last executing test programs: 41.599013618s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) unshare(0x8040480) shutdown(0xffffffffffffffff, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100)={'#! ', './file0', [], 0xa, "6d3c5e82e0cba52de79871dbb13852ee2ec2d778d1f185095c52293b53885e31abb2be04a94e6e6580321d1882f8008126b505079d0ba61b658439713706d9c076c7e94a623d4abd721f394f26af2b93b0f6c467727ccba4ee9af33a601537fbc8bd399cf6b242df0bbf2078ae425f7fe422520de13cd5583b7285dd404732d420754ec055867fb4f7f2accb86f65d1d6761f556"}, 0x9f) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r1, 0x113, 0x4, 0x0, &(0x7f0000000e40)) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_rdma(0x10, 0x3, 0x14) unshare(0x62040200) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newlink={0x60, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2002}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_IP_TARGET={0x10, 0x8, 0x0, 0x1, [@multicast2, @dev={0xac, 0x14, 0x14, 0x19}, @dev={0xac, 0x14, 0x14, 0x10}]}, @IFLA_BOND_MODE={0x5, 0x1, 0xfe}]}}}, @IFLA_PHYS_PORT_ID={0x11, 0x22, "2ae94f947c11663592f79418b0"}]}, 0x60}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x4, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095", @ANYRES8=r0], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18}, @TCA_ACT_BPF_FD={0x8, 0x5, r8}]}, {0xfffffebc}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r10}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r2, 0x29, 0x41, &(0x7f0000000000)=ANY=[@ANYBLOB="73656375726974790000000000000000000000000000000000000000000000000200000000000000000000000000004000"/72], 0x48) 39.434335322s ago: executing program 4: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) socket$l2tp6(0xa, 0x2, 0x73) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x22}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x11, 0xe, 0x0, &(0x7f0000000300)="14fd54ab72df97e6256c00000000", 0x0, 0x7ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 39.23877095s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1f, 0x803, 0x1000000) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socket$inet6_sctp(0xa, 0x1, 0x84) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140), 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[], 0x24d8}], 0x1}, 0x0) recvmmsg(r4, &(0x7f00000005c0)=[{{0x0, 0xfffffffffffffea3, 0x0}}], 0x3ffffffffffff62, 0x0, 0x0) readv(r4, &(0x7f0000000300)=[{&(0x7f0000000000)=""/154, 0x9a}], 0x1) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r6, 0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000004c0)=@newlink={0x34, 0x12, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0xc, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}]}, 0x34}}, 0x0) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000040)=0x4000, 0x4) connect$phonet_pipe(r6, &(0x7f0000000100), 0x10) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x439, 0xfffffffc, 0x3, {0x0, 0x0, 0x0, r2}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x2, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x4002, 0x10}}}}}}]}, 0x48}}, 0x0) 33.829750725s ago: executing program 1: pipe(&(0x7f0000000100)) (async, rerun: 64) pipe(&(0x7f0000000100)={0xffffffffffffffff}) (rerun: 64) sendmsg$IPSET_CMD_ADD(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000040)={&(0x7f0000000300)={0x108, 0x9, 0x6, 0x500, 0x0, 0x0, {0x7, 0x0, 0x9}, [@IPSET_ATTR_ADT={0x50, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @remote}}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, {0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_ETHER={0xa, 0x11, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_LINENO={0x8}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}]}, @IPSET_ATTR_DATA={0x5c, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e23}, @IPSET_ATTR_IFACE={0x14, 0x17, 'nicvf0\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x40}, @IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}, @IPSET_ATTR_CADT_FLAGS={0x8}, @IPSET_ATTR_COMMENT={0x7, 0x1a, '[:\x00'}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x80000001}, @IPSET_ATTR_SKBQUEUE={0x6, 0x1d, 0x1, 0x0, 0x3f}]}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x396}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x108}, 0x1, 0x0, 0x0, 0x4840}, 0x8024) (async, rerun: 64) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) (rerun: 64) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x1b, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200000004000085000000170000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = socket$kcm(0x2b, 0x1, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0xd, &(0x7f0000000080), 0x24) close(r3) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r2, 0xfca804a0, 0x10, 0x38, &(0x7f00000002c0)="b800000500000000", &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async, rerun: 32) r4 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) (rerun: 32) getsockopt$ax25_int(r4, 0x101, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=ANY=[@ANYBLOB="640000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000002800128009000100766c616e00000000180002800c0002000e0000000a000000060001000000000008000500", @ANYRES32=r6], 0x64}}, 0x0) 33.218779593s ago: executing program 1: unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$tipc(0x1e, 0x7, 0x0) r3 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty, 0x0, 0x81}, 0x20) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x20) connect$l2tp6(r3, &(0x7f0000000400)={0xa, 0x0, 0x0, @empty}, 0x20) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000000000)=0xffffffff, 0x4) socket(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a300000000014000780080008400000000008001240200000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'lo\x00'}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff07000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="34000000000883ec0000000000010000000000000400048005000300010000000900010073797a3000000000060002"], 0x34}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000020803"], 0x20}}, 0x0) 32.831569283s ago: executing program 2: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000000), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x4) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000080)=0x8) 32.616792537s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x44, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x44}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void}, 0x36) nanosleep(&(0x7f0000000340)={0x0, 0x2faf080}, &(0x7f0000000380)) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x9004}, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) r3 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$sock_cred(r3, 0x1, 0x3c, 0x0, &(0x7f0000001dc0)) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a320000000008000440040000000900010073797a30000000000800034000000007"], 0x64}}, 0x0) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000540)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x8, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0x16, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void}, 0x28) 32.061485463s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) openat$cgroup(0xffffffffffffffff, 0x0, 0x200002, 0x0) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r2, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r4, 0x0, r5, 0x0, 0xf3a, 0x0) splice(r1, 0x0, r5, 0x0, 0x80, 0x0) write(r3, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000680)={'ip6_vti0\x00', &(0x7f0000000600)={'syztnl2\x00', 0x0, 0x0, 0xff, 0x81, 0x8001, 0x22, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @loopback, 0x7800, 0x40, 0x5, 0x7}}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x6, &(0x7f0000000540)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x6}, [@generic={0x86, 0x5, 0xc, 0x941f, 0x200}, @map_idx={0x18, 0x0, 0x5, 0x0, 0xd}]}, &(0x7f00000005c0)='GPL\x00', 0x2, 0x0, 0x0, 0x859b2efb4cd75cf0, 0x41, '\x00', r8, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000006c0)={0x1, 0x5}, 0x8, 0x10, &(0x7f0000000700)={0x1, 0xa, 0x1, 0xee50}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000740)=[r7, r7, r6, r6, r7], &(0x7f0000000780)=[{0x3, 0x2, 0xb}, {0x2, 0x1, 0x1, 0x7}], 0x10, 0x4}, 0x90) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0xff, 0x81, 0x5, 0x44, @mcast1, @remote, 0x10, 0x40, 0x3ff, 0x2}}) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@bloom_filter={0x1e, 0x1, 0x3, 0x6, 0x884, r6, 0x9, '\x00', r9, r6, 0x3, 0x2, 0x5, 0xe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000070000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000a5df850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r11}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r10}, &(0x7f00000003c0), &(0x7f00000004c0)=r11}, 0x20) write$cgroup_type(r7, &(0x7f0000000140), 0x9) 31.846896715s ago: executing program 0: bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x10) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r2 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r2, &(0x7f0000000380)={0x1d, r3, 0x1}, 0x18) r4 = epoll_create(0x1) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r2, &(0x7f0000000280)) sendmsg$ETHTOOL_MSG_DEBUG_SET(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x3}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha384\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4$alg(r7, 0x0, 0x0, 0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r10, 0xffffffffffffffff}, 0x4) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x11, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r11, @ANYBLOB="0000000000000000b70500000000000085000000a5000000850000000e00000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_script(r9, &(0x7f0000000100), 0x4) recvmmsg(r8, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f00000002c0)=""/115, 0x73}], 0x1}}], 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYRES64=r1, @ANYRES16=r6, @ANYBLOB="01000000000074455e3cce2b42e5d1000000", @ANYRES32=r13, @ANYBLOB="14005080050002000000000008000700000000000a0006000802110000010000"], 0x3c}}, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000500)=ANY=[@ANYRES32=r11, @ANYRESDEC, @ANYRESOCT=r2, @ANYRESOCT=r12, @ANYRES64=r0], 0x3c}, 0x1, 0x0, 0x0, 0x8891}, 0x20040050) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r2, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="14800000", @ANYRES16=0x0, @ANYBLOB="01002abd7000fcdbdf2542000000"], 0x14}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b03d25a806f8c6394f91124fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 31.750951583s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000040), 0x8) 31.601545489s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1d}}, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d300000000000000800150000000002080013"], 0x4c}}, 0x0) 31.584102326s ago: executing program 3: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200007f00ff00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x1ff) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)={'a', ' *:* ', 'rwm\x00'}, 0xa) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0x7, @private1}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, 0x4}, 0x90) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003000000ff"], 0x1c) 31.576914015s ago: executing program 4: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x4) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000080)=0x8) 31.560341024s ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1d}}, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d30000000000000080015"], 0x4c}}, 0x0) 31.45681624s ago: executing program 3: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) syz_genetlink_get_family_id$tipc(0x0, 0xffffffffffffffff) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000280)=@dellink={0xb8, 0x11, 0x800, 0x70bd27, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20102}, [@IFLA_PORT_SELF={0x58, 0x19, 0x0, 0x1, [@IFLA_PORT_PROFILE={0x7, 0x2, '^.\x00'}, @IFLA_PORT_REQUEST={0x5, 0x6, 0x9}, @IFLA_PORT_PROFILE={0x8, 0x2, 'some'}, @IFLA_PORT_PROFILE={0xb, 0x2, 'cgroup\x00'}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "833a96924be090a9585a7770f6ca01b2"}, @IFLA_PORT_VF={0x8, 0x1, 0x1ff}, @IFLA_PORT_HOST_UUID={0x14, 0x5, "345ef45e092ebf89b8ca3bade18abc3d"}]}, @IFLA_LINK={0x8}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MAP={0x24, 0xe, {0x80, 0x1ff, 0x8, 0x8, 0xfb, 0x7f}}]}, 0xb8}}, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8), 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, 0x0, 0x8) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002440)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) socket$kcm(0x21, 0x0, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_pressure(r2, &(0x7f0000000040)='io.pressure\x00', 0x2, 0x0) write$cgroup_pressure(r3, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) r4 = openat$cgroup_pressure(r2, &(0x7f00000000c0)='io.pressure\x00', 0x2, 0x0) ppoll(&(0x7f0000000180)=[{r3}], 0x1, 0x0, 0x0, 0x0) write$cgroup_pressure(r4, &(0x7f0000000340)={'some', 0x20, 0x7, 0x20, 0xffffa}, 0x2f) close(r3) close(r4) 31.357112397s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 31.339161546s ago: executing program 1: getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@ifindex, 0xffffffffffffffff, 0xc, 0x8, 0xffffffffffffffff, @prog_fd}, 0x20) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r1 = socket$kcm(0x10, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r1, 0x50009401, &(0x7f0000000700)={{r0}, "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"}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_DATA_TYPE={0x8}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x5, 0x0, 0x0, {0x5, 0x0, 0x6}}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r2 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000002c0)=[{&(0x7f0000000280)="e3", 0x1}, {&(0x7f0000000140)="b7028d7289a1d9bfdb695ddc9d64f2453a5cb75176a5d19054ea56ef7a12fc122db35560019cab83115ebae4b9907b62cc5c7df69da2e4f2e227d281881e6e6befaabadf7042c0d12812c34ecea195b3d9d9bf7a83b0189f38f8b13d2ac2c0a1e77a69abfd83db316eae502a01041b2b075d5864320979e1dd2293d4e5ef286aa38258fb2eec80510076c3468d4fdd14aee956b8831ca9340da1e6a16e21481d", 0xa0}, {&(0x7f0000000200)="864d44de2be6049092dea6db58f933da063dd5e18007c6aaeba13e234cbef1f43cbe4a88be7c6cf423065ecb506d5c8b155d2449c47b0cdac6368933f0a9bbb42ae69bbc799bcec77ca6aa5e84e773cb6097e7c7cc88bf265b85c774f9107abb", 0x65}], 0x3) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000100)) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x416081, 0x0) ioctl$sock_rose_SIOCDELRT(r2, 0x890c, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000240)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r6, @ANYBLOB="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"], 0x1d8}}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) 31.336210291s ago: executing program 4: sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.090139594s ago: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="050002000000fbdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0a001800038cddeadc0300002000700004000700050008000000000004000500040007000400050004000500"], 0x48}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4004) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000040000000000000000850000000e000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000500)='sys_exit\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0x4, &(0x7f0000000240)={0xffffffffffffffff, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x50) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x68}}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x2c060000) unshare(0x24020400) sendmsg$NFT_BATCH(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000017c0)=ANY=[@ANYBLOB="140000001000010000180a05000000000000000000020000000900010073797a30000000000900020073797a3000000000140000001100010001000000000000000000000a00"/84], 0x54}}, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) pipe(&(0x7f0000000140)) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f00000002c0)=0x4d9c) close(r8) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r9 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r9, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) r10 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r10, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) 30.924121956s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001840)=ANY=[@ANYBLOB], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) r1 = syz_genetlink_get_family_id$batadv(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'bond0\x00', 0x0}) bind$packet(r2, &(0x7f0000000100)={0x11, 0x1a, r3, 0x1, 0x9, 0x6, @remote}, 