last executing test programs: 4.830318472s ago: executing program 0: r0 = socket$netlink(0x10, 0x3, 0x400000000000004) r1 = socket(0x2c, 0x3, 0x0) r2 = socket$xdp(0x2c, 0x3, 0x0) r3 = socket$qrtr(0x2a, 0x2, 0x0) close(r3) setsockopt$XDP_TX_RING(r2, 0x11b, 0x3, &(0x7f0000000080)=0x100000, 0x4) writev(r0, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet6(0xa, 0x2, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r6, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x58, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x9801}, [@IFLA_LINKINFO={0x38, 0x12, 0x0, 0x1, @gre={{0x8}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6}, @IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x1}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e22}, @IFLA_GRE_REMOTE={0x8, 0x7, @private=0xa010102}, @IFLA_GRE_ENCAP_FLAGS={0x6, 0xf, 0xff}]}}}]}, 0x58}}, 0x0) sendmmsg$inet(r4, &(0x7f0000005ac0)=[{{&(0x7f0000000180)={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000400)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @local, @local}}}], 0x20}}], 0x1, 0x0) socket$netlink(0x10, 0x3, 0x14) close(r1) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x8, @private1={0xfc, 0x1, '\x00', 0x1}, 0x100}, @in={0x2, 0x4e21, @rand_addr=0x64010100}, @in6={0xa, 0x4e24, 0x8, @mcast2, 0x81}, @in6={0xa, 0x4e20, 0x1, @mcast1, 0x200}], 0x64) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="020000000000f4dbdf25030000000c8008000100", @ANYRES32=r1, @ANYBLOB="0c00030009000000000000000c00020003000000000000001c00078008000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r1, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x8045}, 0x20000080) 3.84174397s ago: executing program 0: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x110}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x0, 0x12, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000fe2000/0x2000)=nil, 0x2000, 0x0, 0x30, 0xffffffffffffffff, 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x0, 0x13, r1, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) setsockopt$bt_BT_SNDMTU(r2, 0x112, 0xc, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r3, 0x2) syz_emit_ethernet(0x92, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000086dd600a8435005c0600fe800000000000000000000000000000fe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="70c2000090780000041a0303001312231054ae4762b0c5a7a10f1454f9000480de1e102000000000000000d165890986c9e26300002000000000001e102000000000000000000000000600000000"], 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000240)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x2}}}}}}, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) r5 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) bind$can_j1939(r5, 0x0, 0x0) connect$can_j1939(r5, &(0x7f0000000080), 0x18) writev(0xffffffffffffffff, &(0x7f0000000240)=[{0x0}], 0x1) socket$inet6_sctp(0xa, 0x0, 0x84) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r6, 0x18000000000002a0, 0x26, 0x0, &(0x7f0000000000)="b9ff03076808268cb89e14f089061be0ffff00fe4000632f77fbac141416e000000162079f4b", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x52, &(0x7f00000001c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x1c, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x7, 0xc2, 0x0, 0x0, 0x0, {[@window={0x3, 0x3}, @window={0x3, 0x3, 0x20}]}}}}}}}}, 0x0) 3.222301738s ago: executing program 0: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000001cc0)={0x33c52f4e, {{0x2, 0x0, @multicast2}}}, 0x90) r3 = socket$inet6(0xa, 0x3, 0x3c) sendmmsg$inet(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158", 0x283}, {&(0x7f0000000bc0)="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", 0x1ac}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5cca97", 0x47}, {&(0x7f0000001e80)="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", 0x246}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0xffffff1f}}]}}, &(0x7f0000000f40)=""/4096, 0x32, 0x1000, 0x1}, 0x20) unshare(0x8040480) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x68040200) unshare(0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 2.571287074s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x2a, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2004}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESDEC, @ANYRESHEX=r2], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x21}, 0x90) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800"/13], 0x0}, 0x90) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r5, 0x31f}, 0x14}}, 0x4000090) 2.326337869s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000ff850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='ext4_es_find_extent_range_enter\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301a200000800009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000003c0)={0x0, 0x80000001, @status={[0x7, 0x1000, 0x2, 0x3, 0x7, 0xbea9]}, [0x4d8, 0x100000001, 0xfff, 0x2, 0x4, 0xcda, 0xf3a, 0x1ff, 0x4, 0x6fa6, 0x24, 0x20, 0x1, 0x8000000000000000, 0x2, 0x4, 0x3, 0x9, 0x7fff, 0xa41, 0x0, 0x287d, 0x1, 0x2, 0x0, 0x9, 0x7, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5acc, 0x6, 0x2, 0x2, 0x80000001, 0x8, 0x20000000200, 0x5, 0x8, 0x6, 0x3b, 0x0, 0x0, 0x71, 0x5a, 0x4, 0x8, 0x4, 0x8, 0x1, 0xe93, 0x21, 0x5, 0x2, 0x3, 0x1, 0x1, 0xffffffffffffff4b, 0x2, 0x7, 0x1c00000000000000, 0x7]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="010d856aea454c8a48f680c20000ffaaaaaaaaaa03080045000028000000000002907800000000ffffffff11e09078000000000001"], 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000170a05000000000000000000000000000900020073797a31000002000c00054000000000000000030c000540000000000000000304000400000007400000000014000380080001400000000008000240000001010900010073"], 0x64}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x4000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x20004044) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r8 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1}, 0xc) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, r9}, 0xc) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r3, 0x1, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000507000000000007000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=@newtfilter={0x9e4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x9b8, 0x2, [@TCA_U32_SEL={0x664, 0x5, {0x5, 0x18, 0x0, 0x4f, 0x3, 0xff, 0x1000, 0x7, [{0x5, 0x8, 0x1ff, 0x400}, {0x63, 0x7, 0x5, 0x3f}, {0x5, 0x6, 0x1, 0xff}, {0x8001, 0x1f, 0x128c45f3, 0x8}, {0xdbc, 0x4, 0x2, 0xffffff34}, {0x3, 0x80000000, 0x7e25be85, 0x9}, {0xfff, 0x101, 0x0, 0x100}, {0x2, 0x5, 0x2, 0x5}, {0x6, 0x4, 0x0, 0xa0}, {0x3f, 0x1, 0x10001, 0x20}, {0x1, 0xd1, 0x400, 0x80000000}, {0x7, 0x7fff, 0x8, 0x9}, {0x6, 0x2, 0x40, 0x7}, {0x3, 0x8c, 0x81}, {0x10001, 0x2, 0x3, 0x9}, {0x3c, 0x1, 0x2, 0x8}, {0x1, 0x0, 0x4, 0xcca6}, {0x2, 0xfff, 0x8, 0x7e0}, {0x6, 0x9a5, 0x2, 0xce0}, {0x20, 0x7fff, 0x3}, {0xac, 0x3ff, 0x3ff, 0xffffffff}, {0x5, 0x4, 0x7ff, 0xff}, {0x1ff, 0x3, 0x849, 0x2}, {0x7fffffff, 0xd59, 0xb2af, 0x1f}, {0x5, 0x1ff, 0x9, 0x2}, {0x4, 0x0, 0x7fffffff, 0x8}, {0xff, 0x0, 0x40, 0x8001}, {0x400, 0x0, 0x0, 0x1ff}, {0x101, 0x4, 0x6, 0x9}, {0x0, 0x1ff, 0xfffffff7, 0x8}, {0x0, 0x7, 0x4, 0x1}, {0x7, 0x1, 0x401, 0x7}, {0x3, 0x0, 0x100, 0xea6}, {0x9, 0x8, 0x80000000, 0xc689}, {0x1, 0x2f3, 0x3, 0x9}, {0x3, 0x7f, 0x1, 0x10001}, {0x80000001, 0x10000, 0x8, 0xffff}, {0x8000, 0x7, 0x3, 0x3}, {0x5, 0x8, 0x4, 0x1}, {0x0, 0x1419, 0x3, 0x631b}, {0x3c, 0x4, 0x7fffffff, 0x7f}, {0x40, 0x53, 0x8, 0x5}, {0x6, 0x9, 0x200, 0x4}, {0x40, 0x64f, 0x9, 0x6}, {0x6, 0xffffffff, 0x1, 0x401}, {0x80000000, 0x3, 0x0, 0x7}, {0x180000, 0x400, 0x0, 0x400}, {0x5, 0x1000, 0x7, 0x1}, {0x2, 0x10000, 0x1ff, 0xffffffff}, {0x0, 0x200, 0xbf3, 0x7fffffff}, {0xf0c, 0x8000, 0xf26, 0x36}, {0xa, 0x8003, 0xfffffff7, 0x4}, {0x200, 0x835, 0x5, 0x8}, {0x0, 0x7}, {0xff, 0x400, 0x7, 0x2}, {0x8001, 0x2, 0x5, 0xfff}, {0x4, 0x1, 0x180, 0x6}, {0x7, 0x4, 0x63, 0x8}, {0x7fff, 0x1, 0x9, 0x5}, {0x2, 0x3, 0x57, 0x5}, {0x401, 0x1, 0x2, 0x7}, {0x2, 0x29ea, 0x2, 0x6}, {0x4, 0x8a4, 0x5, 0x2}, {0x101, 0x1, 0xff, 0x7}, {0xffff4130, 0xa50, 0x4, 0x7}, {0x5, 0x28, 0x3ff, 0x37c0}, {0xff, 0x4, 0x0, 0x2}, {0x3528f3b, 0x10001, 0x1, 0xfffffa2a}, {0x86, 0x20, 0xbf1, 0x9}, {0xff, 0x5bb, 0x42, 0x6}, {0x4, 0x6, 0x9, 0x1700000}, {0x10000, 0x1, 0x0, 0x8000}, {0x1f, 0x84a8, 0x101, 0x7}, {0x6, 0x8c, 0x5e32, 0x6}, {0xfffffffe, 0x401, 0xa99b, 0xff}, {0x1, 0x101, 0x8, 0x5}, {0x1, 0x3, 0x4, 0x3f}, {0x7, 0x9, 0xffff, 0x4}, {0x0, 0x80000001, 0x1, 0x4d}, {0x80, 0x8, 0x8, 0x200}, {0xcdf, 0x3, 0xfffffff7, 0x9b5a}, {0x5, 0x0, 0xb0, 0x8}, {0x0, 0x100, 0x2, 0x20}, {0x1, 0x4, 0x0, 0x7}, {0x6, 0xfffffff8, 0x4, 0x2}, {0x100, 0xe530, 0x2, 0x40}, {0x9, 0x80, 0x0, 0x7f}, {0x62, 0xc4000000, 0x7, 0x4}, {0xfff, 0xfffffffc, 0x1, 0x101}, {0x0, 0x7, 0xfffffbff, 0xd72e}, {0x6f, 0x9, 0xfffffffd, 0x7fff}, {0x2, 0x10001, 0x3}, {0x2, 0x10001, 0x4, 0x3}, {0x5, 0xa4e, 0x400, 0x81}, {0x66e, 0x80000000, 0x7, 0x1}, {0x8, 0x81, 0x80000000, 0x2}, {0x5, 0xdf5d, 0x430, 0x8}, {0x50, 0x7, 0x81, 0x9}, {0x0, 0x8e, 0x1, 0xf}, {0x6, 0x9, 0x3, 0x6}, {0x8e, 0xc, 0x2, 0x6}]}}, @TCA_U32_MARK={0x10, 0xa, {0xffffff7b, 0x3}}, @TCA_U32_LINK={0x8, 0x3, 0xc52}, @TCA_U32_MARK={0x10, 0xa, {0x60d, 0x1ff}}, @TCA_U32_ACT={0x314, 0x7, [@m_vlan={0x150, 0x0, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x280}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3ff, 0x7, 0x10000000, 0x74, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa95}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xeff}]}, {0xe0, 0x6, "1b61b720e1ca1644a1e6002380cc72927d91efa590298168e9f9a7f667e099e1151c0705c2f05205f328346e708c498266affafb1b00fe585e3a2de8311e409087d94550ca1172451bd2a48c13320166ccf83c8163830bc16daaf995762bdbc632e600876b8f77e7db73d8c85908bdfa67f7216adb7c17fc300bd63f91a6fa2c9c9d4662685872ae6f38cad9f81f4c1c4988058199f567e14a530da09ed6835e6f59e1cee6a23cfaf7177e20202cb0ab8552bfdc7d8f8bfdadf727418ed33998045de06d83bbfad0c03c6231667f73d96051eb2706a716e72f20b7ed"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x1c0, 0x16, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xc50, 0xffffffffffffffff, 0x6, 0x8}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x800, 0x2, 0x74, 0x5}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xff, 0x3, 0xb, 0xf7}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffdd, 0x42d, 0x20000000, 0xb77e, 0x40}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x20000000, 0x7, 0x5}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7b, 0x1ff, 0x8, 0x8, 0x7fff}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x8, 0x4, 0x9a5}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9e, 0x10000000, 0x1, 0xfffffab8}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7fff, 0x4, 0xff, 0x5}, 0x71}}]}, {0x96, 0x6, "ab8f059a226ae84317d0bddb27c2d19f87bba9babeb2fb153fc50fe781f5fb17d40267d4f679acb1709ff9c8ea94041e24badd2e2920e1638076d2c37768421cf0197ef454792b2b4c3a5ddfba6462e454a96a1f577ab67a92a65a69760ca47f22fa1c00ca3e95cb58fb7f6bcf4dcc14f781dcee7fffdebf10a28d6068e6e2d32e812be5ed0ce4cc8f6db382ab090d30f5ad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_U32_INDEV={0x14, 0x8, 'vlan1\x00'}]}}]}, 0x9e4}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000180)={0x5c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8a}]}, 0x10) 2.275210348s ago: executing program 0: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 2.180475286s ago: executing program 3: r0 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000000)=0x200, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006}]}, 0x10) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000007e40), 0x4000000000000aa, 0x0) r5 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r5, 0x2) listen(r2, 0x80) syz_emit_ethernet(0x46, &(0x7f00000000c0)={@local, @random="7f0a00030011", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x33, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}}, "000022ebffff0000"}}}}}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@dellinkprop={0x28, 0x6d, 0x10, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x40441, 0x420}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000c00000000000010040000000400008010000180c9b6c6a3304743a61201"], 0x30}}, 0x0) 2.149756248s ago: executing program 2: setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="600600000101010200000000000000000a000000300002802c00018014000300fe8000000000000000000000000000bb14000400fe8000000000000000000000000000aa08001a40000000060c001980080002000200000008000340000000007caea2f3"], 0x60}}, 0x0) 2.145107273s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x1d}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400100000000000c100000000", @ANYRES32=r2], 0x44}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="3c000000100001040000eb040100000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140003006272696467655f736c6176655f31000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) connect$l2tp6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast1, 0x2}, 0x20) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000004c0)={'ip6tnl0\x00', 0x0}) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000800)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=[@pktinfo={{0x24, 0x29, 0x32, {@dev={0xfe, 0x80, '\x00', 0x2}, r7}}}], 0x28}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000940)="a63df10da8839edcd8f3e73c42d99a3ee628575ca98b8d53e3514f9510faa4c068940f1f6e789d6bc232ca5f29a61b8d14008c19556bc69000f375ee3050f6b4bd9d59b18f5696d452c196af88a9a29276c00204a6f7b9d67c1dbcc7a9eec9bc08d7efb97f8ddddc91514d48b5e51e62c8de90b31852b7f710d60fc71fb4e9d6e9d3e3b31f65d556318abab66e50533e4b09e5b94ca9b7356aba405c327cc878cc716cdf8578dc629437f9e2c315bd0d2997895bb9973064c0a97d92b4e1805a913585ca2d1d85671a7389dcbe3ab218c396bc317d303e87214aa399", 0xdc}, {&(0x7f0000000580)="5574c0818388e3ec97122f791fdbe96bdfee94d8c32f9702c70e53be2410dddf90cf402b27b9993fe2434ce4566272c47c85a27bc656dec7b6be6f493248415012e63a9decb89d39d8f52cbac60bd4c5aff38814a2c2bbafe898efb7", 0x5c}, {&(0x7f0000000600)="d54918c0cfada3f180a5bb15513e71ba56104290ed6698f3e863a8c2b9efff8916a392da9ee8458c362905a7e6af53c7abe9733591988bb9ccd7b0c4af18ce5b8656df80d9536b6cff54aa61e8cfc1528bec8aa0701a1824e14997f3fa1bc892e365797fedda131dcefe9c0e589e725e7bab4d007d226f8adf845d4e639b16bdd2091feb36c84ca57bf5834dbef887cd663152", 0x93}], 0x3, &(0x7f00000006c0)=[@dontfrag={{0x14, 0x29, 0x3e, 0x4619}}, @rthdr_2292={{0x38, 0x29, 0x39, {0x89, 0x4, 0x2, 0x3, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback]}}}], 0x50}}, {{&(0x7f0000000440)={0xa, 0x4e24, 0x4, @local}, 0x1c, &(0x7f0000000500)=[{&(0x7f0000000740)="8769ec40f9c5a18dde1d690ec5f34590a96c74c256f56727fe9aab6d98bcbc6e21fbaffaa85a9b8938731f8d96d7d0f58ea8df891b74c2792119a1a9fe6d3f0ba9e6d70a6acbfd0634ec19fb60be834131975e18e63b4b86ac1164614a1e2e79cefb4d4605d995756086a547df3334d331a5edcda4f1c0c1da4b3bbb80fede71f2654c403faa01faab1db1272f0d71429edc188c", 0x94}], 0x1}}], 0x4, 0x0) r8 = socket(0x1, 0x2, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x14) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x8, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000130400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001400030076657468315f746f5f626f6e64000f0008000a00", @ANYRES32=r9], 0x3c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) 2.030474774s ago: executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000180)={0xffffffffffffffff}) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), r1) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) recvmmsg(r2, &(0x7f0000001e80)=[{{0x0, 0xfffffffffffffeca, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x10000, 0x0) write$binfmt_misc(r2, &(0x7f0000000200)=ANY=[@ANYBLOB="5700030007"], 0xd) ioctl$sock_proto_private(r1, 0x8994, &(0x7f0000000080)="85a84ffa1eaa50c092509b3a") r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b708dfffffff00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuacct.