last executing test programs: 31.979249883s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) socket$inet(0x2, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 31.739472561s ago: executing program 3: openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) (async) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000180), 0xfea7) socket$isdn(0x22, 0x3, 0x1) (async) r3 = socket$isdn(0x22, 0x3, 0x1) pwritev(r3, &(0x7f0000000440)=[{&(0x7f0000000040)="36ecbc1865ec5834fd2ea99e40b272b8f95619145f5cc9c0ac7e762ac9960048", 0x20}, {&(0x7f00000000c0)="914680be60bf895cb43093e09ecbebb3467d7de946e66c2366e559aa6e02753c5aa26e7970123c5a3d9b0143c11c5a314e88f9f605", 0x35}, {&(0x7f0000000100)="b3247a6219d379d05a0b04b83644f27a8637be00495bbfc27206f236ecc9b27a", 0x20}, {&(0x7f0000000140)="fc12368d9e04e98dd2b669dbec46bb1199bb83e0ed", 0x15}, {&(0x7f0000000200)="f186de759016d4e3762e91bca46d269ec9bf09732f78f7a32ffe0c476782c04b83b824fa795e61c4b44ebb7d3516d360ceeef0fe2a4bdca3a1ab67deeb54ee8b55e1ef2e67b0eeb19c0aa7ff0347591e9b6b3ba95af9fd68943e8359c0374d6328", 0x61}, {&(0x7f0000000280)="0ee99afac062c3ee0e7effdcba48a763b2a0f6c23799f8cd124d8cfa8aa0e056cf202dd77955a882c9e57f6988036345f0835d5d31d62f5bbcb06a02dc89be8121290ded1aebc437d066cfeddf73e36a22b99dde5fe9ba76c96a3e6bf0fbe4bd49e6d044117b1ff3dd860b46d0eee1971ff837ef7191623df7a15c538280f1bce0788c24b61484c0da070078d76e2ae304fea05b4d1b483609b393ed885a399621a9383b8d4a68eb0cc51b27149d76151256c585ef6727337e0949f8b76e4032333c6596b7d46cdada31c0b8b5b8bea48047", 0xd2}, {&(0x7f0000000380)="616b2537cd0a1b706281f86a1ea7abfb677eaeb7fb184589be511725346529c9be156fef065a3a22c7270db4c2ddc2992a28082661cc2dd0a6d728867b2fcf9650a2c66185ac95f8d7f5eedc05a5be2469117383c541c507a9c002878fb019c6dd460ae0d984caae3de6315584bfb8cdb6277b201fc781134aa63599202fac332d341fa609886bdcc71bd0abe5c45afe96d5768e2f56969fee2a8d5b8a9842fd0bd139083de3d5067d6d57c1e9", 0xad}], 0x7, 0x0, 0xa7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0080000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0080000000000000b70400000800000085000000950000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0x8, &(0x7f00000005c0)=ANY=[@ANYBLOB="180800000000000000000000000000008510000003000000180000000000000000000000000000009500000000000000ddaa000000"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$rxrpc(0x21, 0x2, 0xa) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) (async) bind$alg(r8, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) (async) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f00000064c0)=[{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000000)='|', 0x1}, {&(0x7f00000000c0)="1b1780231ad3271ff75c2b29ef81beb15f42eb191406c0bec7ba22004b058cd35084f6ce790b7efc9aa8f6d7d9d06a33d2736a70abd9eb89e5e6c2ab6608b9012ef34849235e89b40b56ccb2fcce78b98ba58f6e6330d0eee9628eb7eec8ab03525f7836cde76179bb013ea26a6d5fc44d0cf7620e5e5269313120adbb56e6b60bc08449ada095917b380ee4315a4f454dd95d117543c8802bc30ebaaeb43e619aad54bb9369c2eac9f95b9596fe4298586d96ca3af7b0226d6e114c9888430eb24da589", 0xc4}, {&(0x7f00000001c0)="5ffbf8ebebc79aaef7058b4fa058ebeb437ca69076b8581d61cf37cf667bd84540da2624", 0x24}, {&(0x7f0000000200)="4afdac377b3a8d", 0x7}, {&(0x7f0000000240)="4e6eabc5accf65945d9c497e6d94d7aa78d6b9ed9d3e43b0682e8c7be166cdbc3749b8731881bd06f9ceb46a5dc6faf5ab8402f626950232bd6d540cf9d70bcbb859bc2544e6bf7af79ccd26b9e32902cf4dbc5acccd1f6a6e8c20964615427b9c105708d9e8c03e7c3cd579d99dd36775031e0877b95239d36ca48332937737", 0x80}], 0x5}], 0x1, 0x0) sendfile(r6, r5, 0x0, 0x100000002) r10 = socket$kcm(0x2, 0xa, 0x2) socket$alg(0x26, 0x5, 0x0) (async) r11 = socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0x9, 0x0, 0x0, 0x0, 0x46, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x44, 0x32, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x204}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) (async) sendmsg$nl_route_sched(r12, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x44, 0x32, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x204}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) bind$alg(r11, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_AEAD_AUTHSIZE(r11, 0x117, 0x5, 0x0, 0x7) (async) setsockopt$ALG_SET_AEAD_AUTHSIZE(r11, 0x117, 0x5, 0x0, 0x7) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) openat$cgroup(0xffffffffffffffff, &(0x7f0000000140)='syz1\x00', 0x200002, 0x0) 31.360164673s ago: executing program 3: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000007c0), 0x0}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef8cd8d80000800034000000001140000001000010000000000"], 0xf0}}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'bridge_slave_0\x00', 0x200}) 31.346884019s ago: executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0xf, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 31.304949522s ago: executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000900)=[{{0x0, 0x172, &(0x7f0000001cc0)=[{&(0x7f0000000580)="014bb6a68759182ab7e144f718ee0b9d487461d1891d71f57a540210b1b32e260da68c9e5042f43d8e39a995d58933e85e8f3166bcc26b57e038599805becad925bd3f30fe3ab8f293da067003b56ad9b156551cac1a3c29a69d9b73c28fb6a555e3c2b865c95149e67b99a53a0e5b3285d5c1e04de9540cb2f6d7fd8bc8b8f9904de76e314fd066e892b298316cba9a4d8d6130e370e0b07e48836ac36d6c470326be20a6cf954adb52946624", 0xad}, {&(0x7f0000000a40)="21f02d2311f55c81f75de721f94193fcba94c81f988b26192586b1586b785fac4c869df7ac4fdb80df219cb24079d2cada7ebb435f87b5b0834d6b2ed27c8c0ebadc122e87dfaa59ca05ea42f441bd71f0a2f5a4df39208ecf5efeb9ee921a0970eb0000baae9da9d927aa37ff7fd79a0fdefed00000000000000099e05698c4f3d98a752737afe547ff63809e8e932a58cff837e36a9bdcf522c217ec490ad2c9464ce8013cabd36ba31a4a4c9a311c864a0be963fb605d9cf9a3b1972139fc71fdb37f84390f8e8b6f5e4fde2a85f63560ccb0", 0xd4}, {&(0x7f0000000440)="40148a0ddfc80a6cd88ead2670e8aa3223650f75686be8d22913e9ac0bd01f6a79d9252b409484433380bc05610dfe3706ca31bbeaf4295fafcb1f2a57befe1d3eac0cca4413ba6fc398e0958bdd292236a09ddad602a1bf7784de4904a23122712c6d321f4713d29f9825fb785f676c0da8c98dec33fe5e255592ccbf533d614d2cac04b2509fb97313f636d3d510e3158c546e1e08c25fb57188b20b0d7909ebf17981c5802446188881f29408e82d6880ac65097741680000000000000000000026", 0xc3}, {&(0x7f00000012c0)="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", 0x4cf}], 0x4}}], 0x1, 0x0) 31.291069631s ago: executing program 1: socket$packet(0x11, 0x3, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)="b6", 0x1}], 0x1}, 0x14f916e07bbbd36a) r2 = accept(r1, 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000003c0)={0x124, r3, 0x100, 0x70bd25, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x88, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80000001}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10000}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x67}, @TIPC_NLA_BEARER_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x101}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8, 0x2, 0x8001}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1539a59c}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x67417e22}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4800000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf7e6}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x400}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x82c}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}]}, @TIPC_NLA_SOCK={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x124}}, 0x8000) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000003680)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f00000002c0)="dd4884f8", 0x4}], 0x1}}], 0x1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, 0xffffffffffffffff, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xdc, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x51}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x5e, 0xbe, "d9d2200121072a437b71a529319562ba80d13b712686013a95ab7b7b105a5f6cd7ed8acf9d097dd09df5c63a062d52e21f40cf28303256834cba78652c5d8dc1fda9f225d85a5f08a3f93cd82849b5ce50032e58a05515e7a784"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x52, 0xac, "ad33b615fc13eeb791218845384599151de31eb8ba927858dbec7cd680fdc29347f21914e74c3ee67d44a557a38ab36ac292be2c8d2266bb2b4332a7bf9ebc251cf56b165df1798a24c9311d951a"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4040000}, 0x110) 31.213265764s ago: executing program 1: r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) sendmmsg(r1, &(0x7f00000057c0)=[{{0x0, 0x0, &(0x7f0000000400)}}], 0x1, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_misc(r1, 0x0, 0xbf) recvmsg(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8990, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000080)=@ethtool_rxfh={0x1, 0x200, 0x0, 0x0, 0x0, "31c53b"}}) 31.099633194s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010300000000000000000000000a20000000000a01030000000000000000030000000900010073797a300000000020000000000a0104000000050000000900010073797a3100402088e58b00000014000000020a010100000000000000000000000020000000030a01040000000000000000030000000900010073797a30"], 0x9c}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1c0000004a008102e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7932abc1a2734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x18) r1 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r1, &(0x7f0000000180)={0x18, 0x0, {0x4, @local, 'team_slave_1\x00'}}, 0x1e) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x4, "0000000400"}}}]}, 0x48}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000140), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) ioctl$PPPOEIOCSFWD(r1, 0x40047452, &(0x7f0000000040)={0x18, 0x0, {0x0, @local, 'batadv_slave_1\x00'}}) r6 = socket$alg(0x26, 0x5, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c4400000000000e0feff00850000000f00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r9, r8, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r9, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r7}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000240)="7504085a385f143b6e07aaec9d7365a8", 0x0}, 0x20) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) sendmmsg$inet6(r7, &(0x7f0000006180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}}], 0x2, 0x0) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bind$can_j1939(r2, &(0x7f0000000280)={0x1d, r4, 0x1, {0x2, 0xf0, 0x2}, 0x4}, 0x18) accept4(r6, 0x0, 0x0, 0x0) 31.061731712s ago: executing program 2: r0 = socket$inet6(0xa, 0x5, 0x9) setsockopt$sock_int(r0, 0x1, 0x29, &(0x7f0000000b00)=0x7, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) r1 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x3c, &(0x7f0000000180)=0x10000, 0x4) sendto$inet6(r1, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000001100)={0xa, 0x0, 0x0, @loopback}, 0x1c) recvmmsg(r1, &(0x7f0000002440)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000000800)=[{&(0x7f00000000c0)=""/64, 0x40}, {&(0x7f00000001c0)=""/118, 0x76}, {&(0x7f0000000380)=""/132, 0x84}, {0x0}, {&(0x7f0000000500)=""/162, 0xa2}, {&(0x7f0000000140)=""/46, 0x2e}, {&(0x7f00000005c0)=""/139, 0x8b}, {&(0x7f00000002c0)=""/93, 0x5d}, {&(0x7f0000000680)=""/207, 0xcf}, {&(0x7f0000000780)=""/69, 0x45}], 0xa, &(0x7f0000000240)=""/54, 0x36}, 0x6}, {{&(0x7f00000008c0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x80, &(0x7f0000000d80)=[{&(0x7f0000000940)=""/118, 0x76}, {&(0x7f00000009c0)=""/251, 0xfb}, {&(0x7f0000000ac0)=""/53, 0x35}, {&(0x7f0000002580)=""/4112, 0x1010}, {&(0x7f0000000b00)}, {&(0x7f0000000b40)=""/162, 0xa2}, {&(0x7f0000000c00)=""/102, 0x66}, {&(0x7f0000000c80)=""/43, 0x2b}, {&(0x7f0000000cc0)=""/39, 0x27}, {&(0x7f0000000d00)=""/71, 0x47}], 0xa}, 0x40}, {{&(0x7f0000000e40)=@pppoe={0x18, 0x0, {0x0, @dev}}, 0x80, &(0x7f0000001080)=[{&(0x7f0000000ec0)=""/96, 0x60}, {&(0x7f0000000f40)=""/193, 0xc1}, {&(0x7f0000001040)=""/9, 0x9}, {&(0x7f0000002140)=""/199, 0xc7}], 0x4}, 0xffff}, {{0x0, 0x0, &(0x7f0000002340)=[{&(0x7f00000010c0)=""/9, 0x9}, {&(0x7f0000002240)=""/204, 0xcc}], 0x2, &(0x7f0000002380)=""/184, 0xb8}, 0x3}], 0x5, 0x0, 0x0) r3 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x10000000004e20, 0x0, @mcast2, 0x6}, 0x1c) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, 0x0, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) syz_genetlink_get_family_id$smc(&(0x7f0000001140), r2) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$l2tp6(0xa, 0x2, 0x73) r4 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@mcast1={0x0}, 0x0, 0x0, 0x1}, 0x20) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SAVE(r5, &(0x7f0000000240)={0x0, 0xb00, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000080603000000000000000000020000000500010007"], 0x1c}}, 0x0) recvfrom(r5, 0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_ethernet(0x83, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88b59edace0000033e8283e2305e02000002ff0200000000000000000000000000011d004e20004d03"], 0x0) listen(0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8}, 0x48) socket$inet6(0xa, 0x0, 0x0) 30.716651777s ago: executing program 0: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x12, 0x5, &(0x7f0000000740)=ANY=[@ANYBLOB="1800"/13, @ANYRES32, @ANYBLOB="00000000000000009500000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_ADD_DEV(r0, 0x5000940a, &(0x7f0000000ac0)={{r0}, "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"}) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f0000000140)={@in6={{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}}, 0x0, 0x0, 0x44, 0x0, "e541bd3d3aa6a2d875e9671e8abcb31c134f3a9db8f52e1f54fe6e079f35ac63186c7244fc3b3801e79b8e5545b90f2dbec29f15cec2fd7e55d0345bce05c13ed90158fbdeb70322ea3188f81890e3db"}, 0xd8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b707000008000000850000006900000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x6, 0x8, 0x40, 0x0, 0x1}, 0x48) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r4, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) recvmmsg(r4, &(0x7f0000003e00)=[{{&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @private1}, 0x0, &(0x7f0000002680)=[{&(0x7f0000000100)=""/227}, {&(0x7f0000000200)=""/210}, {&(0x7f0000000300)=""/169}, {&(0x7f00000003c0)=""/152}, {&(0x7f0000000480)=""/4096}, {&(0x7f0000001480)=""/4096}, {&(0x7f0000002480)=""/136}, {&(0x7f0000002540)=""/157}, {&(0x7f0000002600)=""/111}], 0x0, &(0x7f0000003f40)=""/253}}, {{&(0x7f0000002840)=@tipc=@name, 0x0, &(0x7f0000002940), 0x0, &(0x7f0000002980)=""/193}}, {{0x0, 0x0, &(0x7f00000028c0)=[{&(0x7f0000002a80)=""/4096}, {&(0x7f0000003a80)=""/253}, {&(0x7f0000003b80)=""/215}, {&(0x7f0000003c80)=""/166}], 0x0, &(0x7f0000003ec0)=""/91}}], 0x4f, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r3}, 0x38) r5 = socket(0x28, 0x5, 0x0) listen(0xffffffffffffffff, 0x0) r6 = socket$inet_smc(0x2b, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='ext4_ext_remove_space_done\x00', r7}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000009c0)={0xb, 0x4, &(0x7f0000000a80)=ANY=[@ANYBLOB="18000000000004000000000000000000850000001a00000095"], &(0x7f0000000580)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r5, 0x114, 0xa, &(0x7f0000000300)={0x2, 'Pg'}, 0x3) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@newlink={0x30, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_MTU={0x8}, @IFLA_GROUP={0x8}]}, 0x30}}, 0x0) close(r6) syz_emit_ethernet(0xb8, &(0x7f0000000000)={@random="757e938fd660", @broadcast, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x82, 0x3a, 0x0, @remote, @mcast2, {[], @echo_request={0x80, 0x0, 0x0, 0x9, 0x3ff, "31d139b3ccea75d2609ea829a9f1aafb7e2287d76bb97df8774143073e3065d5f37dca75511b7bdb7e359f5ffb0bb7f088e22ef126bb33bef098d9b961e7def7eca859420e0208184a3a124585ee766061099290a628ad4000c71a1bf81ae1ba6475c41e18b7b0f4a8ed5232a9c936e89286a964aa2c489dbf82"}}}}}}, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000080), 0x10) shutdown(r5, 0x0) clock_gettime(0x0, 0x0) 30.602183508s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="a60dfa94a6946bf9a2abed878888c44a88ca", 0x12}], 0x1) 30.56164079s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 30.519623422s ago: executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000300)={0x114, 0x10, 0x1, 0x0, 0x0, "", [@nested={0x101, 0x145, 0x0, 0x1, [@generic="0fc4fae696a4bb0c9a0ccb5dd2aeb5db1a6a4e15038de07450906ef3cbba5b50ca3e524492338fa5b657c1a1b5c3a4764595e525ecd593fc54127832320af67a9987bd366a66156e7454b40a2310ddc05f9a158178eb7c3884490cac4749c43684052436f3c1ecd76d1d9727ded056c1ab10248722cf99bf802fda5aea3755d5", @generic="5d7a79f215e168f1e4ddedb4a4a90cdead2d012c6ec2aaf16759d3437316324508ced24eb34116154b885547dfefaeabb66d0b93f08be7295c169a705ec019fea1b0d581c21a621607290c92ab9f0428c9d307fb94ecd1b4227fcd37f9d5e535a7cc943d90bceda1956e8defb967b24efb5ec2ee2932b4730a809e9f15"]}]}, 0x114}], 0x1}, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r2) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r3, 0x1}, 0x14}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000800000000000000000000009500000100000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r4}, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r2) r5 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r2) sendmsg$NBD_CMD_RECONFIGURE(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000000600000008000100000000000c000d000000000b"], 0x28}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000005c0)={'ip6tnl0\x00'}) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r8, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x0, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @dev, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x64, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x44, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x34, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_FLAGS={0x6}, @IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_IKEY={0x8}, @IFLA_GRE_OKEY={0x8}, @IFLA_GRE_LOCAL={0x8, 0x6, @dev}]}}}]}, 0x64}}, 0x0) 30.498219968s ago: executing program 