0x14) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="e4000000100001040000e2ffffff000000000000", @ANYRES32=0x0, @ANYBLOB="00000000222803001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r6, @ANYBLOB="08000f00fcfffffd080029009479000014001400766574683100000000000000000000000a000100aaaaaaaaaabb00006800348014003500766c616e30000000000000000000000014003500767863616e310000000000000000000014003500626f6e645f736c6176655f31000000001400350076657468305f746f5f627269646765001400350064766d72703100"/152], 0xe4}}, 0x4080) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="020028bd7000fddbdf2510001f00080032008700000005003300000000000600280004000000080032000500000008000b2f0500000008000b000100000008003a00ffffff7f050033000100000008000300", @ANYRES32=r3, @ANYBLOB="08003a0003000000"], 0x64}, 0x1, 0x0, 0x0, 0x800}, 0x4000184) 30.923383855s ago: executing program 3: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x4000400) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000100)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCINQ(r6, 0x541b, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000080)={0x28, 0x0, 0x0, @my=0x0}, 0x10) ppoll(&(0x7f00000000c0)=[{r6, 0xa06c}, {r7, 0x900, 0x64}], 0x2, 0x0, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) clock_gettime(0x0, &(0x7f0000000d80)={0x0, 0x0}) recvmmsg(r3, &(0x7f0000000d00)=[{{&(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000240)=""/250, 0xfa}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f00000003c0)=""/161, 0xa1}, {&(0x7f0000000480)=""/105, 0x69}, {&(0x7f0000000500)=""/157, 0x9d}, {&(0x7f00000005c0)=""/108, 0x6c}, {&(0x7f0000000640)=""/111, 0x6f}, {&(0x7f00000006c0)=""/150, 0x96}, {&(0x7f0000000040)=""/45, 0x2d}, {&(0x7f0000000780)=""/45, 0x2d}], 0xa, &(0x7f0000000880)=""/37, 0x25}}, {{&(0x7f00000008c0)=@in6, 0x80, &(0x7f0000000c80)=[{&(0x7f0000000940)=""/11, 0xb}, {&(0x7f0000000980)=""/85, 0x55}, {&(0x7f0000000b80)=""/162, 0xa2}, {&(0x7f0000000a00)=""/9, 0x9}, {&(0x7f0000000c40)=""/10, 0xa}], 0x5}, 0x4}], 0x2, 0x2020, &(0x7f0000000dc0)={r8, r9+60000000}) r10 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r10, &(0x7f0000000000)={0x1f, 0x0, @none, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r10, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000040)={0x20, r12, 0x8083540e3272eb67, 0x0, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}}, 0x0) setsockopt$bt_BT_RCVMTU(r10, 0x112, 0xd, &(0x7f0000000100), 0x2) sendmsg$NL80211_CMD_TDLS_MGMT(r3, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000005200000008000300", @ANYRES32=r4, @ANYBLOB="04002a000500880000000000069f480020fbffffff0683125ed4000000ffffffff"], 0x44}}, 0x0) 30.356683299s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000040), 0x8) 30.275564276s ago: executing program 0: r0 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000000)='syz1\x00', 0x200002, 0x0) write$binfmt_script(r0, &(0x7f0000000700)={'#! ', './file0', [{0x20, 'SET\x00'}, {0x20, '#{('}], 0xa, "34a1f30ac232c12c7cff82997cf34152a6e90f656290f483e27b6ed6fad8efe8e10b4f64528fd2dff938228fb26d724f799296c09821f8fc4e2eca3b481b15e811c9a1092f3473b7118207e65cfec83379380d359d2b465c1606cec2c1b1e54a6813b0cb7f4a23fc2d12edbf13fd383d345d3d0a63f20f274f6f1ae88f973ff614e1879eb64c65c9d01449192bbc8da3e0"}, 0xa5) openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.usage_sys\x00', 0x275a, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x41, &(0x7f00000001c0), 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x8001000000000000, 0x40, &(0x7f0000000380)=@raw={'raw\x00', 0x8, 0x3, 0x238, 0x0, 0x11, 0x148, 0xd0, 0x0, 0x1a0, 0x2a8, 0x2a8, 0x1a0, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{}, {0x0, [0x1]}}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @dev}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x298) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x9000000, &(0x7f00000003c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000000b0603000000000000000000000000000900020073797a30000000000500010007000000100007800c00018008"], 0x38}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) 30.169175231s ago: executing program 0: r0 = socket$inet(0xa, 0x801, 0x84) (async) connect$inet(0xffffffffffffffff, &(0x7f0000004cc0)={0x2, 0x4e22, @loopback}, 0x10) listen(r0, 0x8) (async) r1 = accept4(r0, 0x0, 0x0, 0x0) write$binfmt_elf64(r1, 0x0, 0x78) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x2}, 0x8) (async) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000500), &(0x7f0000000540)=0x8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) r2 = socket$inet(0x2, 0x2, 0x1) (async) r3 = socket$netlink(0x10, 0x3, 0x4) r4 = socket(0x2c, 0x3, 0x0) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f0000000080)=0x100000, 0x4) (async) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000002f12493a284275780000009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x18, &(0x7f0000000500)=0x6, 0x4) (async) close(r4) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000540)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x8}], 0x1}}], 0x1, 0x2004000) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.current\x00', 0x7a05, 0x1700) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) socket$nl_route(0x10, 0x3, 0x0) connect$inet(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='io.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r7, 0x0) 30.017372222s ago: executing program 0: bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70200007f00ff00b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000085000000b70000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"/420], &(0x7f0000000100)='GPL\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.net/syz0\x00', 0x1ff) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040), 0x200002, 0x0) mkdirat$cgroup(r3, &(0x7f0000000100)='syz1\x00', 0x1ff) r4 = openat$cgroup_devices(r3, &(0x7f0000000000)='devices.allow\x00', 0x2, 0x0) write$cgroup_devices(r4, &(0x7f0000000140)={'a', ' *:* ', 'rwm\x00'}, 0xa) connect$inet6(0xffffffffffffffff, &(0x7f00000003c0)={0xa, 0x4e22, 0x7, @private1}, 0x1c) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x0, 0x3, 0x0, 0x0, 0x4}, 0x90) r8 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) setsockopt$inet_msfilter(r8, 0x0, 0x29, &(0x7f0000000100)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003000000ff"], 0x1c) 1.314609173s ago: executing program 4: r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000a40)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x44, r0, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0x4}, @NL80211_ATTR_TDLS_ACTION={0x5}, @NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}]}, 0x44}}, 0x0) 995.242835ms ago: executing program 2: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1d}}, 0x0}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000005c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0100000000000000000014000000080016000000000018000180140002006e657464657673696d300000000000000800150000000002080013"], 0x4c}}, 0x0) 890.606792ms ago: executing program 1: ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wg1\x00'}) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r0, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x4) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r2, 0x84, 0x6d, &(0x7f0000000000), &(0x7f0000000080)=0x8) 880.6841ms ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000000)=@framed={{}, [@btf_id={0x18, 0x0, 0x3, 0x0, 0x1}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 0s ago: executing program 0: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0xc, 0x3, &(0x7f0000000300)=@framed={{0x61, 0x0, 0xa, 0xfe00, 0x0, 0x5}}, &(0x7f0000000000)='syzkaller\x00'}, 0x90) r0 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$inet6_dccp_buf(r0, 0x21, 0xd, &(0x7f0000000040)="a1e48623ebb34287d27a9d8e8b263271506f684b54bd10840c99398ebb1e77e646f4d632d9862f75d485bb9b8d43b3de68aa4eeda9728a02a6040ec16759fad82ba32c0398c9eb53dd94073ee08fa8d28c", 0x51) kernel console output (not intermixed with test programs): xecutor.1" name="/root/syzkaller-testdir1378839876/syzkaller.Bd1LxE/202/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 411.957008][ T29] audit: type=1804 audit(1718736266.381:25): pid=15306 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1378839876/syzkaller.Bd1LxE/202/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 412.216487][T15125] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 412.329362][T15326] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 412.446962][T15125] veth0_vlan: entered promiscuous mode [ 412.492269][T15125] veth1_vlan: entered promiscuous mode [ 412.596605][T15125] veth0_macvtap: entered promiscuous mode [ 412.625381][T15125] veth1_macvtap: entered promiscuous mode [ 412.670513][T15125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.681751][T15125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.695388][T15125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 412.707107][T15125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.735471][T15125] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 412.767083][T15125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.784224][T15125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.798261][T15125] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 412.812317][T15125] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.840829][T15125] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.864257][T15125] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.875743][T15125] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.904963][T15125] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.917629][T15125] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 413.127580][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.155976][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.184777][T15348] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 413.330731][ T29] audit: type=1804 audit(1718736267.841:26): pid=15354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir935279478/syzkaller.5jZOr7/550/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 413.339199][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.413119][ T29] audit: type=1804 audit(1718736267.841:27): pid=15354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir935279478/syzkaller.5jZOr7/550/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 413.423950][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.448304][ T29] audit: type=1804 audit(1718736267.841:28): pid=15354 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir935279478/syzkaller.5jZOr7/550/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 413.589108][ T5132] Bluetooth: hci1: command tx timeout [ 413.639613][T15364] macvlan4: entered promiscuous mode [ 413.644987][T15364] macvlan4: entered allmulticast mode [ 413.719753][T15364] team0: Port device macvlan4 added [ 413.738616][T15371] can: request_module (can-proto-0) failed. [ 414.129212][T15394] syz0: rxe_newlink: already configured on lo [ 414.180318][T15394] infiniband syz0: set active [ 414.347002][ T29] audit: type=1804 audit(1718736268.861:29): pid=15412 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2044908005/syzkaller.43m9m1/698/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 414.384425][T15035] lo speed is unknown, defaulting to 1000 [ 414.797965][T15430] macvlan2: entered promiscuous mode [ 414.810882][T15430] macvlan2: entered allmulticast mode [ 414.826390][T15430] mac80211_hwsim hwsim62 wlan0: entered promiscuous mode [ 414.843437][T15430] mac80211_hwsim hwsim62 wlan0: entered allmulticast mode [ 414.863413][T15430] team0: Port device macvlan2 added [ 415.011357][T15435] rdma_rxe: rxe_newlink: failed to add lo [ 415.419021][T15448] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 415.669199][ T5132] Bluetooth: hci1: command tx timeout [ 416.111744][T15463] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 416.130421][T15463] vlan2: entered promiscuous mode [ 416.135741][T15463] vlan2: entered allmulticast mode [ 416.277031][T15472] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 416.344481][T15477] rdma_rxe: rxe_newlink: failed to add lo [ 416.441834][T15482] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 416.703020][T15489] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 416.713992][T15489] openvswitch: netlink: Tunnel attr 8192 out of range max 16 [ 416.815964][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 416.815985][ T29] audit: type=1804 audit(1718736271.331:35): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1378839876/syzkaller.Bd1LxE/214/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 416.911269][ T29] audit: type=1804 audit(1718736271.331:36): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1378839876/syzkaller.Bd1LxE/214/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 416.972466][ T29] audit: type=1804 audit(1718736271.341:37): pid=15492 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1378839876/syzkaller.Bd1LxE/214/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 416.991220][T15496] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.071227][T15499] team0: Port device macvlan1 removed [ 417.091521][T15501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.172567][T15501] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.313724][T15503] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 417.676966][T15517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.702124][ T29] audit: type=1804 audit(1718736272.221:38): pid=15522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2044908005/syzkaller.43m9m1/700/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 417.706685][T15527] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 417.743281][ T29] audit: type=1804 audit(1718736272.261:39): pid=15522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2044908005/syzkaller.43m9m1/700/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 417.778570][T15517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 417.817604][ T29] audit: type=1804 audit(1718736272.261:40): pid=15522 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2044908005/syzkaller.43m9m1/700/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 417.899772][T15517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 418.208310][T15549] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 418.242126][T15554] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 418.523522][ T29] audit: type=1804 audit(1718736273.041:41): pid=15567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2044908005/syzkaller.43m9m1/706/memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 418.585553][ T29] audit: type=1804 audit(1718736273.071:42): pid=15567 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2044908005/syzkaller.43m9m1/706/memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 418.997866][T15590] : renamed from bond0 [ 419.077774][ T51] tipc: Subscription rejected, illegal request [ 419.139206][T15603] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 419.205329][T15603] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 419.216491][T15603] bond1: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 419.229659][T15603] bond1: (slave vcan2): making interface the new active one [ 419.244049][T15603] bond1: (slave vcan2): Enslaving as an active interface with an up link [ 419.286809][T15606] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 419.313380][T15609] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 419.325649][T15609] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 419.428562][T15611] bond0: (slave vcan2): The slave device specified does not support setting the MAC address [ 419.455719][T15611] bond0: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 419.469328][T15611] bond0: (slave vcan2): making interface the new active one [ 419.478022][T15611] bond0: (slave vcan2): Enslaving as an active interface with an up link [ 419.486083][T15615] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 420.005501][T15631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.021380][T15629] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 420.040576][T15629] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 420.078149][T15631] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.161712][T15636] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 420.215093][T15639] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 421.632257][ T5129] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 421.661412][ T5129] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 421.681215][ T5129] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 421.691161][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 421.709760][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 421.719294][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 421.762515][ T144] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 421.811720][T15677] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 421.908039][T15680] bond2: (slave vcan3): The slave device specified does not support setting the MAC address [ 421.919613][T15691] __nla_validate_parse: 1 callbacks suppressed [ 421.919634][T15691] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 421.936513][T15680] bond2: (slave vcan3): Setting fail_over_mac to active for active-backup mode [ 421.953290][T15680] bond2: (slave vcan3): making interface the new active one [ 421.965092][T15680] bond2: (slave vcan3): Enslaving as an active interface with an up link [ 422.008075][T15697] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.070191][ T144] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.084187][T15684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.100402][T15694] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 422.164376][T15698] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 422.180716][T15684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 422.198029][T15698] bond2: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 422.217238][T15698] bond2: (slave vcan1): making interface the new active one [ 422.227471][T15698] bond2: (slave vcan1): Enslaving as an active interface with an up link [ 422.276702][ T144] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.306700][T15681] lo speed is unknown, defaulting to 1000 [ 422.437845][ T144] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.499290][T15714] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 422.525904][T15714] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 422.729778][T15716] rdma_rxe: rxe_newlink: failed to add lo [ 422.843369][ T144] bridge_slave_1: left allmulticast mode [ 422.858264][ T144] bridge_slave_1: left promiscuous mode [ 422.869295][ T144] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.894738][ T144] bridge_slave_0: left allmulticast mode [ 422.901406][ T144] bridge_slave_0: left promiscuous mode [ 422.907297][ T144] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.399258][T15736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.500581][T15736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.612955][T15736] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 423.753806][ T5129] Bluetooth: hci1: command tx timeout [ 424.082793][T15761] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 424.100593][ T144] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 424.114021][ T144] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 424.125255][ T144] bond0 (unregistering): Released all slaves [ 424.156738][T15761] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 424.165144][T15761] CPU: 0 PID: 15761 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 424.175688][T15761] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 424.185755][T15761] Call Trace: [ 424.189042][T15761] [ 424.191981][T15761] dump_stack_lvl+0x241/0x360 [ 424.196676][T15761] ? __pfx_dump_stack_lvl+0x10/0x10 [ 424.201887][T15761] ? __pfx__printk+0x10/0x10 [ 424.206514][T15761] ? sysfs_warn_dup+0x51/0xa0 [ 424.211207][T15761] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 424.216592][T15761] sysfs_warn_dup+0x8e/0xa0 [ 424.221123][T15761] sysfs_do_create_link_sd+0xbe/0x110 [ 424.226527][T15761] device_add_class_symlinks+0x1c5/0x250 [ 424.232187][T15761] device_add+0x553/0xbf0 [ 424.236542][T15761] wiphy_register+0x1d3f/0x2b30 [ 424.241436][T15761] ? __pfx_wiphy_register+0x10/0x10 [ 424.246652][T15761] ? minstrel_ht_alloc+0x72b/0x860 [ 424.251791][T15761] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 424.257877][T15761] ieee80211_register_hw+0x3098/0x3d80 [ 424.263372][T15761] ? ieee80211_register_hw+0x1161/0x3d80 [ 424.269059][T15761] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 424.274911][T15761] ? __asan_memset+0x23/0x50 [ 424.279516][T15761] ? __hrtimer_init+0x170/0x250 [ 424.284392][T15761] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 424.290150][T15761] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 424.296232][T15761] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 424.302663][T15761] ? kstrndup+0x5c/0xb0 [ 424.306834][T15761] ? __asan_memcpy+0x40/0x70 [ 424.311464][T15761] hwsim_new_radio_nl+0xe4c/0x21d0 [ 424.316607][T15761] ? __pfx___nla_validate_parse+0x10/0x10 [ 424.322535][T15761] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 424.328135][T15761] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 424.334494][T15761] genl_rcv_msg+0xb14/0xec0 [ 424.339100][T15761] ? mark_lock+0x9a/0x350 [ 424.343475][T15761] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.348539][T15761] ? __pfx_lock_acquire+0x10/0x10 [ 424.353575][T15761] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 424.359137][T15761] ? __pfx___might_resched+0x10/0x10 [ 424.364449][T15761] netlink_rcv_skb+0x1e3/0x430 [ 424.369251][T15761] ? __pfx_genl_rcv_msg+0x10/0x10 [ 424.374289][T15761] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 424.379606][T15761] ? __netlink_deliver_tap+0x77e/0x7c0 [ 424.385099][T15761] genl_rcv+0x28/0x40 [ 424.389094][T15761] netlink_unicast+0x7ea/0x980 [ 424.393885][T15761] ? __pfx_netlink_unicast+0x10/0x10 [ 424.399185][T15761] ? __virt_addr_valid+0x183/0x520 [ 424.404319][T15761] ? __check_object_size+0x49c/0x900 [ 424.409612][T15761] ? bpf_lsm_netlink_send+0x9/0x10 [ 424.414751][T15761] netlink_sendmsg+0x8db/0xcb0 [ 424.419562][T15761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.424883][T15761] ? __import_iovec+0x536/0x820 [ 424.429770][T15761] ? aa_sock_msg_perm+0x91/0x160 [ 424.434728][T15761] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 424.440026][T15761] ? security_socket_sendmsg+0x87/0xb0 [ 424.445513][T15761] ? __pfx_netlink_sendmsg+0x10/0x10 [ 424.450813][T15761] __sock_sendmsg+0x221/0x270 [ 424.455514][T15761] ____sys_sendmsg+0x525/0x7d0 [ 424.460389][T15761] ? __pfx_____sys_sendmsg+0x10/0x10 [ 424.465704][T15761] __sys_sendmsg+0x2b0/0x3a0 [ 424.470312][T15761] ? __pfx___sys_sendmsg+0x10/0x10 [ 424.475458][T15761] ? security_bpf+0x87/0xb0 [ 424.480002][T15761] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 424.486347][T15761] ? do_syscall_64+0x100/0x230 [ 424.491130][T15761] ? do_syscall_64+0xb6/0x230 [ 424.495823][T15761] do_syscall_64+0xf3/0x230 [ 424.500339][T15761] ? clear_bhb_loop+0x35/0x90 [ 424.505032][T15761] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 424.511024][T15761] RIP: 0033:0x7f4528e7cf29 [ 424.515453][T15761] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 424.535197][T15761] RSP: 002b:00007f4529b2c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 424.543726][T15761] RAX: ffffffffffffffda RBX: 00007f4528fb3f80 RCX: 00007f4528e7cf29 [ 424.551714][T15761] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 424.559714][T15761] RBP: 00007f4528eec074 R08: 0000000000000000 R09: 0000000000000000 [ 424.567696][T15761] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 424.575681][T15761] R13: 000000000000004d R14: 00007f4528fb3f80 R15: 00007ffca0ebab58 [ 424.583697][T15761] [ 424.774461][T15764] syzkaller0: entered promiscuous mode [ 424.780603][T15764] syzkaller0: entered allmulticast mode [ 425.829151][ T5129] Bluetooth: hci1: command tx timeout [ 426.825854][T15778] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 426.855513][T15778] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 426.924553][ T144] mac80211_hwsim hwsim62 wlan0 (unregistering): left allmulticast mode [ 426.986243][ T144] team0: Port device macvlan2 removed [ 427.017440][T15681] chnl_net:caif_netlink_parms(): no params data found [ 427.180802][T15798] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 427.298181][T15798] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 427.334685][ T144] hsr_slave_0: left promiscuous mode [ 427.355447][ T144] hsr_slave_1: left promiscuous mode [ 427.362360][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 427.369936][ T144] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 427.380224][ T144] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.387832][ T144] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.416177][ T144] veth1_macvtap: left promiscuous mode [ 427.423056][ T144] veth0_macvtap: left promiscuous mode [ 427.428964][ T144] veth1_vlan: left promiscuous mode [ 427.434330][ T144] veth0_vlan: left promiscuous mode [ 427.910088][ T5129] Bluetooth: hci1: command tx timeout [ 428.034501][ T144] team0 (unregistering): Port device team_slave_1 removed [ 428.087105][ T144] team0 (unregistering): Port device team_slave_0 removed [ 428.639772][T15681] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.660175][T15681] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.667492][T15681] bridge_slave_0: entered allmulticast mode [ 428.707095][T15681] bridge_slave_0: entered promiscuous mode [ 428.743490][T15681] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.760504][T15681] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.773728][T15681] bridge_slave_1: entered allmulticast mode [ 428.789378][T15681] bridge_slave_1: entered promiscuous mode [ 428.912391][T15681] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.956483][T15681] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.991887][ T61] tipc: Subscription rejected, illegal request [ 429.114753][T15681] team0: Port device team_slave_0 added [ 429.150498][T15681] team0: Port device team_slave_1 added [ 429.258597][T15681] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.284285][T15681] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.328904][T15681] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.347467][T15841] macvlan5: entered promiscuous mode [ 429.360321][T15841] macvlan5: entered allmulticast mode [ 429.377707][T15841] team0: Port device macvlan5 added [ 429.388078][T15681] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.397109][T15681] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.424467][T15681] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.448637][T15843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.521367][T15681] hsr_slave_0: entered promiscuous mode [ 429.529719][T15681] hsr_slave_1: entered promiscuous mode [ 429.548884][T15681] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.551772][T15843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.556478][T15681] Cannot create hsr debugfs directory [ 429.660633][T15843] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.780236][T15848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.889034][T15848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.963642][T15848] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 429.990165][ T5129] Bluetooth: hci1: command tx timeout [ 430.168237][T15681] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 430.192108][T15681] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 430.222406][T15681] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 430.243985][T15681] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 430.330463][T15855] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 430.381906][T15855] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 430.404490][T15851] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 430.414441][T15851] bridge_slave_1: left allmulticast mode [ 430.421557][T15851] bridge_slave_1: left promiscuous mode [ 430.427532][T15851] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.442623][T15851] bridge_slave_0: left promiscuous mode [ 430.449745][T15851] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.566735][ T35] tipc: Subscription rejected, illegal request [ 430.645509][T15681] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.693738][T15681] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.725993][ T7077] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.733266][ T7077] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.783318][ T7077] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.790587][ T7077] bridge0: port 2(bridge_slave_1) entered forwarding state [ 430.941686][T15880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 430.971043][T15882] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 431.044794][T15880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.083395][T15882] bond3: (slave vcan2): The slave device specified does not support setting the MAC address [ 431.093873][T15882] bond3: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 431.107377][T15882] bond3: (slave vcan2): making interface the new active one [ 431.117508][T15882] bond3: (slave vcan2): Enslaving as an active interface with an up link [ 431.118370][T15889] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.323628][T15681] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 431.401102][T15900] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 431.427256][T15900] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.1'. [ 431.441684][T15681] veth0_vlan: entered promiscuous mode [ 431.474991][T15681] veth1_vlan: entered promiscuous mode [ 431.530370][T15681] veth0_macvtap: entered promiscuous mode [ 431.562858][T15681] veth1_macvtap: entered promiscuous mode [ 431.612358][T15681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.623685][T15681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.634017][T15681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 431.644732][T15681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.662891][T15681] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 431.701317][T15681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.739015][T15681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.766078][T15681] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 431.787245][T15681] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 431.801312][ T29] audit: type=1800 audit(1718736286.321:43): pid=15917 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 431.809487][T15681] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 431.866843][ T29] audit: type=1804 audit(1718736286.321:44): pid=15918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2044908005/syzkaller.43m9m1/734/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 431.899825][T15681] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.919305][T15681] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.928270][T15681] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.958952][T15681] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 432.058467][T15926] macvlan6: entered promiscuous mode [ 432.081614][T15926] macvlan6: entered allmulticast mode [ 432.096246][T15926] team0: Port device macvlan6 added [ 432.211347][ T2880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.224603][ T2880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.300938][T15404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 432.325081][T15404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 432.378098][T15938] rdma_rxe: rxe_newlink: failed to add lo [ 432.754607][T15955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.834922][T15956] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 432.907549][T15955] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.015559][T15968] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 433.222658][T15972] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 433.391866][T15980] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 433.459059][T15978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.483241][ T7085] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 433.501806][ T7085] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 433.532946][ T61] wlan1: authenticated [ 433.538073][T15978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.551081][ T61] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 433.627059][T15978] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.719429][T15995] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 433.772444][T15995] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 433.801105][T15989] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 433.818457][T15989] bridge_slave_1: left allmulticast mode [ 433.827110][T15989] bridge_slave_1: left promiscuous mode [ 433.834090][T15989] bridge0: port 2(bridge_slave_1) entered disabled state [ 433.846409][T16000] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 433.858617][T15989] : left allmulticast mode [ 433.865488][T15989] : left promiscuous mode [ 433.870518][T15989] bridge0: port 1() entered disabled state [ 433.953083][T15998] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 434.205577][T16014] rdma_rxe: rxe_newlink: failed to add lo [ 434.229595][ T2880] wlan1: associate with 08:02:11:00:00:00 (try 2/3) [ 434.361490][ T35] wlan1: associate with 08:02:11:00:00:00 (try 3/3) [ 