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x0, 0x13, r4, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000001900)={'vcan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00010000000000000000000a000000", @ANYRES32=r6], 0x30}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r8, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xffffffff, '\x00', 0x0, r0, 0x5, 0x1, 0x4}, 0x48) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000240)='find_free_extent\x00', r9}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, 0x0}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r11, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$BPF_PROG_QUERY(0x8, &(0x7f0000000380)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.899014454s ago: executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000740)={'veth1_vlan\x00', &(0x7f0000000700)=@ethtool_cmd={0x1f}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x3}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080), &(0x7f0000000180)=r2}, 0x20) write$cgroup_type(r3, &(0x7f0000000140), 0x9) listen(r0, 0xfff) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x7, "cf6af75d5c"}, @exp_fastopen={0xfe, 0x11, 0xf989, "cffbe541861777f5b48f6361da"}]}}}}}}}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETTXFILTER(r6, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000500aaaaaaaaaa00e76aafc09c66b382f44d4c530180c20000005e2bb42a37da"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000cf983500bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) syz_emit_ethernet(0x4a, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a3ff200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500400009478000028cb1bd59edb5aac04289329d0c174e8c9e900afb2a201bd01da4a5a09fc64d65d6f39d0d4dbf2b4e5ec0b4451d2da", @ANYRES8=r2], 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000640)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r9, &(0x7f0000000680)='devices.allow\x00', 0x2, 0x0) syz_emit_ethernet(0x8c, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @empty, @void, {@llc_tr={0x11, {@snap={0x0, 0xaa, "ac", 'v/w', 0x1a, "d1a7bff474baf97a891d953c05b8f949d35e62e1c6d801e70b96e9d9361c386761c4eb408af5810b4c2b04611f4297d5e7d3bdfc192d1b585d17cd3f660c84f4be929a1654c5cdb515170b513e4714d65ec06ac9e8372fdbff936279cf47093f340b4b9c2b96722e8fdc260469cf6aaa32a50fd09f66"}}}}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000780)={0x58, 0x1, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x1f}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0x1) 1.898279099s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000700200100000000000000000100000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) (async) listen(r1, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000480)={@local, @random="1a0e2c5ffd4d", @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @empty, @broadcast}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) (async) r4 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, &(0x7f0000000080)={{0x0, 0x7, 0xffffffffffffffff, 0x4, 0x72, 0x81, 0xfffffffffffffffb, 0x0, 0x82d, 0x2, 0x2967, 0x400, 0x6, 0x5d, 0x6}, 0x10, [0x0, 0x0]}) ioctl$BTRFS_IOC_TREE_SEARCH(r4, 0xd0009411, &(0x7f0000000100)={{r5, 0x519, 0x8, 0x2, 0x0, 0x4, 0x0, 0x2, 0x0, 0x1, 0x0, 0x2, 0x7, 0x2, 0x1ac}}) (async) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_udp_SIOCINQ(r6, 0x541b, &(0x7f0000000000)) 1.744708533s ago: executing program 3: r0 = socket$inet6_udplite(0xa, 0x2, 0x88) syz_init_net_socket$llc(0x1a, 0x0, 0x0) setsockopt$llc_int(0xffffffffffffffff, 0x10c, 0x7, &(0x7f0000000380)=0x20, 0x4) connect$inet6(r0, &(0x7f0000000280)={0xa, 0x7a, 0x0, @loopback}, 0x1c) socket$rds(0x15, 0x5, 0x0) socketpair(0x0, 0x0, 0xff, &(0x7f0000000240)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.stat\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x0, 0x16, &(0x7f0000000240)=ANY=[@ANYBLOB="611550000000000061138c0000000000bfa000000000000007000000080013002d03010000000000950017b8000000006916000000000000bf67000000000000350607000fff07206706000002000000160300000ee6fe5fbf500000000000000f650000000000006507f9ff01000000070700004ddf"], 0x0}, 0x90) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x2, 0x1, 0x48}], {0x95, 0x0, 0x700}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xc}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000f96000/0x4000)=nil, 0x4000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) 1.67790009s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x2a, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2004}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESDEC, @ANYRESHEX=r2], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x21}, 0x90) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800"/13], 0x0}, 0x90) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r5, 0x31f}, 0x14}}, 0x4000090) 1.512821761s ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000ff850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='ext4_es_find_extent_range_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301a200000800009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000003c0)={0x0, 0x80000001, @status={[0x7, 0x1000, 0x2, 0x3, 0x7, 0xbea9]}, [0x4d8, 0x100000001, 0xfff, 0x2, 0x4, 0xcda, 0xf3a, 0x1ff, 0x4, 0x6fa6, 0x24, 0x20, 0x1, 0x8000000000000000, 0x2, 0x4, 0x3, 0x9, 0x7fff, 0xa41, 0x0, 0x287d, 0x1, 0x2, 0x0, 0x9, 0x7, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5acc, 0x6, 0x2, 0x2, 0x80000001, 0x8, 0x20000000200, 0x5, 0x8, 0x6, 0x3b, 0x0, 0x0, 0x71, 0x5a, 0x4, 0x8, 0x4, 0x8, 0x1, 0xe93, 0x21, 0x5, 0x2, 0x3, 0x1, 0x1, 0xffffffffffffff4b, 0x2, 0x7, 0x1c00000000000000, 0x7]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="010d856aea454c8a48f680c20000ffaaaaaaaaaa03080045000028000000000002907800000000ffffffff11e0907800000000000100"], 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000170a05000000000000000000000000000900020073797a31000002000c00054000000000000000030c000540000000000000000304000400000007400000000014000380080001400000000008000240000001010900010073"], 0x64}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x4000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x20004044) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r8 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, r9}, 0xc) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r3, 0x1, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000507000000000007000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=@newtfilter={0x9e4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x9b8, 0x2, [@TCA_U32_SEL={0x664, 0x5, {0x5, 0x18, 0x0, 0x4f, 0x3, 0xff, 0x1000, 0x7, [{0x5, 0x8, 0x1ff, 0x400}, {0x63, 0x7, 0x5, 0x3f}, {0x5, 0x6, 0x1, 0xff}, {0x8001, 0x1f, 0x128c45f3, 0x8}, {0xdbc, 0x4, 0x2, 0xffffff34}, {0x3, 0x80000000, 0x7e25be85, 0x9}, {0xfff, 0x101, 0x0, 0x100}, {0x2, 0x5, 0x2, 0x5}, {0x6, 0x4, 0x0, 0xa0}, {0x3f, 0x1, 0x10001, 0x20}, {0x1, 0xd1, 0x400, 0x80000000}, {0x7, 0x7fff, 0x8, 0x9}, {0x6, 0x2, 0x40, 0x7}, {0x3, 0x8c, 0x81}, {0x10001, 0x2, 0x3, 0x9}, {0x3c, 0x1, 0x2, 0x8}, {0x1, 0x0, 0x4, 0xcca6}, {0x2, 0xfff, 0x8, 0x7e0}, {0x6, 0x9a5, 0x2, 0xce0}, {0x20, 0x7fff, 0x3}, {0xac, 0x3ff, 0x3ff, 0xffffffff}, {0x5, 0x4, 0x7ff, 0xff}, {0x1ff, 0x3, 0x849, 0x2}, {0x7fffffff, 0xd59, 0xb2af, 0x1f}, {0x5, 0x1ff, 0x9, 0x2}, {0x4, 0x0, 0x7fffffff, 0x8}, {0xff, 0x0, 0x40, 0x8001}, {0x400, 0x0, 0x0, 0x1ff}, {0x101, 0x4, 0x6, 0x9}, {0x0, 0x1ff, 0xfffffff7, 0x8}, {0x0, 0x7, 0x4, 0x1}, {0x7, 0x1, 0x401, 0x7}, {0x3, 0x0, 0x100, 0xea6}, {0x9, 0x8, 0x80000000, 0xc689}, {0x1, 0x2f3, 0x3, 0x9}, {0x3, 0x7f, 0x1, 0x10001}, {0x80000001, 0x10000, 0x8, 0xffff}, {0x8000, 0x7, 0x3, 0x3}, {0x5, 0x8, 0x4, 0x1}, {0x0, 0x1419, 0x3, 0x631b}, {0x3c, 0x4, 0x7fffffff, 0x7f}, {0x40, 0x53, 0x8, 0x5}, {0x6, 0x9, 0x200, 0x4}, {0x40, 0x64f, 0x9, 0x6}, {0x6, 0xffffffff, 0x1, 0x401}, {0x80000000, 0x3, 0x0, 0x7}, {0x180000, 0x400, 0x0, 0x400}, {0x5, 0x1000, 0x7, 0x1}, {0x2, 0x10000, 0x1ff, 0xffffffff}, {0x0, 0x200, 0xbf3, 0x7fffffff}, {0xf0c, 0x8000, 0xf26, 0x36}, {0xa, 0x8003, 0xfffffff7, 0x4}, {0x200, 0x835, 0x5, 0x8}, {0x0, 0x7}, {0xff, 0x400, 0x7, 0x2}, {0x8001, 0x2, 0x5, 0xfff}, {0x4, 0x1, 0x180, 0x6}, {0x7, 0x4, 0x63, 0x8}, {0x7fff, 0x1, 0x9, 0x5}, {0x2, 0x3, 0x57, 0x5}, {0x401, 0x1, 0x2, 0x7}, {0x2, 0x29ea, 0x2, 0x6}, {0x4, 0x8a4, 0x5, 0x2}, {0x101, 0x1, 0xff, 0x7}, {0xffff4130, 0xa50, 0x4, 0x7}, {0x5, 0x28, 0x3ff, 0x37c0}, {0xff, 0x4, 0x0, 0x2}, {0x3528f3b, 0x10001, 0x1, 0xfffffa2a}, {0x86, 0x20, 0xbf1, 0x9}, {0xff, 0x5bb, 0x42, 0x6}, {0x4, 0x6, 0x9, 0x1700000}, {0x10000, 0x1, 0x0, 0x8000}, {0x1f, 0x84a8, 0x101, 0x7}, {0x6, 0x8c, 0x5e32, 0x6}, {0xfffffffe, 0x401, 0xa99b, 0xff}, {0x1, 0x101, 0x8, 0x5}, {0x1, 0x3, 0x4, 0x3f}, {0x7, 0x9, 0xffff, 0x4}, {0x0, 0x80000001, 0x1, 0x4d}, {0x80, 0x8, 0x8, 0x200}, {0xcdf, 0x3, 0xfffffff7, 0x9b5a}, {0x5, 0x0, 0xb0, 0x8}, {0x0, 0x100, 0x2, 0x20}, {0x1, 0x4, 0x0, 0x7}, {0x6, 0xfffffff8, 0x4, 0x2}, {0x100, 0xe530, 0x2, 0x40}, {0x9, 0x80, 0x0, 0x7f}, {0x62, 0xc4000000, 0x7, 0x4}, {0xfff, 0xfffffffc, 0x1, 0x101}, {0x0, 0x7, 0xfffffbff, 0xd72e}, {0x6f, 0x9, 0xfffffffd, 0x7fff}, {0x2, 0x10001, 0x3}, {0x2, 0x10001, 0x4, 0x3}, {0x5, 0xa4e, 0x400, 0x81}, {0x66e, 0x80000000, 0x7, 0x1}, {0x8, 0x81, 0x80000000, 0x2}, {0x5, 0xdf5d, 0x430, 0x8}, {0x50, 0x7, 0x81, 0x9}, {0x0, 0x8e, 0x1, 0xf}, {0x6, 0x9, 0x3, 0x6}, {0x8e, 0xc, 0x2, 0x6}]}}, @TCA_U32_MARK={0x10, 0xa, {0xffffff7b, 0x3}}, @TCA_U32_LINK={0x8, 0x3, 0xc52}, @TCA_U32_MARK={0x10, 0xa, {0x60d, 0x1ff}}, @TCA_U32_ACT={0x314, 0x7, [@m_vlan={0x150, 0x0, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x280}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3ff, 0x7, 0x10000000, 0x74, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa95}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xeff}]}, {0xe0, 0x6, "1b61b720e1ca1644a1e6002380cc72927d91efa590298168e9f9a7f667e099e1151c0705c2f05205f328346e708c498266affafb1b00fe585e3a2de8311e409087d94550ca1172451bd2a48c13320166ccf83c8163830bc16daaf995762bdbc632e600876b8f77e7db73d8c85908bdfa67f7216adb7c17fc300bd63f91a6fa2c9c9d4662685872ae6f38cad9f81f4c1c4988058199f567e14a530da09ed6835e6f59e1cee6a23cfaf7177e20202cb0ab8552bfdc7d8f8bfdadf727418ed33998045de06d83bbfad0c03c6231667f73d96051eb2706a716e72f20b7ed"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x1c0, 0x16, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xc50, 0xffffffffffffffff, 0x6, 0x8}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x800, 0x2, 0x74, 0x5}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xff, 0x3, 0xb, 0xf7}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffdd, 0x42d, 0x20000000, 0xb77e, 0x40}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x20000000, 0x7, 0x5}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7b, 0x1ff, 0x8, 0x8, 0x7fff}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x8, 0x4, 0x9a5}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9e, 0x10000000, 0x1, 0xfffffab8}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7fff, 0x4, 0xff, 0x5}, 0x71}}]}, {0x96, 0x6, "ab8f059a226ae84317d0bddb27c2d19f87bba9babeb2fb153fc50fe781f5fb17d40267d4f679acb1709ff9c8ea94041e24badd2e2920e1638076d2c37768421cf0197ef454792b2b4c3a5ddfba6462e454a96a1f577ab67a92a65a69760ca47f22fa1c00ca3e95cb58fb7f6bcf4dcc14f781dcee7fffdebf10a28d6068e6e2d32e812be5ed0ce4cc8f6db382ab090d30f5ad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_U32_INDEV={0x14, 0x8, 'vlan1\x00'}]}}]}, 0x9e4}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000180)={0x5c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8a}]}, 0x10) 1.490157741s ago: executing program 3: r0 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x53b, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_simple={0x48, 0x1, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x4}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x60}}, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000040), 0x4) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_MSFILTER(r2, 0x0, 0x30, &(0x7f0000001cc0)={0x33c52f4e, {{0x2, 0x0, @multicast2}}}, 0x90) r3 = socket$inet6(0xa, 0x3, 0x3c) sendmmsg$inet(r3, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="21ae1baf930b4569b9ddef9797ffd935c7d80e6466b3e4e62dc9603583f5d4b61fbc65b6ac744d7319535e75bf552062e4cfde1ba7ce29263322e18ea9740aa82ca692f123993e57cda00d2b1f4e799bd41e3f76258180fa91a42aaa8b1ebc4e0ea8fb12f2c71e6e5bc57a8e91f254005514721d93c13c5606ae1fea7f31f558d562bd5a8dfb0b9fed873efa221fccffa847cd374c92e6cbb03e6a9de890ce323f000000abcc6c01326d588495b7c1a7db31ec4129e6336f26bb9e0b7552af3cd2d5dda1632799bbc98425c433384d8a8e4071ff39a36dfdfdf05af35a4ddd340cfecd7ec935f4ce7d3e851583ba1cf53a90a7f7bce5703de57ce93ddef7849b30a01de0637e6d5e507b801d32e582e0c2d564539ebfc84c098a23e765552767b122885fb1629e9c180be47da7931bd125b80de15aab0c56a2edf2e0483b87f5ab299dc046076203dea10ccbfc631d5bf4a87ce67004519f248f086346ce6a8a9d181789a59f81d9b7f6781daac3e229914b8b8998c15c3b6302a519331cb05995bc60b7cb872dd3b5b43331c77c5d72e21f7bd2b1a915ff3204e3f20d3a20b22d6a58155b5a4ebf6d1d1cd90c656ecada531c07ff91deb3efa91762cdecfbcc43553750f22ac5c18cc5e8b6f790c2f4e6373af9f98d10e6df49ff8e5cbcbd68e11ed0b967add11410dc2e34f08dbfaf8eb95d4d1153b4c6093192a340eb30fcc71619888c6486746a049585d249efb96b9cace83320b8f96b40ebe3a9a788d05a053380d1026b9434df87a3a387549bcabe88684c4dbf0da9a5212f3dbc8d1dff240856691243b203d7edd4d3cc89a38a6c80fdb1229a01044af7aaecb20d5570ebf24b30bbc6dfc3f70d85cd9f0d60ebd8fedd161d199d9997a0e2d18d1c99bc7158", 0x283}, {&(0x7f0000000bc0)="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", 0x1cb}, {&(0x7f00000005c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859007067c10aa7352abbdf98e9bf033a4784a11e84639d3b9164d9c5d729f3dd409d39ff6d5cca97", 0x47}, {&(0x7f0000001e80)="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", 0x246}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0xffffff1f}}]}}, &(0x7f0000000f40)=""/4096, 0x32, 0x1000, 0x1}, 0x20) unshare(0x8040480) setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, 0x0, 0x0) socket$inet(0x2, 0x1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) unshare(0x68040200) unshare(0x0) r4 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) 1.313618892s ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100", @ANYRES32], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280040001800000000008000140000000000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000040), 0x4) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@bridge_dellink={0x34, 0x11, 0x5, 0x0, 0x0, {0x7, 0x0, 0x0, r5}, [@IFLA_AF_SPEC={0x14, 0x1a, 