de85e05278d1d3fe425d4809103e61ae31e2a289fe1fbbabccd326ae96ebcbb9ee51914d6993332795e6081b1f08a15e2b04bc70b076f7e931885351608925477df52efffd1b6fe96e4661f720eb2be92839054564490fb"], 0xc1) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r9, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r8, 0x84, 0x1, &(0x7f0000000080), &(0x7f00000000c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001500)={&(0x7f0000000400)=ANY=[@ANYBLOB="9feb010018000000000000004c0000004c00000005000000020000000200000f03000000020000000100000003"], 0x0, 0x69, 0x0, 0x1}, 0x20) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000005c0)=ANY=[@ANYBLOB="5000000010000100"/20, @ANYRES32=0x0, @ANYBLOB="000000000000000014001680100001800c000700000000000000000008001300", @ANYRES32=r2, @ANYBLOB="1400030076653dbc897468305f746f5f626f6e64000000"], 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x55}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) epoll_create(0x6da) r10 = accept4(r0, 0x0, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) sendmmsg$alg(r10, &(0x7f00000025c0)=[{0x0, 0x0, &(0x7f0000002540)=[{&(0x7f0000002100)="bb", 0x1}], 0x1}], 0x1, 0x8044) 31.036297416s ago: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000ec0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x34}}, 0x10, &(0x7f0000000840)=[{&(0x7f00000002c0)="b5960437b4d340f9fd6adcdd04ecf56c02abe178b7f13618a24db1d4fb0860319dbff2b5012bcba0f1106f85018477ac75b7780be3ca92da6b3af1", 0x3b}, {&(0x7f0000000300)="0f58aaef1a4a46a6a6721b2419f513f461168c6886594d1caf46d961fad8f5a89f8210425725ee1f65743d444ff6d589cdf9cfc8b88945a912ce90bc0e63dd99aca2c86f7dd1290524c81f966759326014daacba93", 0x55}, {&(0x7f00000004c0)="29f6b12d0033be53b9e416fa1ee711b7bf2a9ef3f05754d167c406abc9018adabfae6e90eb302ba5968f1a06a06c31908a982fb2ef2d600b584f2dea9ca7e9c9d10a11568308341c5b9110e057962094130bd05aa2011f07c03b18", 0x5b}], 0x3, &(0x7f00000005c0)}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000940)="1a3aea00d80d146a8530d8fc515967214a680f76cc9c30ab50b02e2a2d91ef8a28edb7f523a5fc8c95c887da52531aff92f1e055c1c939ed106af67283d9b9830367a88ab26e844a8e53a4765546cacbd6d0de3db2", 0x55}, {&(0x7f00000009c0)="e2a94210897bdfe3b85b5fd15e767004af1a50ce90c7252d915dba6ea31f5489fe021887961ddb7189795e397e64e392c8", 0x31}, {&(0x7f0000000a00)="571244bd6680335e46979df364379054a4bd6aa8b21cf78a2318ced7e64f7ef89f760de1bbfd", 0x26}, {&(0x7f0000000a80)='+', 0x1}], 0x4}}], 0x3, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000003c0)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x23, 0x0, "093f38050b94725997f7ff898a3f9ab16a8731bf2ce9e46bca4cef5a7c35015b7a97f697e89d86377518bf274943a186c89a051c531b5ad251ff1e26b7fe42b3eb4ddd4dc049ad87c56cd0c3628976cc"}, 0xd8) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b1a7511bf746bec66ba", 0x20c8, 0x11, 0x0, 0x27) 30.986176846s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0xb, 0x5, 0x0, 0x9, 0x1}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002004007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000380)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000780)={0x20, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) 30.91139377s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x10, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.874884594s ago: executing program 2: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$SIOCSIFHWADDR(r1, 0x8946, &(0x7f0000000900)={'netdevsim0\x00', @random='\x00\x00\x00 \x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)={0xffffffffffffffff}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r0, &(0x7f0000000180)={0xa}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x48, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @empty}]}}}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x48}}, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f00000002c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500001c00000000082f90787f000001e0000001000065580008907803029aa99d178e0948d6926ba27d06f43c9e6312cec90a2583427f418ae05125d36a9535d02bb18bf9f2e7f488aa4f4f5dd4b2ef1c45ff56ce7a5316e3b968546c9e092fdc587de5a895a8d6594df1c87f5a0d590f9846a95e154304677f05dcc1856b84b36cd4adadc83dd1916c74dd4db36188609f6b14cdd72bdadc009270a6d951015f985c6b60242013c89abd4d12d4be0079b4bb3e497b83ec0ab73ac62cb51708bb04f38ea960a3fa0507b683e013e826b5"], 0x2e) 30.778443085s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{}]}, @void, @void, @void, @void, @void, @void}, 0x2f) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x0, 0x0, @void}, 0x1e) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{}, {0x40}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x2, [{0x0, 0x1}, {}]}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x9}}}, 0x3e) 30.246988404s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x3, [{}, {0xb}, {}]}, @void, @void, @void, @void, @void, @void}, 0x31) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, 0x0, 0x0) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000540)=@mgmt_frame=@assoc_resp={{{}, {0x40}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x2, [{0x0, 0x1}, {}]}, @val={0x2d, 0x1a, {0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x8, 0x3, 0x9}}}, 0x3e) 30.136946888s ago: executing program 0: sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000040)=ANY=[@ANYBLOB="f00039001000000000ac1412aa000000000000000000000000f701000000000000000000000000000100"/57, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff0200000000000000000000000000010000000000000000fe80000000000000000000000000003e"], 0xf0}}, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) shutdown(r0, 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_service_bytes\x00', 0x275a, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r1, 0xc0506617, &(0x7f0000000080)=0x2) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x1}, &(0x7f00000000c0)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r1, 0x84, 0x23, &(0x7f0000000100)={r2, 0x9}, 0x8) 30.034242639s ago: executing program 0: syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='pids.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000020240), 0x10010) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x8848, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x48, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x4}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0xfffffff9}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x4}]}, 0x48}}, 0x0) 890.818338ms ago: executing program 1: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @ptr={0x0, 0x0, 0x0, 0x9}, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'vlan0\x00', 0x0}) bind$packet(r1, &(0x7f0000000140)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @remote}, 0x14) sendmsg$inet(r1, &(0x7f0000001ec0)={0x0, 0x0, 0x0}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x0) syz_80211_join_ibss(&(0x7f00000001c0)='wlan1\x00', 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000600)={0x0, 0xffffffffffffff69, &(0x7f0000000000)=[{&(0x7f0000000300)="2e00000010008188040f80ec59acbc0413a181014100000000010000000000000e000a000f00000002800200121f", 0x2e}], 0x1}, 0x0) write$binfmt_elf64(r3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/1989], 0x7bb) 846.877873ms ago: executing program 2: r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r1 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000082ffffff8d000000000d069500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x0, 0x3}, 0x6) r2 = socket$inet(0x10, 0x3, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x10000000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="1806000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="ecff000000000000b703000000000000850000000c000000b707000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8fdffffb702000008000000b70300000000000085000000060000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000240)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {}, {0x7, 0x0, 0xb, 0x7}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='cpu.stat\x00', 0x26e1, 0x0) r6 = socket$inet(0x2, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0x4004662b, 0x7ff3843f8fff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$alg(0xffffffffffffffff, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000140), 0x0) r8 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish)\x00'}, 0x58) r10 = accept4(r9, 0x0, 0x0, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f0000000400)="3f4e55f1", 0x4) sendto$unix(r10, &(0x7f0000000080), 0xffffff9d, 0x0, 0x0, 0x0) ioctl$SIOCRSSL2CALL(r8, 0x89e2, &(0x7f0000000200)=@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}) recvfrom(r10, &(0x7f00000030c0)=""/4117, 0xffffffffffffffbf, 0x0, 0x0, 0xffffffffffffff54) sendmmsg$unix(r10, &(0x7f00000007c0)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000280)="bec4dd9dcd2985ce38d350d6a03a19c1bfd3da7c0c585b536f14364afdef1945740215235fb16a75f5e0feacc8efaa7f1841d60268ad4c56ba4eeec933e7bd284a1855889bb67459153867c464e5fceaa8bdafcb0b6aa32b4e0d0db3fb6d8dce06000b6fb4665b2fdffbcea62e7848eaf346448ca8b3ecb281406d14a1143c879c97691eba70ae57e82225d68fc6aff65b12d1884224f34df5199a24e6e12c4ec5aa998971686f5c4e6d79f01d0e476f7ef00e289bb8100cb42d05433ca4d5f7eccb0eaff3a64278fd9f8d3b0221", 0xce}, {&(0x7f00000009c0)="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", 0x1000}, {&(0x7f0000000380)="f5180eac01b3e2d60876d6c04a8a5aebbc729e05008053af253df31944ee790d00cff84ec69919f7ac767ac79606bcadd11f", 0x32}], 0x3, &(0x7f00000019c0)=[@rights={{0x14, 0x1, 0x1, [r5]}}, @cred={{0x1c}}, @rights={{0x30, 0x1, 0x1, [r3, r4, 0xffffffffffffffff, 0xffffffffffffffff, r5, r2, r10, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [r9, r5, r10, r8, r0, r7, r1]}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, r7, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xee00}}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r4, r1, 0xffffffffffffffff]}}], 0x158, 0x24000084}}], 0x1, 0x4004000) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f0000000740)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) syz_genetlink_get_family_id$l2tp(&(0x7f00000004c0), r5) 754.67785ms ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_DEL(r0, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1002000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000026c0)={0x4, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r2, 0x29, 0x4, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB="450a000000aacf36c11194000000000018001ad5ce8dde5eb9e90000000000009500000000000000419092b917de3c0d54cf86ec3400849b14bdefcee2b2fdcec18535dadbabcafe06b67591f383475b03735b2893fff2f2e5b26ca7da2f5395cb014c"], 0x0}, 0x90) r3 = socket$inet6(0xa, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000880)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ES={0x5, 0xa, 0xf7}]}}}]}, 0x3c}}, 0x0) setsockopt$inet6_int(r3, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r3, &(0x7f0000000040), 0x400000000000284, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x46, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) 211.353908ms ago: executing program 3: pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_script(r1, 0x0, 0xb) vmsplice(r0, &(0x7f0000000040)=[{&(0x7f0000001300)='*', 0x1}, {&(0x7f0000000100)="13e415283006637d4df75e9bd770c1e105687203b10c60f40e0308dff8876a0a91bd959bd21d119775090f5584f6c8748f58dcd2cc68dfe9073bf40f26ba45fd3dceedc6f39959dcfa433660da6152716ce05e4ee9e074dcb7342c79b62ddd75074ebdc5cd5f1a81d20ceb783dd441b3af47b22b993877d8825bc6a59bb535214b2d23918fea4c8606846019c5d555c2174b277ac15db66adebab5dae92845e76cc013488f24638976778f099036194a6eb5fdda2546c31e1586abfcfd128b0be497d2a88438196cc92be2109bc833d7", 0xd0}, {&(0x7f0000000200)="f0e80491895fec2c36b02ef372a09c05da0dcb79710abf9cf2e5992d726bb3d9ec5a38f84fb001be70b9b3b753a2a96c5fa04dc8c3eb63c0df3edc2f23cd7cd2847b1d9480f96bb48cda97077c53f292b5522d5bde720077a530573a47166b1811a953796e823b0efb281e652aefaf07348ce1893d43c3e301d8af2357b6590a55e43e16ff6c2b639b631a86b683972fbd92074d0a0a63ac69384b44e22d15e40dd8f1e37da2c1958e2c0b39b3bf55acb034573dd6002ce0cb35b71dfdc13a941d2c43cb0ba297df6dc2084c86f058227149a2f07552dba7081da31c68704df422c335ebc12fde70905e55b0fa20", 0xee}], 0x3, 0x0) (async) write$binfmt_script(r1, &(0x7f0000000000)={'#! ', './file0'}, 0xb) 0s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x2, &(0x7f0000000000)=ANY=[@ANYBLOB="0701000077939c37a3559618"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x11}, 0x90) r0 = socket(0x1, 0x803, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) connect$bt_sco(r0, &(0x7f0000000400)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}}, 0x8) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = accept4(r2, 0x0, 0x0, 0x0) write$binfmt_elf64(r3, 0x0, 0x78) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r3, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f0000000500), &(0x7f0000000540)=0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x4, 0x4}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000200000000000000000818110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000340)={r5, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000240)={'syztnl0\x00', &(0x7f00000001c0)={'ip6gre0\x00', 0x0, 0x2f, 0x81, 0xa9, 0x101, 0xc, @dev={0xfe, 0x80, '\x00', 0x25}, @mcast1, 0x700, 0x10, 0x0, 0x80000001}}) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wg0\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x48, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@WGDEVICE_A_IFNAME={0x14, 0x2, 'wg2\x00'}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0x3}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r8}]}, 0x48}, 0x1, 0x0, 0x0, 0x4001}, 0x4005) kernel console output (not intermixed with test programs): sses unique to avoid problems! [ 188.478578][ T9231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.509131][ T9231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.550073][ T9231] vlan3: entered promiscuous mode [ 188.569874][ T9231] batadv_slave_1: entered promiscuous mode [ 188.598418][ T9231] batadv_slave_1: left promiscuous mode [ 188.630777][ T9240] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 188.666249][ T9257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.740728][ T9259] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.060924][ T9279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.494319][ T9286] netlink: 100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.881622][ T9300] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 189.909441][ T9300] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.924588][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.949395][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.966589][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.977347][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.996220][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.024030][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.039071][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.075795][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.106898][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.124010][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.148661][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.166015][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.178583][ T9305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 190.188463][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.188534][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.188556][ T9300] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 190.188571][ T9300] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 190.190957][ T9300] vlan1: entered promiscuous mode [ 190.276922][ T9300] batadv_slave_1: entered promiscuous mode [ 190.310835][ T9300] batadv_slave_1: left promiscuous mode [ 190.325432][ T9305] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 191.410243][ T9371] syzkaller0: entered promiscuous mode [ 191.415837][ T9371] syzkaller0: entered allmulticast mode [ 191.754671][ T9386] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.042132][ T9413] xt_TCPMSS: Only works on TCP SYN packets [ 192.072024][ T9413] No such timeout policy "syz0" [ 192.317105][ T9426] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 192.335686][ T9426] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.359401][ T9426] vlan3: entered promiscuous mode [ 192.364779][ T9426] veth2: entered promiscuous mode [ 192.375230][ T9426] veth2: left promiscuous mode [ 192.543703][ T9437] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.553985][ T9437] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.571920][ T9435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 192.607587][ T9435] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.001122][ T9462] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 193.027676][ T9464] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.219984][ T9468] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 193.237905][ T9468] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.277259][ T9468] vlan3: entered promiscuous mode [ 193.288049][ T9468] veth2: entered promiscuous mode [ 193.304882][ T9468] veth2: left promiscuous mode [ 193.459218][ T9486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.524167][ T9486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.546922][ T9486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 193.703233][ T9497] net_ratelimit: 854 callbacks suppressed [ 193.703259][ T9497] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 193.768173][ T9500] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'. [ 193.800307][ T9501] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 194.158209][ T9513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 194.221998][ T9515] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 194.254544][ T9515] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 194.263244][ T9523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.352712][ T9527] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 194.364332][ T7513] wlan1: authenticated [ 194.380990][ T9523] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.399068][ T7513] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 194.413043][ T7513] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 194.416429][ T9515] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.431091][ T7513] wlan1: No basic rates, using min rate instead [ 194.447336][ T7513] wlan1: associated [ 194.540120][ T9529] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 194.736243][ T9549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.811152][ T9549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.836588][ T9549] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 194.851561][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.935841][ T9559] __nla_validate_parse: 3 callbacks suppressed [ 194.935863][ T9559] netlink: 16126 bytes leftover after parsing attributes in process `syz-executor.2'. [ 194.968179][ T9559] netlink: 105116 bytes leftover after parsing attributes in process `syz-executor.2'. [ 195.097546][ T9562] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 195.170246][ T9562] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 195.698651][ T9595] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 195.780129][ T9598] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.854057][ T9596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.856426][ T9603] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.877163][ T9596] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 195.928884][ T9604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.116964][ T9612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.181429][ T9612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.193984][ T9612] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.590579][ T9626] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 196.911766][ T9648] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.967506][ T9648] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.118262][ T9661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.210654][ T9657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.236698][ T9666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.246424][ T9657] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.303597][ T9666] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.567679][ T9677] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 197.583286][ T9680] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 197.606716][ T9677] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.055373][ T9704] macvlan3: entered allmulticast mode [ 198.068551][ T9704] team_slave_0: entered promiscuous mode [ 198.074771][ T9704] team_slave_1: entered promiscuous mode [ 198.114637][ T9704] team0: entered allmulticast mode [ 198.151153][ T9704] team_slave_0: entered allmulticast mode [ 198.157069][ T9704] team_slave_1: entered allmulticast mode [ 198.210922][ T9704] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 198.248210][ T9704] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 198.523631][ T9735] ip_vti0 speed is unknown, defaulting to 1000 [ 198.535754][ T9735] ip_vti0 speed is unknown, defaulting to 1000 [ 198.547538][ T9735] ip_vti0 speed is unknown, defaulting to 1000 [ 198.648677][ T9739] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.714131][ T9741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.781968][ T9741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.813380][ T9741] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.834399][ T9735] infiniband syz0: set active [ 198.851751][ T5159] ip_vti0 speed is unknown, defaulting to 1000 [ 198.861637][ T9735] infiniband syz0: added ip_vti0 [ 199.036204][ T9735] RDS/IB: syz0: added [ 199.047058][ T9735] smc: adding ib device syz0 with port count 1 [ 199.081095][ T9735] smc: ib device syz0 port 1 has pnetid [ 199.110359][ T9750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.131152][ T5160] ip_vti0 speed is unknown, defaulting to 1000 [ 199.155560][ T9735] ip_vti0 speed is unknown, defaulting to 1000 [ 199.220267][ T9750] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.246886][ T9748] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.379691][ T9758] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 199.512176][ T9768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 199.520373][ T9735] ip_vti0 speed is unknown, defaulting to 1000 [ 199.637129][ T9770] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 199.717088][ T9770] vlan1: entered promiscuous mode [ 199.723033][ T9770] dummy0: entered promiscuous mode [ 199.735493][ T9770] dummy0: left promiscuous mode [ 199.917749][ T9735] ip_vti0 speed is unknown, defaulting to 1000 [ 200.061560][ T2443] bridge_slave_1: left allmulticast mode [ 200.081330][ T2443] bridge_slave_1: left promiscuous mode [ 200.110905][ T2443] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.222449][ T2443] bridge_slave_0: left allmulticast mode [ 200.240208][ T2443] bridge_slave_0: left promiscuous mode [ 200.260304][ T2443] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.287881][ T9799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.304882][ T2443] bridge_slave_1: left allmulticast mode [ 200.314066][ T2443] bridge_slave_1: left promiscuous mode [ 200.320100][ T2443] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.334175][ T2443] bridge_slave_0: left allmulticast mode [ 200.342969][ T2443] bridge_slave_0: left promiscuous mode [ 200.349932][ T2443] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.372365][ T9799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 200.390390][ T9799] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 201.845222][ T2443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.858015][ T2443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.872668][ T2443] bond0 (unregistering): Released all slaves [ 201.926483][ T9814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.000065][ T9814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.012427][ T9814] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 202.049189][ T2443] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 202.056324][ T5115] Bluetooth: hci3: command 0x0406 tx timeout [ 202.057772][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 202.082876][ T2443] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 202.096752][ T2443] bond0 (unregistering): Released all slaves [ 202.119442][ T9735] ip_vti0 speed is unknown, defaulting to 1000 [ 202.400711][ T9824] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 202.439920][ T9819] __nla_validate_parse: 3 callbacks suppressed [ 202.439946][ T9819] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 202.472785][ T9819] vlan1: entered promiscuous mode [ 202.478098][ T9819] dummy0: entered promiscuous mode [ 202.496212][ T9819] dummy0: left promiscuous mode [ 202.660761][ T9735] ip_vti0 speed is unknown, defaulting to 1000 [ 202.999648][ T9735] ip_vti0 speed is unknown, defaulting to 1000 [ 203.152273][ T9844] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.375045][ T9851] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.381400][ T9846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.452588][ T9735] ip_vti0 speed is unknown, defaulting to 1000 [ 203.527619][ T9846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.587898][ T9846] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 203.755979][ T9863] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 203.831446][ T9872] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 203.846489][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 203.889820][ T9866] vlan3: entered promiscuous mode [ 203.895274][ T9866] dummy0: entered promiscuous mode [ 203.907680][ T9866] dummy0: left promiscuous mode [ 203.955327][ T9735] ip_vti0 speed is unknown, defaulting to 1000 [ 204.007493][ T9875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.079126][ T9875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.101358][ T9875] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.220805][ T9877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.288335][ T9878] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 204.727901][ T2443] hsr_slave_0: left promiscuous mode [ 204.745351][ T2443] hsr_slave_1: left promiscuous mode [ 204.771511][ T2443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.787731][ T2443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.799825][ T2443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.816743][ T2443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.880280][ T2443] hsr_slave_0: left promiscuous mode [ 204.897349][ T2443] hsr_slave_1: left promiscuous mode [ 204.931078][ T2443] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.938688][ T2443] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.974404][ T2443] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.982189][ T2443] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.052790][ T2443] veth1_macvtap: left promiscuous mode [ 205.064241][ T2443] veth0_macvtap: left promiscuous mode [ 205.074381][ T2443] veth1_vlan: left promiscuous mode [ 205.098404][ T2443] veth0_vlan: left promiscuous mode [ 205.150166][ T2443] veth1_macvtap: left promiscuous mode [ 205.161698][ T2443] veth0_macvtap: left promiscuous mode [ 205.172835][ T2443] veth1_vlan: left promiscuous mode [ 205.183108][ T2443] veth0_vlan: left promiscuous mode [ 205.836577][ T9928] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 206.608263][ T2443] team0 (unregistering): Port device team_slave_1 removed [ 206.666203][ T2443] team0 (unregistering): Port device team_slave_0 removed [ 207.625911][ T2443] team0 (unregistering): Port device team_slave_1 removed [ 207.685333][ T2443] team0 (unregistering): Port device team_slave_0 removed [ 208.231296][ T9892] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.241116][ T9893] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.297282][ T9934] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 208.339682][ T9934] vlan3: entered promiscuous mode [ 208.358065][ T9934] dummy0: entered promiscuous mode [ 208.387096][ T9934] dummy0: left promiscuous mode [ 208.447303][ T9937] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 208.484994][ T9939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.597747][ T9947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.614756][ T9941] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.651104][ T9939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.690222][ T9947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.801889][ T9956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.881060][ T9959] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 208.902659][ T9956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.057781][ T2443] IPVS: stop unused estimator thread 0... [ 209.071348][ T2443] IPVS: stop unused estimator thread 0... [ 209.570673][ T9985] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 3, id = 0 [ 209.631263][ T9981] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 209.722824][ T9986] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.752433][ T9986] vlan2: entered promiscuous mode [ 209.758011][ T9986] dummy0: entered promiscuous mode [ 209.769413][ T9986] dummy0: left promiscuous mode [ 209.827777][ T9989] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 209.944398][ T9994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 