0: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f0000000380)="c7", 0x4, 0x0, 0x0, 0x0) 30.444924006s ago: executing program 0: socket$inet(0x2, 0x2, 0x0) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, 0x0, 0x0) (async) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast1, 0x6}, 0x1c) socket$netlink(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.throttle.io_serviced_recursive\x00', 0x26e1, 0x0) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r1) sendmsg$NFC_CMD_GET_SE(r1, &(0x7f00000001c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000040)={&(0x7f0000000100)={0x14, r2, 0x4, 0x70bd2b, 0x25dfdbfb, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000804}, 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$inet(0x2, 0x80001, 0x84) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='pids.current\x00', 0x275a, 0x0) preadv(r5, &(0x7f0000000180)=[{&(0x7f00000001c0)=""/26, 0x1a}], 0x1, 0x0, 0x0) (async) setsockopt$sock_int(r3, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) (async) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000880)=@base={0x12, 0x2, 0x4, 0xfffffff8}, 0x48) (async) r6 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r6, &(0x7f00000003c0)={0x2, 0xce20, @dev}, 0x10) (async) socket$netlink(0x10, 0x3, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r7, 0x84, 0xd, 0xfffffffffffffffc, &(0x7f0000000140)=0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000001000000b7030000ddffffff850000002d00000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$BTRFS_IOC_SEND(r8, 0x40489426, &(0x7f0000000240)={{}, 0x6, &(0x7f0000000000)=[0x8000, 0x9f7, 0x6a, 0x8000000000000001, 0x8000000000000002, 0x6], 0xfff, 0xb}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) (async) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r10, &(0x7f0000000200), 0xf000) (async) sendfile(r10, r9, 0x0, 0xf03a0005) 30.440515717s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$gtp(&(0x7f0000000980), r0) r5 = bpf$ITER_CREATE(0x21, &(0x7f00000009c0), 0x8) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000ac0)={'erspan0\x00', &(0x7f0000000a00)={'gre0\x00', 0x0, 0x8, 0x80, 0x53e1d857, 0x5, {{0x22, 0x4, 0x2, 0x1, 0x88, 0x66, 0x0, 0x0, 0x4, 0x0, @local, @empty, {[@timestamp={0x44, 0x18, 0x4e, 0x0, 0x8, [0xfffff800, 0x6f5, 0x80, 0xfea8, 0xb037]}, @timestamp={0x44, 0x18, 0xb2, 0x0, 0x3, [0x2, 0x0, 0x0, 0xffffffd8, 0xf53]}, @generic={0x89, 0xc, "09e13776835ed9edc8e9"}, @rr={0x7, 0xb, 0xcb, [@initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}, @timestamp_addr={0x44, 0x2c, 0x9a, 0x1, 0x0, [{@private=0xa010100, 0x5}, {@loopback, 0x5}, {@multicast1, 0x100}, {@private=0xa010100, 0xffffca02}, {@multicast2, 0x4}]}]}}}}}) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e000100"/20, @ANYRES32=r8, @ANYBLOB="cb"], 0x1c}}, 0x0) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000bc0)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xd79c0ade349df41}, 0xc, &(0x7f0000000b80)={&(0x7f0000000c00)=ANY=[@ANYBLOB="c282db51600000f600bc12dfd401b3c3c02e26998cd01435df59c9e14531bdb4265207f6578de82913df5d86549ad619e3a72ca0553935413005bea3cc8f967bb18ad0a79dfa74162771", @ANYRES16=r4, @ANYBLOB="00042dbd7000fedbdf2500000000080008000000000008000700", @ANYRES32=r5, @ANYBLOB="080002000100000008000400ac1414bb080002000100000008000100", @ANYRES16=r5, @ANYBLOB="060006000100000008000100", @ANYRES32=r8, @ANYBLOB="0c0003000300000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x4064) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010100000000000000002b00000008000300", @ANYRES32=r3, @ANYRES32], 0x5c}}, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r9, &(0x7f0000000000)=@id={0x1e, 0x3, 0x0, {0x4e21, 0x4}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000", @ANYRES32=r11, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r10, 0x89f3, &(0x7f0000000140)={'tunl0\x00', &(0x7f0000000740)={'gre0\x00', 0x0, 0x1, 0x40, 0x8, 0x2, {{0x21, 0x4, 0x2, 0x0, 0x84, 0x68, 0x0, 0xfd, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @broadcast, {[@generic={0x88, 0xd, "1dc3a164d1a63227f6ebcd"}, @ssrr={0x89, 0x13, 0xf1, [@multicast1, @local, @dev={0xac, 0x14, 0x14, 0x31}, @remote]}, @noop, @timestamp_addr={0x44, 0x4}, @generic={0x0, 0xb, "985e28e507f3974596"}, @rr={0x7, 0xb, 0xe6, [@loopback, @loopback]}, @timestamp_prespec={0x44, 0x34, 0xba, 0x3, 0x6, [{@multicast1}, {@broadcast, 0x101}, {@empty, 0x2}, {@multicast1}, {@private=0xa010100, 0x400}, {@rand_addr=0x64010102}]}]}}}}}) bpf$OBJ_GET_PROG(0x7, &(0x7f00000001c0)=@generic={&(0x7f0000000180)='./file0\x00'}, 0x18) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000200), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000800000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x2}, 0x90) r12 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES16=r12], 0x58}, 0x1, 0xf000}, 0x0) sendmsg$netlink(r12, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b0001"], 0x114}], 0x1}, 0x0) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$sock_int(r13, 0x1, 0x29, &(0x7f0000000000)=0x1, 0x4) bind$bt_hci(r13, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x23, &(0x7f00000000c0)=0x6, 0x4) 30.424576818s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)={0x38, 0x3, 0x8, 0x0, 0x0, 0x0, {}, [@CTA_TIMEOUT_L4PROTO={0x5}, @CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_HEARTBEAT_ACKED={0x8}, @CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8}, @CTA_TIMEOUT_SCTP_SHUTDOWN_SENT={0x8}]}]}, 0x38}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020008000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000060000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000800)={r1}, 0xc) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='rxrpc_disconnect_call\x00', r1}, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000100)={r3, &(0x7f0000000080), &(0x7f00000001c0)=""/70}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000001e00000008000300", @ANYRES32=r6, @ANYBLOB="28002f800c0002000000000000000000180003"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.365794968s ago: executing program 4: bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0}, 0x20) write$binfmt_script(0xffffffffffffffff, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000007c0)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000008000000000000000000000181100", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000840)={{r0}, &(0x7f00000007c0), 0x0}, 0x20) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000007000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0800034000000004640000000e0a01020000000000000000010000000900020073797a32000000000900010073797a300000000038000380340000802800018023000100118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef8cd8d80000800034000000001140000001000010000000000"], 0xf0}}, 0x0) ioctl$SIOCSIFMTU(0xffffffffffffffff, 0x8922, &(0x7f0000000100)={'bridge_slave_0\x00', 0x200}) 30.338510345s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020786c0000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x8f) (async) unshare(0x20000) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bf"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0x10, 0x10, &(0x7f00000002c0)="0000000012000000", &(0x7f0000000300)=""/8, 0xd00, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) getsockname$packet(r2, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="3c00000010001fff0000000004000000e23f344fea0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b000100697036746e6c00000c00028008000100", @ANYRES32=r5, @ANYBLOB], 0x3c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f2, &(0x7f0000000080)={'ip6tnl0\x00', &(0x7f0000000140)={'ip6tnl0\x00', r5, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) (async) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) listen(r6, 0x0) (async) connect$phonet_pipe(r6, &(0x7f0000000100), 0x10) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)={0x30, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_ORIG_FLAGS={0x8, 0x1, 0x88c}]}, @CTA_TUPLE_ORIG={0x10, 0x1, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0x30}}, 0x0) (async) getsockopt$llc_int(r1, 0x10c, 0x7, &(0x7f00000001c0), &(0x7f00000003c0)=0x4) 30.316142282s ago: executing program 1: r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000300850000006900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0xf, 0x0, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 30.281809728s ago: executing program 4: r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="4800000010001fff00"/20, @ANYRES32=0x0, @ANYRES32], 0x48}}, 0x0) r1 = getgid() setsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000000)={0x0, 0xffffffffffffffff, r1}, 0xc) 30.232400898s ago: executing program 1: r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000280)={0xa, 0x4e20, 0x0, @remote, 0x7}, 0x1c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f00000002c0)={'syztnl2\x00', 0x0, 0x700, 0x20, 0x6, 0x67c, {{0x1b, 0x4, 0x1, 0x2c, 0x6c, 0x64, 0x0, 0x81, 0x29, 0x0, @dev={0xac, 0x14, 0x14, 0x3b}, @remote, {[@lsrr={0x83, 0x7, 0x7b, [@local]}, @timestamp_addr={0x44, 0xc, 0xea, 0x1, 0x5, [{@broadcast, 0x3}]}, @rr={0x7, 0xf, 0x6f, [@multicast2, @broadcast, @multicast2]}, @timestamp_prespec={0x44, 0x2c, 0x9b, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0x32}}, {@multicast2, 0x8}, {@multicast2, 0x6}, {@multicast1, 0x2}, {@broadcast}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f00000001c0)={'syztnl1\x00', &(0x7f00000003c0)={'syztnl1\x00', r2, 0x2f, 0x36, 0xc2, 0x3f, 0x40, @private0={0xfc, 0x0, '\x00', 0x1}, @remote, 0x20, 0x10, 0x7fffffff, 0x8001}}) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@cgroup=r3, 0x1f, 0x0, 0x1, &(0x7f0000000000)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000040)=[0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0, 0x0, 0x0], &(0x7f0000000100)=[0x0, 0x0, 0x0]}, 0x40) sendto$inet6(r0, &(0x7f0000000380)="c7", 0x1, 0x0, 0x0, 0x0) 30.194107926s ago: executing program 2: socket$packet(0x11, 0x3, 0x300) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000001dc0)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-clmulni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$inet_sctp(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000000c0)="b6", 0x1}], 0x1}, 0x14f916e07bbbd36a) r2 = accept(r1, 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$NL80211_CMD_GET_STATION(r2, &(0x7f0000001200)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000011c0)={&(0x7f00000010c0)={0xdc, 0x0, 0x2, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8}, @val={0xc, 0x99, {0x0, 0x51}}}}, [@NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0x5e, 0xbe, "d9d2200121072a437b71a529319562ba80d13b712686013a95ab7b7b105a5f6cd7ed8acf9d097dd09df5c63a062d52e21f40cf28303256834cba78652c5d8dc1fda9f225d85a5f08a3f93cd82849b5ce50032e58a05515e7a784"}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x52, 0xac, "ad33b615fc13eeb791218845384599151de31eb8ba927858dbec7cd680fdc29347f21914e74c3ee67d44a557a38ab36ac292be2c8d2266bb2b4332a7bf9ebc251cf56b165df1798a24c9311d951a"}]}, 0xdc}, 0x1, 0x0, 0x0, 0x4040000}, 0x110) 30.090031825s ago: executing program 2: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x4, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$packet(0x11, 0x0, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x6, 0xe, &(0x7f0000002380)=ANY=[@ANYBLOB="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"/3002], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000040), 0x10}, 0x3f) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r1, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 30.015873478s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f00000000c0)={0x0, 0xa, &(0x7f00000001c0)={&(0x7f00000002c0)={0x44, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x0, 0x0, 0x0, 0x0, 0x0, 0x1]}}]}]}]}, 0x44}}, 0x0) 396.412452ms ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000440)=ANY=[@ANYBLOB="540100001a001307000000000000001cac141400"/64, @ANYRES8, @ANYRES32=0x0, @ANYBLOB="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"], 0x154}}, 0x4881d) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x4}]}, 0x20}}, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000400), 0xffffffffffffffff) unshare(0x28000400) r2 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_int(r2, 0x0, 0x22, &(0x7f0000000000), 0x4) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000040)=0xfffffffd, 0x4) syz_init_net_socket$ax25(0x3, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) epoll_create1(0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f00000001c0), &(0x7f0000000200)=0x14) ioctl$sock_inet_udp_SIOCOUTQ(0xffffffffffffffff, 0x5411, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001180)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x24}}, 0x0) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) r8 = socket$inet6(0xa, 0x6, 0x0) ioctl$FS_IOC_MEASURE_VERITY(r8, 0xc0046686, &(0x7f0000000080)={0x1, 0x5a, "2c95207749c2b2baf2ae2dc83475742a2ecc0f9ae6eaa26c009ad70bfdccfffb0d5b6df60362073069499d92d54064ae8d5b3509998fac60f4c3a65df976799069a26821c3e3028a71d571bb0f2ab3f8fe0557866a6640960b16"}) bind$inet6(r8, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) listen(r8, 0x80080400) r9 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r9, &(0x7f0000e5c000)={0x2, 0x4e22, @loopback=0x7f000002}, 0x10) 324.317485ms ago: executing program 0: socket(0xb, 0x800, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (async) socket$can_bcm(0x1d, 0x2, 0x2) (async) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$sock_int(r2, 0x1, 0x46, &(0x7f0000000000), 0x4) (async, rerun: 32) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) socket(0x10, 0x803, 0x0) (async) write$binfmt_script(r3, &(0x7f0000000180), 0xfea7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r1, 0x0) r4 = socket$rxrpc(0x21, 0x2, 0xa) (async, rerun: 64) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async, rerun: 64) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000007580), 0xffffffffffffffff) (rerun: 32) sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="2d01620000000900509072fb60cb08000300", @ANYRES16=r0], 0x2c}}, 0x0) (async) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f0000007680)={0x0, 0x0, &(0x7f0000007640)={&(0x7f0000000000)=ANY=[@ANYBLOB="46040000", @ANYRES16=r7, @ANYBLOB="ff830500000700ffffff", @ANYRES32=r4], 0x4}}, 0x0) sendfile(r6, r5, 0x0, 0x100000002) (async) r8 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r8, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x2, 0x18, 0x0, 0x0, 0x19, 0x0, 0x0, 0x0, [@sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @local}}, @sadb_x_policy={0x8, 0x12, 0x0, 0x0, 0x0, 0x0, 0x0, {0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @in=@loopback, @in6=@private1}}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @empty}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x0, @broadcast}, @in={0x2, 0x0, @multicast2}}]}, 0xc8}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f00000000c0)={'bond0\x00', 0x201}) (async, rerun: 32) r9 = socket$inet6_sctp(0xa, 0x801, 0x84) (rerun: 32) connect$inet6(r9, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) (async) shutdown(r9, 0x1) setsockopt$inet_sctp6_SCTP_MAXSEG(r9, 0x84, 0xd, &(0x7f0000000040), 0x4) r10 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r10, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1000}, 0x4) (async) setsockopt$packet_tx_ring(r10, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x6, 0x300, 0xfc}, 0x1c) 262.540738ms ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x2, 0x2, 0x204}, 0x48) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r0}, &(0x7f0000000140), &(0x7f0000000180)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000080)='jbd2_handle_stats\x00', r2}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000880)='cpuacct.usage_sys\x00', 0x26e1, 0x0) (async) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000640)=@nat={'nat\x00', 0x1b, 0x5, 0x338, 0x0, 0xd8, 0xffffffff, 0xd8, 0x300, 0x3e8, 0x3e8, 0xffffffff, 0x3e8, 0x3e8, 0x5, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'bond0\x00', 'syz_tun\x00', {}, {}, 0x0, 0x5}, 0x0, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @local, @multicast1, @icmp_id, @gre_key}}}}, {{@ip={@loopback, @broadcast, 0x0, 0x0, 'erspan0\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0xa8}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @remote, @empty, @port, @gre_key}}}}, {{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'sit0\x00', 'batadv_slave_0\x00'}, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @broadcast, @multicast2}}}}, {{@ip={@dev, @remote, 0x0, 0x0, 'caif0\x00', 'pim6reg1\x00'}, 0x0, 0x70, 0xa8}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x0, @local, @empty, @gre_key}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) (async) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x78}, 0x1, 0x7}, 0x50) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff}) ioctl$IMCTRLREQ(r5, 0x80044945, &(0x7f0000000080)={0x4006, 0x0, 0x5, 0x80000001}) 199.609256ms ago: executing program 1: r0 = socket(0x200000000000011, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000040)={{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa}}, {{@in=@local, 0x0, 0x6c}, 0x0, @in=@broadcast}}, 0xe8) close(r2) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'veth1_virt_wifi\x00', 0x0}) r4 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r4, 0x10d, 0x0, &(0x7f0000000080), &(0x7f00000000c0)=0x4) setsockopt$inet_sctp6_SCTP_RECVRCVINFO(r0, 0x84, 0x20, &(0x7f0000000280)=0x7, 0x4) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYRES32=r0, @ANYRES64=r3, @ANYRES64=r4, @ANYRESHEX=r1], 0x30}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e370c0c188002ac0f000300", 0x33fe0}], 