0x0, 0x1, [@AF_INET={0x10, 0x4, 0x0, 0x1, {0xc, 0xa, 0x0, 0x1, [{0x8}]}}]}]}, 0x34}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, 0x0, 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="7c00000000000000000000000700000044140001ac1414aa00000000ac1414000000000000441c0003e0000001000000007f000001000000000000000000000000442c00000000000000000f883816814100000000000000000000000000000000000000000000000000000000000000000000440c0001000000000000000000000000000000a400000000000000000000000700000044280000000000000000000000000000000000000000000000000000000000000000000000000000071700e0000002ac1414bb00000000e0000002ac1414bb018616000000000010c986d78e6c4b9394b247217b87cb00830b00000000007f000001861f0000000000020010421487f84baabcbcfb42a4d90bab000748c68c4c31001089ca45d9612e5b5c11f12bc78a41000000000000006c000000000000000000000007000000441c0003ffffffff000000000000000000000000e00000010000000044340001ac1414bb0000000000000000000000000000000000000000ac1414aa00000000ac1414aa00000000ac1e000100000000830b0000000000e000000200000000001c000000000000000000", @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="7f0000017f00000a0000000800"/28, @ANYRES32=0x0, @ANYBLOB="7f000001ac000800000000001c000000000000000000000007006fc946f1f569c01801"], 0x230}, 0x0) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b1000", 0x2c}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10, r2, 0x0) r7 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r7, 0x10d, 0x0, 0x0, &(0x7f0000000000)) sendto$inet6(r0, &(0x7f0000000180)='H', 0x55, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5021900000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x90}, 0x400c0c4) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r10) sendmsg$IEEE802154_ADD_IFACE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r11, @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x4000040}, 0x40000) 1.292530778s ago: executing program 0: setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000000)=[@in], 0x10) socket(0x3, 0x80805, 0x0) r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000043c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000002a0001000000000000000000060000000c000a"], 0x20}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r2, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040), 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000480)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x28}, {&(0x7f0000000fc0)=""/4096, 0x44}, {&(0x7f0000000400)=""/106, 0x56c}, {&(0x7f0000000740)=""/73, 0x17}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/16, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt(r4, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) socket$inet_sctp(0x2, 0x1, 0x84) pipe(&(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r8) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) socket$kcm(0x2, 0x3, 0x84) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x20000}, 0x0, &(0x7f0000000080)={0x3ff}, 0x0, 0x0) write$binfmt_misc(r6, &(0x7f0000000000)=ANY=[], 0xfffffecc) splice(r5, 0x0, r7, 0x0, 0x4ffe6, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000340)={0x80, 0x2, 0x4, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x40, 0x0, 0x2, 0x9}, 0xe) 1.268965176s ago: executing program 1: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20}, 0x1c) listen(r0, 0x400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='ext4_es_lookup_extent_exit\x00'}, 0x10) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r3, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r3, 0x20000005) r4 = socket$inet6(0xa, 0x6, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(0xffffffffffffffff, 0x0, 0x0) socket$isdn_base(0x22, 0x3, 0x26) socket$inet_icmp_raw(0x2, 0x3, 0x1) bind$alg(0xffffffffffffffff, 0x0, 0x0) socket(0x0, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r4, 0x1, 0x19, &(0x7f0000000180)='wg0\x00', 0x10) r5 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={0x0}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'veth1_to_team\x00'}) sendmsg$IPSET_CMD_FLUSH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, 0x4, 0x6, 0x301, 0x0, 0x0, {0x2}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) accept$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev}, 0x0) 1.063481744s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)={0x34, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x9}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x80}]}, 0x34}}, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000016c0)={0x18, 0x3, &(0x7f0000001200)=@raw=[@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x1000000}, @exit], &(0x7f0000001240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000001640)}, 0x90) socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_HELLO_TIME={0x8}, @IFLA_BR_FORWARD_DELAY={0x8}]}}}]}, 0x44}}, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x1c, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000700000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000f100008500000017000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 822.044924ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000ff850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='ext4_es_find_extent_range_enter\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301a200000800009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(0xffffffffffffffff, 0x29, 0xc8, 0x0, 0xc000000) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000003c0)={0x0, 0x80000001, @status={[0x7, 0x1000, 0x2, 0x3, 0x7, 0xbea9]}, [0x4d8, 0x100000001, 0xfff, 0x2, 0x4, 0xcda, 0xf3a, 0x1ff, 0x4, 0x6fa6, 0x24, 0x20, 0x1, 0x8000000000000000, 0x2, 0x4, 0x3, 0x9, 0x7fff, 0xa41, 0x0, 0x287d, 0x1, 0x2, 0x0, 0x9, 0x7, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5acc, 0x6, 0x2, 0x2, 0x80000001, 0x8, 0x20000000200, 0x5, 0x8, 0x6, 0x3b, 0x0, 0x0, 0x71, 0x5a, 0x4, 0x8, 0x4, 0x8, 0x1, 0xe93, 0x21, 0x5, 0x2, 0x3, 0x1, 0x1, 0xffffffffffffff4b, 0x2, 0x7, 0x1c00000000000000, 0x7]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="010d856aea454c8a48f680c20000ffaaaaaaaaaa03080045000028000000000002907800000000ffffffff11e09078000000000001"], 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000170a05000000000000000000000000000900020073797a31000002000c00054000000000000000030c000540000000000000000304000400000007400000000014000380080001400000000008000240000001010900010073"], 0x64}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x4000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x20004044) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r8 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x2, 0x1}, 0xc) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, r9}, 0xc) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r3, 0x1, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000507000000000007000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=@newtfilter={0x9e4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x9b8, 0x2, [@TCA_U32_SEL={0x664, 0x5, {0x5, 0x18, 0x0, 0x4f, 0x3, 0xff, 0x1000, 0x7, [{0x5, 0x8, 0x1ff, 0x400}, {0x63, 0x7, 0x5, 0x3f}, {0x5, 0x6, 0x1, 0xff}, {0x8001, 0x1f, 0x128c45f3, 0x8}, {0xdbc, 0x4, 0x2, 0xffffff34}, {0x3, 0x80000000, 0x7e25be85, 0x9}, {0xfff, 0x101, 0x0, 0x100}, {0x2, 0x5, 0x2, 0x5}, {0x6, 0x4, 0x0, 0xa0}, {0x3f, 0x1, 0x10001, 0x20}, {0x1, 0xd1, 0x400, 0x80000000}, {0x7, 0x7fff, 0x8, 0x9}, {0x6, 0x2, 0x40, 0x7}, {0x3, 0x8c, 0x81}, {0x10001, 0x2, 0x3, 0x9}, {0x3c, 0x1, 0x2, 0x8}, {0x1, 0x0, 0x4, 0xcca6}, {0x2, 0xfff, 0x8, 0x7e0}, {0x6, 0x9a5, 0x2, 0xce0}, {0x20, 0x7fff, 0x3}, {0xac, 0x3ff, 0x3ff, 0xffffffff}, {0x5, 0x4, 0x7ff, 0xff}, {0x1ff, 0x3, 0x849, 0x2}, {0x7fffffff, 0xd59, 0xb2af, 0x1f}, {0x5, 0x1ff, 0x9, 0x2}, {0x4, 0x0, 0x7fffffff, 0x8}, {0xff, 0x0, 0x40, 0x8001}, {0x400, 0x0, 0x0, 0x1ff}, {0x101, 0x4, 0x6, 0x9}, {0x0, 0x1ff, 0xfffffff7, 0x8}, {0x0, 0x7, 0x4, 0x1}, {0x7, 0x1, 0x401, 0x7}, {0x3, 0x0, 0x100, 0xea6}, {0x9, 0x8, 0x80000000, 0xc689}, {0x1, 0x2f3, 0x3, 0x9}, {0x3, 0x7f, 0x1, 0x10001}, {0x80000001, 0x10000, 0x8, 0xffff}, {0x8000, 0x7, 0x3, 0x3}, {0x5, 0x8, 0x4, 0x1}, {0x0, 0x1419, 0x3, 0x631b}, {0x3c, 0x4, 0x7fffffff, 0x7f}, {0x40, 0x53, 0x8, 0x5}, {0x6, 0x9, 0x200, 0x4}, {0x40, 0x64f, 0x9, 0x6}, {0x6, 0xffffffff, 0x1, 0x401}, {0x80000000, 0x3, 0x0, 0x7}, {0x180000, 0x400, 0x0, 0x400}, {0x5, 0x1000, 0x7, 0x1}, {0x2, 0x10000, 0x1ff, 0xffffffff}, {0x0, 0x200, 0xbf3, 0x7fffffff}, {0xf0c, 0x8000, 0xf26, 0x36}, {0xa, 0x8003, 0xfffffff7, 0x4}, {0x200, 0x835, 0x5, 0x8}, {0x0, 0x7}, {0xff, 0x400, 0x7, 0x2}, {0x8001, 0x2, 0x5, 0xfff}, {0x4, 0x1, 0x180, 0x6}, {0x7, 0x4, 0x63, 0x8}, {0x7fff, 0x1, 0x9, 0x5}, {0x2, 0x3, 0x57, 0x5}, {0x401, 0x1, 0x2, 0x7}, {0x2, 0x29ea, 0x2, 0x6}, {0x4, 0x8a4, 0x5, 0x2}, {0x101, 0x1, 0xff, 0x7}, {0xffff4130, 0xa50, 0x4, 0x7}, {0x5, 0x28, 0x3ff, 0x37c0}, {0xff, 0x4, 0x0, 0x2}, {0x3528f3b, 0x10001, 0x1, 0xfffffa2a}, {0x86, 0x20, 0xbf1, 0x9}, {0xff, 0x5bb, 0x42, 0x6}, {0x4, 0x6, 0x9, 0x1700000}, {0x10000, 0x1, 0x0, 0x8000}, {0x1f, 0x84a8, 0x101, 0x7}, {0x6, 0x8c, 0x5e32, 0x6}, {0xfffffffe, 0x401, 0xa99b, 0xff}, {0x1, 0x101, 0x8, 0x5}, {0x1, 0x3, 0x4, 0x3f}, {0x7, 0x9, 0xffff, 0x4}, {0x0, 0x80000001, 0x1, 0x4d}, {0x80, 0x8, 0x8, 0x200}, {0xcdf, 0x3, 0xfffffff7, 0x9b5a}, {0x5, 0x0, 0xb0, 0x8}, {0x0, 0x100, 0x2, 0x20}, {0x1, 0x4, 0x0, 0x7}, {0x6, 0xfffffff8, 0x4, 0x2}, {0x100, 0xe530, 0x2, 0x40}, {0x9, 0x80, 0x0, 0x7f}, {0x62, 0xc4000000, 0x7, 0x4}, {0xfff, 0xfffffffc, 0x1, 0x101}, {0x0, 0x7, 0xfffffbff, 0xd72e}, {0x6f, 0x9, 0xfffffffd, 0x7fff}, {0x2, 0x10001, 0x3}, {0x2, 0x10001, 0x4, 0x3}, {0x5, 0xa4e, 0x400, 0x81}, {0x66e, 0x80000000, 0x7, 0x1}, {0x8, 0x81, 0x80000000, 0x2}, {0x5, 0xdf5d, 0x430, 0x8}, {0x50, 0x7, 0x81, 0x9}, {0x0, 0x8e, 0x1, 0xf}, {0x6, 0x9, 0x3, 0x6}, {0x8e, 0xc, 0x2, 0x6}]}}, @TCA_U32_MARK={0x10, 0xa, {0xffffff7b, 0x3}}, @TCA_U32_LINK={0x8, 0x3, 0xc52}, @TCA_U32_MARK={0x10, 0xa, {0x60d, 0x1ff}}, @TCA_U32_ACT={0x314, 0x7, [@m_vlan={0x150, 0x0, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x280}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3ff, 0x7, 0x10000000, 0x74, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa95}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xeff}]}, {0xe0, 0x6, "1b61b720e1ca1644a1e6002380cc72927d91efa590298168e9f9a7f667e099e1151c0705c2f05205f328346e708c498266affafb1b00fe585e3a2de8311e409087d94550ca1172451bd2a48c13320166ccf83c8163830bc16daaf995762bdbc632e600876b8f77e7db73d8c85908bdfa67f7216adb7c17fc300bd63f91a6fa2c9c9d4662685872ae6f38cad9f81f4c1c4988058199f567e14a530da09ed6835e6f59e1cee6a23cfaf7177e20202cb0ab8552bfdc7d8f8bfdadf727418ed33998045de06d83bbfad0c03c6231667f73d96051eb2706a716e72f20b7ed"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x1c0, 0x16, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xc50, 0xffffffffffffffff, 0x6, 0x8}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x800, 0x2, 0x74, 0x5}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xff, 0x3, 0xb, 0xf7}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffdd, 0x42d, 0x20000000, 0xb77e, 0x40}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x20000000, 0x7, 0x5}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7b, 0x1ff, 0x8, 0x8, 0x7fff}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x8, 0x4, 0x9a5}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9e, 0x10000000, 0x1, 0xfffffab8}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7fff, 0x4, 0xff, 0x5}, 0x71}}]}, {0x96, 0x6, "ab8f059a226ae84317d0bddb27c2d19f87bba9babeb2fb153fc50fe781f5fb17d40267d4f679acb1709ff9c8ea94041e24badd2e2920e1638076d2c37768421cf0197ef454792b2b4c3a5ddfba6462e454a96a1f577ab67a92a65a69760ca47f22fa1c00ca3e95cb58fb7f6bcf4dcc14f781dcee7fffdebf10a28d6068e6e2d32e812be5ed0ce4cc8f6db382ab090d30f5ad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_U32_INDEV={0x14, 0x8, 'vlan1\x00'}]}}]}, 0x9e4}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000180)={0x5c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8a}]}, 0x10) 750.99179ms ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x0, 0x300) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000063019d000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000001c0)={'bond_slave_1\x00', 0x2}) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000380)='rxrpc_call\x00', r0}, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000240), 0x4) bind$inet6(r1, &(0x7f0000000040)={0xa, 0xe22}, 0x1c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000300)='syzkaller\x00', 0x5}, 0x7b) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100018400b3e1d4e649a13513f3fabc492d1b92e815f1602df80fa41a8fc89dbe22ebd7b529422b4adb9bcaa61c691d000d29cf971277311d9624e446a05accdde697fb7e8dcc153e9044f8809bb0629e0a94864f0324a3bfb6920657e078dfa425cf5c5ea48bf875046fcefa00c524b74eb9a5674d02920000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x20048855}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000020020000000000a3c000000080a010300000000000000000a0000020c00034000000000000000040900010073797a3000000000100004800c00018007000100637400001400000011000100ffffffff000000000000000a"], 0x64}}, 0x0) ioctl(r2, 0x8b2a, &(0x7f0000000040)) 613.534723ms ago: executing program 3: r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) (async, rerun: 32) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) (rerun: 32) getsockopt$inet_mptcp_buf(r2, 0x6, 0x1, 0x0, &(0x7f0000000400)) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0x1, 0x4) (async) shutdown(r3, 0x0) (async) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001b40), r1) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket(0x2a, 0x2, 0x0) getsockname$packet(r6, &(0x7f00000015c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000054000147880000000000000007008209", @ANYRES32=r7, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="00001000e000030000010001000000000000000008"], 0x38}}, 0x0) (async) sendmsg$MPTCP_PM_CMD_REMOVE(r1, &(0x7f0000001c40)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001b80)={0x50, r4, 0x20, 0x70bd2c, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xa8e9}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r7}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x11}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x4}, 0x4008080) ioctl$sock_inet_SIOCSIFNETMASK(r5, 0x891c, &(0x7f0000001c80)={'veth0\x00', {0x2, 0x4e20, @local}}) (async) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001cc0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x1970, 0xc, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x1950, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_USERDATA={0xb6, 0x6, 0x1, 0x0, "ba786098aaeb06fd51966535bd96ee5f913a6b2a75af4ea96d7fc412665bcd15cde5b751b71ba28da4beaecf41476f6bfa123fb9ada66d3e27f36953f80ad621ee86b15446a5a3f8b7ea2660b4ffc3587fc206629a150d75afb53114564990414028b7c97e1d288ee181dcce5f7d58f6b2120bcdf6fb9b25465a00ee82b3fee655b68b8385a8cc83579e56031090469b790341ebb1108241bc7a89e6ceebcc7a4e95a55a45775271f9707e14fde449980742"}]}, {0x380, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x8a, 0x6, 0x1, 