209.962341][ T9994] vlan3: entered promiscuous mode [ 209.967476][ T9994] dummy0: entered promiscuous mode [ 209.976127][ T9994] dummy0: left promiscuous mode [ 210.020004][ T9999] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 210.272339][T10001] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.284320][T10001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 210.292182][T10001] IPv6: NLM_F_CREATE should be set when creating new route [ 210.299597][T10001] IPv6: NLM_F_CREATE should be set when creating new route [ 210.315639][T10001] netlink: 192 bytes leftover after parsing attributes in process `syz-executor.2'. [ 210.378578][T10003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.451015][T10006] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.469350][T10003] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.632431][T10012] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 211.040598][T10036] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 211.129487][T10036] vlan3: entered promiscuous mode [ 211.136111][T10036] veth2: entered promiscuous mode [ 211.166214][T10036] veth2: left promiscuous mode [ 211.425287][T10060] tipc: Started in network mode [ 211.430429][T10060] tipc: Node identity type_len, cluster identity 4711 [ 211.437626][T10060] tipc: Enabling of bearer rejected, failed to enable media [ 211.560036][T10066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.625248][T10066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.645054][T10071] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 211.654525][T10071] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 211.664889][T10066] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 211.678582][T10071] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 211.688138][T10071] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 211.697491][T10071] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 211.706156][T10071] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 211.716483][T10071] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 211.728147][T10071] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 211.736621][T10071] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 211.753265][T10073] bridge0: port 3(macsec0) entered blocking state [ 211.761353][T10073] bridge0: port 3(macsec0) entered disabled state [ 211.768330][T10073] macsec0: entered allmulticast mode [ 211.786703][T10073] veth1_macvtap: entered allmulticast mode [ 211.795063][T10073] macsec0: entered promiscuous mode [ 212.269893][T10094] tipc: Can't bind to reserved service type 0 [ 212.599177][T10114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.694077][T10114] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.756679][T10123] vlan2: entered promiscuous mode [ 212.762126][T10123] dummy0: entered promiscuous mode [ 212.765589][T10127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.779501][T10123] dummy0: left promiscuous mode [ 212.834657][T10127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.859679][T10127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 212.962721][T10131] vlan4: entered promiscuous mode [ 212.967948][T10131] dummy0: entered promiscuous mode [ 212.979737][T10131] dummy0: left promiscuous mode [ 214.260280][T10162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.344352][T10165] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.580636][T10176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.648607][T10176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.670941][T10176] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 214.818668][T10178] can: request_module (can-proto-3) failed. [ 216.334973][T10232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.427560][T10232] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.457900][T10235] __nla_validate_parse: 5 callbacks suppressed [ 216.457925][T10235] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.476968][T10241] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.494196][T10242] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.516110][T10238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.525477][T10235] validate_nla: 3 callbacks suppressed [ 216.525498][T10235] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 216.526089][T10235] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.526125][T10235] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.559603][T10238] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.560822][T10237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.581558][T10235] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 216.643871][T10244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.681311][T10237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 216.808342][T10252] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 217.399219][ T4486] Bluetooth: hci4: command 0x0406 tx timeout [ 217.747543][T10296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.824160][T10300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.841948][T10296] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.927771][T10300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 217.964168][T10300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 218.048452][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.141845][T10318] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.482326][T10343] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 218.537420][T10338] xt_HMARK: spi-set and port-set can't be combined [ 218.981257][T10367] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.045454][T10372] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.260765][T10381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.337433][T10385] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.370526][T10381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.375381][T10387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.416708][T10389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.447059][T10387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.462001][T10387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.496605][T10390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.516022][T10389] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.591542][T10392] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 219.614729][T10392] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 219.633773][T10392] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 219.863833][T10405] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 219.939276][T10408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 219.955977][T10402] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 0 [ 220.007630][T10408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.026037][T10408] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.839683][T10439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.922327][T10439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 220.959757][T10439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.340312][T10456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.382630][T10457] dvmrp1: entered allmulticast mode [ 221.414048][T10456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.432816][T10456] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.717427][ T29] audit: type=1800 audit(1718849444.106:22): pid=10477 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name=6AA3 dev="sda1" ino=1965 res=0 errno=0 [ 221.851636][T10483] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.923965][T10492] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.436704][T10518] __nla_validate_parse: 3 callbacks suppressed [ 222.436727][T10518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.542355][T10527] netlink: 792 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.583950][T10530] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.595516][T10530] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 222.694848][T10535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.764828][T10535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.788771][T10535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 222.925907][T10542] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 222.947644][T10542] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.971583][T10542] vlan4: entered promiscuous mode [ 222.977616][T10542] veth2: entered promiscuous mode [ 222.988098][T10542] veth2: left promiscuous mode [ 223.196258][T10555] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.280826][T10556] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.648017][T10575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.715839][T10575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.742365][T10578] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 223.751632][T10575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 223.757744][T10578] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 223.788557][T10578] vlan2: entered promiscuous mode [ 223.808161][T10578] bridge1: entered promiscuous mode [ 223.824929][T10578] bridge1: left promiscuous mode [ 223.968808][T10585] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.387259][T10600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.456817][T10600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.471268][T10600] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.526985][T10607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.590837][T10607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.059859][T10623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.139193][T10623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.189284][T10623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.178502][T10674] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.253366][T10675] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.566508][T10680] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 226.590383][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 226.597113][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 226.644432][T10680] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 226.651223][T10680] pim6reg0: linktype set to 778 [ 226.912824][T10694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.926317][T10693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 226.991038][T10694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.011496][T10693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.029860][T10694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.055022][T10693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.353782][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888023a27c00: rx timeout, send abort [ 227.488080][T10722] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 227.501660][T10722] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 227.519546][T10722] vlan1: entered promiscuous mode [ 227.524750][T10722] bond0: entered promiscuous mode [ 227.530073][T10722] bond_slave_0: entered promiscuous mode [ 227.535909][T10722] bond_slave_1: entered promiscuous mode [ 227.544514][T10722] bond0: left promiscuous mode [ 227.549521][T10722] bond_slave_0: left promiscuous mode [ 227.555118][T10722] bond_slave_1: left promiscuous mode [ 227.756274][T10732] netlink: 'syz-executor.4': attribute type 19 has an invalid length. [ 227.763181][T10735] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.841541][T10738] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 227.862465][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888023a27c00: abort rx timeout. Force session deactivation [ 227.962468][T10747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.047479][T10751] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.052598][T10749] smc: net device ip6_vti0 applied user defined pnetid SYZ0 [ 228.075745][T10747] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.125720][T10755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.205556][T10755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.220794][T10755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.366293][T10768] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 228.383218][T10768] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.405236][T10768] vlan4: entered promiscuous mode [ 228.410485][T10768] bond0: entered promiscuous mode [ 228.415568][T10768] bond_slave_0: entered promiscuous mode [ 228.421743][T10768] bond_slave_1: entered promiscuous mode [ 228.432608][T10768] bond0: left promiscuous mode [ 228.437581][T10768] bond_slave_0: left promiscuous mode [ 228.450469][T10768] bond_slave_1: left promiscuous mode [ 228.865185][T10791] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 228.881330][T10791] macvlan2: entered promiscuous mode [ 228.888658][T10791] macvlan2: entered allmulticast mode [ 228.928366][T10791] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 229.024162][T10797] team0: entered promiscuous mode [ 229.029884][T10797] team_slave_0: entered promiscuous mode [ 229.036282][T10797] team_slave_1: entered promiscuous mode [ 229.046903][T10797] team_slave_0: entered allmulticast mode [ 229.082213][T10797] team0: Port device team_slave_0 removed [ 229.112443][T10795] team0: left promiscuous mode [ 229.124945][T10795] team_slave_1: left promiscuous mode [ 229.182716][T10803] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 229.225517][T10803] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 229.238164][T10803] bridge0: port 3(bond3) entered blocking state [ 229.244967][T10803] bridge0: port 3(bond3) entered disabled state [ 229.253072][T10803] bond3: entered allmulticast mode [ 229.258422][T10803] bridge2: entered allmulticast mode [ 229.266063][T10803] bond3: entered promiscuous mode [ 229.272368][T10803] bridge2: entered promiscuous mode [ 229.347012][T10807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.368282][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.378024][T10809] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.417633][T10807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.694712][T10817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.780043][T10822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.801803][T10817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.199677][T10848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.293806][T10854] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.316650][T10848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.397019][T10838] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 230.550609][T10871] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.579487][T10871] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.589506][T10871] openvswitch: netlink: Key type 29 is not supported [ 