0x1}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xc, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xab}]}, &(0x7f0000000100)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_emit_ethernet(0x8a, &(0x7f00000004c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x54, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x15, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "27406263e43d5959a166a23bd1116edc"}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x7, &(0x7f0000000440)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$kcm(0x21, 0x2, 0x2) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0x90}, 0x1, 0x0, 0x0, 0x840}, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0xb4, 0x19, 0x1, 0x0, 0x0, {0x1d, 0xd601, 0x9}, [@nested={0x4d, 0x11, 0x0, 0x1, [@generic="9ed61b77d9f16a96c594a18344b265ba7f20e413597129961ed189d63c3391c4854d66a1452ed6b21920c796c4fb58a76f04811e8a7bda7af3bdb21fcab2d6ca22909ed50d079f0b71"]}, @nested={0x4d, 0x12, 0x0, 0x1, [@generic="3b6f2811032d68bea0612044f47c2842b277eb4bc53070416c6050e46d2e0d055c97c9e7f9bf0bafe4af56eba9024644942e3645a3e6db0d1191744909497df00d71d2273b51a237f2"]}]}, 0xb4}}, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffff7d) r10 = socket(0xa, 0x3, 0x3) setsockopt$inet6_IPV6_RTHDR(r10, 0x29, 0x39, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x29}, 0x8) 0s ago: executing program 2: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/252, 0xfc}], 0x1, &(0x7f0000001e40)=""/23, 0x17}}], 0x1, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010108"], 0x7c}}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="e3", 0x1a5c19}], 0x4) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x24}}, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x41, &(0x7f0000000000)=0xff, 0x4) (async) connect$inet6(r0, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1c}, 0xd}, 0x1c) (async) recvmmsg(r0, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/252, 0xfc}], 0x1, &(0x7f0000001e40)=""/23, 0x17}}], 0x1, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010108"], 0x7c}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000140)=0x8) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_ro(r4, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000200)="e3", 0x1a5c19}], 0x4) (async) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)={0x24, r2, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x10, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x4}]}]}, 0x24}}, 0x0) (async) kernel console output (not intermixed with test programs): : 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 285.324942][T15334] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 285.544554][T15347] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 285.576355][T15347] macsec2: entered allmulticast mode [ 285.581680][T15347] dummy0: entered allmulticast mode [ 285.607576][T15349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 285.685462][T15349] dummy0 (unregistering): left allmulticast mode [ 285.908304][T15361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 286.153051][T15375] netlink: 65051 bytes leftover after parsing attributes in process `syz-executor.0'. [ 286.225044][T15381] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 286.255579][T15381] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.292859][T15381] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 286.651103][T15394] xt_TCPMSS: Only works on TCP SYN packets [ 286.760332][T15399] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 286.905893][T15402] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 287.391236][T15418] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 287.399549][T15418] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.418735][T15418] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 287.525311][T15424] bond0: (slave bond_slave_0): Error -28 calling ndo_bpf [ 287.884294][T15448] syzkaller1: entered promiscuous mode [ 287.905024][T15448] syzkaller1: entered allmulticast mode [ 287.969125][T15454] xt_TCPMSS: Only works on TCP SYN packets [ 287.977856][T15454] rdma_op ffff8880484421f0 conn xmit_rdma 0000000000000000 [ 288.004610][T15454] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 288.078556][T15454] infiniband syz1: set active [ 288.094523][T15454] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 288.175600][T15463] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 288.184680][T15463] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 288.734145][T15488] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 288.967461][T15501] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 289.017687][T15503] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 289.625922][T15532] macvtap1: entered promiscuous mode [ 289.633796][T15532] erspan0: entered promiscuous mode [ 289.639133][T15532] macvtap1: entered allmulticast mode [ 289.659199][T15532] erspan0: entered allmulticast mode [ 289.678596][T15535] erspan0: left allmulticast mode [ 289.683770][T15535] erspan0: left promiscuous mode [ 289.690330][T15535] macvtap1: left promiscuous mode [ 289.695990][T15535] macvtap1: left allmulticast mode [ 289.915741][T15542] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 290.050697][T15545] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 290.349684][T15564] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 290.368121][T15564] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 290.380140][T15564] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 290.392556][T15564] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 290.410432][T15564] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 290.421728][T15567] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 290.444891][T15564] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 290.453144][T15564] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 290.469225][T15564] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 290.483776][T15564] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 290.600090][T15564] bridge0: port 3(macsec0) entered blocking state [ 290.645614][T15564] bridge0: port 3(macsec0) entered disabled state [ 290.690143][T15564] macsec0: entered allmulticast mode [ 290.703225][T15582] __nla_validate_parse: 8 callbacks suppressed [ 290.703242][T15582] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 290.705085][T15564] macsec0: entered promiscuous mode [ 290.766174][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.794411][T15584] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.915400][T15593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 290.931040][T15595] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 291.729866][T15623] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 292.253670][T15657] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.267714][T15656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 293.358194][T15704] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.452833][T15712] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 293.517546][T15713] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 293.835459][T15732] can: request_module (can-proto-0) failed. [ 294.301301][T15752] lo speed is unknown, defaulting to 1000 [ 295.155424][T15783] can: request_module (can-proto-0) failed. [ 295.619138][T15806] xt_TCPMSS: Only works on TCP SYN packets [ 295.797383][T15821] __nla_validate_parse: 3 callbacks suppressed [ 295.797398][T15821] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.135735][T15828] lo speed is unknown, defaulting to 1000 [ 296.452768][T15839] validate_nla: 7 callbacks suppressed [ 296.452787][T15839] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 296.467649][T15839] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 296.659853][T15843] can: request_module (can-proto-0) failed. [ 297.040900][T15862] Cannot find del_set index 3 as target [ 297.262577][T15877] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 297.323736][T15877] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.689255][T15893] can: request_module (can-proto-0) failed. [ 297.991410][T15889] lo speed is unknown, defaulting to 1000 [ 298.416815][T15910] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 298.694579][T15923] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 298.726872][T15923] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 299.351879][T15957] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 299.529923][T15972] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 299.590964][T15972] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 300.326113][T15989] lo speed is unknown, defaulting to 1000 [ 300.846856][T16007] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 300.864482][T16007] netlink: 56188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 300.880956][T15996] lo speed is unknown, defaulting to 1000 [ 300.942078][T16021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.010208][ T29] audit: type=1107 audit(1718528911.571:38): pid=16034 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 302.046301][T16040] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 302.069750][T16040] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 303.143667][ T5117] Bluetooth: hci1: command 0x0405 tx timeout [ 303.442413][ T5117] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 303.447232][T16092] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 303.452111][ T5117] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 303.493695][ T5117] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 303.510281][T16092] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 303.520940][ T5117] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 303.529083][ T5117] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 303.537455][ T5117] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 303.652493][T16076] lo speed is unknown, defaulting to 1000 [ 304.080204][T16115] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 304.099623][T16115] macvtap4: entered allmulticast mode [ 304.112783][T16115] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 304.140948][T16115] netdevsim netdevsim4 netdevsim0: left allmulticast mode [ 304.155946][T16115] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 304.201764][T16094] lo speed is unknown, defaulting to 1000 [ 305.012124][T16141] net veth1_virt_wifi ÿÿÿÿÿÿÿ: renamed from virt_wifi0 [ 305.028997][T16142] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 305.038804][T16142] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 305.050731][T16142] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 305.084399][T16151] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 305.092674][T16151] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 305.113286][ T29] audit: type=1804 audit(1718528914.661:39): pid=16150 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/664/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 305.209822][T16094] chnl_net:caif_netlink_parms(): no params data found [ 305.409193][T16094] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.428668][T16168] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 305.441427][T16094] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.460925][T16094] bridge_slave_0: entered allmulticast mode [ 305.481740][T16094] bridge_slave_0: entered promiscuous mode [ 305.496585][T16094] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.513881][T16094] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.531427][T16094] bridge_slave_1: entered allmulticast mode [ 305.542783][T16094] bridge_slave_1: entered promiscuous mode [ 305.624232][ T5117] Bluetooth: hci5: command tx timeout [ 305.646936][T16094] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.701131][T16094] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.844722][T16094] team0: Port device team_slave_0 added [ 305.879618][T16094] team0: Port device team_slave_1 added [ 305.998116][T16094] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.023502][T16094] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.057574][T16194] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 306.074717][T16094] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.085394][T16194] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.106276][T16094] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.113259][T16094] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.145553][T16094] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.275502][T16198] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.318156][T16094] hsr_slave_0: entered promiscuous mode [ 306.325333][T16094] hsr_slave_1: entered promiscuous mode [ 306.332104][T16094] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.339961][T16094] Cannot create hsr debugfs directory [ 306.357736][T16177] lo speed is unknown, defaulting to 1000 [ 306.374718][T16199] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.812240][T16094] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.824060][T16219] xt_TCPMSS: Only works on TCP SYN packets [ 306.906527][T16223] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 306.957618][T16094] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.049375][T16094] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.194300][T16094] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.575650][T16094] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 307.603280][T16094] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 307.647405][T16094] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 307.692111][T16094] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 307.703756][ T5117] Bluetooth: hci5: command tx timeout [ 307.744559][T16242] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 307.753223][T16242] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 307.907472][T16094] 8021q: adding VLAN 0 to HW filter on device bond0 [ 307.976826][T16094] 8021q: adding VLAN 0 to HW filter on device team0 [ 308.025180][T11717] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.032335][T11717] bridge0: port 1(bridge_slave_0) entered forwarding state [ 308.091744][T11705] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.098968][T11705] bridge0: port 2(bridge_slave_1) entered forwarding state [ 308.506376][T16094] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.589003][T16094] veth0_vlan: entered promiscuous mode [ 308.604133][T16094] veth1_vlan: entered promiscuous mode [ 308.641624][T16094] veth0_macvtap: entered promiscuous mode [ 308.659106][T16094] veth1_macvtap: entered promiscuous mode [ 308.681478][T16094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.692282][T16094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.703871][T16094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.714599][T16094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.724663][T16094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.735397][T16094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.757480][T16094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.789551][T16094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.816169][T16094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 308.833113][T16094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.847191][T16094] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.868164][T16094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.881692][T16094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.911183][T16094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.928767][T16094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.938845][T16094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.949462][T16094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.960671][T16094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 308.971753][T16288] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 308.980196][T16094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 308.991037][T16288] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 309.000786][T16094] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 309.011842][T16094] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 309.022972][T16094] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 309.048484][T16094] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.061048][T16094] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.082608][T16094] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.103205][T16094] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 309.291828][T10491] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.325039][T10491] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.390103][ T5696] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.418620][ T5696] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.468377][T16304] netlink: 'syz-executor.4': attribute type 9 has an invalid length. [ 309.494785][T16304] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 309.635911][T16309] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 309.783852][ T5117] Bluetooth: hci5: command tx timeout [ 310.154747][T16297] lo speed is unknown, defaulting to 1000 [ 310.509334][T16353] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 310.517990][T16353] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 310.619569][T16355] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 310.634032][T16355] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.065922][T16368] syzkaller0: entered promiscuous mode [ 311.098943][T16368] syzkaller0: entered allmulticast mode [ 311.409505][T16388] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 311.457633][T16388] __nla_validate_parse: 1 callbacks suppressed [ 311.457653][T16388] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.679659][T16400] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 311.689190][T16400] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 311.865147][ T5117] Bluetooth: hci5: command tx timeout [ 312.395112][T16408] lo speed is unknown, defaulting to 1000 [ 312.808300][T16428] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.4'. [ 