0x0, "3c96686a06e5e44c18ab9b09db69772d25c2a1c2f0d26a8a228faf8493400693662b13e847a4c61ab8fb8186498511d6a60330bcd7195d6f023b95400486b25fd6c76459715a56bd3127e8f0104cab6129cd754643ca6cda73b9991d7071e7c07e06165a16e0c7d76f0ca6e465cf8c4d7478657240947720882ee4ffc54d7848b8ac94ad0d4b"}, @NFTA_SET_ELEM_KEY_END={0x2f0, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x400}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x20}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xdb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffffffff}]}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VALUE={0xae, 0x1, "86026264a378936124abfd0a1f879eaf5ff1906a2a85f2214b27b3222a15f9ce4b4eaad368e5dcee5d7c34ce7ea21fefd29ef39544e52c04a8b7ea20c3d57594efb56ec512d11e7047f5bc75d9c92320b5c43b204a33bf1f60a4b2c206700f3e3c4fe781e15e253f24de1313e72386ebdf83f1fbb1803af1cb7acb34a46f88f6a2de22f90582aa1366dfbfc9bd5d88c2622aa8fbbabf10969e1928ea2dffb693795a2a4e53e8b891ff9a"}, @NFTA_DATA_VALUE={0x55, 0x1, "f68af014edb3f26dd33819f66eefce35511a7e03286858253c0fb21848b6a2e80d428986d61ca841fc491517a6267546e26444f5944c702e4119d0739dd56931cca2adf0b7575f3a2d915d643504559491"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x8000}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x6}]}, @NFTA_DATA_VALUE={0x6e, 0x1, "6571289424ec1cd384feb8ebe7f886ae66d34c57cc2bdabc259629c7a151af6f0c9490978377ac0d6bb8ec5dbf98523908a544e26833a791aef623b1963c24025d2a60016336961a8efd58287c2ddf4f67af283ded15f8d01e82c21f4eb944acfc8f3d006c62e87565eb"}, @NFTA_DATA_VALUE={0x63, 0x1, "ece5d79d40a22edce4af06bd72825641c68e883daaf3b3e85684700657955134be35696862b15ad9f5aee678f891a5f2e0e77493aec82a54180f35ebd1d805633aa4c9b99c5bc37c9278932bd2c815c798d196186b40c28f5b9bd6c4ce2261"}]}]}, {0x118, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x64, 0x6, 0x1, 0x0, "842b82dc5e383ee9fb7e00ac008936e8f24a51f8879dbbc63d2238c8bc6c9d426e24736236c3b281df626e213f0b518777053510e03e3b4bb5d9b057f4cf32780b479d39706d445c95097bc13e06f44e07c62fc283f4b8168362fb9d081c3826"}, @NFTA_SET_ELEM_USERDATA={0xb0, 0x6, 0x1, 0x0, "15ccd90a11ca8bb379cec4fc1be4cb1a87e8c4c5613e1649bd68bf1b47073a94aeded06670231f726a7ab14e54f17c150c9d5262edd98a539f25445462ec565bd5a5d391bcacdf0d175ee3ae9208590f442a26b8353d6e2ca0184854de674c655bdfae44169fce89fb57a63aaa75667dbddec57b6ad745cf679425ff6962c870a81e4e2e69c246cc3caa8eaa152ef45cdb41550c7ad7fe8e3449f3548e68bebe9428375b7426371483d41f29"}]}, {0x13ec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x11b4, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VALUE={0x29, 0x1, "9c7e87cfede3ba947cf352d473a9e5cd3a67f193c2ec9697df3e13b842d0a0db82bfd35315"}, @NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1f}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1bc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}]}, @NFTA_DATA_VALUE={0xd6, 0x1, "0fb168bb9544f6b93a19c5acdd503d3ad59ed575d97cdfd3ef21aa0d4155342332bc5195cb54612ba5745f08e184ee34b8afe2b44d013c1775f4b5d65041d69b947b72933dacd08f9544229cb7813b0149513089c45e13d39de7d2e0a13f68dd8a233cc728923788db8885058aaeb347764211e610044d63f54e6b6117f76e222c42e3f050e3309175cf8c59f2949e7d013cb668c3718b62c26ae959b15c8c774377d23c200ec5c91d29d01b0dae2192142f7e958697102ae2e8a089f9898c765c7268245ca35de4aa8b8a60e1b1e808ace2"}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_KEY_END={0x68, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x56, 0x1, "b8ee49a9fd19bb2452ce945f0d0f3781c3d7c996b63321c8cbdd5533c7cbf65836f6286a4c4170a36dd5ebc3fec42759341dc0265087210bc9dba4c0afecd04890970adba6844bf869beb463c189a3e7ed7f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_EXPIRATION={0xc}, @NFTA_SET_ELEM_USERDATA={0xaa, 0x6, 0x1, 0x0, "e7707ad2f95f1a6e8bcf294ae7a3f617dd35de20edf0db684a2048a36351c5e43d774905d3adda941fadd21eb75504f69fe3f7acbc44e281db88c74db2c295f4204db3ba18d0a9ac63adce4f6d99947d0f75cec4fb89d96b83d3c8b6dbf0eb1c4e63f20a4763705c9fb44b670c1fb405fd0b4fa95727fccfbdf9ccac10a84525b8a731776491d0b7e7474ea2b9c2a678d0ae028ab2a41b80a40048a959285a0e5b1c75411b29"}, @NFTA_SET_ELEM_EXPRESSIONS={0xf8, 0xb, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @counter={{0xc}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x3}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7fffffffffffffff}]}}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0xac, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x9c, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_INFO={0x4b, 0x3, "5dcc79eaf32d0dd6d7ff217682e25b40ee31751b6ebc096ee79742f4d9a3c10f9e4ec14514ff2f312b6b912acf8c17936eef2cf2de3fd51ff4a4286179b8e9dc43807d6a2a63d0"}, @NFTA_MATCH_INFO={0x43, 0x3, "f11481711b58b61ec35ba7eef12a737e438a7ae2aa083187eb32d4d91b4ddcf45286b5d4ffd63d61d23f29ced35f0d489147e25a2b9302d16e40a459a1be32"}]}}}]}]}]}]}, @NFT_MSG_NEWSET={0x1c, 0x9, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_SET_ID={0x8, 0xa, 0x1, 0x0, 0x1}]}], {0x14}}, 0x19b4}}, 0xc007) (async) setsockopt$IP_VS_SO_SET_DEL(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000001ac0)={0x0, @empty, 0x0, 0x0, 'sh\x00', 0x0, 0x80000001, 0x6e}, 0x2c) recvmmsg(r3, &(0x7f0000001980)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=""/26, 0x11}}, {{0x0, 0x0, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/47}, {&(0x7f0000000100)=""/224}, {&(0x7f0000000200)=""/4096}, {&(0x7f0000001200)=""/124}, {&(0x7f0000001280)=""/65}]}}, {{&(0x7f0000001380)=@pppoe={0x18, 0x0, {0x0, @local}}, 0x0, &(0x7f0000001840)=[{&(0x7f0000001400)=""/149}, {&(0x7f00000014c0)=""/105}, {&(0x7f0000001540)=""/188}, {&(0x7f0000001600)=""/57}, {&(0x7f0000001640)=""/135}, {&(0x7f0000001700)=""/94}, {&(0x7f0000001780)=""/171}], 0x0, &(0x7f00000018c0)=""/176}}], 0x4000000000001dc, 0x0, 0x0) 555.562201ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x28, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2}, [@BRIDGE_VLANDB_ENTRY={0x8, 0xa, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8}}}]}, 0x28}, 0x1, 0x5502000000000000}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x66}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x56, &(0x7f0000000100)={@local, @random="244cd644c8d8", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0x0, {[@mptcp=@add_addr={0x1e, 0xa, 0x0, 0xa, 0x0, @loopback}]}}}}}}}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f0000000100)={0x0, 0x7, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="600000000101010200000000000000000a000000300002802c00018014000300fe8000000000000000000000000000bb14000400fe8000000000000000000000000000aa08001a40000000060c001980080002000200000008000340000000007caea2f3"], 0x60}}, 0x0) 356.539068ms ago: executing program 1: r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @none}, 0xe) (async, rerun: 32) setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0xf, &(0x7f0000000000)=0x1, 0x4) (rerun: 32) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a0001000000000000000000800000000000000000000000040005"], 0x30}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="9feb010018000000000000007c00000e0000000000000000000000000600000d0000000000e2dee888539fcb8e000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c000000000000000000000009000000000000000000000009000000000000000000000009000000000000"], 0x0, 0x96, 0x0, 0x0, 0x200000}, 0x20) 245.379903ms ago: executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e22, 0x0, @local}, 0x1c) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000740)={'veth1_vlan\x00', &(0x7f0000000700)=@ethtool_cmd={0x1f}}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x14, 0xc, &(0x7f00000004c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x8, 0x3}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r5}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r4}, &(0x7f0000000080), &(0x7f0000000180)=r2}, 0x20) write$cgroup_type(r3, &(0x7f0000000140), 0x9) listen(r0, 0xfff) syz_emit_ethernet(0x86, &(0x7f00000001c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x50, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x14, 0x2, 0x0, 0x0, 0x0, {[@exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}, @md5sig={0x13, 0x12, "d082e275205e556149a021cc13c33d89"}, @window={0x3, 0x3}, @window={0x3, 0x3}, @sack_perm={0x4, 0x2}, @sack_perm={0x4, 0x2}, @fastopen={0x22, 0x7, "cf6af75d5c"}, @exp_fastopen={0xfe, 0x11, 0xf989, "cffbe541861777f5b48f6361da"}]}}}}}}}}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x36}]}, &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$TUNSETTXFILTER(r6, 0x400454ca, &(0x7f0000000100)=ANY=[@ANYBLOB="2e42000c371303ed6a33f2ff8689b3f60e"]) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f00000000c0)=ANY=[@ANYBLOB="00000500aaaaaaaaaa00e76aafc09c66b382f44d4c530180c20000005e2bb42a37da"]) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x1, 0x5, 0x9fd, 0x84, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, &(0x7f00000006c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff000000cf983500bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x52, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r8}, 0x10) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0xffffffffffffffff, 0x0, &(0x7f00000000c0), &(0x7f0000000240), 0x800, r7}, 0x38) syz_emit_ethernet(0x4a, &(0x7f0000000800)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd600a3ff200140600fe8000000000000000000000000000bbfe8000000000000000000000000000aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="500400009478000028cb1bd59edb5aac04289329d0c174e8c9e900afb2a201bd01da4a5a09fc64d65d6f39d0d4dbf2b4e5ec0b4451d2da", @ANYRES8=r2], 0x0) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x0) r9 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000640)='syz1\x00', 0x200002, 0x0) openat$cgroup_devices(r9, &(0x7f0000000680)='devices.allow\x00', 0x2, 0x0) syz_emit_ethernet(0x8c, &(0x7f0000000400)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x10}, @empty, @void, {@llc_tr={0x11, {@snap={0x0, 0xaa, "ac", 'v/w', 0x1a, "d1a7bff474baf97a891d953c05b8f949d35e62e1c6d801e70b96e9d9361c386761c4eb408af5810b4c2b04611f4297d5e7d3bdfc192d1b585d17cd3f660c84f4be929a1654c5cdb515170b513e4714d65ec06ac9e8372fdbff936279cf47093f340b4b9c2b96722e8fdc260469cf6aaa32a50fd09f66"}}}}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180), 0xc, &(0x7f0000000280)={&(0x7f0000000780)={0x58, 0x1, 0x8, 0x301, 0x0, 0x0, {0x5, 0x0, 0x9}, [@CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_SYN_SENT={0x8, 0x1, 0x1, 0x0, 0x1f}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x2f}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x40081}, 0x1) 140.0268ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0x2a, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2004}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000240)=ANY=[@ANYRES16=r0, @ANYRESDEC, @ANYRESHEX=r2], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x21}, 0x90) ioctl$SIOCGETMIFCNT_IN6(0xffffffffffffffff, 0x10, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x2, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) r3 = socket$packet(0x11, 0x2, 0x300) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB], 0x24}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, &(0x7f0000000300)) sendmsg$ETHTOOL_MSG_LINKMODES_SET(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000140)={'wlan0\x00'}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x400}) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800"/13], 0x0}, 0x90) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000940)={0x14, r5, 0x31f}, 0x14}}, 0x4000090) 124.34281ms ago: executing program 4: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r0, &(0x7f0000000000)={0x2, 0x4e23}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000040)={0x2, 0x4e23}, 0x10) setsockopt$sock_int(r0, 0x1, 0x0, &(0x7f0000000600), 0x4) sendto$inet(r0, &(0x7f00000012c0)="0c268a927f1f6588b967481241ba78600a34f65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03859bcecc7a95425a3a07e758044ab4ea6f7ae55d88fecf90b037511bf746bec66ba", 0x2acf, 0x11, 0x0, 0x27) 35.136348ms ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000ff850000007100000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000000000000850000000500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='ext4_es_find_extent_range_enter\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a0000000000006301a200000800009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7}, 0x48) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) ioctl$BTRFS_IOC_DEV_REPLACE(r2, 0xca289435, &(0x7f00000003c0)={0x0, 0x80000001, @status={[0x7, 0x1000, 0x2, 0x3, 0x7, 0xbea9]}, [0x4d8, 0x100000001, 0xfff, 0x2, 0x4, 0xcda, 0xf3a, 0x1ff, 0x4, 0x6fa6, 0x24, 0x20, 0x1, 0x8000000000000000, 0x2, 0x4, 0x3, 0x9, 0x7fff, 0xa41, 0x0, 0x287d, 0x1, 0x2, 0x0, 0x9, 0x7, 0x9, 0xffff, 0x0, 0x4, 0x0, 0x5acc, 0x6, 0x2, 0x2, 0x80000001, 0x8, 0x20000000200, 0x5, 0x8, 0x6, 0x3b, 0x0, 0x0, 0x71, 0x5a, 0x4, 0x8, 0x4, 0x8, 0x1, 0xe93, 0x21, 0x5, 0x2, 0x3, 0x1, 0x1, 0xffffffffffffff4b, 0x2, 0x7, 0x1c00000000000000, 0x7]}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="010d856aea454c8a48f680c20000ffaaaaaaaaaa03080045000028000000000002907800000000ffffffff11e0907800000000000100"], 0x0) sendmsg$NFT_MSG_GETFLOWTABLE(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="64000000170a05000000000000000000000000000900020073797a31000002000c00054000000000000000030c000540000000000000000304000400000007400000000014000380080001400000000008000240000001010900010073"], 0x64}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140), 0x24}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000380)=@newsa={0x154, 0x10, 0x633, 0x0, 0x0, {{@in=@broadcast, @in=@multicast2}, {@in6=@empty, 0x0, 0x32}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, {0x0, 0x4000000000000}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x4, {0x7}}]}, 0x154}}, 0x20004044) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) r8 = socket(0xa, 0x3, 0x3a) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000040)={'vxcan1\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f00000000c0)={0x0, 0x0, 0x0, r9}, 0xc) connect$can_j1939(r6, &(0x7f0000000080)={0x1d, r3, 0x1, {0x0, 0xf0, 0x2}, 0x1}, 0x18) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000507000000000007000000000000", @ANYRES32=r7, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001840)=@newtfilter={0x9e4, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {}, {0xe}}, [@filter_kind_options=@f_u32={{0x8}, {0x9b8, 0x2, [@TCA_U32_SEL={0x664, 0x5, {0x5, 0x18, 0x0, 0x4f, 0x3, 0xff, 0x1000, 0x7, [{0x5, 0x8, 0x1ff, 0x400}, {0x63, 0x7, 0x5, 0x3f}, {0x5, 0x6, 0x1, 0xff}, {0x8001, 0x1f, 0x128c45f3, 0x8}, {0xdbc, 0x4, 0x2, 0xffffff34}, {0x3, 0x80000000, 0x7e25be85, 0x9}, {0xfff, 0x101, 0x0, 0x100}, {0x2, 0x5, 0x2, 0x5}, {0x6, 0x4, 0x0, 0xa0}, {0x3f, 0x1, 0x10001, 0x20}, {0x1, 0xd1, 0x400, 0x80000000}, {0x7, 0x7fff, 0x8, 0x9}, {0x6, 0x2, 0x40, 0x7}, {0x3, 0x8c, 0x81}, {0x10001, 0x2, 0x3, 0x9}, {0x3c, 0x1, 0x2, 0x8}, {0x1, 0x0, 0x4, 0xcca6}, {0x2, 0xfff, 0x8, 0x7e0}, {0x6, 0x9a5, 0x2, 0xce0}, {0x20, 0x7fff, 0x3}, {0xac, 0x3ff, 0x3ff, 0xffffffff}, {0x5, 0x4, 0x7ff, 0xff}, {0x1ff, 0x3, 0x849, 0x2}, {0x7fffffff, 0xd59, 0xb2af, 0x1f}, {0x5, 0x1ff, 0x9, 0x2}, {0x4, 0x0, 0x7fffffff, 0x8}, {0xff, 0x0, 0x40, 0x8001}, {0x400, 0x0, 0x0, 0x1ff}, {0x101, 0x4, 0x6, 0x9}, {0x0, 0x1ff, 0xfffffff7, 0x8}, {0x0, 0x7, 0x4, 0x1}, {0x7, 0x1, 0x401, 0x7}, {0x3, 0x0, 0x100, 0xea6}, {0x9, 0x8, 0x80000000, 0xc689}, {0x1, 0x2f3, 0x3, 0x9}, {0x3, 0x7f, 0x1, 0x10001}, {0x80000001, 0x10000, 0x8, 0xffff}, {0x8000, 0x7, 0x3, 