230.613322][T10871] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.624084][T10871] 0ͺXΉ¦Dφ»: renamed from gretap0 (while UP) [ 230.651173][T10871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 230.723415][T10877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 230.806250][T10877] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 231.194816][T10897] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 233.277490][T10968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.346467][T10969] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.368818][T10968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 233.758661][T10978] sch_fq: defrate 0 ignored. [ 234.445135][T11016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.516226][T11016] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.767230][T11030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.816647][T11026] __nla_validate_parse: 4 callbacks suppressed [ 234.816668][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 234.842996][T11033] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 234.856481][T11026] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 234.879123][T11030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.060399][T11039] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 235.068793][T11039] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 235.077150][T11039] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 235.085861][T11039] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 235.362019][T11055] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 235.681860][T11055] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 236.023900][T11096] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.258024][T11109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.258437][T11108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.325996][T11109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.342914][T11108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.355616][T11109] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.372605][T11108] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.598490][ T5675] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.614654][ T5675] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.626970][ T5675] bond0 (unregistering): Released all slaves [ 236.646294][ T5675] bond1 (unregistering): Released all slaves [ 236.931754][T11120] bond_slave_0: entered promiscuous mode [ 236.938506][T11120] bond_slave_1: entered promiscuous mode [ 236.970721][T11120] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 237.358361][T11138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.494371][T11138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 237.689138][ T5675] hsr_slave_0: left promiscuous mode [ 237.696841][ T5675] hsr_slave_1: left promiscuous mode [ 237.708748][ T5675] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.747551][ T5675] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.770160][ T5675] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.787981][ T5675] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.818296][ T5675] veth1_macvtap: left promiscuous mode [ 237.824380][ T5675] veth0_macvtap: left promiscuous mode [ 237.830456][ T5675] veth1_vlan: left promiscuous mode [ 237.835955][ T5675] veth0_vlan: left promiscuous mode [ 238.115529][T11168] Bluetooth: hci3: expected 2 bytes, got 7 bytes [ 238.620203][T11177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.707232][ T5675] team0 (unregistering): Port device team_slave_1 removed [ 238.715478][T11177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.740809][T11177] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 238.750859][ T29] audit: type=1804 audit(1718849461.136:23): pid=11179 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3352328423/syzkaller.fltwmG/396/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 238.824771][ T5675] team0 (unregistering): Port device team_slave_0 removed [ 239.388785][T11150] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.406151][T11150] vlan0: entered promiscuous mode [ 239.435128][T11162] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.012058][T11216] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 240.053325][T11215] netlink: 64138 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.684856][T11242] xt_policy: too many policy elements [ 240.704095][T11242] hsr0: VLAN not yet supported [ 240.892847][T11252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.966100][T11254] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'. [ 240.978145][T11252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 240.998731][T11252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.032754][T11256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.095988][T11256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.110537][T11256] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 241.223889][T11264] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 241.844049][T11287] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 241.864689][T11287] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.882444][T11287] vlan4: entered promiscuous mode [ 241.888024][T11287] veth2: entered promiscuous mode [ 241.896493][T11287] veth2: left promiscuous mode [ 242.072051][T11295] xt_CT: You must specify a L4 protocol and not use inversions on it [ 242.110202][T11302] sctp: [Deprecated]: syz-executor.3 (pid 11302) Use of int in max_burst socket option deprecated. [ 242.110202][T11302] Use struct sctp_assoc_value instead [ 242.251937][T11306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.298618][T11310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.335759][ T29] audit: type=1804 audit(1718849464.726:24): pid=11311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir907387948/syzkaller.7A9MPb/403/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 242.365798][T11317] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.381049][T11310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.393661][T11316] x_tables: duplicate underflow at hook 2 [ 242.399581][T11306] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.400844][ T29] audit: type=1804 audit(1718849464.726:25): pid=11311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir907387948/syzkaller.7A9MPb/403/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 242.456806][T11319] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.459127][T11310] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.484357][ T29] audit: type=1804 audit(1718849464.726:26): pid=11311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir907387948/syzkaller.7A9MPb/403/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 242.616913][T11325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.682739][T11325] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 242.766445][T11328] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 243.079477][T11330] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 243.105412][T11330] vlan2: entered promiscuous mode [ 243.116320][T11330] bridge1: entered promiscuous mode [ 243.134769][T11330] bridge1: left promiscuous mode [ 243.382384][T11342] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 243.414728][T11342] bridge0: port 3(00ͺXΉ¦Dφ») entered disabled state [ 243.416478][T11344] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.422000][T11342] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.501123][T11342] bridge0: port 3(00ͺXΉ¦Dφ») entered blocking state [ 243.508199][T11342] bridge0: port 3(00ͺXΉ¦Dφ») entered forwarding state [ 243.515693][T11342] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.524044][T11342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 243.544323][T11342] : (slave bridge0): Enslaving as an active interface with an up link [ 243.553666][T11344] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.811536][T11365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.828058][T11366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.865782][T11368] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.884907][T11365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.900498][T11365] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.909131][T11366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.925735][T11366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.944075][T11372] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 243.957013][T11370] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 243.974610][T11370] vlan4: entered promiscuous mode [ 243.979936][T11370] veth2: entered promiscuous mode [ 243.987320][T11370] veth2: left promiscuous mode [ 244.248132][T11384] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.667493][T11411] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 244.680877][ T53] Bluetooth: hci5: command 0x0405 tx timeout [ 244.720014][T11406] vlan2: entered promiscuous mode [ 244.725177][T11406] bridge1: entered promiscuous mode [ 244.753183][T11406] bridge1: left promiscuous mode [ 245.053994][T11427] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.064431][T11427] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.073426][T11427] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.083069][T11427] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.107889][T11425] ip_vti0 speed is unknown, defaulting to 1000 [ 245.118794][T11432] __nla_validate_parse: 3 callbacks suppressed [ 245.118818][T11432] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 245.352917][T11436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.382870][T11438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.443027][T11439] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.468038][T11438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.486377][T11436] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.521910][T11438] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 245.657833][T11433] ip_vti0 speed is unknown, defaulting to 1000 [ 246.478370][T11466] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 246.674303][T11465] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.765421][T11465] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gre1 [ 246.785178][T11465] vlan2: entered promiscuous mode [ 246.800796][T11465] gre1: entered promiscuous mode [ 246.814487][T11465] gre1: left promiscuous mode [ 247.111030][ T4486] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 247.136419][ T4486] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 247.151102][ T4486] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 247.168809][ T4486] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 247.177963][ T4486] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 247.191242][ T4486] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 247.315779][T11478] ip_vti0 speed is unknown, defaulting to 1000 [ 247.481117][T11489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.538683][T11492] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 247.574388][T11493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.609154][T11492] netlink: 636 bytes leftover after parsing attributes in process `syz-executor.2'. [ 247.621005][T11489] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 247.783996][T11498] sctp: [Deprecated]: syz-executor.1 (pid 11498) Use of struct sctp_assoc_value in delayed_ack socket option. [ 247.783996][T11498] Use struct sctp_sack_info instead [ 247.911206][T11503] wlan1: No basic rates, using min rate instead [ 247.911254][T11478] chnl_net:caif_netlink_parms(): no params data found [ 247.943381][T11503] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 247.969909][T11511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.000099][T11503] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 248.051091][T11510] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 248.071455][ T7514] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2) [ 248.071895][T11503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.100990][T11503] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.124005][T11510] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 248.149463][T11510] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gre1 [ 248.160443][T11510] vlan2: entered promiscuous mode [ 248.167026][T11510] gre1: entered promiscuous mode [ 248.175772][T11510] gre1: left promiscuous mode [ 248.232209][T11525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.281094][T11525] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 248.304525][T11478] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.316072][T11478] bridge0: port 1(bridge_slave_0) entered disabled state [ 248.347875][T11478] bridge_slave_0: entered allmulticast mode [ 248.368852][T11478] bridge_slave_0: entered promiscuous mode [ 248.397647][T11478] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.405310][T11478] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.413118][T11478] bridge_slave_1: entered allmulticast mode [ 248.421172][T11478] bridge_slave_1: entered promiscuous mode [ 248.469425][T11478] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 248.482856][T11478] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 248.523580][T11478] team0: Port device team_slave_0 added [ 248.533690][T11478] team0: Port device team_slave_1 added [ 248.570123][T11478] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 248.577194][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.603540][T11478] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 248.616717][T11478] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 248.624495][T11478] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 248.655842][T11478] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 248.740140][T11478] hsr_slave_0: entered promiscuous mode [ 248.746813][T11478] hsr_slave_1: entered promiscuous mode [ 248.980387][T11478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 248.991327][T11478] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.099436][T11478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.119115][T11478] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.242469][T11478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.265789][T11478] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.298357][T11549] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 249.311671][T11549] bridge0: port 3(00ͺXΉ¦Dφ») entered disabled state [ 249.318927][T11549] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.326894][ T4486] Bluetooth: hci1: command tx timeout [ 249.396789][T11478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 249.411322][ T7514] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 