312.829985][T16429] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 312.867939][T16429] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 313.073011][T16440] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 313.100537][T16440] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.997713][T16486] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 314.028213][T16486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 314.285634][T16490] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 314.316518][T16490] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 314.557685][T16499] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 315.099997][T16525] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 315.118083][T16525] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 315.265769][T16534] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 315.885055][T16532] lo speed is unknown, defaulting to 1000 [ 316.322319][T16573] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 316.681848][T16599] __nla_validate_parse: 4 callbacks suppressed [ 316.681868][T16599] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 317.390377][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.553509][T16636] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 317.585061][T16636] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 317.726422][T16642] af_packet: tpacket_rcv: packet too big, clamped from 59650 to 3952. macoff=96 [ 318.294850][T16662] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 318.842992][T16644] lo speed is unknown, defaulting to 1000 [ 319.831625][T16700] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 321.370373][T16751] lo speed is unknown, defaulting to 1000 [ 322.401221][T16825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.628732][T16833] netlink: 'syz-executor.1': attribute type 15 has an invalid length. [ 322.815126][T16843] IPVS: set_ctl: invalid protocol: 178 224.0.0.1:20001 [ 322.976604][T16847] syz-executor.1[16847] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 323.466526][T16876] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.547816][T16882] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 323.569399][T16882] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 324.270445][T16903] rdma_rxe: rxe_newlink: failed to add lo [ 325.017460][T16904] lo speed is unknown, defaulting to 1000 [ 325.092797][T16947] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 325.185046][T16951] netlink: 344 bytes leftover after parsing attributes in process `syz-executor.1'. [ 325.321119][T16955] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 325.356983][T16955] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 326.067061][T16980] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 326.441959][T16990] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 326.492405][T16990] bond0: entered promiscuous mode [ 326.813931][ T29] audit: type=1804 audit(1718528936.381:40): pid=17013 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/703/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 [ 327.079055][T17014] lo speed is unknown, defaulting to 1000 [ 327.822962][T17049] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 328.065580][T17059] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.4'. [ 328.118063][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807973b400: rx timeout, send abort [ 328.626483][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88807973b400: abort rx timeout. Force session deactivation [ 328.818576][T17092] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.830206][T17092] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 328.994985][T17097] netlink: 207496 bytes leftover after parsing attributes in process `syz-executor.3'. [ 329.025847][T17089] lo speed is unknown, defaulting to 1000 [ 329.076941][T17099] xt_CT: You must specify a L4 protocol and not use inversions on it [ 329.484502][T17119] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 329.555621][T17126] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 329.583774][T17126] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 329.711848][T17135] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 330.003991][T17142] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 330.017420][T17142] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 332.412916][T17220] lo speed is unknown, defaulting to 1000 [ 333.211453][T17277] lo speed is unknown, defaulting to 1000 [ 333.797249][T17298] Bluetooth: hci3: invalid len left 7, exp >= 35 [ 333.989315][T17315] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.4'. [ 334.020576][T17315] rdma_rxe: rxe_newlink: failed to add caif0 [ 334.824048][ T5115] Bluetooth: hci3: command 0x0405 tx timeout [ 335.074028][T17347] ipt_REJECT: ECHOREPLY no longer supported. [ 335.077664][T17335] lo speed is unknown, defaulting to 1000 [ 335.430043][ T29] audit: type=1800 audit(1718528944.991:41): pid=17362 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1968 res=0 errno=0 [ 335.675619][T17370] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.1'. [ 336.024805][T17357] lo speed is unknown, defaulting to 1000 [ 336.453857][T17394] bridge0: port 1(vlan2) entered blocking state [ 336.460610][T17394] bridge0: port 1(vlan2) entered disabled state [ 336.473997][T17394] vlan2: entered allmulticast mode [ 336.522761][T17394] vlan2: left allmulticast mode [ 337.440708][T17441] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 337.461881][T17418] lo speed is unknown, defaulting to 1000 [ 337.774950][T17453] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 337.808167][T17453] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 337.884306][T17452] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 337.921355][T17452] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 337.952122][T17452] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 337.983721][T17452] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 338.003775][T17452] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 338.012779][T17452] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 338.063580][T17452] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 338.072619][T17452] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 338.117464][T17452] geneve2: entered promiscuous mode [ 338.122722][T17452] geneve2: entered allmulticast mode [ 339.294390][T17488] RDS: rds_bind could not find a transport for fe80::38, load rds_tcp or rds_rdma? [ 339.330262][T17458] lo speed is unknown, defaulting to 1000 [ 339.585030][T17462] lo speed is unknown, defaulting to 1000 [ 339.858317][T17501] syz-executor.0[17501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.858628][T17501] syz-executor.0[17501] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 340.124225][T17506] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 340.132378][T17506] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.0'. [ 340.173919][T17506] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 341.260785][T17531] lo speed is unknown, defaulting to 1000 [ 341.360528][T17546] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 341.386178][T17546] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 341.404307][T17546] netlink: 'syz-executor.2': attribute type 14 has an invalid length. [ 341.476836][T17546] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.485981][T17546] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.495581][T17546] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.505052][T17546] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.536311][T17546] vxlan0: entered promiscuous mode [ 342.519687][T17568] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 343.064495][T17576] lo speed is unknown, defaulting to 1000 [ 343.086643][T17593] hsr0: entered promiscuous mode [ 343.279859][T17596] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.295614][T17596] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 343.871999][T17613] tipc: Started in network mode [ 343.887282][T17613] tipc: Node identity 46c99fcdd684, cluster identity 4711 [ 343.902998][T17613] tipc: Enabled bearer , priority 0 [ 344.030234][T17616] tipc: Resetting bearer [ 344.055565][T17604] lo speed is unknown, defaulting to 1000 [ 344.067011][T17611] tipc: Resetting bearer [ 344.924709][T11710] tipc: Node number set to 2421006285 [ 345.064778][ T4488] Bluetooth: hci1: command 0x0405 tx timeout [ 346.488012][T17611] tipc: Disabling bearer [ 346.831473][T17630] lo speed is unknown, defaulting to 1000 [ 347.021694][T17651] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 347.217378][T17647] lo speed is unknown, defaulting to 1000 [ 349.084072][T17678] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 349.197293][T17678] team0: Port device netdevsim0 added [ 349.579667][T17690] tipc: Started in network mode [ 349.597414][T17690] tipc: Node identity ba1368c70b7c, cluster identity 4711 [ 349.618162][T17690] tipc: Enabled bearer , priority 0 [ 349.653774][T17690] syzkaller0: left promiscuous mode [ 349.659230][T17690] syzkaller0: left allmulticast mode [ 350.745335][T11705] tipc: Node number set to 2976868551 [ 350.778033][T17689] lo speed is unknown, defaulting to 1000 [ 351.244498][T17705] lo speed is unknown, defaulting to 1000 [ 351.866416][T17722] lo speed is unknown, defaulting to 1000 [ 352.358266][T17756] tipc: Enabled bearer , priority 0 [ 352.460207][T17756] syzkaller0: left promiscuous mode [ 352.468452][T17756] syzkaller0: left allmulticast mode [ 352.518364][T17732] lo speed is unknown, defaulting to 1000 [ 353.900422][T17777] lo speed is unknown, defaulting to 1000 [ 354.004042][T17792] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 354.211694][T17798] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.260209][T17801] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.4'. [ 355.263175][T17825] tipc: Enabling of bearer rejected, already enabled [ 355.658264][T17837] netlink: 888 bytes leftover after parsing attributes in process `syz-executor.4'. [ 356.651026][T17850] lo speed is unknown, defaulting to 1000 [ 357.203974][T17906] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.4'. [ 357.388245][T17906] Êüä^q: entered promiscuous mode [ 357.464385][T17911] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147221507 (only 8 groups) [ 357.465028][T17897] lo speed is unknown, defaulting to 1000 [ 357.664652][T17920] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 357.679555][T17920] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 357.701164][T17920] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 357.760077][T17920] NCSI netlink: No device for ifindex 0 [ 357.836864][T17929] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.2'. [ 358.370438][T17942] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.425742][T17942] team0: Port device bond0 added [ 359.530936][T17980] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 359.861876][T17963] lo speed is unknown, defaulting to 1000 [ 360.058819][T18009] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 361.228759][T18058] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 361.475819][T18075] netlink: 'syz-executor.0': attribute type 30 has an invalid length. [ 361.524841][T18075] dvmrp0: entered allmulticast mode [ 361.565517][T18075] dvmrp0: left allmulticast mode [ 362.701431][T18089] lo speed is unknown, defaulting to 1000 [ 362.894042][T18125] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 363.362543][T18153] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.382275][T18151] bond0: entered promiscuous mode [ 363.393601][T18151] bond_slave_0: entered promiscuous mode [ 363.403827][T18151] bond_slave_1: entered promiscuous mode [ 363.409660][T18151] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 363.796374][T18172] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 363.931389][T18174] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 364.958272][T18200] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 364.985157][T18200] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.2'. [ 365.989235][T18236] lo speed is unknown, defaulting to 1000 [ 366.399877][T18263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.309566][T18308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.344703][T18308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.412508][T18308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.453906][T18308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.492950][T18308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.522180][T18308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.548019][T18308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.561767][T18308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.571976][T18308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.582975][T18308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.594553][T18308] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.636754][T18308] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.895592][T18319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.634762][T18343] ebt_among: dst integrity fail: 200 [ 368.712278][T18345] xt_NFQUEUE: number of total queues is 0 [ 368.786953][T18347] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 368.803608][T18347] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 369.080728][T18359] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 369.486497][T18379] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 369.619816][T18368] lo speed is unknown, defaulting to 1000 [ 369.876240][T18397] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 369.896936][T18397] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 370.542440][T18420] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 370.550810][T18420] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.0'. [ 370.625950][T18422] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 370.653641][T18422] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 370.805799][T18427] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.4'. [ 370.874846][T18427] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 371.318449][T18454] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 371.352576][T18454] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 372.333719][T18498] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 372.475733][T18504] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 372.506905][T18504] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 372.990336][T18485] lo speed is unknown, defaulting to 1000 [ 374.198655][T18551] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 374.212676][T18551] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 374.630078][T18567] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 374.773322][T18572] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 374.873581][T18572] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 375.224732][T18594] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 375.235495][T18594] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 375.458887][T18611] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 375.571234][T18616] veth4: entered promiscuous mode [ 375.585948][T18616] veth4: entered allmulticast mode [ 375.760236][T18615] lo speed is unknown, defaulting to 1000 [ 375.909246][T18623] __nla_validate_parse: 1 callbacks suppressed [ 375.909265][T18623] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.4'. [ 376.122701][T18634] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 376.406281][T18648] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 376.446381][T18648] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 376.881559][T18677] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 377.203335][T18693] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 377.425609][T18702] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 377.446411][T18702] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 377.923137][T18725] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 377.941867][T18681] lo speed is unknown, defaulting to 1000 [ 378.648112][T18763] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 378.684556][T18763] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.825792][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.120725][T18782] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 379.785121][T18794] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 379.852338][T18794] vlan5: entered allmulticast mode [ 380.030775][T18798] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 380.050972][T18798] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 380.112173][T18781] lo speed is unknown, defaulting to 1000 [ 380.876896][T18832] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 381.121583][T18847] __nla_validate_parse: 1 callbacks suppressed [ 381.121604][T18847] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 381.756014][T18878] dccp_invalid_packet: P.Data Offset(0) too small [ 381.773910][T18838] lo speed is unknown, defaulting to 1000 [ 382.121171][T18891] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 382.150942][T18891] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 383.424183][T18934] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 383.434754][T18934] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 384.019807][T18970] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 384.050410][T18970] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 384.160140][T18982] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 385.130630][T19023] netlink: 'syz-executor.3': attribute type 25 has an invalid length. [ 385.153363][T19023] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 385.175941][T19023] (unnamed net_device) (uninitialized): option ad_user_port_key: invalid value (3469) [ 385.198276][T19023] (unnamed net_device) (uninitialized): option