0x3}, {0x5, 0x8, 0x4, 0x1}, {0x0, 0x1419, 0x3, 0x631b}, {0x3c, 0x4, 0x7fffffff, 0x7f}, {0x40, 0x53, 0x8, 0x5}, {0x6, 0x9, 0x200, 0x4}, {0x40, 0x64f, 0x9, 0x6}, {0x6, 0xffffffff, 0x1, 0x401}, {0x80000000, 0x3, 0x0, 0x7}, {0x180000, 0x400, 0x0, 0x400}, {0x5, 0x1000, 0x7, 0x1}, {0x2, 0x10000, 0x1ff, 0xffffffff}, {0x0, 0x200, 0xbf3, 0x7fffffff}, {0xf0c, 0x8000, 0xf26, 0x36}, {0xa, 0x8003, 0xfffffff7, 0x4}, {0x200, 0x835, 0x5, 0x8}, {0x0, 0x7}, {0xff, 0x400, 0x7, 0x2}, {0x8001, 0x2, 0x5, 0xfff}, {0x4, 0x1, 0x180, 0x6}, {0x7, 0x4, 0x63, 0x8}, {0x7fff, 0x1, 0x9, 0x5}, {0x2, 0x3, 0x57, 0x5}, {0x401, 0x1, 0x2, 0x7}, {0x2, 0x29ea, 0x2, 0x6}, {0x4, 0x8a4, 0x5, 0x2}, {0x101, 0x1, 0xff, 0x7}, {0xffff4130, 0xa50, 0x4, 0x7}, {0x5, 0x28, 0x3ff, 0x37c0}, {0xff, 0x4, 0x0, 0x2}, {0x3528f3b, 0x10001, 0x1, 0xfffffa2a}, {0x86, 0x20, 0xbf1, 0x9}, {0xff, 0x5bb, 0x42, 0x6}, {0x4, 0x6, 0x9, 0x1700000}, {0x10000, 0x1, 0x0, 0x8000}, {0x1f, 0x84a8, 0x101, 0x7}, {0x6, 0x8c, 0x5e32, 0x6}, {0xfffffffe, 0x401, 0xa99b, 0xff}, {0x1, 0x101, 0x8, 0x5}, {0x1, 0x3, 0x4, 0x3f}, {0x7, 0x9, 0xffff, 0x4}, {0x0, 0x80000001, 0x1, 0x4d}, {0x80, 0x8, 0x8, 0x200}, {0xcdf, 0x3, 0xfffffff7, 0x9b5a}, {0x5, 0x0, 0xb0, 0x8}, {0x0, 0x100, 0x2, 0x20}, {0x1, 0x4, 0x0, 0x7}, {0x6, 0xfffffff8, 0x4, 0x2}, {0x100, 0xe530, 0x2, 0x40}, {0x9, 0x80, 0x0, 0x7f}, {0x62, 0xc4000000, 0x7, 0x4}, {0xfff, 0xfffffffc, 0x1, 0x101}, {0x0, 0x7, 0xfffffbff, 0xd72e}, {0x6f, 0x9, 0xfffffffd, 0x7fff}, {0x2, 0x10001, 0x3}, {0x2, 0x10001, 0x4, 0x3}, {0x5, 0xa4e, 0x400, 0x81}, {0x66e, 0x80000000, 0x7, 0x1}, {0x8, 0x81, 0x80000000, 0x2}, {0x5, 0xdf5d, 0x430, 0x8}, {0x50, 0x7, 0x81, 0x9}, {0x0, 0x8e, 0x1, 0xf}, {0x6, 0x9, 0x3, 0x6}, {0x8e, 0xc, 0x2, 0x6}]}}, @TCA_U32_MARK={0x10, 0xa, {0xffffff7b, 0x3}}, @TCA_U32_LINK={0x8, 0x3, 0xc52}, @TCA_U32_MARK={0x10, 0xa, {0x60d, 0x1ff}}, @TCA_U32_ACT={0x314, 0x7, [@m_vlan={0x150, 0x0, 0x0, 0x0, {{0x9}, {0x48, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0x280}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x3ff, 0x7, 0x10000000, 0x74, 0x1}, 0x1}}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xa95}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x88a8}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_ID={0x6, 0x3, 0xeff}]}, {0xe0, 0x6, "1b61b720e1ca1644a1e6002380cc72927d91efa590298168e9f9a7f667e099e1151c0705c2f05205f328346e708c498266affafb1b00fe585e3a2de8311e409087d94550ca1172451bd2a48c13320166ccf83c8163830bc16daaf995762bdbc632e600876b8f77e7db73d8c85908bdfa67f7216adb7c17fc300bd63f91a6fa2c9c9d4662685872ae6f38cad9f81f4c1c4988058199f567e14a530da09ed6835e6f59e1cee6a23cfaf7177e20202cb0ab8552bfdc7d8f8bfdadf727418ed33998045de06d83bbfad0c03c6231667f73d96051eb2706a716e72f20b7ed"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_csum={0x1c0, 0x16, 0x0, 0x0, {{0x9}, {0x100, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0xc50, 0xffffffffffffffff, 0x6, 0x8}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x5, 0x800, 0x2, 0x74, 0x5}, 0x72}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x4, 0xff, 0x3, 0xb, 0xf7}, 0x71}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0xffffffdd, 0x42d, 0x20000000, 0xb77e, 0x40}, 0x53}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x3, 0x20000000, 0x7, 0x5}, 0x19}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7b, 0x1ff, 0x8, 0x8, 0x7fff}, 0x61}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x1, 0x8, 0x4, 0x9a5}, 0x6d}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x1, 0x9e, 0x10000000, 0x1, 0xfffffab8}, 0xc}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x2, 0x7fff, 0x4, 0xff, 0x5}, 0x71}}]}, {0x96, 0x6, "ab8f059a226ae84317d0bddb27c2d19f87bba9babeb2fb153fc50fe781f5fb17d40267d4f679acb1709ff9c8ea94041e24badd2e2920e1638076d2c37768421cf0197ef454792b2b4c3a5ddfba6462e454a96a1f577ab67a92a65a69760ca47f22fa1c00ca3e95cb58fb7f6bcf4dcc14f781dcee7fffdebf10a28d6068e6e2d32e812be5ed0ce4cc8f6db382ab090d30f5ad"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_U32_INDEV={0x14, 0x8, 'vlan1\x00'}]}}]}, 0x9e4}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r6, 0x29, 0x37, &(0x7f0000000180)={0x5c, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x8a}]}, 0x10) 0s ago: executing program 4: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ADD(r0, &(0x7f0000000140)={0x0, 0x2, &(0x7f0000000100)={&(0x7f0000000280)={0x28, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}]}, 0x28}}, 0x0) kernel console output (not intermixed with test programs): ave_0 [ 219.550239][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.605556][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.637184][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.668717][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.695085][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.717986][ T9213] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.780190][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.793643][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.811147][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.827406][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.838015][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.848934][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.858950][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.874097][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.890647][ T9464] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 219.905567][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.918592][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.928738][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.939411][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.949621][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.960338][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.970425][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.981647][ T5131] Bluetooth: hci3: command tx timeout [ 219.987273][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.997351][ T9213] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 220.009760][ T9213] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 220.023155][ T9213] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 220.172651][ T9213] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.190655][ T9213] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.201105][ T9213] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.216597][ T9213] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 220.263883][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88805161d400: rx timeout, send abort [ 220.275193][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff88805161d400: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 220.627058][ T1106] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.634941][ T1106] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.732739][ T1063] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 220.746145][ T29] audit: type=1804 audit(1719020560.807:36): pid=9480 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3631516384/syzkaller.pBpAvf/6/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 220.757246][ T1063] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.976032][ T9488] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.983878][ T9488] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.034384][ T9492] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:0 [ 221.776779][ T9529] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073112574190) [ 221.789415][ T9529] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 221.802111][ T9529] netlink: 'syz-executor.4': attribute type 21 has an invalid length. [ 222.178433][ T9535] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:0 [ 222.381386][ T9541] pim6reg: entered allmulticast mode [ 222.422825][ T9550] vxcan1: entered allmulticast mode [ 222.434534][ T9544] vxcan1: entered allmulticast mode [ 222.530761][ T9553] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 222.573101][ T9553] sctp: [Deprecated]: syz-executor.2 (pid 9553) Use of int in max_burst socket option deprecated. [ 222.573101][ T9553] Use struct sctp_assoc_value instead [ 223.299644][ T9575] __nla_validate_parse: 14 callbacks suppressed [ 223.299666][ T9575] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.324121][ T9585] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:0 [ 223.627238][ T9591] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.700919][ T9591] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.757571][ T9593] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 223.810882][ T9601] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.901884][ T9601] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 223.961866][ T9602] pim6reg: entered allmulticast mode [ 223.984086][ T9603] vxcan1: entered allmulticast mode [ 224.044334][ T9602] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.085015][ T9606] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 224.114670][ T9606] sctp: [Deprecated]: syz-executor.3 (pid 9606) Use of int in max_burst socket option deprecated. [ 224.114670][ T9606] Use struct sctp_assoc_value instead [ 224.151032][ T9611] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:0 [ 224.240725][ T9614] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 224.685890][ T9636] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.723905][ T9638] vlan2: entered promiscuous mode [ 224.772224][ T9638] veth1_to_hsr: entered promiscuous mode [ 224.843327][ T9638] team0: Port device vlan2 added [ 224.893883][ T9644] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 225.238105][ T9656] IPVS: set_ctl: invalid protocol: 136 224.0.0.1:0 [ 227.204312][ T9726] pim6reg: entered allmulticast mode [ 228.375969][ T9786] __nla_validate_parse: 19 callbacks suppressed [ 228.375995][ T9786] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 228.621267][ T9801] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 228.853473][ T9809] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.067413][ T9824] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.099874][ T9824] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 229.243006][ T9828] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 229.445753][ T9838] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 229.513959][ T9838] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 229.557606][ T9839] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 230.096037][ T9870] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.136837][ T9870] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 230.637952][ T9885] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 232.518696][ T9970] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 232.535989][ T9970] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 232.858850][ T9970] syzkaller0: entered allmulticast mode [ 235.223816][T10002] __nla_validate_parse: 15 callbacks suppressed [ 235.223843][T10002] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 235.259854][T10003] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.326005][T10003] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 235.787055][T10027] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.130783][T10045] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 236.159358][T10045] nbd: couldn't find a device at index -1 [ 236.169758][T10047] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 236.285814][T10052] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.332452][T10052] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 236.693824][ T29] audit: type=1800 audit(1719020576.747:37): pid=10073 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 236.765565][ T29] audit: type=1804 audit(1719020576.777:38): pid=10072 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3631516384/syzkaller.pBpAvf/51/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 237.229638][T10085] xt_CT: You must specify a L4 protocol and not use inversions on it [ 237.515634][T10092] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 237.634935][T10092] bond8: entered promiscuous mode [ 237.650055][T10094] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.710784][T10096] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 237.732023][T10098] bond8: left promiscuous mode [ 237.737682][T10098] 8021q: adding VLAN 0 to HW filter on device bond8 [ 238.907456][T10136] vxcan1: left allmulticast mode [ 238.917394][T10136] pim6reg: left allmulticast mode [ 239.331564][T10153] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 239.387478][T10153] bond1: entered promiscuous mode [ 239.522749][T10153] bond1: left promiscuous mode [ 239.528660][T10153] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.513010][T10190] __nla_validate_parse: 17 callbacks suppressed [ 240.513034][T10190] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.576066][T10185] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.638956][T10193] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 240.727838][T10186] bridge_slave_1: left allmulticast mode [ 240.745824][T10186] bridge_slave_1: left promiscuous mode [ 240.774469][T10186] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.848481][T10186] bridge2: port 1(bridge_slave_1) entered blocking state [ 240.866037][T10186] bridge2: port 1(bridge_slave_1) entered disabled state [ 240.873525][T10186] bridge_slave_1: entered allmulticast mode [ 240.904565][T10186] bridge_slave_1: entered promiscuous mode [ 240.940108][T10196] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.988301][T10198] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 241.058795][T10198] bond2: entered promiscuous mode [ 241.088699][T10201] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.106460][T10210] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.118489][T10204] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 241.134143][T10204] bond2: left promiscuous mode [ 241.141007][T10204] 8021q: adding VLAN 0 to HW filter on device bond2 [ 241.164480][T10210] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.196428][T10212] netlink: 15 bytes leftover after parsing attributes in process `syz-executor.3'. [ 241.254793][T10214] vlan0: entered promiscuous mode [ 241.874248][T10240] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 242.152345][T10247] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 242.208617][T10247] bond1: entered promiscuous mode [ 242.352790][T10253] bond1: left promiscuous mode [ 242.388534][T10253] 8021q: adding VLAN 0 to HW filter on device bond1 [ 242.605836][T10267] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 243.624084][T10298] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 243.667974][T10298] bond3: entered promiscuous mode [ 243.741314][T10308] bond3: left promiscuous mode [ 243.776485][T10308] 8021q: adding VLAN 0 to HW filter on device bond3 [ 244.571397][T10356] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 244.604455][T10356] bond1: entered promiscuous mode [ 244.785190][T10360] pim6reg: entered allmulticast mode [ 244.800974][T10361] bond1: left promiscuous mode [ 244.831240][T10361] 8021q: adding VLAN 0 to HW filter on device bond1 [ 245.507780][T10395] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 