434.372718][T16020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.473753][T16020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.494758][T16018] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 434.510388][ T61] wlan1: association with 08:02:11:00:00:00 timed out [ 434.556904][T16020] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 434.672979][ T29] audit: type=1800 audit(1718736289.191:45): pid=16004 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="cgroup.controllers" dev="sda1" ino=1961 res=0 errno=0 [ 435.232178][T16038] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 435.252971][T16038] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 435.298433][T16044] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 435.322346][T16044] team0: Port device netdevsim0 removed [ 435.333017][T16044] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 435.356037][T16038] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 435.384424][T16040] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 435.465052][T16040] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 435.478987][T16040] bridge_slave_1: left allmulticast mode [ 435.496155][T16040] bridge_slave_1: left promiscuous mode [ 435.506228][T16040] bridge0: port 2(bridge_slave_1) entered disabled state [ 435.517803][T16040] bridge_slave_0: left allmulticast mode [ 435.524165][T16040] bridge_slave_0: left promiscuous mode [ 435.531850][T16040] bridge0: port 1(bridge_slave_0) entered disabled state [ 435.666984][T16055] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 435.901767][T16072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 436.101716][T16085] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 436.118019][T16086] rdma_rxe: rxe_newlink: failed to add lo [ 436.122967][T16085] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 436.143563][T16084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.271314][T16084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 436.344670][T16084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.217836][T16122] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 437.888564][T16163] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 437.982958][T16165] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 438.039139][T16165] bond2: (slave vcan3): The slave device specified does not support setting the MAC address [ 438.049428][T16165] bond2: (slave vcan3): Setting fail_over_mac to active for active-backup mode [ 438.064559][T16165] bond2: (slave vcan3): making interface the new active one [ 438.073237][T16165] bond2: (slave vcan3): Enslaving as an active interface with an up link [ 438.318669][ T35] tipc: Subscription rejected, illegal request [ 438.362427][T16187] macvlan1: entered promiscuous mode [ 438.370443][T16187] macvlan1: entered allmulticast mode [ 438.381742][T16187] team0: Port device macvlan1 added [ 438.600833][T16201] bridge_slave_0: left promiscuous mode [ 438.614314][T16201] bridge0: port 1(bridge_slave_0) entered disabled state [ 439.556025][T16213] __nla_validate_parse: 12 callbacks suppressed [ 439.556049][T16213] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 439.575791][T16213] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 439.643666][T16213] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 439.665532][T16217] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 439.731012][T16221] bond3: (slave vcan4): The slave device specified does not support setting the MAC address [ 439.773574][T16221] bond3: (slave vcan4): Setting fail_over_mac to active for active-backup mode [ 439.799847][T16221] bond3: (slave vcan4): making interface the new active one [ 439.813619][T16221] bond3: (slave vcan4): Enslaving as an active interface with an up link [ 439.991430][T16237] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 440.016812][T16237] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 440.027524][T16237] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 440.027651][T16239] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 440.163474][ T61] tipc: Subscription rejected, illegal request [ 440.353153][T16255] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 440.400339][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.406721][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.449670][T16255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 440.592532][T16261] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 440.660368][T16264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 440.723699][T16270] netlink: 47 bytes leftover after parsing attributes in process `syz-executor.4'. [ 440.880504][T16275] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 440.904472][T16275] sit0: left allmulticast mode [ 440.925658][T16275] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 441.041567][T16284] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 441.168686][T16283] syzkaller0: entered promiscuous mode [ 441.178718][T16283] syzkaller0: entered allmulticast mode [ 443.358043][T16316] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 443.385851][T16316] CPU: 0 PID: 16316 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 443.396435][T16316] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 443.406542][T16316] Call Trace: [ 443.409907][T16316] [ 443.412877][T16316] dump_stack_lvl+0x241/0x360 [ 443.417641][T16316] ? __pfx_dump_stack_lvl+0x10/0x10 [ 443.422908][T16316] ? __pfx__printk+0x10/0x10 [ 443.427564][T16316] ? sysfs_warn_dup+0x51/0xa0 [ 443.432294][T16316] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 443.437718][T16316] sysfs_warn_dup+0x8e/0xa0 [ 443.442283][T16316] sysfs_do_create_link_sd+0xbe/0x110 [ 443.447720][T16316] device_add_class_symlinks+0x1c5/0x250 [ 443.453414][T16316] device_add+0x553/0xbf0 [ 443.457816][T16316] wiphy_register+0x1d3f/0x2b30 [ 443.462991][T16316] ? __pfx_wiphy_register+0x10/0x10 [ 443.468251][T16316] ? minstrel_ht_alloc+0x72b/0x860 [ 443.473428][T16316] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 443.479559][T16316] ieee80211_register_hw+0x3098/0x3d80 [ 443.485113][T16316] ? ieee80211_register_hw+0x1161/0x3d80 [ 443.490818][T16316] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 443.496694][T16316] ? __asan_memset+0x23/0x50 [ 443.501338][T16316] ? __hrtimer_init+0x170/0x250 [ 443.506249][T16316] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 443.512056][T16316] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 443.518284][T16316] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 443.524749][T16316] ? kstrndup+0x5c/0xb0 [ 443.528944][T16316] ? __asan_memcpy+0x40/0x70 [ 443.533562][T16316] hwsim_new_radio_nl+0xe4c/0x21d0 [ 443.538728][T16316] ? __pfx___nla_validate_parse+0x10/0x10 [ 443.544502][T16316] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 443.550123][T16316] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 443.556484][T16316] genl_rcv_msg+0xb14/0xec0 [ 443.561003][T16316] ? mark_lock+0x9a/0x350 [ 443.565387][T16316] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.570453][T16316] ? __pfx_lock_acquire+0x10/0x10 [ 443.575659][T16316] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 443.581222][T16316] ? __pfx___might_resched+0x10/0x10 [ 443.586531][T16316] netlink_rcv_skb+0x1e3/0x430 [ 443.591497][T16316] ? __pfx_genl_rcv_msg+0x10/0x10 [ 443.596538][T16316] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 443.601880][T16316] ? __netlink_deliver_tap+0x77e/0x7c0 [ 443.607389][T16316] genl_rcv+0x28/0x40 [ 443.611396][T16316] netlink_unicast+0x7ea/0x980 [ 443.616191][T16316] ? __pfx_netlink_unicast+0x10/0x10 [ 443.621490][T16316] ? __virt_addr_valid+0x183/0x520 [ 443.626623][T16316] ? __check_object_size+0x49c/0x900 [ 443.631920][T16316] ? bpf_lsm_netlink_send+0x9/0x10 [ 443.637050][T16316] netlink_sendmsg+0x8db/0xcb0 [ 443.641863][T16316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.647169][T16316] ? __import_iovec+0x536/0x820 [ 443.652038][T16316] ? aa_sock_msg_perm+0x91/0x160 [ 443.656998][T16316] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 443.662293][T16316] ? security_socket_sendmsg+0x87/0xb0 [ 443.667775][T16316] ? __pfx_netlink_sendmsg+0x10/0x10 [ 443.673075][T16316] __sock_sendmsg+0x221/0x270 [ 443.677772][T16316] ____sys_sendmsg+0x525/0x7d0 [ 443.682556][T16316] ? __pfx_____sys_sendmsg+0x10/0x10 [ 443.687889][T16316] __sys_sendmsg+0x2b0/0x3a0 [ 443.692496][T16316] ? __pfx___sys_sendmsg+0x10/0x10 [ 443.697645][T16316] ? bpf_raw_tracepoint_open+0xd7/0x240 [ 443.703234][T16316] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 443.709575][T16316] ? do_syscall_64+0x100/0x230 [ 443.714358][T16316] ? do_syscall_64+0xb6/0x230 [ 443.719048][T16316] do_syscall_64+0xf3/0x230 [ 443.723566][T16316] ? clear_bhb_loop+0x35/0x90 [ 443.728259][T16316] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 443.734161][T16316] RIP: 0033:0x7f1e65e7cf29 [ 443.738585][T16316] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 443.758214][T16316] RSP: 002b:00007f1e66c2e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 443.766658][T16316] RAX: ffffffffffffffda RBX: 00007f1e65fb3f80 RCX: 00007f1e65e7cf29 [ 443.774639][T16316] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 443.782623][T16316] RBP: 00007f1e65eec074 R08: 0000000000000000 R09: 0000000000000000 [ 443.790606][T16316] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 443.798677][T16316] R13: 000000000000000b R14: 00007f1e65fb3f80 R15: 00007ffd66350918 [ 443.806708][T16316] [ 443.905989][T16327] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 444.059950][ T144] tipc: Subscription rejected, illegal request [ 444.141550][T16342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.211485][T16348] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 444.257036][T16342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.324311][T16353] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 444.336386][T16354] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004 [ 444.624906][T16359] __nla_validate_parse: 15 callbacks suppressed [ 444.624922][T16359] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 444.644515][T16359] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 444.925162][T16370] netlink: 216 bytes leftover after parsing attributes in process `syz-executor.3'. [ 445.080776][T16379] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 445.111675][T16381] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 445.127599][T16379] sit0: entered promiscuous mode [ 445.134006][T16383] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 445.147826][T16379] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 445.159332][T16379] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 445.175526][T16381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.242721][T16377] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 445.286901][T16381] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.396285][T16387] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.429052][T16393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.557512][T16393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.612835][T16399] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 445.626745][T16393] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 445.643080][T16399] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 445.954218][T16413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.024486][T16413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.095169][T16413] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 446.228425][T16425] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 446.303329][T16426] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 446.397005][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 446.418133][T16435] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 446.513871][T16437] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 446.587621][T16442] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 446.617906][T16442] batman_adv: batadv0: Adding interface: team0 [ 446.637183][T16442] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.666533][T16442] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 446.698075][T16445] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 446.708578][T16445] team0: entered promiscuous mode [ 446.716209][T16445] team_slave_0: entered promiscuous mode [ 446.739165][T16445] team_slave_1: entered promiscuous mode [ 446.744999][T16445] geneve0: entered promiscuous mode [ 446.763777][T16445] 8021q: adding VLAN 0 to HW filter on device team0 [ 446.775727][T16445] batman_adv: batadv0: Interface activated: team0 [ 446.787409][T16445] batman_adv: batadv0: Interface deactivated: team0 [ 446.806310][T16445] batman_adv: batadv0: Removing interface: team0 [ 446.898655][T16454] vlan0: entered promiscuous mode [ 446.905676][T16454] vlan0: entered allmulticast mode [ 446.991309][T16461] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 447.155150][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 447.466909][T16479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.574570][T16479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.615332][T16485] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 447.658940][T16479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 447.696919][T16493] sit0: entered promiscuous mode [ 447.713323][T16493] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 447.794231][T16498] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 447.822338][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 449.154363][T16557] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 449.285088][T16565] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 449.343965][T16570] netlink: 'syz-executor.2': attribute type 30 has an invalid length. [ 449.392341][T16570] team_slave_1: mtu greater than device maximum [ 449.409444][T16570] team0: Device team_slave_1 failed to change mtu [ 449.483999][T16574] team0: Port device macvlan1 removed [ 449.886555][T16598] __nla_validate_parse: 20 callbacks suppressed [ 449.886577][T16598] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 449.924534][T16598] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 450.140712][T16605] team_slave_1: mtu greater than device maximum [ 450.147032][T16605] team0: Device team_slave_1 failed to change mtu [ 450.182286][T16607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.305271][T16607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.329943][ T51] tipc: Subscription rejected, illegal request [ 450.392927][T16610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.586930][T16625] validate_nla: 3 callbacks suppressed [ 450.586954][T16625] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 450.604078][T16627] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 450.662420][T16627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.743626][T16627] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 450.753879][T16635] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.4'. [ 450.767104][T16635] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 450.775588][T16635] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.4'. [ 450.788347][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 450.798540][T16636] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 450.809153][T16636] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 450.831113][T16637] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 451.051463][T16646] netlink: 'syz-executor.4': attribute type 30 has an invalid length. [ 451.086356][T16646] team_slave_1: mtu greater than device maximum [ 451.105684][T16646] team0: Device team_slave_1 failed to change mtu [ 451.252502][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 451.289420][T16651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 451.309298][T16651] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 451.546666][T16660] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 451.606171][T16663] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 451.629138][T16663] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 451.640202][T16663] netlink: 'syz-executor.2': attribute type 8 has an invalid length. [ 451.676490][T16663] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 451.741846][T16668] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 451.900633][T16685] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 452.102712][T16697] raw_sendmsg: syz-executor.1 forgot to set AF_INET. Fix it! [ 452.152233][T16697] bond0: entered promiscuous mode [ 452.164106][T16699] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 452.419400][T16712] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 452.427513][T16712] CPU: 1 PID: 16712 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 452.438065][T16712] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 452.448218][T16712] Call Trace: [ 