ad_user_port_key: allowed values 0 - 1023 [ 385.251612][T19018] lo speed is unknown, defaulting to 1000 [ 385.251941][T19030] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 385.293655][T19030] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 385.341035][T19032] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 385.585274][T19044] netlink: 1304 bytes leftover after parsing attributes in process `syz-executor.1'. [ 385.659445][T19044] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 386.048638][T19059] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 386.067068][T19059] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 386.221277][T19061] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 386.735721][T19079] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 386.773641][T19079] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.2'. [ 387.164030][T19106] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 387.216902][T19108] x_tables: duplicate underflow at hook 2 [ 387.805072][T19134] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 387.864532][T19134] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.4'. [ 387.982592][T19143] x_tables: unsorted underflow at hook 2 [ 388.165173][T19148] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 388.204018][T19150] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.220689][T19150] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.990153][T19183] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 388.998698][T19183] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.3'. [ 389.270454][T19194] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 390.595600][T19241] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 390.730521][T19247] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 390.843767][T19251] bridge1: port 1(veth1_to_bond) entered blocking state [ 390.850855][T19251] bridge1: port 1(veth1_to_bond) entered disabled state [ 390.898724][T19251] veth1_to_bond: entered allmulticast mode [ 390.918781][T19251] veth1_to_bond: entered promiscuous mode [ 390.932824][T19251] bridge1: port 1(veth1_to_bond) entered blocking state [ 390.939979][T19251] bridge1: port 1(veth1_to_bond) entered forwarding state [ 391.377556][T19260] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.4'. [ 391.406098][T19260] openvswitch: Êü: Dropping previously announced user features [ 391.511275][T19275] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 391.985308][T19306] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 392.019686][T19309] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 392.294514][T19327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 392.479734][T19336] netlink: zone id is out of range [ 392.530027][T19336] netlink: zone id is out of range [ 392.559851][T19336] netlink: zone id is out of range [ 392.587027][T19336] netlink: zone id is out of range [ 392.613600][T19336] netlink: zone id is out of range [ 392.643302][T19336] netlink: zone id is out of range [ 392.663090][T19336] netlink: zone id is out of range [ 392.681315][T19336] netlink: zone id is out of range [ 392.693780][T19336] netlink: zone id is out of range [ 392.709228][T19336] netlink: zone id is out of range [ 393.015688][T19365] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 393.042810][T19367] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 393.805420][T19403] ip6_vti0: entered allmulticast mode [ 393.839165][T19402] ip6_vti0: left allmulticast mode [ 394.518797][T19423] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 394.840597][T19440] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 394.910056][T19440] team0: Device veth1_macvtap failed to register rx_handler [ 395.499487][T19440] syz-executor.1 (19440) used greatest stack depth: 18000 bytes left [ 395.552687][T19460] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 395.772520][T19473] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 395.790512][T19475] (unnamed net_device) (uninitialized): ARP target 1.0.0.0 is already present [ 395.817645][T19475] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (1) [ 396.579389][T19503] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 397.706637][T19536] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 397.771152][T19537] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 397.782569][T19544] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 398.336657][T19574] tun0: tun_chr_ioctl cmd 1074025677 [ 398.352427][T19574] tun0: linktype set to 774 [ 398.380491][T19574] netlink: 'syz-executor.1': attribute type 9 has an invalid length. [ 398.414256][T19574] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 398.731218][T19591] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 398.823861][T19595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.863770][T19595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.893645][T19595] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.939192][T19601] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 399.435721][T19620] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 399.471005][T19620] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 399.491038][T19632] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 399.657242][T19644] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 400.210581][T19658] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.1'. [ 400.920372][T19677] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 401.194713][T19695] xt_CT: You must specify a L4 protocol and not use inversions on it [ 401.667753][T19718] syz-executor.0[19718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.669182][T19718] syz-executor.0[19718] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 401.944177][T19727] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 402.202761][T19749] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.356728][T19823] xt_CT: You must specify a L4 protocol and not use inversions on it [ 403.956032][T19850] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 404.156762][T19859] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 404.175606][T19859] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 404.183863][T19860] xt_CT: You must specify a L4 protocol and not use inversions on it [ 404.768643][T19902] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 404.798164][T19902] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 404.832250][T19902] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 404.855507][T19902] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 404.872938][T19902] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 404.902731][T19902] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 404.979779][T19916] sctp: [Deprecated]: syz-executor.2 (pid 19916) Use of int in max_burst socket option. [ 404.979779][T19916] Use struct sctp_assoc_value instead [ 405.488652][T19946] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 405.634042][T19953] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 405.883601][T19965] syzkaller0: entered promiscuous mode [ 405.895840][T19965] syzkaller0: entered allmulticast mode [ 405.924951][T19965] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 405.968718][T19965] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 406.643824][T20001] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 406.808848][T20015] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 406.851465][T20015] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 406.893245][T20020] netlink: 324 bytes leftover after parsing attributes in process `syz-executor.3'. [ 406.928905][T20019] pimreg: entered allmulticast mode [ 406.959754][T20019] pimreg: left allmulticast mode [ 407.056137][T20025] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 407.090383][T20025] ipvlan1: entered promiscuous mode [ 407.132469][T20025] ipvlan1: entered allmulticast mode [ 407.153848][T20025] veth0_vlan: entered allmulticast mode [ 407.206432][T20025] bridge0: port 3(ipvlan1) entered blocking state [ 407.214991][T20025] bridge0: port 3(ipvlan1) entered disabled state [ 407.246509][T20025] net_ratelimit: 278 callbacks suppressed [ 407.246528][T20025] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 407.554497][T20071] netlink: 3240 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.916993][T20089] ipt_REJECT: ECHOREPLY no longer supported. [ 407.923048][T20077] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.987357][T20089] xt_CT: You must specify a L4 protocol and not use inversions on it [ 408.007910][T20096] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.419801][ T29] audit: type=1804 audit(1718529017.981:42): pid=20116 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1006/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 408.683097][T20135] netlink: 3240 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.845154][T20132] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 408.879104][T20139] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 409.345416][T20176] validate_nla: 2 callbacks suppressed [ 409.345434][T20176] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 409.524406][T20188] netlink: 3240 bytes leftover after parsing attributes in process `syz-executor.3'. [ 409.717068][T20182] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 410.092525][T20224] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 410.180943][T20232] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 411.130414][T20275] IPv6: sit1: Disabled Multicast RS [ 411.509595][T20299] veth1_macvtap: left promiscuous mode [ 412.109113][T20331] __nla_validate_parse: 2 callbacks suppressed [ 412.109132][T20331] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 412.330813][T20342] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 412.469809][T20348] vlan2: entered promiscuous mode [ 412.493152][T20348] batadv0: entered promiscuous mode [ 412.816402][T20372] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 413.238048][T20387] mac80211_hwsim hwsim29 wlan0: entered promiscuous mode [ 413.254853][T20390] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 413.278196][T20387] mac80211_hwsim hwsim29 wlan0: left promiscuous mode [ 413.525995][T20402] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 413.563919][T20402] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 413.874593][T20398] lo speed is unknown, defaulting to 1000 [ 413.888510][T20415] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.4'. [ 413.899191][ T29] audit: type=1800 audit(1718529023.461:43): pid=20425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1969 res=0 errno=0 [ 413.963778][T20425] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 413.968130][ T29] audit: type=1804 audit(1718529023.481:44): pid=20425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/470/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 414.043449][ T29] audit: type=1804 audit(1718529023.481:45): pid=20425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/470/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 414.139201][ T29] audit: type=1804 audit(1718529023.491:46): pid=20425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/470/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 414.232980][ T29] audit: type=1804 audit(1718529023.521:47): pid=20425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/470/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 414.324160][ T29] audit: type=1804 audit(1718529023.521:48): pid=20425 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/470/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 414.372408][ T29] audit: type=1804 audit(1718529023.661:49): pid=20429 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/470/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 415.605539][ T4488] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 415.616215][ T4488] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 415.627063][ T4488] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 415.645369][ T4488] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 415.667402][ T4488] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 415.675936][ T4488] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 415.689307][T10486] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.735893][ T29] audit: type=1800 audit(1718529025.301:50): pid=20488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 415.813754][ T29] audit: type=1804 audit(1718529025.341:51): pid=20488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1023/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 415.849351][ T29] audit: type=1804 audit(1718529025.341:52): pid=20488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1023/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 415.874240][T20488] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 415.905675][T10486] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.098971][T10486] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.157024][T20479] lo speed is unknown, defaulting to 1000 [ 416.209268][T10486] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.433705][T10486] bridge_slave_1: left allmulticast mode [ 416.442392][T10486] bridge_slave_1: left promiscuous mode [ 416.456919][T10486] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.497768][T10486] bridge_slave_0: left allmulticast mode [ 416.508367][T10486] bridge_slave_0: left promiscuous mode [ 416.521205][T10486] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.559133][T10486] veth1_to_bond: left allmulticast mode [ 416.588913][T10486] veth1_to_bond: left promiscuous mode [ 416.612091][T10486] bridge1: port 1(veth1_to_bond) entered disabled state [ 417.785771][ T5117] Bluetooth: hci5: command tx timeout [ 417.831733][T20569] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 417.848649][T20569] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 417.861257][T20569] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 417.868600][T10486] team0: Port device bond0 removed [ 417.883177][T10486] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 417.906322][T10486] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 417.929111][T10486] bond0 (unregistering): Released all slaves [ 418.181831][T20576] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 418.791651][T20479] chnl_net:caif_netlink_parms(): no params data found [ 418.976533][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 418.976551][ T29] audit: type=1800 audit(1718529028.541:64): pid=20614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1950 res=0 errno=0 [ 419.071823][ T29] audit: type=1804 audit(1718529028.621:65): pid=20614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/481/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 419.117334][ T29] audit: type=1804 audit(1718529028.631:66): pid=20614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/481/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 419.172752][ T29] audit: type=1804 audit(1718529028.631:67): pid=20614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/481/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 419.199416][ T29] audit: type=1804 audit(1718529028.731:68): pid=20621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/481/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 419.235422][ T29] audit: type=1804 audit(1718529028.731:69): pid=20621 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/481/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 419.487890][T10486] hsr_slave_0: left promiscuous mode [ 419.507737][T10486] hsr_slave_1: left promiscuous mode [ 419.524685][T10486] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.539153][T10486] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.571971][T10486] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.598389][T10486] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.669563][T10486] batadv0: left promiscuous mode [ 419.676237][T10486] veth0_macvtap: left promiscuous mode [ 419.682151][T10486] veth1_vlan: left promiscuous mode [ 419.688385][T10486] veth0_vlan: left promiscuous mode [ 419.863676][ T5117] Bluetooth: hci5: command tx timeout [ 420.605170][ T29] audit: type=1800 audit(1718529030.171:70): pid=20665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 420.639170][ T29] audit: type=1804 audit(1718529030.191:71): pid=20665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1035/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 420.665445][ T29] audit: type=1804 audit(1718529030.191:72): pid=20665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1035/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 420.695936][ T29] audit: type=1804 audit(1718529030.201:73): pid=20665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1035/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 420.740560][T20665] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 420.793695][T10486] team0 (unregistering): Port device team_slave_1 removed [ 420.845777][T10486] team0 (unregistering): Port device team_slave_0 removed [ 421.281995][T20479] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.290149][T20479] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.298459][T20479] bridge_slave_0: entered allmulticast mode [ 421.306161][T20479] bridge_slave_0: entered promiscuous mode [ 421.314386][T20479] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.321841][T20479] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.329706][T20479] bridge_slave_1: entered allmulticast mode [ 421.337258][T20479] bridge_slave_1: entered promiscuous mode [ 421.513882][T20479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 421.559339][T20479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 421.732113][T20684] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 421.920522][T20479] team0: Port device team_slave_0 added [ 421.952928][T20479] team0: Port device team_slave_1 added [ 