245.542008][T10395] bond4: entered promiscuous mode [ 245.664041][T10399] team0: Port device macvlan1 added [ 245.672983][T10395] __nla_validate_parse: 25 callbacks suppressed [ 245.673007][T10395] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.734105][T10400] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 245.773010][T10400] bond4: left promiscuous mode [ 245.786127][T10400] 8021q: adding VLAN 0 to HW filter on device bond4 [ 246.091320][T10420] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.1'. [ 246.189885][T10418] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 246.194174][T10423] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.273979][T10423] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 246.458186][T10430] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 246.671101][T10435] team0: Port device macvlan1 added [ 246.688057][T10438] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 246.802833][T10438] bond9: entered promiscuous mode [ 246.811231][T10441] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.822748][T10445] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 246.840134][T10445] bond9: left promiscuous mode [ 246.849215][T10445] 8021q: adding VLAN 0 to HW filter on device bond9 [ 246.858823][T10444] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 246.898114][T10449] bridge_slave_1: left allmulticast mode [ 246.904527][T10449] bridge_slave_1: left promiscuous mode [ 246.912806][T10449] bridge0: port 2(bridge_slave_1) entered disabled state [ 246.934487][T10449] bridge1: port 1(bridge_slave_1) entered blocking state [ 246.981693][T10449] bridge1: port 1(bridge_slave_1) entered disabled state [ 247.012298][T10449] bridge_slave_1: entered allmulticast mode [ 247.013942][T10462] ieee802154 phy0 wpan0: encryption failed: -22 [ 247.034675][T10449] bridge_slave_1: entered promiscuous mode [ 247.062767][T10449] bridge1: port 1(bridge_slave_1) entered blocking state [ 247.070138][T10449] bridge1: port 1(bridge_slave_1) entered forwarding state [ 247.096250][T10456] bridge1: port 2(veth1_to_bond) entered blocking state [ 247.126474][T10456] bridge1: port 2(veth1_to_bond) entered disabled state [ 247.168603][T10456] veth1_to_bond: entered allmulticast mode [ 247.194173][T10456] veth1_to_bond: entered promiscuous mode [ 247.217260][T10456] bridge1: port 2(veth1_to_bond) entered blocking state [ 247.224626][T10456] bridge1: port 2(veth1_to_bond) entered forwarding state [ 248.019753][T10507] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 248.174966][T10507] bond7: entered promiscuous mode [ 248.276829][T10514] bond7: left promiscuous mode [ 248.297678][T10514] 8021q: adding VLAN 0 to HW filter on device bond7 [ 248.338454][T10520] vxcan1: entered allmulticast mode [ 248.558999][T10536] bridge_slave_1: left allmulticast mode [ 248.571419][T10536] bridge_slave_1: left promiscuous mode [ 248.590563][T10536] bridge0: port 2(bridge_slave_1) entered disabled state [ 248.676692][T10536] bridge2: port 1(bridge_slave_1) entered blocking state [ 248.700762][T10536] bridge2: port 1(bridge_slave_1) entered disabled state [ 248.710022][T10536] bridge_slave_1: entered allmulticast mode [ 248.718650][T10536] bridge_slave_1: entered promiscuous mode [ 248.729428][T10536] bridge2: port 1(bridge_slave_1) entered blocking state [ 248.736806][T10536] bridge2: port 1(bridge_slave_1) entered forwarding state [ 248.809938][T10542] bridge0: port 3(vlan2) entered blocking state [ 248.827019][T10542] bridge0: port 3(vlan2) entered disabled state [ 248.839351][T10542] vlan2: entered allmulticast mode [ 248.850726][T10542] vlan2: left allmulticast mode [ 248.869478][T10531] bridge2: port 2(veth1_to_bond) entered blocking state [ 248.877262][T10531] bridge2: port 2(veth1_to_bond) entered disabled state [ 248.892844][T10531] veth1_to_bond: entered allmulticast mode [ 248.905721][T10531] veth1_to_bond: entered promiscuous mode [ 248.912829][T10531] bridge2: port 2(veth1_to_bond) entered blocking state [ 248.920019][T10531] bridge2: port 2(veth1_to_bond) entered forwarding state [ 249.256474][ T29] audit: type=1804 audit(1719020589.307:39): pid=10568 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2744794637/syzkaller.M7MCyZ/173/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 249.393904][T10565] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 249.469597][T10565] bond5: entered promiscuous mode [ 249.604660][T10574] bond5: left promiscuous mode [ 249.626511][T10574] 8021q: adding VLAN 0 to HW filter on device bond5 [ 249.940875][T10593] bridge_slave_1: left allmulticast mode [ 249.956569][T10593] bridge_slave_1: left promiscuous mode [ 249.962472][T10593] bridge1: port 1(bridge_slave_1) entered disabled state [ 250.026822][T10593] bridge2: port 1(bridge_slave_1) entered blocking state [ 250.034151][T10593] bridge2: port 1(bridge_slave_1) entered disabled state [ 250.065974][T10593] bridge_slave_1: entered allmulticast mode [ 250.073684][T10593] bridge_slave_1: entered promiscuous mode [ 250.336107][ T29] audit: type=1804 audit(1719020590.387:40): pid=10612 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2732791048/syzkaller.tFLcwZ/99/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 250.460586][T10616] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 250.535122][T10616] bond6: entered promiscuous mode [ 250.570895][T10621] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 250.614958][T10621] bond6: (slave ip6gretap1): making interface the new active one [ 250.661977][T10621] ip6gretap1: entered promiscuous mode [ 250.689139][T10621] bond6: (slave ip6gretap1): Enslaving as an active interface with an up link [ 251.173536][T10648] __nla_validate_parse: 19 callbacks suppressed [ 251.173560][T10648] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.217841][T10645] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.337656][T10645] bridge_slave_1: left allmulticast mode [ 251.363592][T10645] bridge_slave_1: left promiscuous mode [ 251.399470][T10645] bridge2: port 1(bridge_slave_1) entered disabled state [ 251.407011][ T29] audit: type=1804 audit(1719020591.457:41): pid=10656 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2732791048/syzkaller.tFLcwZ/102/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 251.475934][T10658] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.500077][T10645] bridge3: port 1(bridge_slave_1) entered blocking state [ 251.523173][T10645] bridge3: port 1(bridge_slave_1) entered disabled state [ 251.533260][T10645] bridge_slave_1: entered allmulticast mode [ 251.557883][T10645] bridge_slave_1: entered promiscuous mode [ 251.572534][T10658] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 251.639177][T10664] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.715987][T10661] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.773907][T10666] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 251.811002][T10671] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 251.974090][T10671] bond2: entered promiscuous mode [ 252.054112][T10682] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 252.111780][T10682] bond2: (slave ip6gretap1): making interface the new active one [ 252.122134][T10682] ip6gretap1: entered promiscuous mode [ 252.140308][T10682] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 252.328636][T10698] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.369487][T10698] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.376818][T10702] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.403568][T10703] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 253.060449][T10732] bridge_slave_1: left allmulticast mode [ 253.083098][T10732] bridge_slave_1: left promiscuous mode [ 253.099900][T10732] bridge3: port 1(bridge_slave_1) entered disabled state [ 253.149400][T10732] bridge4: port 1(bridge_slave_1) entered blocking state [ 253.169752][T10732] bridge4: port 1(bridge_slave_1) entered disabled state [ 253.186085][T10732] bridge_slave_1: entered allmulticast mode [ 253.193729][T10732] bridge_slave_1: entered promiscuous mode [ 253.202888][T10732] bridge4: port 1(bridge_slave_1) entered blocking state [ 253.210155][T10732] bridge4: port 1(bridge_slave_1) entered forwarding state [ 253.222878][T10736] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 253.266356][T10736] bond10: entered promiscuous mode [ 253.279603][T10738] bridge4: port 2(veth1_to_bond) entered blocking state [ 253.295698][T10738] bridge4: port 2(veth1_to_bond) entered disabled state [ 253.306705][T10738] veth1_to_bond: entered allmulticast mode [ 253.318449][T10738] veth1_to_bond: entered promiscuous mode [ 253.325375][T10738] bridge4: port 2(veth1_to_bond) entered blocking state [ 253.332552][T10738] bridge4: port 2(veth1_to_bond) entered forwarding state [ 253.342666][T10739] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 253.373422][T10739] bond2: entered promiscuous mode [ 253.392045][T10743] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 253.423489][T10743] bond2: (slave ip6gretap1): making interface the new active one [ 253.432383][T10743] ip6gretap1: entered promiscuous mode [ 253.443179][T10743] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 253.774153][T10761] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 253.863617][T10761] sctp: [Deprecated]: syz-executor.2 (pid 10761) Use of int in max_burst socket option deprecated. [ 253.863617][T10761] Use struct sctp_assoc_value instead [ 254.196217][T10779] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 254.291895][T10779] bond8: entered promiscuous mode [ 254.303889][T10786] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap2 [ 254.321001][T10786] bond8: (slave ip6gretap2): making interface the new active one [ 254.330554][T10786] ip6gretap2: entered promiscuous mode [ 254.338171][T10786] bond8: (slave ip6gretap2): Enslaving as an active interface with an up link [ 254.512156][T10784] bridge_slave_1: left allmulticast mode [ 254.525725][T10784] bridge_slave_1: left promiscuous mode [ 254.556410][T10784] bridge2: port 1(bridge_slave_1) entered disabled state [ 254.608382][T10784] bridge3: port 1(bridge_slave_1) entered blocking state [ 254.637058][T10784] bridge3: port 1(bridge_slave_1) entered disabled state [ 254.649121][T10784] bridge_slave_1: entered allmulticast mode [ 254.658061][T10784] bridge_slave_1: entered promiscuous mode [ 255.066787][T10814] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 255.132093][T10818] sctp: [Deprecated]: syz-executor.0 (pid 10818) Use of int in max_burst socket option deprecated. [ 255.132093][T10818] Use struct sctp_assoc_value instead [ 255.163826][T10819] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 255.222254][T10819] bond3: entered promiscuous mode [ 255.611838][T10844] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 255.678109][T10851] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 255.714976][T10844] bond11: entered promiscuous mode [ 256.057267][T10866] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 256.114968][T10866] bond12: entered promiscuous mode [ 256.157298][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.241395][T10873] __nla_validate_parse: 22 callbacks suppressed [ 256.241418][T10873] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 256.523353][T10887] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 256.547623][T10887] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 256.582523][T10887] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.610987][T10887] bridge0: entered promiscuous mode [ 256.861001][T10896] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 257.350148][T10907] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 257.470286][T10917] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.544342][T10912] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 257.819826][T10929] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 257.916161][T10932] sctp: [Deprecated]: syz-executor.0 (pid 10932) Use of int in max_burst socket option deprecated. [ 257.916161][T10932] Use struct sctp_assoc_value instead [ 258.064989][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 258.097009][T10946] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 258.265068][T10927] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 258.724457][T10968] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 258.757921][T10968] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 258.974318][T10978] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 259.165181][T10988] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 259.535359][T10998] tipc: Enabling of bearer rejected, failed to enable media [ 259.778056][T11005] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.2'. [ 259.829697][T11005] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 260.392433][T11032] sctp: [Deprecated]: syz-executor.0 (pid 11032) Use of int in max_burst socket option deprecated. [ 260.392433][T11032] Use struct sctp_assoc_value instead [ 261.191798][T11062] bridge4: port 1(bridge_slave_1) entered disabled state [ 261.206312][T11062] bridge4: port 2(veth1_to_bond) entered disabled state [ 261.355929][T11063] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.365315][T11063] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.374198][T11063] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.384451][T11063] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 261.439480][T11075] __nla_validate_parse: 8 callbacks suppressed [ 261.439507][T11075] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.1'. [ 261.563131][T11075] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 261.828561][T11093] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.404803][T11119] delete_channel: no stack [ 262.446938][T11121] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.473978][T11121] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.551133][T11124] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.782763][T11135] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.806918][T11135] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 262.819334][T11134] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 262.844803][T11134] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 263.441459][T11170] bond0: (slave macsec1): Error -34 calling dev_set_mtu [ 264.279715][ T5131] Bluetooth: hci3: link tx timeout [ 264.285323][ T5131] Bluetooth: hci3: killing stalled connection 11:aa:aa:aa:aa:aa [ 264.633289][T11222] bridge_slave_1: left allmulticast mode [ 264.656996][T11222] bridge_slave_1: left promiscuous mode [ 264.669609][T11222] bridge2: port 1(bridge_slave_1) entered disabled state [ 264.691552][T11222] bridge3: port 1(bridge_slave_1) entered blocking state [ 264.711654][T11222] bridge3: port 1(bridge_slave_1) entered disabled state [ 264.727042][T11222] bridge_slave_1: entered allmulticast mode [ 264.737456][T11222] bridge_slave_1: entered promiscuous mode [ 264.745290][T11222] bridge3: port 1(bridge_slave_1) entered blocking state [ 264.752628][T11222] bridge3: port 1(bridge_slave_1) entered forwarding state [ 264.778163][T11226] veth1_to_bond: left allmulticast mode [ 264.804558][T11226] veth1_to_bond: left promiscuous mode [ 264.823887][T11226] bridge1: port 2(veth1_to_bond) entered disabled state [ 265.258807][T11241] sch_tbf: peakrate 1 is lower than or equals to rate 1 ! [ 265.526327][T11254] bridge_slave_1: left allmulticast mode [ 265.532095][T11254] bridge_slave_1: left promiscuous mode [ 265.547718][T11254] bridge3: port 1(bridge_slave_1) entered disabled state [ 265.589256][T11254] bridge4: port 1(bridge_slave_1) entered blocking state [ 265.611266][T11254] bridge4: port 1(bridge_slave_1) entered disabled state [ 265.631417][T11254] bridge_slave_1: entered allmulticast mode [ 265.654884][T11254] bridge_slave_1: entered promiscuous mode [ 265.666971][T11254] bridge4: port 1(bridge_slave_1) entered blocking state [ 265.674289][T11254] bridge4: port 1(bridge_slave_1) entered forwarding state [ 265.687585][T11265] veth1_to_bond: left allmulticast mode [ 265.697323][T11265] veth1_to_bond: left promiscuous mode [ 265.712583][T11265] bridge2: port 2(veth1_to_bond) entered disabled state [ 265.953537][T11282] xt_cgroup: invalid path, errno=-2 [ 266.119050][T11288] sch_tbf: peakrate 1 is lower than or equals to rate 1 ! [ 266.373433][T11301] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 266.380823][ T5131] Bluetooth: hci3: command 0x0406 tx timeout [ 266.469128][T11309] __nla_validate_parse: 24 callbacks suppressed [ 266.469152][T11309] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 266.634989][T11312] bridge_slave_1: left allmulticast mode [ 266.644937][T11312] bridge_slave_1: left promiscuous mode [ 266.689221][T11312] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.737712][T11312] bridge2: port 1(bridge_slave_1) entered blocking state [ 266.777982][T11312] bridge2: port 1(bridge_slave_1) entered disabled state [ 266.792345][T11312] bridge_slave_1: entered allmulticast mode [ 266.823038][T11320] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 266.833870][T11312] bridge_slave_1: entered promiscuous mode [ 266.852358][T11312] bridge2: port 1(bridge_slave_1) entered blocking state [ 266.859710][T11312] bridge2: port 1(bridge_slave_1) entered forwarding state [ 266.965550][T11324] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.063628][T11324] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 267.225590][T11331] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 267.241749][T11332] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.4'. [ 267.259002][T11331] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 267.294751][T11331] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.311162][T11331] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 267.348614][T11331] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 267.396490][T11331] batadv_slave_0: entered promiscuous mode [ 267.851632][T11313] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 268.190102][T11363] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.357995][T11371] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 268.453741][T11376] bridge_slave_1: left allmulticast mode [ 268.504256][T11376] bridge_slave_1: left promiscuous mode [ 268.518444][T11376] bridge4: port 1(bridge_slave_1) entered disabled state [ 268.531378][T11377] xt_cgroup: invalid path, errno=-2 [ 268.564639][T11376] bridge5: port 1(bridge_slave_1) entered blocking state [ 268.573660][T11376] bridge5: port 1(bridge_slave_1) entered disabled state [ 268.581502][T11376] bridge_slave_1: entered allmulticast mode [ 268.589826][T11376] bridge_slave_1: entered promiscuous mode [ 268.604436][T11375] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.687246][T11371] veth1_to_bond: left allmulticast mode [ 268.701142][T11371] veth1_to_bond: left promiscuous mode [ 268.719945][T11371] bridge4: port 2(veth1_to_bond) entered disabled state [ 268.894731][T11396] bridge_slave_1: left allmulticast mode [ 268.903937][T11396] bridge_slave_1: left promiscuous mode [ 268.922480][T11396] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.940568][T11396] bridge1: port 1(bridge_slave_1) entered blocking state [ 269.004328][T11396] bridge1: port 1(bridge_slave_1) entered disabled state [ 269.012950][T11396] bridge_slave_1: entered allmulticast mode [ 269.021871][T11396] bridge_slave_1: entered promiscuous mode [ 269.035159][T11396] bridge1: port 1(bridge_slave_1) entered blocking state [ 269.042477][T11396] bridge1: port 1(bridge_slave_1) entered forwarding state [ 269.279775][T11417] tipc: Can't bind to reserved service type 2 [ 269.354946][T11412] sctp: [Deprecated]: syz-executor.4 (pid 11412) Use of int in max_burst socket option deprecated. [ 269.354946][T11412] Use struct sctp_assoc_value instead [ 273.576014][ T5131] Bluetooth: hci4: command 0x0406 tx timeout [ 276.299767][T11433] __nla_validate_parse: 1 callbacks suppressed [ 276.299790][T11433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 276.381022][T11433] xt_cgroup: invalid path, errno=-2 [ 276.531855][T11444] netlink: 155632 bytes leftover after parsing attributes in process `syz-executor.1'. [ 276.589535][T11447] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 276.664666][T11455] sctp: [Deprecated]: syz-executor.0 (pid 11455) Use of int in max_burst socket option deprecated. [ 276.664666][T11455] Use struct sctp_assoc_value instead [ 276.671609][T11447] bridge_slave_1: left allmulticast mode [ 276.688804][T11447] bridge_slave_1: left promiscuous mode [ 276.698523][T11447] bridge1: port 1(bridge_slave_1) entered disabled state [ 276.721189][T11447] bridge2: port 1(bridge_slave_1) entered blocking state [ 276.739632][T11447] bridge2: port 1(bridge_slave_1) entered disabled state [ 276.755995][T11447] bridge_slave_1: entered allmulticast mode [ 276.777489][T11447] bridge_slave_1: entered promiscuous mode [ 276.785123][T11447] bridge2: port 1(bridge_slave_1) entered blocking state [ 276.792412][T11447] bridge2: port 1(bridge_slave_1) entered forwarding state [ 276.807916][T11452] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 276.832515][T11457] bridge_slave_1: left allmulticast mode [ 276.845969][T11457] bridge_slave_1: left promiscuous mode [ 276.858073][T11457] bridge5: port 1(bridge_slave_1) entered disabled state [ 276.897924][T11457] bridge6: port 1(bridge_slave_1) entered blocking state [ 276.912043][T11457] bridge6: port 1(bridge_slave_1) entered disabled state [ 276.955091][T11457] bridge_slave_1: entered allmulticast mode [ 276.963901][T11457] bridge_slave_1: entered promiscuous mode [ 276.987873][T11460] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 277.045249][T11462] bridge_slave_1: left allmulticast mode [ 277.056717][T11462] bridge_slave_1: left promiscuous mode [ 277.062587][T11462] bridge3: port 1(bridge_slave_1) entered disabled state [ 277.093376][T11462] bridge4: port 1(bridge_slave_1) entered blocking state [ 277.108723][T11462] bridge4: port 1(bridge_slave_1) entered disabled state [ 277.136869][T11462] bridge_slave_1: entered allmulticast mode [ 277.171726][T11462] bridge_slave_1: entered promiscuous mode [ 277.215489][T11462] bridge4: port 1(bridge_slave_1) entered blocking state [ 277.222750][T11462] bridge4: port 1(bridge_slave_1) entered forwarding state [ 277.285679][T11445] infiniband syz2: set active [ 277.298514][T11445] infiniband syz2: added veth1_to_bridge [ 277.319254][T11445] syz2: rxe_create_cq: returned err = -12 [ 277.338747][T11445] infiniband syz2: Couldn't create ib_mad CQ [ 277.345136][T11445] infiniband syz2: Couldn't open port 1 [ 277.392044][T11445] RDS/IB: syz2: added [ 277.407175][T11445] smc: adding ib device syz2 with port count 1 [ 277.413765][T11445] smc: ib device syz2 port 1 has pnetid [ 277.908063][T11491] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 277.931667][T11490] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 278.003525][T11494] bridge_slave_1: left allmulticast mode [ 278.010533][T11494] bridge_slave_1: left promiscuous mode [ 278.019938][T11494] bridge2: port 1(bridge_slave_1) entered disabled state [ 278.037694][T11494] bridge3: port 1(bridge_slave_1) entered blocking state [ 278.046210][T11494] bridge3: port 1(bridge_slave_1) entered disabled state [ 278.054302][T11494] bridge_slave_1: entered allmulticast mode [ 278.068377][T11494] bridge_slave_1: entered promiscuous mode [ 278.081335][T11494] bridge3: port 1(bridge_slave_1) entered blocking state [ 278.088656][T11494] bridge3: port 1(bridge_slave_1) entered forwarding state [ 278.110287][T11490] bridge3: port 2(veth1_to_bond) entered blocking state [ 278.144095][T11490] bridge3: port 2(veth1_to_bond) entered disabled state [ 278.181547][T11490] veth1_to_bond: entered allmulticast mode [ 278.201355][T11490] veth1_to_bond: entered promiscuous mode [ 278.244012][T11490] bridge3: port 2(veth1_to_bond) entered blocking state [ 278.251255][T11490] bridge3: port 2(veth1_to_bond) entered forwarding state [ 278.336155][T11497] vlan2: entered promiscuous mode [ 278.341393][T11497] caif0: entered promiscuous mode [ 278.376340][T11497] caif0: left promiscuous mode [ 278.628055][T11503] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 278.740602][T11503] bridge_slave_1: left allmulticast mode [ 278.769184][T11503] bridge_slave_1: left promiscuous mode [ 278.778436][T11503] bridge3: port 1(bridge_slave_1) entered disabled state [ 278.846401][T11503] bridge4: port 1(bridge_slave_1) entered blocking state [ 278.853621][T11503] bridge4: port 1(bridge_slave_1) entered disabled state [ 278.905825][T11503] bridge_slave_1: entered allmulticast mode [ 278.916521][T11503] bridge_slave_1: entered promiscuous mode [ 278.955224][T11503] bridge4: port 1(bridge_slave_1) entered blocking state [ 278.962560][T11503] bridge4: port 1(bridge_slave_1) entered forwarding state [ 278.999558][T11508] netdevsim netdevsim0 : renamed from netdevsim0 (while UP) [ 279.028024][T11508] A link change request failed with some changes committed already. Interface  may have been left with an inconsistent configuration, please check. [ 279.046578][T11509] veth1_to_bond: left allmulticast mode [ 279.052670][T11509] veth1_to_bond: left promiscuous mode [ 279.060503][T11509] bridge3: port 2(veth1_to_bond) entered disabled state [ 279.301667][T11528] netlink: 203452 bytes leftover after parsing attributes in process `syz-executor.2'. [ 279.357628][T11528] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 279.599316][T11541] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.628860][T11539] vlan1: entered promiscuous mode [ 279.648508][T11539] caif0: entered promiscuous mode [ 279.689582][T11539] caif0: left promiscuous mode [ 279.755595][T11547] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 279.894102][T11549] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 280.227443][T11557] bridge_slave_1: left allmulticast mode [ 280.234004][T11557] bridge_slave_1: left promiscuous mode [ 280.253911][T11557] bridge4: port 1(bridge_slave_1) entered disabled state [ 280.308413][T11557] bridge5: port 1(bridge_slave_1) entered blocking state [ 280.335745][T11557] bridge5: port 1(bridge_slave_1) entered disabled state [ 280.343076][T11557] bridge_slave_1: entered allmulticast mode [ 280.386536][T11557] bridge_slave_1: entered promiscuous mode [ 280.393826][T11557] bridge5: port 1(bridge_slave_1) entered blocking state [ 280.401049][T11557] bridge5: port 1(bridge_slave_1) entered forwarding state [ 281.131819][T11589] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 281.173211][T11584] bridge_slave_1: left allmulticast mode [ 281.191932][T11584] bridge_slave_1: left promiscuous mode [ 281.208994][T11584] bridge6: port 1(bridge_slave_1) entered disabled state [ 281.237758][T11584] bridge7: port 1(bridge_slave_1) entered blocking state [ 281.252673][T11584] bridge7: port 1(bridge_slave_1) entered disabled state [ 281.281655][T11584] bridge_slave_1: entered allmulticast mode [ 281.291060][T11584] bridge_slave_1: entered promiscuous mode [ 281.325842][T11590] bridge7: port 2(veth1_to_bond) entered blocking state [ 281.333026][T11590] bridge7: port 2(veth1_to_bond) entered disabled state [ 281.396075][T11590] veth1_to_bond: entered allmulticast mode [ 281.430150][T11590] veth1_to_bond: entered promiscuous mode [ 281.517384][T11595] __nla_validate_parse: 2 callbacks suppressed [ 281.517410][T11595] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 281.677219][T11605] netlink: 'syz-executor.1': attribute type 27 has an invalid length. [ 282.099221][T11630] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.121540][T11630] nbd: must specify at least one socket [ 282.216808][T11605] bridge5: port 1(bridge_slave_1) entered disabled state [ 282.341564][T11605] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 282.365945][T11605] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 282.517628][T11605] vlan0: left promiscuous mode [ 282.631843][T11605] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.651732][T11605] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.662604][T11605] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.671796][T11605] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.839184][T11605] bond2: left promiscuous mode [ 282.869404][T11605] ip6gretap1: left promiscuous mode [ 282.894157][T11605] bond3: left promiscuous mode [ 282.943800][T11607] bridge0: port 2(geneve1) entered blocking state [ 282.960507][T11605] syz-executor.1 (11605) used greatest stack depth: 18640 bytes left [ 282.977671][T11607] bridge0: port 2(geneve1) entered disabled state [ 282.996646][T11607] geneve1: entered allmulticast mode [ 283.025912][T11607] geneve1: entered promiscuous mode [ 283.049515][T11610] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 47608 - 0 [ 283.073626][T11610] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 47608 - 0 [ 283.086900][T11610] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 47608 - 0 [ 283.096689][T11610] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 47608 - 0 [ 283.107556][T11610] netdevsim netdevsim4 netdevsim0: set [1, 2] type 2 family 0 port 55223 - 0 [ 283.117576][T11610] netdevsim netdevsim4 netdevsim1: set [1, 2] type 2 family 0 port 55223 - 0 [ 283.126646][T11610] netdevsim netdevsim4 netdevsim2: set [1, 2] type 2 family 0 port 55223 - 0 [ 283.150464][T11610] netdevsim netdevsim4 netdevsim3: set [1, 2] type 2 family 0 port 55223 - 0 [ 283.160120][T11610] geneve2: entered promiscuous mode [ 283.165370][T11610] geneve2: entered allmulticast mode [ 283.205706][T11621] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 283.417731][T11650] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 283.514752][T11652] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 283.542070][T11652] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 283.542148][ T29] audit: type=1804 audit(1719020623.597:42): pid=11654 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3549826805/syzkaller.lGp44C/141/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 283.731556][T11661] netlink: 'syz-executor.4': attribute type 33 has an invalid length. [ 283.943204][T11661] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 283.969774][T11661] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.134809][T11670] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 284.188450][T11670] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 