452.451533][T16712] [ 452.454487][T16712] dump_stack_lvl+0x241/0x360 [ 452.459213][T16712] ? __pfx_dump_stack_lvl+0x10/0x10 [ 452.464461][T16712] ? __pfx__printk+0x10/0x10 [ 452.469112][T16712] ? sysfs_warn_dup+0x51/0xa0 [ 452.473846][T16712] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 452.479273][T16712] sysfs_warn_dup+0x8e/0xa0 [ 452.483829][T16712] sysfs_do_create_link_sd+0xbe/0x110 [ 452.489272][T16712] device_add_class_symlinks+0x1c5/0x250 [ 452.494974][T16712] device_add+0x553/0xbf0 [ 452.499349][T16712] wiphy_register+0x1d3f/0x2b30 [ 452.504299][T16712] ? __pfx_wiphy_register+0x10/0x10 [ 452.509530][T16712] ? minstrel_ht_alloc+0x72b/0x860 [ 452.514692][T16712] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 452.520805][T16712] ieee80211_register_hw+0x3098/0x3d80 [ 452.526319][T16712] ? ieee80211_register_hw+0x1161/0x3d80 [ 452.531977][T16712] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 452.537812][T16712] ? __asan_memset+0x23/0x50 [ 452.542434][T16712] ? __hrtimer_init+0x170/0x250 [ 452.547325][T16712] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 452.553178][T16712] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 452.559276][T16712] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 452.565770][T16712] ? kstrndup+0x5c/0xb0 [ 452.569996][T16712] ? __asan_memcpy+0x40/0x70 [ 452.574627][T16712] hwsim_new_radio_nl+0xe4c/0x21d0 [ 452.579790][T16712] ? __pfx___nla_validate_parse+0x10/0x10 [ 452.585650][T16712] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 452.591267][T16712] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 452.597639][T16712] genl_rcv_msg+0xb14/0xec0 [ 452.602177][T16712] ? mark_lock+0x9a/0x350 [ 452.606529][T16712] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.611570][T16712] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 452.617493][T16712] ? __pfx_lock_acquire+0x10/0x10 [ 452.622530][T16712] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 452.628093][T16712] ? __pfx___might_resched+0x10/0x10 [ 452.633403][T16712] netlink_rcv_skb+0x1e3/0x430 [ 452.638188][T16712] ? __pfx_genl_rcv_msg+0x10/0x10 [ 452.643227][T16712] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 452.648536][T16712] ? __netlink_deliver_tap+0x77e/0x7c0 [ 452.654042][T16712] genl_rcv+0x28/0x40 [ 452.658053][T16712] netlink_unicast+0x7ea/0x980 [ 452.662867][T16712] ? __pfx_netlink_unicast+0x10/0x10 [ 452.668176][T16712] ? __virt_addr_valid+0x183/0x520 [ 452.673309][T16712] ? __check_object_size+0x49c/0x900 [ 452.678601][T16712] ? bpf_lsm_netlink_send+0x9/0x10 [ 452.683735][T16712] netlink_sendmsg+0x8db/0xcb0 [ 452.688531][T16712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.693836][T16712] ? __import_iovec+0x536/0x820 [ 452.698703][T16712] ? aa_sock_msg_perm+0x91/0x160 [ 452.703668][T16712] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 452.708978][T16712] ? security_socket_sendmsg+0x87/0xb0 [ 452.709023][ T5132] Bluetooth: hci2: command 0x0406 tx timeout [ 452.714464][T16712] ? __pfx_netlink_sendmsg+0x10/0x10 [ 452.725811][T16712] __sock_sendmsg+0x221/0x270 [ 452.730548][T16712] ____sys_sendmsg+0x525/0x7d0 [ 452.735352][T16712] ? __pfx_____sys_sendmsg+0x10/0x10 [ 452.740689][T16712] __sys_sendmsg+0x2b0/0x3a0 [ 452.745315][T16712] ? __pfx___sys_sendmsg+0x10/0x10 [ 452.750449][T16712] ? bpf_raw_tracepoint_open+0xd7/0x240 [ 452.756031][T16712] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 452.762384][T16712] ? do_syscall_64+0x100/0x230 [ 452.767184][T16712] ? do_syscall_64+0xb6/0x230 [ 452.771871][T16712] do_syscall_64+0xf3/0x230 [ 452.776387][T16712] ? clear_bhb_loop+0x35/0x90 [ 452.781266][T16712] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 452.787191][T16712] RIP: 0033:0x7f1e65e7cf29 [ 452.791610][T16712] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 452.811328][T16712] RSP: 002b:00007f1e66c2e0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 452.819766][T16712] RAX: ffffffffffffffda RBX: 00007f1e65fb3f80 RCX: 00007f1e65e7cf29 [ 452.827760][T16712] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 452.835809][T16712] RBP: 00007f1e65eec074 R08: 0000000000000000 R09: 0000000000000000 [ 452.843824][T16712] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 452.851893][T16712] R13: 000000000000000b R14: 00007f1e65fb3f80 R15: 00007ffd66350918 [ 452.859911][T16712] [ 453.456038][T16756] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 453.486687][T16759] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 454.328505][ T61] tipc: Subscription rejected, illegal request [ 455.381610][T16843] __nla_validate_parse: 16 callbacks suppressed [ 455.381632][T16843] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 455.402976][T16843] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 455.422461][T16844] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 455.663003][T16849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.685982][ T5132] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 455.697629][ T5132] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 455.709463][ T5132] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 455.718534][ T5132] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 455.727548][ T5132] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 455.735553][ T5132] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 455.784013][T16849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 455.807393][T16850] lo speed is unknown, defaulting to 1000 [ 455.860939][T16849] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.225985][T16871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.319286][T16871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.387161][T16850] chnl_net:caif_netlink_parms(): no params data found [ 456.428456][T16871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 456.492091][T16884] SET target dimension over the limit! [ 456.656115][T16850] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.675146][T16850] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.682799][T16850] bridge_slave_0: entered allmulticast mode [ 456.690708][T16850] bridge_slave_0: entered promiscuous mode [ 456.705585][T16850] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.714708][T16850] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.728168][T16850] bridge_slave_1: entered allmulticast mode [ 456.735956][T16850] bridge_slave_1: entered promiscuous mode [ 456.826892][T16850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 456.838591][T16899] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 456.855125][T16850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 456.885356][T16899] sit0: entered promiscuous mode [ 456.890822][T16899] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 456.899037][T16899] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 456.932815][T16850] team0: Port device team_slave_0 added [ 456.940514][ C1] syz_tun: tun_net_xmit 54 [ 456.973031][T16905] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 456.985984][T16850] team0: Port device team_slave_1 added [ 456.999011][T16902] IPVS: stopping backup sync thread 16905 ... [ 457.082405][T16850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 457.094921][T16850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.124166][T16850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 457.137756][T16911] netlink: 14 bytes leftover after parsing attributes in process `syz-executor.3'. [ 457.154740][T16911] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 457.176303][T16850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 457.192827][T16850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 457.248534][T16850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 457.334429][T16917] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 457.348069][T16917] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 457.386943][ T61] tipc: Subscription rejected, illegal request [ 457.390076][T16850] hsr_slave_0: entered promiscuous mode [ 457.407844][T16850] hsr_slave_1: entered promiscuous mode [ 457.425278][T16850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 457.444192][T16850] Cannot create hsr debugfs directory [ 457.474780][T16924] SET target dimension over the limit! [ 457.829570][ T5129] Bluetooth: hci5: command tx timeout [ 457.840377][T16850] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 457.866300][T16850] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.923946][T16941] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.3'. [ 457.995159][T16850] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.011404][T16850] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.032650][T16937] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 458.048969][T16937] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 458.076686][T16943] lo speed is unknown, defaulting to 1000 [ 458.114169][T16850] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.141928][T16850] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.244390][T16850] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 458.294964][T16850] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.353683][T16949] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 458.368957][T16949] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 458.434831][T16950] team0: Port device macvlan1 removed [ 458.487389][T16955] SET target dimension over the limit! [ 458.829443][T16850] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 458.843748][T16850] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 458.873709][T16850] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 458.885637][T16850] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 459.032098][T16850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 459.084941][T16943] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 459.093002][T16850] 8021q: adding VLAN 0 to HW filter on device team0 [ 459.112418][T16972] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 459.130875][T16972] CPU: 1 PID: 16972 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 459.141456][T16972] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 459.151563][T16972] Call Trace: [ 459.154886][T16972] [ 459.157857][T16972] dump_stack_lvl+0x241/0x360 [ 459.162590][T16972] ? __pfx_dump_stack_lvl+0x10/0x10 [ 459.167839][T16972] ? __pfx__printk+0x10/0x10 [ 459.172488][T16972] ? sysfs_warn_dup+0x51/0xa0 [ 459.177225][T16972] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 459.182655][T16972] sysfs_warn_dup+0x8e/0xa0 [ 459.187221][T16972] sysfs_do_create_link_sd+0xbe/0x110 [ 459.192661][T16972] device_add_class_symlinks+0x1c5/0x250 [ 459.198359][T16972] device_add+0x553/0xbf0 [ 459.202752][T16972] wiphy_register+0x1d3f/0x2b30 [ 459.207689][T16972] ? __pfx_wiphy_register+0x10/0x10 [ 459.212942][T16972] ? minstrel_ht_alloc+0x72b/0x860 [ 459.218128][T16972] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 459.224258][T16972] ieee80211_register_hw+0x3098/0x3d80 [ 459.229799][T16972] ? ieee80211_register_hw+0x1161/0x3d80 [ 459.235508][T16972] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 459.241391][T16972] ? __asan_memset+0x23/0x50 [ 459.246065][T16972] ? __hrtimer_init+0x170/0x250 [ 459.250985][T16972] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 459.256794][T16972] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 459.262915][T16972] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 459.269458][T16972] ? kstrndup+0x5c/0xb0 [ 459.273662][T16972] ? __asan_memcpy+0x40/0x70 [ 459.278310][T16972] hwsim_new_radio_nl+0xe4c/0x21d0 [ 459.283492][T16972] ? __pfx___nla_validate_parse+0x10/0x10 [ 459.289279][T16972] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 459.294931][T16972] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 459.301326][T16972] genl_rcv_msg+0xb14/0xec0 [ 459.305902][T16972] ? mark_lock+0x9a/0x350 [ 459.310339][T16972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.315449][T16972] ? __pfx_lock_acquire+0x10/0x10 [ 459.320526][T16972] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 459.326128][T16972] ? __pfx___might_resched+0x10/0x10 [ 459.331479][T16972] netlink_rcv_skb+0x1e3/0x430 [ 459.336300][T16972] ? __pfx_genl_rcv_msg+0x10/0x10 [ 459.341376][T16972] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 459.346742][T16972] ? __netlink_deliver_tap+0x77e/0x7c0 [ 459.352303][T16972] genl_rcv+0x28/0x40 [ 459.356344][T16972] netlink_unicast+0x7ea/0x980 [ 459.361178][T16972] ? __pfx_netlink_unicast+0x10/0x10 [ 459.366520][T16972] ? __virt_addr_valid+0x183/0x520 [ 459.371701][T16972] ? __check_object_size+0x49c/0x900 [ 459.377037][T16972] ? bpf_lsm_netlink_send+0x9/0x10 [ 459.382225][T16972] netlink_sendmsg+0x8db/0xcb0 [ 459.387073][T16972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.392423][T16972] ? __import_iovec+0x536/0x820 [ 459.397333][T16972] ? aa_sock_msg_perm+0x91/0x160 [ 459.402333][T16972] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 459.407858][T16972] ? security_socket_sendmsg+0x87/0xb0 [ 459.413417][T16972] ? __pfx_netlink_sendmsg+0x10/0x10 [ 459.418783][T16972] __sock_sendmsg+0x221/0x270 [ 459.423554][T16972] ____sys_sendmsg+0x525/0x7d0 [ 459.428425][T16972] ? __pfx_____sys_sendmsg+0x10/0x10 [ 459.433803][T16972] __sys_sendmsg+0x2b0/0x3a0 [ 459.438454][T16972] ? __pfx___sys_sendmsg+0x10/0x10 [ 459.443652][T16972] ? bpf_raw_tracepoint_open+0xd7/0x240 [ 459.449350][T16972] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 459.455739][T16972] ? do_syscall_64+0x100/0x230 [ 459.460526][T16972] ? do_syscall_64+0xb6/0x230 [ 459.465218][T16972] do_syscall_64+0xf3/0x230 [ 459.469750][T16972] ? clear_bhb_loop+0x35/0x90 [ 459.474442][T16972] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 459.480351][T16972] RIP: 0033:0x7f8164a7cf29 [ 459.484778][T16972] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 459.504410][T16972] RSP: 002b:00007f81658140c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 459.512850][T16972] RAX: ffffffffffffffda RBX: 00007f8164bb3f80 RCX: 00007f8164a7cf29 [ 459.520834][T16972] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 459.528826][T16972] RBP: 00007f8164aec074 R08: 0000000000000000 R09: 0000000000000000 [ 459.536808][T16972] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 459.544792][T16972] R13: 000000000000004d R14: 00007f8164bb3f80 R15: 00007fffdb7265b8 [ 459.552818][T16972] [ 459.612642][T16980] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 459.636447][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.643729][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 459.787021][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.794254][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 459.878180][T16984] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 459.911527][ T5129] Bluetooth: hci5: command tx timeout [ 459.932774][T16988] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 460.056385][T16996] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 460.096824][T16996] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 460.446641][T17012] __nla_validate_parse: 4 callbacks suppressed [ 460.446662][T17012] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 460.717514][T17026] netlink: 4100 bytes leftover after parsing attributes in process `syz-executor.1'. [ 460.733838][T17026] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 460.751366][T17026] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 460.811328][T16850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.938122][T17035] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 460.953106][T17035] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.3'. [ 460.994563][T17038] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.005953][T16850] veth0_vlan: entered promiscuous mode [ 461.033283][T16850] veth1_vlan: entered promiscuous mode [ 461.052224][T17038] debugfs: Directory '!!