421.958524][ T5117] Bluetooth: hci5: command tx timeout [ 422.148052][T20479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.166812][T20479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.232900][T20479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.282718][T20702] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 422.875071][T20702] bridge0: entered promiscuous mode [ 422.912129][T20702] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 422.938252][T20479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.956477][T20479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 423.023172][T20479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 423.040891][T20717] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 423.244893][T20479] hsr_slave_0: entered promiscuous mode [ 423.257315][T20479] hsr_slave_1: entered promiscuous mode [ 423.265136][T20479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 423.272707][T20479] Cannot create hsr debugfs directory [ 424.013931][T20760] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 424.024026][ T5117] Bluetooth: hci5: command tx timeout [ 424.213555][T20479] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 424.250177][T20479] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 424.292714][T20479] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 424.319189][T20479] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 424.530180][T20479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.597024][T20479] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.632338][T11708] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.639565][T11708] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.694401][T11708] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.701641][T11708] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.710863][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 424.710878][ T29] audit: type=1800 audit(1718529034.271:84): pid=20790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 424.747444][ T29] audit: type=1804 audit(1718529034.301:85): pid=20790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1044/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 424.789468][ T29] audit: type=1804 audit(1718529034.301:86): pid=20790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1044/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 424.793193][T20790] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 424.903440][ T29] audit: type=1804 audit(1718529034.301:87): pid=20790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1044/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 425.023869][ T29] audit: type=1804 audit(1718529034.351:88): pid=20790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1044/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 425.105939][ T29] audit: type=1804 audit(1718529034.351:89): pid=20790 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1044/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 425.264872][T20806] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 425.328331][T20479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 425.520517][T20479] veth0_vlan: entered promiscuous mode [ 425.571369][T20479] veth1_vlan: entered promiscuous mode [ 425.645364][T20479] veth0_macvtap: entered promiscuous mode [ 425.677151][T20479] veth1_macvtap: entered promiscuous mode [ 425.739207][T20479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.758713][T20479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.799697][T20479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.811076][T20479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.821513][T20479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.832426][T20479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.842844][T20479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.857318][T20479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.882978][T20479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.936725][T20479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.960380][T20479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.991559][T20479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.020935][T20479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.032686][T20479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.051494][T20479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.062337][T20479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.081062][T20479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.092698][T20479] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.106560][T20479] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.119183][T20479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.128669][T20843] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 426.149521][T20843] bridge0: port 2(bridge_slave_1) entered disabled state [ 426.157238][T20843] bridge0: port 1(bridge_slave_0) entered disabled state [ 426.218077][T20843] bridge0: port 2(bridge_slave_1) entered blocking state [ 426.225330][T20843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 426.232825][T20843] bridge0: port 1(bridge_slave_0) entered blocking state [ 426.240027][T20843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 426.290071][T20843] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 426.309094][T20479] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.343472][T20479] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.371115][T20479] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.383622][T20479] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.562360][ T29] audit: type=1800 audit(1718529036.121:90): pid=20861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 426.602033][ T1095] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.622973][ T29] audit: type=1804 audit(1718529036.161:91): pid=20861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1642859163/syzkaller.pP2aKH/1024/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 426.628032][ T1095] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.713284][T20863] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 426.741201][ T29] audit: type=1804 audit(1718529036.161:92): pid=20861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1642859163/syzkaller.pP2aKH/1024/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 426.742855][T10490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.806426][T10490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 426.816517][ T29] audit: type=1804 audit(1718529036.181:93): pid=20861 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1642859163/syzkaller.pP2aKH/1024/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 427.057274][T20880] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 427.067527][T20880] batadv_slave_1: entered allmulticast mode [ 427.074542][T20880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 427.088970][T20880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.100853][T20880] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 427.540886][T20909] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 427.618072][T20913] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 427.664314][T20913] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.672102][T20913] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.733150][T20913] bridge0: port 2(bridge_slave_1) entered blocking state [ 427.740384][T20913] bridge0: port 2(bridge_slave_1) entered forwarding state [ 427.747935][T20913] bridge0: port 1(bridge_slave_0) entered blocking state [ 427.755144][T20913] bridge0: port 1(bridge_slave_0) entered forwarding state [ 427.779535][T20913] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 427.791143][T20914] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 427.802899][T20914] batadv_slave_1: entered allmulticast mode [ 427.810522][T20914] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 427.850107][T20914] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 428.350986][T20943] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 428.605092][ T5156] IPVS: starting estimator thread 0... [ 428.619946][T20957] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 428.644225][T20957] batadv_slave_1: entered allmulticast mode [ 428.657787][T20957] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.669588][T20957] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.678252][T20957] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 428.733706][T20959] IPVS: using max 19 ests per chain, 45600 per kthread [ 428.870674][T20966] vlan2: entered promiscuous mode [ 429.092858][T20980] veth1_to_bridge: entered allmulticast mode [ 429.105681][T20980] veth1_to_bridge: left allmulticast mode [ 429.612217][T21001] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 429.621570][T21001] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 430.084301][T11702] IPVS: starting estimator thread 0... [ 430.101520][T21005] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 430.121648][T21005] batadv_slave_1: entered allmulticast mode [ 430.129672][T21005] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 430.142740][T21005] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 430.159808][T21005] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 430.176569][T21007] IPVS: using max 17 ests per chain, 40800 per kthread [ 430.312008][T21016] veth1_to_bridge: entered allmulticast mode [ 430.334684][T21016] veth1_to_bridge: left allmulticast mode [ 430.359589][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 430.359606][ T29] audit: type=1800 audit(1718529039.921:102): pid=21021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 430.426474][T21021] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 430.434775][ T29] audit: type=1804 audit(1718529039.961:103): pid=21021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/887/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 430.434825][ T29] audit: type=1804 audit(1718529039.961:104): pid=21021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/887/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 430.434863][ T29] audit: type=1804 audit(1718529039.961:105): pid=21021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/887/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 430.517356][ T29] audit: type=1804 audit(1718529039.981:106): pid=21021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/887/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 430.557492][ T29] audit: type=1804 audit(1718529039.981:107): pid=21021 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/887/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 431.140745][T21059] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 431.152098][T21059] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 431.284603][T21063] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.302087][T21066] veth1_to_bridge: entered allmulticast mode [ 431.312392][T21061] veth1_to_bridge: left allmulticast mode [ 431.382563][T21063] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.413188][T21069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 431.521778][T21063] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.619493][T21063] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 431.708026][T21063] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.722958][T21063] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.750087][T21063] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.769170][T21063] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 431.896984][T21089] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 432.009341][ T29] audit: type=1800 audit(1718529041.571:108): pid=21096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1968 res=0 errno=0 [ 432.031641][ T29] audit: type=1804 audit(1718529041.571:109): pid=21096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1065/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 432.059493][ T29] audit: type=1804 audit(1718529041.571:110): pid=21096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1065/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 432.094324][ T29] audit: type=1804 audit(1718529041.571:111): pid=21096 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1065/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 432.100435][T21096] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 432.202069][T21099] syzkaller0: entered promiscuous mode [ 432.207864][T21099] syzkaller0: entered allmulticast mode [ 432.225417][T21099] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 432.241180][T21099] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 434.306576][T21103] veth1_to_bridge: entered allmulticast mode [ 434.312800][T21103] veth1_to_bridge: left allmulticast mode [ 434.511921][T21148] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 434.568198][T21150] vlan5: entered allmulticast mode [ 434.628035][T21144] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 434.656579][T21144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 435.032423][T21179] veth1_to_bridge: entered allmulticast mode [ 435.040613][T21179] veth1_to_bridge: left allmulticast mode [ 435.141663][T21184] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 435.215378][T21184] sch_tbf: burst 0 is lower than device veth1_vlan mtu (1514) ! [ 435.601956][T21209] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 435.756719][ T29] kauditd_printk_skb: 9 callbacks suppressed [ 435.756736][ T29] audit: type=1800 audit(1718529045.321:121): pid=21221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1968 res=0 errno=0 [ 435.819000][T21221] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 435.857142][ T29] audit: type=1804 audit(1718529045.351:122): pid=21221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/894/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 435.932772][ T29] audit: type=1804 audit(1718529045.361:123): pid=21221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/894/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 435.972125][ T29] audit: type=1804 audit(1718529045.361:124): pid=21221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/894/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 436.005731][ T29] audit: type=1804 audit(1718529045.381:125): pid=21221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/894/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 436.044670][ T29] audit: type=1804 audit(1718529045.381:126): pid=21221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/894/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 436.093336][ T29] audit: type=1804 audit(1718529045.421:127): pid=21222 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1075/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 436.151594][ T29] audit: type=1804 audit(1718529045.421:128): pid=21210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1075/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 436.276738][T21251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 436.288153][T21251] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 436.900324][T21289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 436.966109][T21289] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 436.978350][T21289] bond2: (slave vcan1): Error -95 calling set_mac_address [ 437.143244][ T29] audit: type=1800 audit(1718529046.701:129): pid=21297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 437.162043][T21297] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 437.173571][ T29] audit: type=1804 audit(1718529046.711:130): pid=21297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir702225561/syzkaller.81Hc2d/28/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 437.286325][T21303] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.847386][T21334] tipc: Started in network mode [ 437.852732][T21334] tipc: Node identity 3ab03474c554, cluster identity 4711 [ 437.879350][T21334] tipc: Enabled bearer , priority 0 [ 437.952111][T21334] tipc: Resetting bearer [ 437.987167][T21332] tipc: Resetting bearer [ 438.718846][T21371] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 438.729113][T21371] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 439.004257][T11708] tipc: Node number set to 4293145716 [ 439.924330][T21332] tipc: Disabling bearer [ 440.059229][T21375] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 440.074665][T21376] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 440.094099][T21382] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 440.270364][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 440.594923][T21405] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.736794][T21405] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 440.838984][T21405] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.003054][T21405] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 441.175953][T21405] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.208003][T21405] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.247085][T21405] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.306850][T21429] syz-executor.4 uses old SIOCAX25GETINFO [ 441.325669][T21405] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 441.476218][T21440] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 441.576950][ T29] kauditd_printk_skb: 10 callbacks suppressed [ 441.576967][ T29] audit: type=1800 audit(1718529051.141:141): pid=21445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 441.617206][ T29] audit: type=1804 audit(1718529051.171:142): pid=21445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/904/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 441.648724][ T29] audit: type=1804 audit(1718529051.171:143): pid=21445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/904/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 441.680658][T21449] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 