249.413350][T11478] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.529080][ T7514] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 249.640637][ T7514] wlan1: authentication with 08:02:11:00:00:00 timed out [ 249.694362][T11568] syzkaller1: entered promiscuous mode [ 249.709515][T11568] syzkaller1: entered allmulticast mode [ 249.739425][T11568] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 249.787487][T11572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.794541][T11478] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 249.824961][T11572] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 249.850858][T11478] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 249.862782][T11478] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 249.884437][T11478] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 250.126038][T11580] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 250.147416][T11478] 8021q: adding VLAN 0 to HW filter on device bond0 [ 250.168664][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 250.191775][T11478] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.232552][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 250.239816][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 250.250844][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 250.258088][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 250.342727][T11588] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 250.677387][T11478] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.719371][T11608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.768792][T11610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.781204][T11478] veth0_vlan: entered promiscuous mode [ 250.792785][T11611] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.807118][T11608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.807746][T11478] veth1_vlan: entered promiscuous mode [ 250.841790][T11610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.871324][T11610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 250.880729][T11478] veth0_macvtap: entered promiscuous mode [ 250.900145][T11478] veth1_macvtap: entered promiscuous mode [ 250.921767][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.937570][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.948502][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.959223][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.969736][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.981347][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.991387][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 251.004608][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.017477][T11478] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.040421][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.051071][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.062069][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.072777][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.084009][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.096189][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.106482][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.118981][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.128852][T11478] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 251.141329][T11478] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 251.155760][T11478] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.172725][T11478] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.181914][T11478] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.192660][T11478] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.202313][T11478] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.315909][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.333697][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.378477][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.387993][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.404123][ T53] Bluetooth: hci1: command tx timeout [ 251.789233][T11637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.836495][T11637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.843339][T11638] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 251.903433][T11638] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 251.928203][T11644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.974665][T11646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 251.997646][T11647] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.011967][T11644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.027228][T11649] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.042368][T11646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.058452][T11649] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.071531][T11649] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 252.077424][T11646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 252.607631][T11661] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 252.625686][T11661] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 252.898427][T11677] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 252.923683][T11681] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 1280 [ 253.228650][T11693] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.243261][T11691] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.254434][T11691] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 253.293140][T11692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 253.479474][ T53] Bluetooth: hci1: command 0x040f tx timeout [ 254.096039][T11721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 254.209939][T11728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.286790][T11728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.324352][T11728] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.710862][T11756] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.784768][T11755] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 254.832108][T11760] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 254.854807][T11760] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 254.866034][T11760] nbd: illegal input index -1708589048 [ 254.936811][T11764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.051121][T11768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.207071][T11778] sctp: [Deprecated]: syz-executor.1 (pid 11778) Use of int in max_burst socket option. [ 255.207071][T11778] Use struct sctp_assoc_value instead [ 255.278355][T11774] sctp: [Deprecated]: syz-executor.1 (pid 11774) Use of struct sctp_assoc_value in delayed_ack socket option. [ 255.278355][T11774] Use struct sctp_sack_info instead [ 255.560243][ T4486] Bluetooth: hci1: command 0x040f tx timeout [ 255.748391][T11798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.832989][T11807] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.849815][T11808] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.862880][T11798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.899499][T11805] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 255.973723][T11811] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 255.991495][T11811] __nla_validate_parse: 1 callbacks suppressed [ 255.991531][T11811] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 255.997915][T11813] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 256.026694][T11813] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.077184][ T5160] IPVS: starting estimator thread 0... [ 256.179240][T11816] IPVS: using max 17 ests per chain, 40800 per kthread [ 256.283136][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.362559][T11830] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 256.641098][T11837] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 256.668749][T11837] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 257.037024][T11859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.058469][T11861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.090487][T11863] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 257.101997][T11863] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 257.111716][T11863] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 257.134701][T11859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.150151][T11864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.177487][T11866] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 257.179777][T11859] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.193136][T11866] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 257.218812][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.377988][T11872] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.649572][ T4486] Bluetooth: hci1: command 0x040f tx timeout [ 257.716576][T11883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.782183][T11883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.818099][T11883] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 257.909214][T11892] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 257.941843][ T5158] IPVS: starting estimator thread 0... [ 258.031919][T11895] IPVS: using max 18 ests per chain, 43200 per kthread [ 258.091131][T11902] validate_nla: 1 callbacks suppressed [ 258.091156][T11902] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 258.111071][T11902] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 258.122963][T11902] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 258.310452][T11908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 258.315453][T11914] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 258.375908][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 258.431587][T11916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.447252][T11919] bond_slave_0: left promiscuous mode [ 258.481576][T11919] bond_slave_1: left promiscuous mode [ 258.492765][T11921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.520230][T11919] bond_slave_0: entered promiscuous mode [ 258.527565][T11919] bond_slave_1: entered promiscuous mode [ 258.538713][T11916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.585463][T11933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.585536][T11916] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 258.607730][T11919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 258.622810][T11919] team0: Device bond0 failed to register rx_handler [ 258.637341][T11919] bond_slave_0: left promiscuous mode [ 258.644244][T11919] bond_slave_1: left promiscuous mode [ 258.707724][T11913] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 258.742235][T11913] macsec1: entered promiscuous mode [ 258.767925][T11913] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 258.819514][T11938] lo: Caught tx_queue_len zero misconfig [ 259.120442][T11956] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 259.137043][T11956] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 259.269174][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.335777][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.384091][T11961] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 259.771612][T11995] netlink: 128124 bytes leftover after parsing attributes in process `syz-executor.2'. [ 259.810224][T11993] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.842539][T11993] team0: Port device bond0 added [ 259.875043][T11989] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 259.885974][T11989] macsec1: entered promiscuous mode [ 259.901984][T11989] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 259.931867][T12004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.003615][T12001] gre2: entered promiscuous mode [ 260.010228][T12001] gre2: entered allmulticast mode [ 260.016356][T12008] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 260.018141][T12005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.036898][T12004] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.109428][T12005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.127040][T12005] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.755943][T12036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.844083][T12044] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.876209][T12036] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 260.922626][T12045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.946199][T12045] team0: Port device bond0 added [ 260.990135][T12045] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 260.999336][T12045] macsec1: entered promiscuous mode [ 261.011772][T12045] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 261.058597][T12049] infiniband syz0: set active [ 261.120649][ T25] ip_vti0 speed is unknown, defaulting to 1000 [ 261.233048][T12054] ip6erspan0: entered promiscuous mode [ 261.262901][ T5160] wlan1: No basic rates, using min rate instead [ 261.273553][ T5160] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 261.287167][ T5160] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 261.409083][ T5675] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 261.521321][ T7514] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 261.540443][T12064] __nla_validate_parse: 2 callbacks suppressed [ 261.540465][T12064] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.661525][ T5675] wlan1: authentication with 08:02:11:00:00:00 timed out [ 261.691158][T12075] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 261.708499][T12072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.710103][T12074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.748118][T12065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 261.764702][T12065] vlan1: entered promiscuous mode [ 261.776320][T12065] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 261.787332][T12065] mac80211_hwsim hwsim12 wlan2: left promiscuous mode [ 261.800686][T12072] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.822614][T12074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.835726][T12074] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 261.974321][T12081] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.090443][T12087] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.104559][T12087] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.598054][T12105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.664952][T12105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.681513][T12105] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.022581][T12117] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 263.047723][T12117] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.071999][T12117] vlan1: entered promiscuous mode [ 263.077153][T12117] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 263.088142][T12117] mac80211_hwsim hwsim12 wlan2: left promiscuous mode [ 