ô' with parent 'ieee80211' already present! [ 461.148569][T16850] veth0_macvtap: entered promiscuous mode [ 461.173021][T16850] veth1_macvtap: entered promiscuous mode [ 461.235993][T16850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.259849][T16850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.276726][T16850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.294041][T16850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.314880][T16850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 461.338569][T16850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.361043][T16850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 461.423799][T16850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.448573][T16850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.465825][T16850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.477676][T16850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.489002][T16850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 461.499922][T16850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 461.530052][T16850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 461.548596][T16850] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.564086][T16850] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.574750][T16850] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.584225][T16850] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 461.705245][T17075] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.743353][T17075] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 461.863707][T17081] rdma_rxe: rxe_newlink: failed to add lo [ 461.989205][ T5129] Bluetooth: hci5: command tx timeout [ 462.012857][T17088] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 462.059950][ T2880] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.079413][T17088] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 462.093073][ T2880] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.114216][T17088] CPU: 0 PID: 17088 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 462.124973][T17088] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 462.135077][T17088] Call Trace: [ 462.138429][T17088] [ 462.141405][T17088] dump_stack_lvl+0x241/0x360 [ 462.146158][T17088] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.151417][T17088] ? __pfx__printk+0x10/0x10 [ 462.156074][T17088] ? sysfs_warn_dup+0x51/0xa0 [ 462.161000][T17088] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 462.166430][T17088] sysfs_warn_dup+0x8e/0xa0 [ 462.170992][T17088] sysfs_do_create_link_sd+0xbe/0x110 [ 462.176521][T17088] device_add_class_symlinks+0x1c5/0x250 [ 462.182231][T17088] device_add+0x553/0xbf0 [ 462.186711][T17088] wiphy_register+0x1d3f/0x2b30 [ 462.191659][T17088] ? __pfx_wiphy_register+0x10/0x10 [ 462.196908][T17088] ? minstrel_ht_alloc+0x72b/0x860 [ 462.202084][T17088] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 462.208205][T17088] ieee80211_register_hw+0x3098/0x3d80 [ 462.213825][T17088] ? ieee80211_register_hw+0x1161/0x3d80 [ 462.219522][T17088] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 462.225391][T17088] ? __asan_memset+0x23/0x50 [ 462.230027][T17088] ? __hrtimer_init+0x170/0x250 [ 462.235110][T17088] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 462.240922][T17088] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 462.247038][T17088] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 462.253502][T17088] ? kstrndup+0x5c/0xb0 [ 462.257722][T17088] ? __asan_memcpy+0x40/0x70 [ 462.262381][T17088] hwsim_new_radio_nl+0xe4c/0x21d0 [ 462.267569][T17088] ? __pfx___nla_validate_parse+0x10/0x10 [ 462.273358][T17088] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 462.279090][T17088] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 462.285485][T17088] genl_rcv_msg+0xb14/0xec0 [ 462.290042][T17088] ? mark_lock+0x9a/0x350 [ 462.294517][T17088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.299621][T17088] ? __pfx_lock_acquire+0x10/0x10 [ 462.304690][T17088] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 462.310292][T17088] ? __pfx___might_resched+0x10/0x10 [ 462.315642][T17088] netlink_rcv_skb+0x1e3/0x430 [ 462.320465][T17088] ? __pfx_genl_rcv_msg+0x10/0x10 [ 462.325533][T17088] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 462.330885][T17088] ? __netlink_deliver_tap+0x77e/0x7c0 [ 462.336415][T17088] genl_rcv+0x28/0x40 [ 462.340437][T17088] netlink_unicast+0x7ea/0x980 [ 462.345266][T17088] ? __pfx_netlink_unicast+0x10/0x10 [ 462.350592][T17088] ? __virt_addr_valid+0x183/0x520 [ 462.355740][T17088] ? __check_object_size+0x49c/0x900 [ 462.361045][T17088] ? bpf_lsm_netlink_send+0x9/0x10 [ 462.366186][T17088] netlink_sendmsg+0x8db/0xcb0 [ 462.370987][T17088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.376299][T17088] ? __import_iovec+0x536/0x820 [ 462.381186][T17088] ? aa_sock_msg_perm+0x91/0x160 [ 462.386138][T17088] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 462.391433][T17088] ? security_socket_sendmsg+0x87/0xb0 [ 462.396920][T17088] ? __pfx_netlink_sendmsg+0x10/0x10 [ 462.402242][T17088] __sock_sendmsg+0x221/0x270 [ 462.406966][T17088] ____sys_sendmsg+0x525/0x7d0 [ 462.411762][T17088] ? __pfx_____sys_sendmsg+0x10/0x10 [ 462.417104][T17088] __sys_sendmsg+0x2b0/0x3a0 [ 462.421745][T17088] ? __pfx___sys_sendmsg+0x10/0x10 [ 462.426899][T17088] ? bpf_raw_tracepoint_open+0xd7/0x240 [ 462.432502][T17088] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 462.438853][T17088] ? do_syscall_64+0x100/0x230 [ 462.443634][T17088] ? do_syscall_64+0xb6/0x230 [ 462.448325][T17088] do_syscall_64+0xf3/0x230 [ 462.452846][T17088] ? clear_bhb_loop+0x35/0x90 [ 462.457546][T17088] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 462.463455][T17088] RIP: 0033:0x7f4528e7cf29 [ 462.467884][T17088] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 462.487547][T17088] RSP: 002b:00007f4529b2c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 462.496087][T17088] RAX: ffffffffffffffda RBX: 00007f4528fb3f80 RCX: 00007f4528e7cf29 [ 462.504081][T17088] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 462.512073][T17088] RBP: 00007f4528eec074 R08: 0000000000000000 R09: 0000000000000000 [ 462.520057][T17088] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 462.528040][T17088] R13: 000000000000004d R14: 00007f4528fb3f80 R15: 00007ffca0ebab58 [ 462.536214][T17088] [ 462.774212][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 462.790960][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 462.813973][T17096] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 462.855929][T17096] sysfs: cannot create duplicate filename '/class/ieee80211/!!ô' [ 462.905758][T17096] CPU: 0 PID: 17096 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 462.916347][T17096] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 462.926459][T17096] Call Trace: [ 462.929784][T17096] [ 462.932751][T17096] dump_stack_lvl+0x241/0x360 [ 462.937492][T17096] ? __pfx_dump_stack_lvl+0x10/0x10 [ 462.942743][T17096] ? __pfx__printk+0x10/0x10 [ 462.947393][T17096] ? sysfs_warn_dup+0x51/0xa0 [ 462.952139][T17096] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 462.957564][T17096] sysfs_warn_dup+0x8e/0xa0 [ 462.962123][T17096] sysfs_do_create_link_sd+0xbe/0x110 [ 462.967555][T17096] device_add_class_symlinks+0x1c5/0x250 [ 462.973243][T17096] device_add+0x553/0xbf0 [ 462.977634][T17096] wiphy_register+0x1d3f/0x2b30 [ 462.982567][T17096] ? __pfx_wiphy_register+0x10/0x10 [ 462.987819][T17096] ? minstrel_ht_alloc+0x72b/0x860 [ 462.993002][T17096] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 462.999136][T17096] ieee80211_register_hw+0x3098/0x3d80 [ 463.004676][T17096] ? ieee80211_register_hw+0x1161/0x3d80 [ 463.010382][T17096] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 463.016256][T17096] ? __asan_memset+0x23/0x50 [ 463.020891][T17096] ? __hrtimer_init+0x170/0x250 [ 463.025767][T17096] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 463.031525][T17096] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 463.037605][T17096] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 463.044029][T17096] ? kstrndup+0x5c/0xb0 [ 463.048195][T17096] ? __asan_memcpy+0x40/0x70 [ 463.052803][T17096] hwsim_new_radio_nl+0xe4c/0x21d0 [ 463.057950][T17096] ? __pfx___nla_validate_parse+0x10/0x10 [ 463.063700][T17096] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 463.069295][T17096] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 463.075644][T17096] genl_rcv_msg+0xb14/0xec0 [ 463.080161][T17096] ? mark_lock+0x9a/0x350 [ 463.084513][T17096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.089572][T17096] ? __pfx_lock_acquire+0x10/0x10 [ 463.094608][T17096] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 463.100169][T17096] ? __pfx___might_resched+0x10/0x10 [ 463.105479][T17096] netlink_rcv_skb+0x1e3/0x430 [ 463.110263][T17096] ? __pfx_genl_rcv_msg+0x10/0x10 [ 463.115306][T17096] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 463.120633][T17096] ? __netlink_deliver_tap+0x77e/0x7c0 [ 463.126137][T17096] genl_rcv+0x28/0x40 [ 463.130133][T17096] netlink_unicast+0x7ea/0x980 [ 463.134923][T17096] ? __pfx_netlink_unicast+0x10/0x10 [ 463.140223][T17096] ? __virt_addr_valid+0x183/0x520 [ 463.145373][T17096] ? __check_object_size+0x49c/0x900 [ 463.150672][T17096] ? bpf_lsm_netlink_send+0x9/0x10 [ 463.155806][T17096] netlink_sendmsg+0x8db/0xcb0 [ 463.160639][T17096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.165949][T17096] ? __import_iovec+0x536/0x820 [ 463.170815][T17096] ? aa_sock_msg_perm+0x91/0x160 [ 463.175767][T17096] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 463.181065][T17096] ? security_socket_sendmsg+0x87/0xb0 [ 463.186542][T17096] ? __pfx_netlink_sendmsg+0x10/0x10 [ 463.191845][T17096] __sock_sendmsg+0x221/0x270 [ 463.196546][T17096] ____sys_sendmsg+0x525/0x7d0 [ 463.201332][T17096] ? __pfx_____sys_sendmsg+0x10/0x10 [ 463.206643][T17096] __sys_sendmsg+0x2b0/0x3a0 [ 463.211252][T17096] ? __pfx___sys_sendmsg+0x10/0x10 [ 463.216391][T17096] ? bpf_raw_tracepoint_open+0xd7/0x240 [ 463.221984][T17096] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 463.228326][T17096] ? do_syscall_64+0x100/0x230 [ 463.233110][T17096] ? do_syscall_64+0xb6/0x230 [ 463.237799][T17096] do_syscall_64+0xf3/0x230 [ 463.242360][T17096] ? clear_bhb_loop+0x35/0x90 [ 463.247139][T17096] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 463.253048][T17096] RIP: 0033:0x7f4528e7cf29 [ 463.257473][T17096] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 463.277094][T17096] RSP: 002b:00007f4529b2c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 463.285524][T17096] RAX: ffffffffffffffda RBX: 00007f4528fb3f80 RCX: 00007f4528e7cf29 [ 463.293508][T17096] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 463.301487][T17096] RBP: 00007f4528eec074 R08: 0000000000000000 R09: 0000000000000000 [ 463.309469][T17096] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 463.317473][T17096] R13: 000000000000004d R14: 00007f4528fb3f80 R15: 00007ffca0ebab58 [ 463.325482][T17096] [ 463.479623][T17111] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 463.495066][T15404] tipc: Subscription rejected, illegal request [ 463.799164][T17135] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 463.833232][T17135] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 463.865338][T17134] nbd: socks must be embedded in a SOCK_ITEM attr [ 463.869411][T17135] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 464.069721][ T5129] Bluetooth: hci5: command tx timeout [ 464.133144][T17150] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 464.509028][ C1] syz_tun: tun_net_xmit 62 [ 464.521154][ C0] syz_tun: tun_net_xmit 58 [ 464.661647][T17181] lo speed is unknown, defaulting to 1000 [ 464.766860][T17184] nbd: socks must be embedded in a SOCK_ITEM attr [ 465.250343][ C0] syz_tun: tun_net_xmit 70 [ 465.319069][ C1] syz_tun: tun_net_xmit 62 [ 465.510585][T17198] __nla_validate_parse: 1 callbacks suppressed [ 465.510609][T17198] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 465.577577][T17200] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 465.863769][T17221] rdma_rxe: rxe_newlink: failed to add lo [ 465.870415][ C1] syz_tun: tun_net_xmit 58 [ 465.916554][T17225] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 465.940264][T17225] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 466.340833][T17245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.353533][T17235] hsr0: entered promiscuous mode [ 466.404457][T17235] hsr_slave_0: left promiscuous mode [ 466.425607][T17235] hsr_slave_1: left promiscuous mode [ 466.436633][T17245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.508138][T17235] hsr0 (unregistering): left promiscuous mode [ 466.536624][T17245] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 466.633735][T17255] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 466.881263][T17262] nbd: socks must be embedded in a SOCK_ITEM attr [ 467.133608][T17279] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 467.359451][T17292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 467.385833][T17292] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 467.666646][T17311] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 467.693926][T17306] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 467.706398][T17306] bridge_slave_1: left allmulticast mode [ 467.715195][T17306] bridge_slave_1: left promiscuous mode [ 467.722932][T17306] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.734905][T17306] bridge_slave_0: left allmulticast mode [ 467.743920][T17306] bridge_slave_0: left promiscuous mode [ 467.751159][T17306] bridge0: port 1(bridge_slave_0) entered disabled state [ 468.216905][T17328] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 468.345823][T17343] rdma_rxe: rxe_newlink: failed to add lo [ 468.612112][T17353] rdma_rxe: rxe_newlink: failed to add lo [ 468.657705][T17358] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 468.846670][T17363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 468.894103][T17366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 468.994079][T17366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.074302][T17366] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.387863][T17379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.470489][T17379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.541869][T17379] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 469.545288][T17387] rdma_rxe: rxe_newlink: failed to add lo [ 469.761300][T17398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 470.040989][T17410] rdma_rxe: rxe_newlink: failed to add lo [ 470.235616][T15404] tipc: Subscription rejected, illegal request [ 470.389217][T17422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.481388][T17422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.549395][T17432] rdma_rxe: rxe_newlink: failed to add lo [ 470.559889][T17422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 470.979043][ C1] syz_tun: tun_net_xmit 54 [ 471.099270][ C1] syz_tun: tun_net_xmit 54 [ 471.367696][T17464] rdma_rxe: rxe_newlink: failed to add lo [ 471.455413][T17477] rdma_rxe: rxe_newlink: failed to add lo [ 471.880392][T17493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.968564][T17493] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.043878][T17502] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 472.480133][T17516] rdma_rxe: rxe_newlink: failed to add lo [ 472.608396][T17518] __nla_validate_parse: 1 callbacks suppressed [ 472.608417][T17518] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 472.906906][T17534] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 473.212827][T17547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.220914][T17553] netlink: 201400 bytes leftover after parsing attributes in process `syz-executor.1'. [ 473.248206][ T7088] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 473.251345][T17550] rdma_rxe: rxe_newlink: failed to add lo [ 473.291528][ T7088] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 473.306070][T17547] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.327628][ T144] wlan1: authenticated [ 473.352783][ T5127] syz_tun: tun_net_xmit 110 [ 473.360102][T15406] wlan1: associate with 08:02:11:00:00:00 (try 1/3) [ 473.396614][ T35] wlan1: RX AssocResp from 08:02:11:00:00:00 (capab=0x1 status=0 aid=1) [ 473.407450][T17560] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 473.439176][ T35] wlan1: associated [ 474.074949][T17594] pim6reg: entered allmulticast mode [ 474.151489][ T5169] syz_tun: tun_net_xmit 110 [ 474.175036][T17599] rdma_rxe: rxe_newlink: failed to add lo [ 474.413926][T17613] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 474.595718][T17621] rdma_rxe: rxe_newlink: failed to add lo [ 474.703262][T17626] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 475.129185][T17648] rdma_rxe: rxe_newlink: failed to add lo [ 475.436585][T17670] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 476.022562][T15406] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.115530][ T5132] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 476.128269][ T5132] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 476.137643][ T5132] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 476.147664][ T5132] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 476.165069][ T5132] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 476.173120][ T5132] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 476.207752][T15406] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.264136][T17685] lo speed is unknown, defaulting to 1000 [ 476.345789][T15406] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.456845][T15406] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 476.553023][T17694] rdma_rxe: rxe_newlink: failed to add lo [ 