441.709856][ T29] audit: type=1804 audit(1718529051.171:144): pid=21445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/904/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 441.770889][ T29] audit: type=1804 audit(1718529051.241:145): pid=21449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/904/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 441.872723][ T29] audit: type=1804 audit(1718529051.241:146): pid=21449 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/904/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 442.222048][T21487] x_tables: duplicate underflow at hook 3 [ 442.357086][T21493] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 442.394323][T21493] nbd: must specify a size in bytes for the device [ 442.506071][ T29] audit: type=1800 audit(1718529052.071:147): pid=21500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 442.529236][ T29] audit: type=1804 audit(1718529052.071:148): pid=21500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1094/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 442.609043][T21501] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 442.622214][ T29] audit: type=1804 audit(1718529052.071:149): pid=21500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1094/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 442.729349][ T29] audit: type=1804 audit(1718529052.081:150): pid=21500 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1094/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 444.047700][T21549] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 444.214967][T21560] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 444.986960][T21598] ebt_among: dst integrity fail: 102 [ 445.018919][T21597] netlink: 'syz-executor.2': attribute type 23 has an invalid length. [ 445.722042][T21642] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 446.104043][T21662] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 446.492800][T21679] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 446.510676][T21679] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 446.529599][T21679] syz-executor.4[21679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.529745][T21679] syz-executor.4[21679] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 446.655214][T21681] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.851656][T21681] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 446.991555][T21681] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.142638][T21681] bond0: (slave netdevsim0): Releasing backup interface [ 447.189931][T21681] netdevsim netdevsim2 netdevsim0 (unregistering): left promiscuous mode [ 447.200262][ T29] kauditd_printk_skb: 38 callbacks suppressed [ 447.200279][ T29] audit: type=1800 audit(1718529056.751:189): pid=21695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1971 res=0 errno=0 [ 447.246874][T21681] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 447.263929][ T29] audit: type=1804 audit(1718529056.751:190): pid=21695 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/554/memory.events" dev="sda1" ino=1971 res=1 errno=0 [ 447.532650][T21681] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.606190][T21681] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.665042][T21681] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.709622][T21681] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 447.790194][T21711] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 448.177100][ T29] audit: type=1800 audit(1718529057.741:191): pid=21729 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 448.920722][T21756] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.091505][T21756] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.276036][T21756] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.477890][T21756] team0: Port device netdevsim0 removed [ 449.511154][T21756] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.685833][T21783] pim6reg1: entered promiscuous mode [ 449.706126][T21783] pim6reg1: entered allmulticast mode [ 449.802990][T21756] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.842475][T21756] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.896472][T21756] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.941861][T21756] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 450.692692][T21821] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.778149][T21821] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.860817][T21821] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 450.958266][T21821] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 451.130443][T21821] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.159287][T21821] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.179815][T21821] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.210807][T21821] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 451.295972][T21855] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 451.340970][T21858] IPVS: Error connecting to the multicast addr [ 451.878520][T21885] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.2'. [ 451.897828][T21885] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 452.265765][T21893] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.371108][T21897] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 452.419817][T21893] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.539313][T21893] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.655461][T21893] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 452.741922][T21916] x_tables: ip_tables: ah match: only valid for protocol 51 [ 453.475654][T21959] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 453.495610][T21959] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 453.503087][T21959] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 453.566361][T21959] batadv0 (unregistering): left promiscuous mode [ 453.785053][T21969] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 453.832885][T21969] 8021q: adding VLAN 0 to HW filter on device bond3 [ 453.909864][T21973] 8021q: adding VLAN 0 to HW filter on device bond3 [ 453.944235][T21973] bond3: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 453.965147][T21973] bond3: (slave ip6tnl2): Error -95 calling set_mac_address [ 454.085662][T21977] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 454.820578][T22001] xt_TCPMSS: Only works on TCP SYN packets [ 454.851404][T22001] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.1'. [ 454.932503][T22009] ebt_limit: overflow, try lower: 570423552/2483027968 [ 455.316707][T21893] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.339935][T21893] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.371324][T21893] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 455.421574][T21893] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 456.056943][T22059] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 456.083921][T22059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 456.106281][T22059] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 456.138113][T22059] netem: change failed [ 456.225961][T22069] xt_bpf: check failed: parse error [ 456.824625][ T4488] Bluetooth: hci0: command 0x0406 tx timeout [ 456.832061][ T5117] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 457.417772][T22123] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 457.435873][T22123] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 457.452185][T22123] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 457.540050][T22131] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 457.585835][T22134] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 457.611143][T22134] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.1'. [ 457.622111][T22134] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 457.650989][T22134] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 457.687419][T22134] nbd: socks must be embedded in a SOCK_ITEM attr [ 457.706854][T22138] x_tables: duplicate underflow at hook 2 [ 457.830802][T22145] xt_TCPMSS: Only works on TCP SYN packets [ 457.870953][T22145] rdma_op ffff88802fe5f9f0 conn xmit_rdma 0000000000000000 [ 458.016265][T22155] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 458.053982][T22157] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 458.428295][T22173] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 459.262162][T22216] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 460.236486][T22257] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 460.276445][T22259] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 460.342709][T22264] ip6tnl0: entered promiscuous mode [ 461.471748][T22263] ip6tnl0: left promiscuous mode [ 462.072247][T22326] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 462.085263][T22326] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 462.098569][T22326] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 462.107365][T22326] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 462.131379][T10484] tipc: Subscription rejected, illegal request [ 462.197142][T22326] bond0: (slave batadv0): Releasing backup interface [ 462.424513][T22342] __nla_validate_parse: 5 callbacks suppressed [ 462.424532][T22342] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 462.502406][T22345] syzkaller0: mtu less than device minimum [ 462.670683][T22362] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 462.905838][T10487] tipc: Subscription rejected, illegal request [ 463.270202][T22395] syzkaller0: entered promiscuous mode [ 463.297742][T22395] syzkaller0: entered allmulticast mode [ 463.331120][T22404] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 463.808574][T22426] xt_TCPMSS: Only works on TCP SYN packets [ 464.352566][T10487] tipc: Subscription rejected, illegal request [ 464.518663][T22443] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 465.607468][T22426] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.0'. [ 465.628335][T22431] bridge_slave_1: left allmulticast mode [ 465.635172][T22431] bridge_slave_1: left promiscuous mode [ 465.640951][T22431] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.651279][T22431] bridge_slave_0: left allmulticast mode [ 465.657591][T22431] bridge_slave_0: left promiscuous mode [ 465.664283][T22431] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.753192][T22431] bond0: (slave bridge0): Releasing backup interface [ 465.829732][T22439] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 465.846738][T22439] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 466.326165][T10484] tipc: Subscription rejected, illegal request [ 466.449737][T22498] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 466.761167][T22519] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.793670][T22521] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 468.015827][T22591] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 468.913567][ T29] audit: type=1804 audit(1718529078.471:192): pid=22653 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/591/memory.events" dev="sda1" ino=1945 res=1 errno=0 [ 469.110674][T22671] vlan2: entered promiscuous mode [ 469.226602][T22679] sctp: [Deprecated]: syz-executor.1 (pid 22679) Use of int in max_burst socket option. [ 469.226602][T22679] Use struct sctp_assoc_value instead [ 469.846210][T22722] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 469.859057][T22722] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 470.123762][ T29] audit: type=1804 audit(1718529079.681:193): pid=22734 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/595/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 470.180899][ T5117] Bluetooth: hci5: link tx timeout [ 470.187028][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 470.382435][ T29] audit: type=1804 audit(1718529079.941:194): pid=22742 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir702225561/syzkaller.81Hc2d/143/memory.events" dev="sda1" ino=1945 res=1 errno=0 [ 470.962257][T22776] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 471.003495][T22776] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 471.565554][ T5117] Bluetooth: hci5: link tx timeout [ 471.572600][ T5117] Bluetooth: hci5: killing stalled connection 11:aa:aa:aa:aa:aa [ 471.697323][T22826] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 471.712019][ T29] audit: type=1804 audit(1718529081.271:195): pid=22822 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1180/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 471.737267][T22826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 472.010410][T22851] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 472.091076][T22858] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 472.099892][T22858] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 472.195425][T22867] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 472.212824][T22867] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 472.265839][ T5117] Bluetooth: hci5: command 0x0405 tx timeout [ 472.404183][ T29] audit: type=1804 audit(1718529081.971:196): pid=22874 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir702225561/syzkaller.81Hc2d/147/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 472.844467][T22913] PF_CAN: dropped non conform CAN skbuff: dev type 65534, len 28 [ 472.988243][ T29] audit: type=1804 audit(1718529082.551:197): pid=22920 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir729859780/syzkaller.6M5URg/1185/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 473.828883][T22948] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 474.014232][T22957] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 475.375575][T22996] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 475.393518][T22996] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.2'. [ 475.413778][T22996] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 475.428673][T22996] netlink: 23 bytes leftover after parsing attributes in process `syz-executor.2'. [ 475.538817][T23003] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 475.574310][T23002] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 475.816414][T23012] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.0'. [ 475.890431][T23014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 475.999499][T23020] geneve3: entered promiscuous mode [ 476.007926][T23020] geneve3: entered allmulticast mode [ 476.903236][T23060] pim6reg: entered allmulticast mode [ 476.928387][T23060] pim6reg: left allmulticast mode [ 477.035497][T23066] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 477.202968][T23089] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 477.344635][T23099] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 477.436199][T23099] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 478.425870][T23162] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 479.099224][T23193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 479.150944][T23212] netlink: 4079 bytes leftover after parsing attributes in process `syz-executor.4'. [ 479.234870][T23218] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 479.257134][T23218] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.1'. [ 479.546875][T23244] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 479.631833][T23249] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 479.711128][T23259] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 479.719860][T23259] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 479.730200][T23259] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 479.738627][T23259] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 479.747109][T23258] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 479.755438][T23258] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 479.797887][T23264] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 479.943294][T23272] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 479.958858][T23272] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 479.968650][T23272] debugfs: Directory 'netdev:' with parent 'phy9' already present! [ 480.943746][T23317] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.4'. [ 481.266125][T23337] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 481.619702][T23356] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 481.751334][T23356] lo speed is unknown, defaulting to 1000 [ 482.011441][T23364] syzkaller1: entered promiscuous mode [ 482.019035][T23364] syzkaller1: entered allmulticast mode [ 482.029776][T23370] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 483.792917][T23443] xt_CT: You must specify a L4 protocol and not use inversions on it [ 483.957348][T23453] bond0: entered promiscuous mode [ 484.129227][T23463] __nla_validate_parse: 3 callbacks suppressed [ 484.129326][T23463] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 484.165293][T23470] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 484.193033][T23462] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.2'. [ 484.216825][ T29] audit: type=1804 audit(1718529093.771:198): pid=23471 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/1031/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 484.379680][T23478] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 484.420812][T23479] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 484.790720][T23481] bond0: entered promiscuous mode [ 484.796865][T23481] bond_slave_0: entered promiscuous mode [ 484.802854][T23481] bond_slave_1: entered promiscuous mode [ 484.808895][T23481] bridge0: entered promiscuous mode [ 485.155990][T23505] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 485.203968][T23512] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 485.215375][T23504] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.1'. [ 485.485201][T23529] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 485.508468][T23529] netlink: 328 bytes leftover after parsing attributes in process `syz-executor.1'. [ 