263.176642][T12126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.248416][T12126] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.276987][T12131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.350176][T12134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.363748][T12131] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 263.990166][T12159] vlan2: entered promiscuous mode [ 264.002368][T12159] batadv0: entered promiscuous mode [ 264.017410][T12162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.028043][T12159] batadv0: left promiscuous mode [ 264.104479][T12162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.122030][T12162] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.473143][T12184] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 264.493797][T12179] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 264.528739][T12179] mac80211_hwsim hwsim16 wlan1: entered promiscuous mode [ 264.576824][T12179] syz-executor.4 (12179) used greatest stack depth: 16528 bytes left [ 264.585869][T12190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.660503][T12190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.692963][T12190] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 264.869273][T12208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 264.939321][T12217] 8021q: adding VLAN 0 to HW filter on device bond4 [ 264.968378][T12217] bond0: (slave bond4): Enslaving as an active interface with an up link [ 265.560095][T12241] pim6reg1: entered promiscuous mode [ 265.565984][T12241] pim6reg1: entered allmulticast mode [ 265.645977][T12245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.751866][T12245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 265.775054][T12246] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 265.790708][T12245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 266.335501][T12280] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 266.357065][T12280] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 266.395350][T12280] vlan2: entered promiscuous mode [ 266.410093][T12280] bridge1: entered promiscuous mode [ 266.427091][T12280] bridge1: left promiscuous mode [ 266.569764][T12288] Cannot find set identified by id 632 to match [ 267.408650][T12334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.448597][T12332] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 267.480515][T12332] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 267.507510][T12334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.532731][T12334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 267.948201][T12351] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.244988][T12362] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 268.611429][T12388] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 268.665885][T12392] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 268.693617][T12391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.765295][T12391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 268.777933][T12391] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.112877][T12432] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 270.159856][T12432] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.300315][T12441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 270.322475][T12441] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 270.544168][T12455] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 270.933354][T12472] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 270.963127][T12472] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 271.786246][T12511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.889180][T12511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.910234][T12511] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.938186][T12517] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 271.973099][T12517] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 272.110012][T12524] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 272.786692][T12560] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 272.823306][T12560] bond5: entered promiscuous mode [ 273.081316][T12571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.109894][T12576] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 273.191577][T12571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 273.203831][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 273.302818][T12581] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 273.324793][T12584] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 273.351659][T12584] vlan2: entered promiscuous mode [ 273.369094][T12584] ip6gretap0: entered promiscuous mode [ 273.459081][T12592] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 273.523208][T12592] batman_adv: batadv0: Adding interface: team0 [ 273.545184][T12592] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.590443][T12598] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 273.612174][T12592] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 273.642493][T12600] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 273.790208][T12609] xt_l2tp: v2 sid > 0xffff: 150994944 [ 274.208717][T12634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.275689][T12636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.294761][T12634] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.530652][T12642] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 274.697209][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807ef66c00: rx timeout, send abort [ 274.718342][T12650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.787769][T12650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 274.808816][T12650] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 275.205641][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807ef66c00: abort rx timeout. Force session deactivation [ 275.373135][T12674] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 275.937143][T12690] ip_vti0 speed is unknown, defaulting to 1000 [ 276.247146][T12699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.321378][T12702] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.352377][T12702] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.389456][T12702] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 276.430522][T12699] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.732718][T12719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.805821][T12719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 276.839733][T12721] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 276.863504][T12714] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.785332][T12767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.881662][T12767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 277.912358][T12767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.017077][T12780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.074272][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807e3a2400: rx timeout, send abort [ 278.101094][T12782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.120413][T12780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 278.582647][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807e3a2400: abort rx timeout. Force session deactivation [ 279.026517][T12805] __nla_validate_parse: 4 callbacks suppressed [ 279.026540][T12805] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 279.301550][T12817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.388317][T12817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.398467][T12822] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 279.414892][T12822] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.436974][T12819] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 279.448297][T12817] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 279.471045][T12819] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 279.519106][T12819] vlan2: entered promiscuous mode [ 279.524215][T12819] bridge1: entered promiscuous mode [ 279.532286][T12819] bridge1: left promiscuous mode [ 279.711534][T12826] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 279.936412][T12839] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 280.302654][T12861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.352669][T12859] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.365488][T12861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.394933][T12861] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 280.643677][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802ce0a400: rx timeout, send abort [ 280.656784][T12873] ip_vti0 speed is unknown, defaulting to 1000 [ 281.111703][T12888] mac80211_hwsim hwsim2 wlan0 (unregistering): left allmulticast mode [ 281.152671][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802ce0a400: abort rx timeout. Force session deactivation [ 281.258428][T12887] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 281.620010][T12916] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 281.781824][T12925] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 281.978320][T12925] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 282.048572][T12932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.124084][T12932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.135570][T12936] veth0_vlan: entered allmulticast mode [ 282.179240][T12932] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 282.615302][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.625229][T12954] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.886754][T12970] ip_vti0 speed is unknown, defaulting to 1000 [ 283.534426][T12997] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 283.553647][T12997] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 283.816999][T13008] bond0: Device is already in use. [ 283.959091][ T53] Bluetooth: hci0: command 0x0405 tx timeout [ 283.982886][T13013] IPVS: Error joining to the multicast group [ 284.016718][T13011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.131320][T13011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.184210][T13011] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 284.369047][ T29] audit: type=1800 audit(1718849506.756:27): pid=13030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 284.438811][ T29] audit: type=1804 audit(1718849506.786:28): pid=13031 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3352328423/syzkaller.fltwmG/518/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 284.494816][ T29] audit: type=1804 audit(1718849506.786:29): pid=13033 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3352328423/syzkaller.fltwmG/518/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 284.560500][ T29] audit: type=1804 audit(1718849506.786:30): pid=13030 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3352328423/syzkaller.fltwmG/518/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 285.204540][T13078] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 285.343117][T13086] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.0'. [ 285.595915][T13097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.672263][T13097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.727813][T13097] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 285.786646][T13108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 285.833307][T13106] ip_vti0 speed is unknown, defaulting to 1000 [ 286.070243][T13104] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 286.261993][T13114] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.687593][T13132] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.115018][T13146] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.154255][T13151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.177744][T13155] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 287.249709][T13157] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.380199][T13151] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.463934][T13203] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 288.494535][T13207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.554146][T13203] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 288.794451][T13207] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.835887][T13219] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.904714][T13214] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.089119][T13223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 289.408712][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 289.415550][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 289.523266][T13236] bond2: entered promiscuous mode [ 289.583313][T13241] bond0: (slave bond_slave_0): Releasing backup interface [ 289.610644][T13241] bond_slave_0: entered promiscuous mode [ 289.617517][T13241] bond2: (slave bond_slave_0): Enslaving as an active interface with an up link [ 289.717558][T13236] bond2 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.738521][T13236] bond_slave_0: left promiscuous mode [ 289.770853][T13236] bond2 (unregistering): Released all slaves [ 290.148179][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802b982800: rx timeout, send abort [ 290.363420][T13277] sctp: [Deprecated]: syz-executor.3 (pid 13277) Use of struct sctp_assoc_value in delayed_ack socket option. [ 290.363420][T13277] Use struct sctp_sack_info instead [ 290.413292][T13279] ip_vti0 speed is unknown, defaulting to 1000 [ 290.631493][T13287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.656714][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88802b982800: abort rx timeout. Force session deactivation [ 290.701665][T13287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.725734][T13287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 290.751458][T13289] __nla_validate_parse: 3 callbacks suppressed [ 290.751481][T13289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 292.172595][T13347] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 292.340982][T13351] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.593224][T13362] netlink: 'syz-executor.3': attribute type 64 has an invalid length. [ 292.636488][T13362] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 292.792134][ T9] wlan1: No basic rates, using min rate instead [ 292.826398][ T9] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 292.876718][ T9] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 292.892125][ T11] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2) [ 293.009061][ T5670] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 293.139005][ T11] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 293.208208][T13396] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.257181][T13396] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.266110][T13396] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.275040][T13396] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.283866][T13396] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 