477.202360][T17733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.275675][T17733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.363555][T17733] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.637997][T15406] bond0 (unregistering): (slave vcan1): Releasing backup interface [ 477.658588][T15406] bond0 (unregistering): Released all slaves [ 477.675550][T15406] bond1 (unregistering): (slave vcan2): Releasing backup interface [ 477.693255][T15406] bond1 (unregistering): Released all slaves [ 477.710447][T15406] bond2 (unregistering): (slave vcan3): Releasing backup interface [ 477.723330][T15406] bond2 (unregistering): Released all slaves [ 477.737190][T15406] bond3 (unregistering): Released all slaves [ 477.762632][T15406] bond4 (unregistering): Released all slaves [ 477.779937][T15406] bond5 (unregistering): Released all slaves [ 477.830440][T17685] chnl_net:caif_netlink_parms(): no params data found [ 478.229656][ T5132] Bluetooth: hci3: command tx timeout [ 478.253166][T17685] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.271523][T17685] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.304425][T17685] bridge_slave_0: entered allmulticast mode [ 478.333615][T17685] bridge_slave_0: entered promiscuous mode [ 478.445175][T17685] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.469676][T17685] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.487988][T17685] bridge_slave_1: entered allmulticast mode [ 478.506539][T17685] bridge_slave_1: entered promiscuous mode [ 478.688116][T17776] rdma_rxe: rxe_newlink: failed to add lo [ 478.690817][T17685] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 478.765707][T17685] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 478.993015][T17685] team0: Port device team_slave_0 added [ 479.057634][T15406] hsr_slave_0: left promiscuous mode [ 479.073123][T15406] hsr_slave_1: left promiscuous mode [ 479.149486][T15406] dummy0: left promiscuous mode [ 479.159948][T15406] veth1_macvtap: left promiscuous mode [ 479.177720][T15406] veth0_macvtap: left promiscuous mode [ 479.201525][T15406] veth1_vlan: left promiscuous mode [ 479.212519][T15406] veth0_vlan: left promiscuous mode [ 480.315262][ T5132] Bluetooth: hci3: command tx timeout [ 480.347450][T15406] team0 (unregistering): Port device team_slave_1 removed [ 480.427182][T15406] team0 (unregistering): Port device team_slave_0 removed [ 481.148083][T17685] team0: Port device team_slave_1 added [ 481.317430][T17685] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.330193][T17685] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.367635][T17685] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.385193][T17819] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 481.387572][T17685] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.418658][T17685] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.492714][T17816] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.0'. [ 481.509516][T17685] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.754617][T17685] hsr_slave_0: entered promiscuous mode [ 481.795163][T17685] hsr_slave_1: entered promiscuous mode [ 481.842906][T17832] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 482.399746][ T5132] Bluetooth: hci3: command tx timeout [ 483.101997][T17858] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 483.129069][T17685] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 483.154590][T17685] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 483.202318][T17685] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 483.224262][T17685] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 483.410793][T17861] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 483.425972][T17861] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 483.549120][T17685] 8021q: adding VLAN 0 to HW filter on device bond0 [ 483.604362][T17685] 8021q: adding VLAN 0 to HW filter on device team0 [ 483.622433][ T7085] bridge0: port 1(bridge_slave_0) entered blocking state [ 483.629691][ T7085] bridge0: port 1(bridge_slave_0) entered forwarding state [ 483.656103][ T7085] bridge0: port 2(bridge_slave_1) entered blocking state [ 483.663405][ T7085] bridge0: port 2(bridge_slave_1) entered forwarding state [ 483.737546][T17685] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 484.035764][T17685] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 484.362347][T17874] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 484.382468][T17874] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 484.470238][ T5132] Bluetooth: hci3: command tx timeout [ 484.763610][T17685] veth0_vlan: entered promiscuous mode [ 484.784708][T17685] veth1_vlan: entered promiscuous mode [ 484.895748][T17685] veth0_macvtap: entered promiscuous mode [ 484.926845][T17685] veth1_macvtap: entered promiscuous mode [ 484.994929][T17685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.021009][T17685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.041895][T17685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.068896][T17685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.091298][T17685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.114616][T17685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.145304][T17685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 485.166438][T17685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.186481][T17685] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 485.215544][T17685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.244519][T17685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.288964][T17685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.309232][T17685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.327808][T17685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.359285][T17685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.380047][T17685] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 485.402208][T17685] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 485.424824][T17685] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 485.464374][T17897] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 485.510669][T17685] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.550674][T17685] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.574362][T17685] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.587371][T17685] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 485.737277][T17902] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 485.839967][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 485.847854][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 485.851796][T17911] rdma_rxe: rxe_newlink: failed to add lo [ 486.186402][T15404] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 486.208378][T15404] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 486.349854][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 486.392267][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 486.529733][T17919] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 486.628665][T17919] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 486.745350][T17923] hsr_slave_0: left promiscuous mode [ 486.754818][T17923] hsr_slave_1: left promiscuous mode [ 487.073411][T17936] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 487.181841][T17939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.298107][T17939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.300104][T17942] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 487.401392][T17939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 487.729386][T17948] x_tables: unsorted underflow at hook 3 [ 488.016555][T17955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 488.311750][T17959] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 488.715696][T17978] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 488.733256][T17978] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 489.244850][T17988] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 489.264653][T17988] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 489.271812][T17995] ieee802154 phy0 wpan0: encryption failed: -90 [ 489.637663][T17998] bond0: entered promiscuous mode [ 489.657258][T17998] bond_slave_0: entered promiscuous mode [ 489.673750][T17998] bond_slave_1: entered promiscuous mode [ 489.695286][T17998] 8021q: adding VLAN 0 to HW filter on device macvlan1 [ 489.741245][T17998] bond0: left promiscuous mode [ 489.779268][T17998] bond_slave_0: left promiscuous mode [ 489.784931][T17998] bond_slave_1: left promiscuous mode [ 490.334365][T18013] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 490.400853][T18005] hsr0: entered promiscuous mode [ 490.562265][T18005] hsr_slave_0: left promiscuous mode [ 490.580224][T18005] hsr_slave_1: left promiscuous mode [ 490.669184][T18005] hsr0 (unregistering): left promiscuous mode [ 490.689098][T18020] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 491.106471][T18028] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 491.107015][T18027] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 491.140830][T18028] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 491.390298][T18035] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 491.417401][T18035] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.426330][T18035] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.436168][T18035] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.445239][T18035] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 491.483853][T18035] vxlan0: entered promiscuous mode [ 491.484037][T18038] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 491.545686][T18035] IPVS: set_ctl: invalid protocol: 0 172.20.20.36:20001 [ 492.444261][T18070] __nla_validate_parse: 2 callbacks suppressed [ 492.444282][T18070] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 492.497599][T18076] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 492.601686][T18065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 492.989121][T18092] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 492.998123][T18092] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 493.310324][T18101] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 494.107035][T18123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.224302][T18123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.331375][T18123] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 494.614326][T18132] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 494.769692][T18148] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 494.877129][T18145] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 494.901960][T18139] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 494.978990][T18156] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 495.106723][T18166] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 495.187591][T18170] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 495.239842][T18167] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 495.665612][T18196] macvlan1: entered promiscuous mode [ 495.684666][T18196] macvlan1: entered allmulticast mode [ 495.718579][T18196] team0: Port device macvlan1 added [ 495.807652][T18202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 495.823627][T18203] dccp_invalid_packet: P.Data Offset(144) too large [ 495.900548][T18207] sctp: [Deprecated]: syz-executor.1 (pid 18207) Use of int in max_burst socket option deprecated. [ 495.900548][T18207] Use struct sctp_assoc_value instead [ 495.910412][T18202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.004079][T18202] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.235262][ T2880] tipc: Subscription rejected, illegal request [ 496.583398][T18242] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 496.618969][T18242] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 496.636254][T18241] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 496.895821][T15406] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 496.919790][T18251] xt_CT: No such helper "snmp_trap" [ 497.019077][ T144] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 497.174685][ T144] wlan1: authentication with 08:02:11:00:00:00 timed out [ 497.624763][T18263] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 497.654099][T18263] __nla_validate_parse: 9 callbacks suppressed [ 497.654121][T18263] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 497.860189][T18269] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 497.878440][T18269] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 497.962409][T18277] rdma_rxe: rxe_newlink: failed to add lo [ 497.975363][ T5129] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 497.985784][ T5129] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 497.995885][ T5129] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 498.005840][ T5129] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 498.047667][ T5129] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 498.055817][ T5129] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 498.206160][T18275] lo speed is unknown, defaulting to 1000 [ 498.938053][T18275] chnl_net:caif_netlink_parms(): no params data found [ 499.576768][T18275] bridge0: port 1(bridge_slave_0) entered blocking state [ 499.601961][T18275] bridge0: port 1(bridge_slave_0) entered disabled state [ 499.619725][T18275] bridge_slave_0: entered allmulticast mode [ 499.629733][T18275] bridge_slave_0: entered promiscuous mode [ 499.646637][T18275] bridge0: port 2(bridge_slave_1) entered blocking state [ 499.660390][T18275] bridge0: port 2(bridge_slave_1) entered disabled state [ 499.667967][T18275] bridge_slave_1: entered allmulticast mode [ 499.687519][T18275] bridge_slave_1: entered promiscuous mode [ 499.771432][T18327] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 499.783826][T18275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 499.798813][T18327] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 499.813109][T18275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 499.838354][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 499.926558][T18275] team0: Port device team_slave_0 added [ 499.938080][T18275] team0: Port device team_slave_1 added [ 500.026378][T18275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 500.035773][T18275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.069437][T18275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 500.107379][T18275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 500.123441][T18275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 500.154258][ T5129] Bluetooth: hci2: command tx timeout [ 500.190083][T18275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 500.212364][T18335] lo speed is unknown, defaulting to 1000 [ 500.414086][T18275] hsr_slave_0: entered promiscuous mode [ 500.426599][T18275] hsr_slave_1: entered promiscuous mode [ 500.555638][T18348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 500.688189][T18352] tipc: Started in network mode [ 500.694255][T18352] tipc: Node identity , cluster identity 4711 [ 500.706952][T18352] tipc: Failed to set node id, please configure manually [ 500.717220][T18352] tipc: Enabling of bearer rejected, failed to enable media [ 500.822701][T18356] rdma_rxe: rxe_newlink: failed to add lo [ 500.896586][T18275] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 500.908220][T18275] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 500.971726][ T5175] syz_tun: tun_net_xmit 110 [ 501.137475][T18275] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.153310][T18275] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.173863][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 501.349735][T18367] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 501.454625][T18369] rdma_rxe: rxe_newlink: failed to add lo [ 501.463737][T18275] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.539337][T18275] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.609096][ T5169] syz_tun: tun_net_xmit 110 [ 501.723348][T18275] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 501.750518][T18275] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 501.834060][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.852755][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.090761][T18275] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 502.106930][T18275] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 502.162746][T18275] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 502.195768][T18275] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 502.217696][T18387] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 502.230133][ T5132] Bluetooth: hci2: command tx timeout [ 502.269573][T18387] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 502.391584][ T7077] syz_tun: tun_net_xmit 110 [ 502.475608][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 