485.941347][T23542] validate_nla: 3 callbacks suppressed [ 485.941367][T23542] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 486.160910][T23557] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.249278][T23557] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.312577][T23557] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.399684][T23557] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.555577][T23557] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.579254][T23557] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.609971][T23557] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.678994][T23557] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 486.752380][T23591] syzkaller0: entered promiscuous mode [ 486.767012][T23591] syzkaller0: entered allmulticast mode [ 487.039261][T23613] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 487.054615][T23606] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 487.251573][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805112cc00: rx timeout, send abort [ 487.759924][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805112cc00: abort rx timeout. Force session deactivation [ 488.942965][T23708] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 489.176737][T23721] __nla_validate_parse: 13 callbacks suppressed [ 489.176757][T23721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 489.282136][ T29] audit: type=1804 audit(1718529098.841:199): pid=23731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/656/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 489.341899][T23734] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 489.364002][ T29] audit: type=1804 audit(1718529098.841:200): pid=23732 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/656/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 489.412831][T23734] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 489.422722][T23734] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 489.436971][ T29] audit: type=1804 audit(1718529098.901:201): pid=23731 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir435980552/syzkaller.jEaZw1/656/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 489.454345][T23745] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 489.590126][ T29] audit: type=1804 audit(1718529099.151:202): pid=23752 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/1049/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 489.667481][T23748] netlink: 4068 bytes leftover after parsing attributes in process `syz-executor.3'. [ 490.027335][T23776] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 490.117872][T23793] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 490.314600][T23803] openvswitch: netlink: Flow actions attr not present in new flow. [ 490.514135][T23824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 490.599021][T23831] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 490.609653][T23825] sctp: [Deprecated]: syz-executor.2 (pid 23825) Use of struct sctp_assoc_value in delayed_ack socket option. [ 490.609653][T23825] Use struct sctp_sack_info instead [ 490.648850][T23834] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 490.669996][T23834] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 491.056611][T23868] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 491.191032][T23881] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 492.910191][T24005] RDS: rds_bind could not find a transport for ::ffff:172.20.20.0, load rds_tcp or rds_rdma? [ 492.913033][ T29] audit: type=1800 audit(1718529102.461:203): pid=24005 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 493.049427][T24012] netdevsim netdevsim2 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.127556][T24016] delete_channel: no stack [ 493.132289][T24012] netdevsim netdevsim2 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.221126][T24012] netdevsim netdevsim2 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.258068][T24023] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 493.291687][T24012] netdevsim netdevsim2 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 493.404799][T24012] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.438354][T24012] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.473313][T24012] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.507068][T24012] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 493.603984][T24040] sit0: entered promiscuous mode [ 493.629936][T24040] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 494.194808][T24083] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.306822][T24094] __nla_validate_parse: 40 callbacks suppressed [ 494.306840][T24094] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 494.348341][T24094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 494.457672][T24097] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 494.466803][T24097] netlink: 14589 bytes leftover after parsing attributes in process `syz-executor.2'. [ 494.488711][T24099] xt_TCPMSS: Only works on TCP SYN packets [ 494.824904][T24113] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 494.840517][T24113] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 495.218883][ T29] audit: type=1804 audit(1718529104.781:204): pid=24133 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3332242531/syzkaller.LoxOZX/1077/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 495.297820][T24134] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 495.313716][T24134] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 495.329207][T24134] tc_dump_action: action bad kind [ 495.335055][T24133] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 495.349322][T24133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 495.359578][T24133] tc_dump_action: action bad kind [ 495.623972][T24153] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 495.632148][T24153] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.2'. [ 495.707837][T24162] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 495.717551][T24162] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 496.350259][T24197] netlink: 'syz-executor.4': attribute type 13 has an invalid length. [ 496.495755][T24208] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 501.708295][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 527.154416][ T5117] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 527.164766][ T5117] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 527.184082][ T5117] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 527.192165][ T5117] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 527.217249][ T5117] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 527.243068][ T5115] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 527.252235][T24240] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 527.276335][T24242] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 527.286530][T24242] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 527.307979][T24242] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 527.323645][T24242] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 527.331035][T24242] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 527.386462][T24242] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 527.396078][T24242] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 527.415020][T24242] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 527.423283][T24242] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 527.432513][T24242] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 527.442702][T24242] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 527.472148][T24240] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 527.496684][T24240] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 527.513944][T24240] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 527.521923][T24240] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 527.529861][T24240] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 527.543647][T24240] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 527.627960][T24240] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 527.638794][T24240] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 527.646994][T24240] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 527.655356][T24240] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 527.663068][T24240] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 527.674332][T24240] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 529.303618][T24240] Bluetooth: hci6: command tx timeout [ 529.383829][T24240] Bluetooth: hci7: command tx timeout [ 529.543959][T24240] Bluetooth: hci8: command tx timeout [ 529.625850][T24240] Bluetooth: hci9: command tx timeout [ 529.703654][T24240] Bluetooth: hci10: command tx timeout [ 531.383849][T24240] Bluetooth: hci6: command tx timeout [ 531.464613][T24240] Bluetooth: hci7: command tx timeout [ 531.623609][T24240] Bluetooth: hci8: command tx timeout [ 531.703503][T24240] Bluetooth: hci9: command tx timeout [ 531.784252][T24240] Bluetooth: hci10: command tx timeout [ 533.463891][T24240] Bluetooth: hci6: command tx timeout [ 533.544645][T24240] Bluetooth: hci7: command tx timeout [ 533.703587][T24242] Bluetooth: hci8: command tx timeout [ 533.783551][T24242] Bluetooth: hci9: command tx timeout [ 533.873700][T24242] Bluetooth: hci10: command tx timeout [ 535.552325][T24242] Bluetooth: hci6: command tx timeout [ 535.634353][T24242] Bluetooth: hci7: command tx timeout [ 535.783497][T24242] Bluetooth: hci8: command tx timeout [ 535.863478][T24242] Bluetooth: hci9: command tx timeout [ 535.946710][T24242] Bluetooth: hci10: command tx timeout [ 563.156529][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 592.073850][T24240] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 592.105568][T24240] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 592.133627][T24240] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 592.173659][T24240] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 592.203379][T24240] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 592.222090][ T5115] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 592.230771][ T5115] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 592.240946][ T5117] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 592.264068][ T5117] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 592.274247][ T5117] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 592.283941][ T5117] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 592.291327][ T5117] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 592.417305][ T5117] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 592.427083][ T5117] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 592.435830][ T5117] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 592.444688][ T5117] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 592.452472][ T5117] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 592.462928][T24242] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 592.496374][ T5115] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 592.513957][ T4488] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 592.522188][ T5115] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 592.529929][ T4488] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 592.539239][ T4488] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 592.547203][ T4488] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 592.557251][ T5115] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 592.563667][ T4488] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 592.574684][ T5115] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 592.581912][ T4488] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 592.590444][ T5115] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 592.623711][T24240] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 594.267766][T24240] Bluetooth: hci11: command tx timeout [ 594.343807][T24240] Bluetooth: hci12: command tx timeout [ 594.513561][T24240] Bluetooth: hci13: command tx timeout [ 594.664463][T24240] Bluetooth: hci15: command tx timeout [ 594.664500][ T5115] Bluetooth: hci14: command tx timeout [ 595.953494][T24240] Bluetooth: hci5: command 0x0405 tx timeout [ 596.343568][ T5117] Bluetooth: hci11: command tx timeout [ 596.428419][ T5117] Bluetooth: hci12: command tx timeout [ 596.583572][ T5117] Bluetooth: hci13: command tx timeout [ 596.744743][ T5117] Bluetooth: hci15: command tx timeout [ 596.753524][ T5117] Bluetooth: hci14: command tx timeout [ 598.423679][ T5117] Bluetooth: hci11: command tx timeout [ 598.506971][ T5117] Bluetooth: hci12: command tx timeout [ 598.663664][ T5117] Bluetooth: hci13: command tx timeout [ 598.824272][T24240] Bluetooth: hci15: command tx timeout [ 598.829861][ T5117] Bluetooth: hci14: command tx timeout [ 600.503698][ T5117] Bluetooth: hci11: command tx timeout [ 600.583575][ T5117] Bluetooth: hci12: command tx timeout [ 600.743654][ T5117] Bluetooth: hci13: command tx timeout [ 600.911596][ T5117] Bluetooth: hci14: command tx timeout [ 600.917250][T24240] Bluetooth: hci15: command tx timeout [ 624.587316][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 643.784038][ T30] INFO: task kworker/0:4:5156 blocked for more than 143 seconds. [ 643.791821][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 643.800384][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 643.813322][ T30] task:kworker/0:4 state:D stack:22744 pid:5156 tgid:5156 ppid:2 flags:0x00004000 [ 643.826136][ T30] Workqueue: events_power_efficient check_lifetime 2024/06/16 09:14:13 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 643.832704][ T30] Call Trace: [ 643.863484][ T30] [ 643.866530][ T30] __schedule+0x17e8/0x4a20 [ 643.871082][ T30] ? __pfx___schedule+0x10/0x10 [ 643.893394][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 643.899427][ T30] ? __pfx_lock_release+0x10/0x10 [ 643.913334][ T30] ? kick_pool+0x45c/0x620 [ 643.917798][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 643.923184][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 643.943624][ T30] ? schedule+0x90/0x320 [ 643.947906][ T30] schedule+0x14b/0x320 [ 643.952081][ T30] schedule_preempt_disabled+0x13/0x30 [ 643.973327][ T30] __mutex_lock+0x6a4/0xd70 [ 643.977872][ T30] ? __mutex_lock+0x527/0xd70 [ 643.982564][ T30] ? check_lifetime+0x433/0x960 [ 643.997029][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 644.002099][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 644.030405][ T30] check_lifetime+0x433/0x960 [ 644.035232][ T30] ? check_lifetime+0x73/0x960 [ 644.040015][ T30] ? process_scheduled_works+0x945/0x1830 [ 644.049335][ T30] process_scheduled_works+0xa2c/0x1830 [ 644.055524][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 644.061534][ T30] ? assign_work+0x364/0x3d0 [ 644.066334][ T30] worker_thread+0x86d/0xd70 [ 644.070961][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 644.080981][ T30] ? __kthread_parkme+0x169/0x1d0 [ 644.086360][ T30] ? __pfx_worker_thread+0x10/0x10 [ 644.091513][ T30] kthread+0x2f0/0x390 [ 644.099098][ T30] ? __pfx_worker_thread+0x10/0x10 [ 644.105599][ T30] ? __pfx_kthread+0x10/0x10 [ 644.110219][ T30] ret_from_fork+0x4b/0x80 [ 644.118871][ T30] ? __pfx_kthread+0x10/0x10 [ 644.123517][ T30] ret_from_fork_asm+0x1a/0x30 [ 644.128315][ T30] [ 644.131367][ T30] INFO: task syz-executor.0:24214 blocked for more than 143 seconds. [ 644.156234][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 644.173318][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 644.182010][ T30] task:syz-executor.0 state:D stack:23800 pid:24214 tgid:24211 ppid:12611 flags:0x00000006 [ 644.213573][ T30] Call Trace: [ 644.217223][ T30] [ 644.220174][ T30] __schedule+0x17e8/0x4a20 [ 644.233407][ T30] ? __pfx___schedule+0x10/0x10 [ 644.238296][ T30] ? __pfx_lock_release+0x10/0x10 [ 644.253300][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 644.258798][ T30] ? schedule+0x90/0x320 [ 644.263052][ T30] schedule+0x14b/0x320 [ 644.285271][ T30] schedule_preempt_disabled+0x13/0x30 [ 644.290768][ T30] __mutex_lock+0x6a4/0xd70 [ 644.303300][ T30] ? __mutex_lock+0x527/0xd70 [ 644.308009][ T30] ? rtnetlink_rcv_msg+0x842/0x1180 [ 644.313222][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 644.318914][ T30] rtnetlink_rcv_msg+0x842/0x1180 [ 644.324046][ T30] ? rtnetlink_rcv_msg+0x208/0x1180 [ 644.329266][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 644.334879][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 644.340876][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 644.347504][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 644.352919][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 644.358236][ T30] ? __local_bh_enable_ip+0x168/0x200 [ 644.363668][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 644.368961][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 644.374397][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 644.380141][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 644.385293][ T30] ? __dev_queue_xmit+0x16c9/0x3d30 [ 644.390520][ T30] ? __dev_queue_xmit+0x2d2/0x3d30 [ 644.395764][ T30] ? ref_tracker_free+0x643/0x7e0 [ 644.400810][ T30] netlink_rcv_skb+0x1e3/0x430 [ 644.405897][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 644.411373][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 644.420077][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 644.428647][ T30] netlink_unicast+0x7ea/0x980 [ 644.437107][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 644.442412][ T30] ? __virt_addr_valid+0x183/0x520 [ 644.447597][ T30] ? __check_object_size+0x49c/0x900 [ 644.452895][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 644.461677][ T30] netlink_sendmsg+0x8db/0xcb0 [ 644.466771][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 644.472075][ T30] ? __import_iovec+0x536/0x820 [ 644.480521][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 644.485752][ T3