293.292973][ T11] wlan1: authentication with 08:02:11:00:00:00 timed out [ 293.364963][T13396] vxlan0: entered promiscuous mode [ 293.424015][T13412] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 293.444475][T13412] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.462799][T13412] vlan1: entered promiscuous mode [ 293.468382][T13412] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 293.484071][T13412] mac80211_hwsim hwsim12 wlan2: left promiscuous mode [ 293.850253][T13428] ip_vti0 speed is unknown, defaulting to 1000 [ 294.705796][T13467] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 294.766348][T13469] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 294.785673][T13469] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 294.794196][T13463] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 294.853403][T13463] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gre1 [ 294.865656][T13463] vlan3: entered promiscuous mode [ 294.871921][T13463] gre1: entered promiscuous mode [ 294.879948][T13463] gre1: left promiscuous mode [ 295.591122][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 295.683377][T13501] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.752245][T13504] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 295.790938][T13504] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.3'. [ 295.860845][T13509] Timeout policy `syz0' can only be used by L3 protocol number 0 [ 295.948229][T13512] team0: Device is already in use. [ 296.159960][T13526] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 296.233778][T13518] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 296.311294][T13518] vlan2: entered promiscuous mode [ 296.329415][T13518] bridge1: entered promiscuous mode [ 296.363636][T13518] bridge1: left promiscuous mode [ 296.684919][ T29] audit: type=1800 audit(1718849519.066:31): pid=13560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 296.737043][ T29] audit: type=1804 audit(1718849519.076:32): pid=13560 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1891771084/syzkaller.5HCtPv/533/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 297.234484][T13587] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 297.415609][T13590] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 297.433823][T13590] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 297.501412][T13595] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 297.512058][T13595] xt_cgroup: invalid path, errno=-2 [ 297.517757][T13595] xt_l2tp: v2 sid > 0xffff: 16777216 [ 297.528710][T13595] netlink: 27 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.071810][T13617] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.211504][T13620] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.399570][T13637] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.943309][T13664] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 299.702984][T13698] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 300.467462][T13735] geneve2: entered promiscuous mode [ 300.474458][T13735] geneve2: entered allmulticast mode [ 301.215552][T13754] ip_vti0 speed is unknown, defaulting to 1000 [ 301.362719][T13767] __nla_validate_parse: 4 callbacks suppressed [ 301.362740][T13767] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 301.656094][T13773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.730980][T13778] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.759691][T13773] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.980826][T13785] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 302.070959][T13786] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 302.109992][T13754] x_tables: unsorted underflow at hook 2 [ 303.294671][T13827] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.360806][T13831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.456166][T13833] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 303.477378][T13831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 304.144632][T13862] ip_vti0 speed is unknown, defaulting to 1000 [ 304.205133][T13872] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 304.820073][T13894] sch_tbf: peakrate 3 is lower than or equals to rate 7694164499349936757 ! [ 305.115586][T13908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.187202][T13908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.216620][T13908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.468200][T13916] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.179624][T13947] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.4'. [ 306.195283][T13947] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 306.524455][T13968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.624092][T13976] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.644480][T13968] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.856952][ T29] audit: type=1800 audit(1718849529.246:33): pid=13987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 306.879568][ T29] audit: type=1804 audit(1718849529.246:34): pid=13987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1891771084/syzkaller.5HCtPv/553/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 306.911924][ T29] audit: type=1804 audit(1718849529.246:35): pid=13987 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir1891771084/syzkaller.5HCtPv/553/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 307.688833][T14018] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 307.701209][T14022] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.732368][T14017] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 307.738044][T14022] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 307.752051][T14017] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 307.769350][T14017] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gre1 [ 307.780371][T14017] vlan3: entered promiscuous mode [ 307.787184][T14017] gre1: entered promiscuous mode [ 307.796790][T14017] gre1: left promiscuous mode [ 307.963898][T14030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.031180][T14030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.054675][T14030] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.381877][T14053] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.396172][T14053] openvswitch: netlink: Flow actions attr not present in new flow. [ 308.617539][T14062] ‘: renamed from team0 (while UP) [ 308.736937][T14067] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 308.759432][T14070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.768821][T14073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.784604][T14067] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 308.801879][T14067] vlan1: entered promiscuous mode [ 308.807262][T14067] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 308.820729][T14067] mac80211_hwsim hwsim12 wlan2: left promiscuous mode [ 308.834950][T14073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.836578][T14070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.854930][T14073] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.868508][T14070] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 309.473943][T14104] ΙΆΖ£0GCTw: entered promiscuous mode [ 309.638305][ T29] audit: type=1804 audit(1718849532.026:36): pid=14114 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3352328423/syzkaller.fltwmG/593/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 309.743571][T14116] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 309.761048][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 310.065889][T14133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.089798][T14134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.132120][T14133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.161492][T14136] x_tables: ip6_tables: SNPT target: used from hooks PREROUTING, but only usable from INPUT/POSTROUTING [ 310.163325][T14133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.177399][T14134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.213180][T14138] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 310.223808][T14134] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.484612][ T5160] wlan1: No basic rates, using min rate instead [ 310.500645][ T5160] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 310.518232][ T5160] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 310.536763][T14151] ip6gretap0: entered promiscuous mode [ 310.544322][T14151] batadv_slave_0: entered promiscuous mode [ 310.553316][T14151] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.561498][T14151] Cannot create hsr debugfs directory [ 310.659274][ T7513] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 310.779443][ T7514] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 310.845962][T14167] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.869602][T14167] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.909451][ T7513] wlan1: authentication with 08:02:11:00:00:00 timed out [ 311.086975][T14173] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 311.279679][T14183] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 311.288705][T14183] NCSI netlink: No device for ifindex 0 [ 311.451474][T14191] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 311.544246][T14195] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 311.578360][T14197] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.644390][T14196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.711508][T14201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.775174][T14201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.808717][T14201] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.312068][T14240] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 313.375232][T14241] __nla_validate_parse: 3 callbacks suppressed [ 313.375256][T14241] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.422446][T14241] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.436429][T14241] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.522613][T14256] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 313.541431][T14256] netlink: 134820 bytes leftover after parsing attributes in process `syz-executor.0'. [ 313.587429][T14257] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.657775][T14254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 313.701624][T14260] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 313.716978][T14260] vlan1: entered promiscuous mode [ 313.722911][T14260] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 313.733149][T14260] mac80211_hwsim hwsim12 wlan2: left promiscuous mode [ 314.078255][T14270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.109699][ T5157] wlan1: No basic rates, using min rate instead [ 314.117683][ T5157] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 314.127705][ T5157] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 314.148301][ T2443] wlan1: 08:02:11:00:00:00 unexpected authentication state: alg 0 (expected 0) transact 0 (expected 2) [ 314.159356][T14271] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.178519][T14270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 314.239128][ T7512] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 314.359590][ T2443] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 314.479125][ T7513] wlan1: authentication with 08:02:11:00:00:00 timed out [ 314.515732][T14289] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 314.611738][T14293] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 314.623413][T14293] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 314.727243][T14295] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 314.743908][T14295] vlan2: entered promiscuous mode [ 314.749531][T14295] bridge1: entered promiscuous mode [ 314.758309][T14295] bridge1: left promiscuous mode [ 314.996720][T14309] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 315.106042][T14314] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.180103][T14313] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.556328][T14326] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 315.797002][T14334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.880661][T14334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.887987][T14336] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 315.901731][T14334] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 315.929620][T14336] vlan2: entered promiscuous mode [ 315.936037][T14336] bridge1: entered promiscuous mode [ 315.956259][T14336] bridge1: left promiscuous mode [ 316.567788][T14375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.643327][T14375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 316.665950][T14375] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.116825][T14382] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 317.126350][T14382] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 317.134779][T14382] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 317.338562][T14398] IPVS: lblc: SCTP 127.0.0.1:0 - no destination available [ 317.546916][T14411] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 317.567109][T14411] geneve0: entered promiscuous mode [ 317.646297][T14416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.731899][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.748529][T14416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.764613][T14420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.777020][T14416] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.804267][ T5160] wlan1: No basic rates, using min rate instead [ 317.815237][ T5160] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 317.836482][ T5160] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 317.848742][ T11] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 317.851236][T14420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 317.882936][T14420] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 318.410328][ T7512] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 318.420840][ T7512] wlan1: authentication with 08:02:11:00:00:00 timed out [ 318.489709][T14452] netlink: 'syz-executor.3': attribute type 32 has an invalid length. [ 318.601281][T14456] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 318.612664][T14456] geneve0: entered promiscuous mode [ 318.650104][T14456] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 318.967115][T14473] __nla_validate_parse: 1 callbacks suppressed [ 