502.519631][T18402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 502.530315][T18275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.602291][T18275] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.640349][ T5175] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.647618][ T5175] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.697322][ T5175] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.704583][ T5175] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.840956][T18408] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 503.031299][T18409] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 503.367578][T18275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.461022][T18431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.524263][T18275] veth0_vlan: entered promiscuous mode [ 503.576760][T18275] veth1_vlan: entered promiscuous mode [ 503.584841][T18431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.662689][T18431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 503.715000][T18275] veth0_macvtap: entered promiscuous mode [ 503.772145][T18275] veth1_macvtap: entered promiscuous mode [ 503.876749][T18275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.922231][T18275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.958996][T18275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.015894][T18275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.051991][T18275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.094588][T18275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.135285][T18275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.178788][T18275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.207687][T18275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.218436][T18275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.240923][T18275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.253100][T18275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.296149][T18275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.309058][ T5132] Bluetooth: hci2: command 0x040f tx timeout [ 504.367036][T18275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.408599][T18275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.459087][T18275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.472070][T18275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.492985][T18448] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 504.494537][T18275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.522530][T18275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.536146][T18275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.564607][T18275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.615402][T18275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.778268][T18275] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.819911][T18275] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.838045][T18275] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.859860][T18275] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.910179][T18439] lo speed is unknown, defaulting to 1000 [ 505.272262][T15406] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.293651][T15406] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.308970][ C0] syz_tun: tun_net_xmit 58 [ 505.349056][ C0] syz_tun: tun_net_xmit 54 [ 505.393360][T18440] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 505.410687][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 505.441671][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 505.538995][ C0] syz_tun: tun_net_xmit 54 [ 505.729956][T18475] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 505.749110][T18475] netlink: 113592 bytes leftover after parsing attributes in process `syz-executor.3'. [ 506.388950][ T5129] Bluetooth: hci2: command 0x040f tx timeout [ 506.497498][T18481] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 507.010380][T18491] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 507.029502][ C0] syz_tun: tun_net_xmit 54 [ 507.302051][T18507] dccp_invalid_packet: P.Data Offset(144) too large [ 507.321013][T18509] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 507.453773][T18510] sctp: [Deprecated]: syz-executor.1 (pid 18510) Use of int in max_burst socket option deprecated. [ 507.453773][T18510] Use struct sctp_assoc_value instead [ 507.521993][T18519] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 507.749159][ C0] syz_tun: tun_net_xmit 54 [ 508.152949][ T29] audit: type=1804 audit(1718736362.671:46): pid=18536 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723437343530343339392F73797A6B616C6C65722E53663536364F2F39352F6AA38258FB2EEC8051 dev="sda1" ino=1947 res=1 errno=0 [ 508.399010][T18543] lo speed is unknown, defaulting to 1000 [ 508.469019][ T5129] Bluetooth: hci2: command 0x040f tx timeout [ 508.606565][T18552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 508.693245][T18554] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 508.986903][T18562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.160625][T18562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.194275][ T29] audit: type=1804 audit(1718736363.691:47): pid=18569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name=2F726F6F742F73797A6B616C6C65722D746573746469723437343530343339392F73797A6B616C6C65722E53663536364F2F3130302F6AA38258FB2EEC8051 dev="sda1" ino=1972 res=1 errno=0 [ 509.258272][T18571] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 509.299971][ T29] audit: type=1804 audit(1718736363.761:48): pid=18570 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name=2F726F6F742F73797A6B616C6C65722D74657374646972323034343930383030352F73797A6B616C6C65722E34336D396D312F3930392F6AA38258FB2EEC8051 dev="sda1" ino=1973 res=1 errno=0 [ 509.484418][T18573] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 509.694523][T18543] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 510.043361][T18593] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 510.053501][T18595] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 510.101130][T18585] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 510.148077][T18585] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 510.421321][ T29] audit: type=1804 audit(1718736364.941:49): pid=18611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D746573746469723834373631323939392F73797A6B616C6C65722E7136667761352F382F6AA38258FB2EEC8051 dev="sda1" ino=1942 res=1 errno=0 [ 510.549572][ T5129] Bluetooth: hci2: command 0x040f tx timeout [ 541.329626][T18639] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 541.343380][T18639] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 541.351892][T18639] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 541.372277][ T5132] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 541.384145][ T5132] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 541.393257][ T5132] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 541.401969][ T5132] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 541.413719][ T5132] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 541.422905][ T5132] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 541.464177][T18643] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 541.472603][ T5129] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 541.475620][T18643] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 541.488156][ T5129] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 541.489502][T18643] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 541.495741][ T5129] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 541.505413][T18643] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 541.530343][T18643] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 541.537928][T18643] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 541.675681][ T5132] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 541.686578][ T5132] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 541.698986][ T5132] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 541.707190][ T5132] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 541.715206][ T5132] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 541.730223][ T5132] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 542.087008][T18643] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 542.099140][T18643] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 542.108629][T18643] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 542.118608][T18643] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 542.132820][T18643] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 542.149287][T18643] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 543.519033][T18643] Bluetooth: hci6: command tx timeout [ 543.598465][T18643] Bluetooth: hci7: command tx timeout [ 543.598508][ T5129] Bluetooth: hci8: command tx timeout [ 543.829121][ T5129] Bluetooth: hci9: command tx timeout [ 544.229255][ T5129] Bluetooth: hci10: command tx timeout [ 544.868975][ T5129] Bluetooth: hci1: command 0x0406 tx timeout [ 545.592426][ T5132] Bluetooth: hci6: command tx timeout [ 545.669489][ T5129] Bluetooth: hci7: command tx timeout [ 545.676024][ T5132] Bluetooth: hci8: command tx timeout [ 545.909103][ T5132] Bluetooth: hci9: command tx timeout [ 546.317288][ T5132] Bluetooth: hci10: command tx timeout [ 547.668919][ T5132] Bluetooth: hci6: command tx timeout [ 547.749696][ T5132] Bluetooth: hci8: command tx timeout [ 547.755165][ T5132] Bluetooth: hci7: command tx timeout [ 547.988930][ T5132] Bluetooth: hci9: command tx timeout [ 548.388955][ T5132] Bluetooth: hci10: command tx timeout [ 549.751368][ T5132] Bluetooth: hci6: command tx timeout [ 549.830344][ T5132] Bluetooth: hci7: command tx timeout [ 549.831092][ T5129] Bluetooth: hci8: command tx timeout [ 550.068997][ T5129] Bluetooth: hci9: command tx timeout [ 550.476661][ T5129] Bluetooth: hci10: command tx timeout [ 563.277582][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.284123][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 580.725087][ T5132] Bluetooth: hci5: command 0x0406 tx timeout [ 601.199217][ T5129] Bluetooth: hci3: command 0x0406 tx timeout [ 606.834064][ T5129] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 606.848340][ T5129] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 606.848647][T18639] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 606.864136][ T5129] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 606.877433][T18639] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 606.887230][T18639] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 606.897448][T18639] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 606.910121][T18639] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 606.918468][T18663] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 606.931017][T18639] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 606.939685][T18639] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 606.949996][T18639] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 606.962113][T18639] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 606.979218][T18666] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 606.985570][T18639] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 606.986475][T18666] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 606.998719][T18639] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 607.003102][ T5132] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 607.017752][ T5132] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 607.025818][T18666] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 607.040800][ T5132] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 607.048610][T18666] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 607.059878][T18666] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 607.067458][T18666] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 607.347977][T18663] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 607.357983][T18663] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 607.366862][T18663] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 607.376847][T18663] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 607.385437][T18663] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 607.393140][T18663] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 609.038991][T18663] Bluetooth: hci12: command tx timeout [ 609.046769][T18663] Bluetooth: hci11: command tx timeout [ 609.109054][T18666] Bluetooth: hci14: command tx timeout [ 609.118374][T18663] Bluetooth: hci13: command tx timeout [ 609.518931][T18663] Bluetooth: hci15: command tx timeout [ 611.109043][T18666] Bluetooth: hci12: command tx timeout [ 611.115741][T18663] Bluetooth: hci11: command tx timeout [ 611.189224][T18663] Bluetooth: hci13: command tx timeout [ 611.195796][T18663] Bluetooth: hci14: command tx timeout [ 611.598897][T18663] Bluetooth: hci15: command tx timeout [ 613.189103][T18666] Bluetooth: hci12: command tx timeout [ 613.195874][T18663] Bluetooth: hci11: command tx timeout [ 613.268952][T18666] Bluetooth: hci13: command tx timeout [ 613.275599][T18663] Bluetooth: hci14: command tx timeout [ 613.668991][T18663] Bluetooth: hci15: command tx timeout [ 615.268887][T18663] Bluetooth: hci11: command tx timeout [ 615.274451][T18663] Bluetooth: hci12: command tx timeout [ 615.348971][T18666] Bluetooth: hci13: command tx timeout [ 615.354642][T18663] Bluetooth: hci14: command tx timeout [ 615.749501][T18663] Bluetooth: hci15: command tx timeout [ 624.719204][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.725647][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 631.908957][T18666] Bluetooth: hci2: command 0x040f tx timeout [ 663.109076][ T30] INFO: task kworker/u8:10:2880 blocked for more than 143 seconds. [ 663.117170][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 663.124909][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 663.133681][ T30] task:kworker/u8:10 state:D stack:22800 pid:2880 tgid:2880 ppid:2 flags:0x00004000 [ 663.144001][ T30] Workqueue: netns cleanup_net [ 663.148853][ T30] Call Trace: [ 663.152176][ T30] 2024/06/18 18:48:37 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 663.155136][ T30] __schedule+0x17e8/0x4a20 [ 663.159757][ T30] ? __pfx___schedule+0x10/0x10 [ 663.164865][ T30] ? __pfx_lock_release+0x10/0x10 [ 663.204154][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 663.222163][ T30] ? kthread_data+0x52/0xd0 [ 663.226753][ T30] ? schedule+0x90/0x320 [ 663.248753][ T30] ? wq_worker_sleeping+0x66/0x240 [ 663.253947][ T30] ? schedule+0x90/0x320 [ 663.258230][ T30] schedule+0x14b/0x320 [ 663.268691][ T30] schedule_preempt_disabled+0x13/0x30 [ 663.274382][ T30] __mutex_lock+0x6a4/0xd70 [ 663.288949][ T30] ? __mutex_lock+0x527/0xd70 [ 663.293713][ T30] ? cfg802154_pernet_exit+0x1b/0xe0 [ 663.329013][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 663.334143][ T30] ? __pfx___might_resched+0x10/0x10 [ 663.348834][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 663.354373][ T30] cfg802154_pernet_exit+0x1b/0xe0 [ 663.368840][ T30] cleanup_net+0x802/0xcc0 [ 663.373377][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 663.378417][ T30] ? process_scheduled_works+0x945/0x1830 [ 663.398818][ T30] process_scheduled_works+0xa2c/0x1830 [ 663.404503][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 663.418736][ T30] ? assign_work+0x364/0x3d0 [ 663.423432][ T30] worker_thread+0x86d/0xd70 [ 663.428073][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 663.458779][ T30] ? __kthread_parkme+0x169/0x1d0 [ 663.463905][ T30] ? __pfx_worker_thread+0x10/0x10 [ 663.478689][ T30] kthread+0x2f0/0x390 [ 663.482834][ T30] ? __pfx_worker_thread+0x10/0x10 [ 663.487984][ T30] ? __pfx_kthread+0x10/0x10 [ 663.492771][ T30] ret_from_fork+0x4b/0x80 [ 663.497243][ T30] ? __pfx_kthread+0x10/0x10 [ 663.501943][ T30] ret_from_fork_asm+0x1a/0x30 [ 663.506782][ T30] [ 663.510039][ T30] INFO: task syz-executor.2:18613 blocked for more than 143 seconds. [ 663.522723][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 663.537505][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 663.546576][ T30] task:syz-executor.2 state:D stack:25856 pid:18613 tgid:18612 ppid:15681 flags:0x00000006 [ 663.564030][ T30] Call Trace: [ 663.567366][ T30] [ 663.573337][ T30] __schedule+0x17e8/0x4a20 [ 663.577917][ T30] ? __pfx___schedule+0x10/0x10 [ 663.588765][ T30] ? __pfx_lock_release+0x10/0x10 [ 663.595332][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 663.607994][ T30] ? schedule+0x90/0x320 [ 663.612418][ T30] schedule+0x14b/0x320 [ 663.616615][ T30] schedule_preempt_disabled+0x13/0x30 [ 663.632032][ T30] __mutex_lock+0x6a4/0xd70 [ 663.636615][ T30] ? __mutex_lock+0x527/0xd70 [ 663.653187][ T30] ? nl80211_pre_doit+0x5f/0x8b0 [ 663.658211][ T30] ? __pfx___mutex_lock+0x10/0x10 [