318.967140][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.992989][T14473] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.293876][T14486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.384304][T14491] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.411939][T14486] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.861945][T14497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.941447][T14497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 319.970556][T14497] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 349.711411][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 349.729460][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 349.738409][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 349.749787][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 349.769153][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 349.787731][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 349.876699][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 349.888199][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 349.897695][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 349.908243][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 349.930221][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 349.938280][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 349.979951][ T5118] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 349.999106][ T5118] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 350.023267][ T5118] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 350.037096][ T5118] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 350.045673][ T5118] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 350.053376][ T5118] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 350.429439][ T5118] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 350.449735][ T5118] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 350.458007][ T5118] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 350.476123][ T5118] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 350.484192][ T5118] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 350.491958][ T5118] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 350.577325][ T4486] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 350.588670][ T4486] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 350.606399][ T4486] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 350.617584][ T4486] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 350.627489][ T4486] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 350.635022][ T4486] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 351.879296][ T5118] Bluetooth: hci2: command tx timeout [ 352.049367][ T5118] Bluetooth: hci6: command tx timeout [ 352.119619][ T5118] Bluetooth: hci7: command tx timeout [ 352.599147][ T5118] Bluetooth: hci8: command tx timeout [ 352.690272][ T5118] Bluetooth: hci9: command tx timeout [ 353.959254][ T5118] Bluetooth: hci2: command tx timeout [ 354.119647][ T5118] Bluetooth: hci6: command tx timeout [ 354.199193][ T5118] Bluetooth: hci7: command tx timeout [ 354.679245][ T5118] Bluetooth: hci8: command tx timeout [ 354.759656][ T5118] Bluetooth: hci9: command tx timeout [ 356.046282][ T5118] Bluetooth: hci2: command tx timeout [ 356.199617][ T5118] Bluetooth: hci6: command tx timeout [ 356.281665][ T5118] Bluetooth: hci7: command tx timeout [ 356.760809][ T5118] Bluetooth: hci8: command tx timeout [ 356.839348][ T5118] Bluetooth: hci9: command tx timeout [ 358.119173][ T5118] Bluetooth: hci2: command tx timeout [ 358.283041][ T5118] Bluetooth: hci6: command tx timeout [ 358.359388][ T5118] Bluetooth: hci7: command tx timeout [ 358.841413][ T5118] Bluetooth: hci8: command tx timeout [ 358.926158][ T5118] Bluetooth: hci9: command tx timeout [ 365.879096][ T4486] Bluetooth: hci5: command 0x0405 tx timeout [ 370.998986][ T4486] Bluetooth: hci1: command 0x040f tx timeout [ 379.167271][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 414.710343][ T4486] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 414.721350][ T4486] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 414.737011][ T4486] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 414.746696][ T4486] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 414.760191][T14521] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 414.767768][T14521] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 414.805070][ T5118] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 414.815574][ T5118] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 414.824293][ T5118] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 414.832704][ T5118] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 414.840914][ T5118] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 414.848417][ T5118] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 415.090044][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 415.109252][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 415.117863][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 415.129041][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 415.159771][ T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 415.168221][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 415.369938][ T5118] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 415.380507][ T5118] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 415.399132][ T5118] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 415.407796][ T5118] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 415.417057][ T5118] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 415.439006][ T5118] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 415.618076][ T5118] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 415.628034][ T5118] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 415.640321][ T5118] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 415.650023][ T5118] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 415.657882][ T5118] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 415.670094][ T5118] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 416.839327][ T5118] Bluetooth: hci10: command tx timeout [ 416.919951][ T5118] Bluetooth: hci11: command tx timeout [ 417.239147][ T53] Bluetooth: hci12: command tx timeout [ 417.479321][ T53] Bluetooth: hci13: command tx timeout [ 417.726367][ T53] Bluetooth: hci14: command tx timeout [ 418.919167][ T53] Bluetooth: hci10: command tx timeout [ 418.999225][ T53] Bluetooth: hci11: command tx timeout [ 419.325706][ T53] Bluetooth: hci12: command tx timeout [ 419.562571][ T53] Bluetooth: hci13: command tx timeout [ 419.799106][ T53] Bluetooth: hci14: command tx timeout [ 421.004909][ T53] Bluetooth: hci10: command tx timeout [ 421.079273][ T53] Bluetooth: hci11: command tx timeout [ 421.399142][ T53] Bluetooth: hci12: command tx timeout [ 421.639150][ T53] Bluetooth: hci13: command tx timeout [ 421.882749][ T53] Bluetooth: hci14: command tx timeout [ 423.079001][ T53] Bluetooth: hci10: command tx timeout [ 423.159181][ T53] Bluetooth: hci11: command tx timeout [ 423.479221][ T53] Bluetooth: hci12: command tx timeout [ 423.719101][ T53] Bluetooth: hci13: command tx timeout [ 423.959211][ T53] Bluetooth: hci14: command tx timeout [ 440.602519][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 473.408581][T14533] Bluetooth: hci2: command 0x0406 tx timeout [ 473.409708][T14532] Bluetooth: hci9: command 0x0406 tx timeout [ 473.416066][T14533] Bluetooth: hci8: command 0x0406 tx timeout [ 473.421875][T14532] Bluetooth: hci7: command 0x0406 tx timeout [ 473.429045][T14533] Bluetooth: hci6: command 0x0406 tx timeout [ 479.690135][ T5118] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 479.700580][ T5118] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 479.727954][ T5118] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 479.746336][ T5118] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 479.755760][ T5118] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 479.763758][ T5118] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 479.930202][T14521] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 479.947219][ T5115] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 479.952047][T14521] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 479.965344][T14521] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 479.975545][T14521] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 479.983609][T14521] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 479.999281][ T5115] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 480.000471][T14521] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 480.009024][ T5115] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 480.023874][ T5118] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 480.033403][ T5115] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 480.041837][ T5115] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 480.367820][ T5115] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 480.387581][ T5115] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 480.396670][ T5115] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 480.416595][ T5115] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 480.427503][ T5115] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 480.441465][ T5115] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 480.682178][ T5115] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 480.701054][ T5115] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 480.712314][ T5115] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 480.726680][ T5115] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 480.738144][ T5115] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 480.747006][ T5115] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 480.919089][ T30] INFO: task syz-executor.2:14481 blocked for more than 143 seconds. [ 480.927710][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 480.945588][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 480.955709][ T30] task:syz-executor.2 state:D stack:26936 pid:14481 tgid:14480 ppid:5124 flags:0x00000006 2024/06/20 02:15:03 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 480.968869][ T30] Call Trace: [ 480.972201][ T30] [ 481.027595][ T30] __schedule+0x17e8/0x4a20 [ 481.040202][ T30] ? __pfx___schedule+0x10/0x10 [ 481.045160][ T30] ? __pfx_lock_release+0x10/0x10 [ 481.058884][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 481.064591][ T30] ? schedule+0x90/0x320 [ 481.076696][ T30] schedule+0x14b/0x320 [ 481.081029][ T30] schedule_preempt_disabled+0x13/0x30 [ 481.086541][ T30] __mutex_lock+0x6a4/0xd70 [ 481.098901][ T30] ? __mutex_lock+0x527/0xd70 [ 481.103668][ T30] ? dev_ethtool+0x21e/0x1bc0 [ 481.108393][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 481.121778][ T30] ? __kasan_kmalloc+0x98/0xb0 [ 481.127511][ T30] ? dev_ethtool+0x145/0x1bc0 [ 481.132724][ T30] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 481.138154][ T30] dev_ethtool+0x21e/0x1bc0 [ 481.154478][ T30] ? dev_load+0x21/0x1f0 [ 481.162448][ T30] ? __pfx_dev_ethtool+0x10/0x10 [ 481.167470][ T30] ? dev_load+0x21/0x1f0 [ 481.178726][ T30] dev_ioctl+0x785/0x1340 [ 481.183289][ T30] sock_do_ioctl+0x240/0x460 [ 481.187936][ T30] ? __pfx_sock_do_ioctl+0x10/0x10 [ 481.201684][ T30] sock_ioctl+0x629/0x8e0 [ 481.206100][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 481.215968][ T30] ? __fget_files+0x29/0x470 [ 481.221131][ T30] ? __fget_files+0x3f6/0x470 [ 481.225854][ T30] ? __fget_files+0x29/0x470 [ 481.238868][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 481.243883][ T30] ? security_file_ioctl+0x87/0xb0 [ 481.262663][ T30] ? __pfx_sock_ioctl+0x10/0x10 [ 481.267613][ T30] __se_sys_ioctl+0xfc/0x170 [ 481.280325][ T30] do_syscall_64+0xf3/0x230 [ 481.285010][ T30] ? clear_bhb_loop+0x35/0x90 [ 481.295741][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 481.301879][ T30] RIP: 0033:0x7f0fae47cf29 [ 481.306343][ T30] RSP: 002b:00007f0faf1b70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 481.324160][ T30] RAX: ffffffffffffffda RBX: 00007f0fae5b3f80 RCX: 00007f0fae47cf29 [ 481.332928][ T30] RDX: 0000000020000900 RSI: 0000000000008946 RDI: 0000000000000005 [ 481.348945][ T30] RBP: 00007f0fae4ec074 R08: 0000000000000000 R09: 0000000000000000 [ 481.356986][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 481.376650][ T30] R13: 000000000000000b R14: 00007f0fae5b3f80 R15: 00007ffca569f838 [ 481.388432][ T30] [ 481.396428][ T30] INFO: task syz-executor.2:14482 blocked for more than 143 seconds. [ 481.404788][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 481.422820][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 481.432405][ T30] task:syz-executor.2 state:D stack:26800 pid:14482 tgid:14480 ppid:5124 flags:0x00004006 [ 481.451008][ T30] Call Trace: [ 481.454358][ T30] [ 481.457337][ T30] __schedule+0x17e8/0x4a20 [ 481.462191][ T30] ? __pfx___schedule+0x10/0x10 [ 481.467143][ T30] ? __pfx_lock_release+0x10/0x10 [ 481.488564][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 481.498904][ T30] ? schedule+0x90/0x320 [ 481.503214][ T30] schedule+0x14b/0x320 [ 481.507423][ T30] schedule_preempt_disabled+0x13/0x30 [ 481.539108][ T30] __mutex_lock+0x6a4/0xd70 [ 481.543732][ T30] ? __mutex_lock+0x527/0xd70 [ 481.548461][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 481.570972][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 481.576124][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 481.588880][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 481.594172][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 481.608891][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 481.614975][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 481.639126][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 481.644681][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 481.658918][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 481.664386][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 481.688839][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 481.694052][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 481.718967][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 481.724273][ T30] ? __dev_queue_xmit+0x16c9/0x3d30 [ 481.729787][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 481.734968][ T30] ? ref_tracker_free+0x643/0x7e0 [ 481.748112][ T30] netlink_rcv_skb+0x1e3/0x430 [ 481.753029][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 481.758554][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 481.766791][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 481.773606][ T30] netlink_unicast+0x7ea/0x980 [ 481.778528][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 481.783986][ T30] ? __virt_addr_valid+0x183/0x520 [ 481.789355][ T30] ? __check_object_size+0x49c/0x900 [ 481.794859][ T30] ? bpf_lsm_netlink_