284.330339][T11682] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 284.564293][T11690] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.708491][T11682] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.960607][T11698] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 284.975213][T11698] nbd: illegal input index 33022 [ 285.059327][T11682] bridge4: port 1(bridge_slave_1) entered disabled state [ 285.105828][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 285.204585][T11682] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 285.230537][ T29] audit: type=1804 audit(1719020625.277:43): pid=11703 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3631516384/syzkaller.pBpAvf/164/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 285.276456][T11682] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 285.529216][T11682] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.552871][T11682] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.570555][T11682] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.581010][T11682] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.741517][T11682] bond6: left promiscuous mode [ 285.749095][T11682] ip6gretap1: left promiscuous mode [ 285.768222][T11682] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.777657][T11682] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.786884][T11682] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.796076][T11682] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 285.912463][T11696] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 285.954913][T11684] bridge0: port 2(geneve1) entered blocking state [ 285.985818][T11684] bridge0: port 2(geneve1) entered disabled state [ 286.028483][T11684] geneve1: entered allmulticast mode [ 286.054967][T11684] geneve1: entered promiscuous mode [ 286.264236][T11713] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 286.607248][T11728] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 286.627825][T11727] __nla_validate_parse: 2 callbacks suppressed [ 286.627851][T11727] netlink: 4380 bytes leftover after parsing attributes in process `syz-executor.3'. [ 286.688453][T11728] sctp: [Deprecated]: syz-executor.1 (pid 11728) Use of int in max_burst socket option deprecated. [ 286.688453][T11728] Use struct sctp_assoc_value instead [ 286.850238][T11736] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 286.964685][T11739] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 287.435109][T11746] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 287.633402][ T29] audit: type=1804 audit(1719020627.687:44): pid=11748 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3631516384/syzkaller.pBpAvf/168/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 287.699809][T11753] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 287.765313][T11758] batadv_slave_0: entered allmulticast mode [ 287.824800][T11765] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 287.865733][T11765] sctp: [Deprecated]: syz-executor.1 (pid 11765) Use of int in max_burst socket option deprecated. [ 287.865733][T11765] Use struct sctp_assoc_value instead [ 287.939866][T11765] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.959300][T11772] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 288.146710][T11776] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.3'. [ 288.223225][T11781] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 288.248017][T11781] sctp: [Deprecated]: syz-executor.4 (pid 11781) Use of int in max_burst socket option deprecated. [ 288.248017][T11781] Use struct sctp_assoc_value instead [ 288.324657][T11781] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.332124][T11788] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 288.359746][T11787] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 288.396619][T11788] bridge_slave_1: left allmulticast mode [ 288.412908][T11788] bridge_slave_1: left promiscuous mode [ 288.423682][T11788] bridge2: port 1(bridge_slave_1) entered disabled state [ 288.469091][T11788] bridge3: port 1(bridge_slave_1) entered blocking state [ 288.485875][T11788] bridge3: port 1(bridge_slave_1) entered disabled state [ 288.493262][T11788] bridge_slave_1: entered allmulticast mode [ 288.537368][T11788] bridge_slave_1: entered promiscuous mode [ 288.551371][T11788] bridge3: port 1(bridge_slave_1) entered blocking state [ 288.558664][T11788] bridge3: port 1(bridge_slave_1) entered forwarding state [ 288.594142][T11749] batadv_slave_0: left allmulticast mode [ 288.603217][T11792] bridge3: port 2(veth1_to_bond) entered blocking state [ 288.611130][T11799] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 288.625114][T11792] bridge3: port 2(veth1_to_bond) entered disabled state [ 288.657014][T11792] veth1_to_bond: entered allmulticast mode [ 288.668626][T11792] veth1_to_bond: entered promiscuous mode [ 288.697632][T11792] bridge3: port 2(veth1_to_bond) entered blocking state [ 288.704841][T11792] bridge3: port 2(veth1_to_bond) entered forwarding state [ 288.919308][T11812] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 288.939835][T11812] sctp: [Deprecated]: syz-executor.2 (pid 11812) Use of int in max_burst socket option deprecated. [ 288.939835][T11812] Use struct sctp_assoc_value instead [ 289.001722][T11812] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.019510][T11813] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 289.054941][T11813] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 289.274291][ T29] audit: type=1804 audit(1719020629.327:45): pid=11825 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3631516384/syzkaller.pBpAvf/175/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 289.313708][T11827] batadv_slave_0: entered allmulticast mode [ 289.365344][T11831] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 289.466888][T11837] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 289.535228][T11837] bridge_slave_1: left allmulticast mode [ 289.555671][T11837] bridge_slave_1: left promiscuous mode [ 289.561562][T11837] bridge4: port 1(bridge_slave_1) entered disabled state [ 289.598214][T11837] bridge5: port 1(bridge_slave_1) entered blocking state [ 289.615658][T11837] bridge5: port 1(bridge_slave_1) entered disabled state [ 289.623197][T11837] bridge_slave_1: entered allmulticast mode [ 289.631819][T11837] bridge_slave_1: entered promiscuous mode [ 289.656115][T11826] batadv_slave_0: left allmulticast mode [ 289.721039][T11844] bridge5: port 2(veth1_to_bond) entered blocking state [ 289.741168][T11844] bridge5: port 2(veth1_to_bond) entered disabled state [ 289.757620][T11844] veth1_to_bond: entered allmulticast mode [ 289.767924][T11844] veth1_to_bond: entered promiscuous mode [ 289.775229][T11847] bridge_slave_1: left allmulticast mode [ 289.781657][T11847] bridge_slave_1: left promiscuous mode [ 289.788073][T11847] bridge4: port 1(bridge_slave_1) entered disabled state [ 289.836723][T11847] bridge5: port 1(bridge_slave_1) entered blocking state [ 289.869967][T11847] bridge5: port 1(bridge_slave_1) entered disabled state [ 289.886024][T11847] bridge_slave_1: entered allmulticast mode [ 289.912767][T11847] bridge_slave_1: entered promiscuous mode [ 289.928126][T11847] bridge5: port 1(bridge_slave_1) entered blocking state [ 289.935452][T11847] bridge5: port 1(bridge_slave_1) entered forwarding state [ 289.973687][T11842] bridge5: port 2(veth1_to_bond) entered blocking state [ 290.002122][T11842] bridge5: port 2(veth1_to_bond) entered disabled state [ 290.036265][T11842] veth1_to_bond: entered allmulticast mode [ 290.045192][T11842] veth1_to_bond: entered promiscuous mode [ 290.054736][T11842] bridge5: port 2(veth1_to_bond) entered blocking state [ 290.061953][T11842] bridge5: port 2(veth1_to_bond) entered forwarding state [ 290.085245][T11858] batadv_slave_1: entered promiscuous mode [ 290.120184][T11852] batadv_slave_1: left promiscuous mode [ 290.275204][ T29] audit: type=1804 audit(1719020630.327:46): pid=11873 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3631516384/syzkaller.pBpAvf/180/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 290.478485][T11880] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 290.532729][T11883] bridge_slave_1: left allmulticast mode [ 290.539700][T11883] bridge_slave_1: left promiscuous mode [ 290.545885][T11883] bridge5: port 1(bridge_slave_1) entered disabled state [ 290.604385][T11883] bridge6: port 1(bridge_slave_1) entered blocking state [ 290.622698][T11883] bridge6: port 1(bridge_slave_1) entered disabled state [ 290.637088][ T29] audit: type=1804 audit(1719020630.697:47): pid=11889 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3283819210/syzkaller.3o2heh/418/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 290.666686][T11883] bridge_slave_1: entered allmulticast mode [ 290.695249][T11883] bridge_slave_1: entered promiscuous mode [ 290.717898][T11886] veth1_to_bond: left allmulticast mode [ 290.726343][T11892] rdma_rxe: rxe_newlink: failed to add bond_slave_0 [ 290.726392][T11886] veth1_to_bond: left promiscuous mode [ 290.744220][T11886] bridge5: port 2(veth1_to_bond) entered disabled state [ 290.760513][T11886] bridge6: port 2(veth1_to_bond) entered blocking state [ 290.769728][T11886] bridge6: port 2(veth1_to_bond) entered disabled state [ 290.779410][T11886] veth1_to_bond: entered allmulticast mode [ 290.788727][T11886] veth1_to_bond: entered promiscuous mode [ 290.990009][T11901] bridge_slave_1: left allmulticast mode [ 291.008133][T11901] bridge_slave_1: left promiscuous mode [ 291.026004][T11901] bridge5: port 1(bridge_slave_1) entered disabled state [ 291.079787][T11901] bridge6: port 1(bridge_slave_1) entered blocking state [ 291.093383][T11901] bridge6: port 1(bridge_slave_1) entered disabled state [ 291.105993][T11901] bridge_slave_1: entered allmulticast mode [ 291.125950][T11901] bridge_slave_1: entered promiscuous mode [ 291.133398][T11901] bridge6: port 1(bridge_slave_1) entered blocking state [ 291.140695][T11901] bridge6: port 1(bridge_slave_1) entered forwarding state [ 291.175110][T11896] veth1_to_bond: left allmulticast mode [ 291.201655][T11896] veth1_to_bond: left promiscuous mode [ 291.222345][T11896] bridge5: port 2(veth1_to_bond) entered disabled state [ 291.267229][T11896] bridge6: port 2(veth1_to_bond) entered blocking state [ 291.295243][T11896] bridge6: port 2(veth1_to_bond) entered disabled state [ 291.318482][T11896] veth1_to_bond: entered allmulticast mode [ 291.343502][T11896] veth1_to_bond: entered promiscuous mode [ 291.357652][T11896] bridge6: port 2(veth1_to_bond) entered blocking state [ 291.364900][T11896] bridge6: port 2(veth1_to_bond) entered forwarding state [ 291.550692][ T29] audit: type=1804 audit(1719020631.607:48): pid=11918 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3549826805/syzkaller.lGp44C/158/cgroup.controllers" dev="sda1" ino=1938 res=1 errno=0 [ 291.776359][T11924] __nla_validate_parse: 6 callbacks suppressed [ 291.776383][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.844132][T11925] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 291.886585][T11925] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.0'. [ 291.887534][T11931] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 291.941312][T11929] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 292.106651][T11932] bridge_slave_1: left allmulticast mode [ 292.138059][T11932] bridge_slave_1: left promiscuous mode [ 292.145451][T11932] bridge5: port 1(bridge_slave_1) entered disabled state [ 292.166949][T11932] bridge6: port 1(bridge_slave_1) entered blocking state [ 292.174546][T11932] bridge6: port 1(bridge_slave_1) entered disabled state [ 292.184941][T11935] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.0'. [ 292.191461][T11932] bridge_slave_1: entered allmulticast mode [ 292.204054][T11937] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 292.230203][T11932] bridge_slave_1: entered promiscuous mode [ 292.285772][T11933] bridge6: port 2(veth1_to_bond) entered blocking state [ 292.313399][T11933] bridge6: port 2(veth1_to_bond) entered disabled state [ 292.323989][T11933] veth1_to_bond: entered allmulticast mode [ 292.332936][T11933] veth1_to_bond: entered promiscuous mode [ 292.351362][T11947] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 292.381818][T11946] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 292.442928][ T29] audit: type=1804 audit(1719020632.497:49): pid=11953 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3631516384/syzkaller.pBpAvf/185/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 293.043265][ T29] audit: type=1804 audit(1719020633.097:50): pid=11982 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2744794637/syzkaller.M7MCyZ/250/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 293.342055][T12001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 293.579710][T12011] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 293.591129][T12011] sctp: [Deprecated]: syz-executor.1 (pid 12011) Use of int in max_burst socket option deprecated. [ 293.591129][T12011] Use struct sctp_assoc_value instead [ 293.659031][T12011] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 294.740552][ T5131] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 294.751026][ T5131] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 294.765636][ T5131] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 294.775019][ T5131] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 294.784431][ T5131] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 294.793309][ T5131] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 295.227401][T12054] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 295.312554][T12054] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 295.366982][T12054] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 295.390390][T12054] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 296.307959][T12042] chnl_net:caif_netlink_parms(): no params data found [ 296.319137][T12091] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 296.329182][T12092] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 296.344604][T12091] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 296.359917][T12091] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 296.590117][T12103] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 296.636122][T12042] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.644882][T12042] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.658474][T12042] bridge_slave_0: entered allmulticast mode [ 296.667290][T12042] bridge_slave_0: entered promiscuous mode [ 296.678051][T12042] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.686336][T12042] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.693711][T12042] bridge_slave_1: entered allmulticast mode [ 296.707199][T12042] bridge_slave_1: entered promiscuous mode [ 296.802245][T12042] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 296.830652][T12110] __nla_validate_parse: 5 callbacks suppressed [ 296.830677][T12110] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 296.856678][ T5131] Bluetooth: hci4: command tx timeout [ 296.867725][T12042] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.942197][T12042] team0: Port device team_slave_0 added [ 296.967005][T12118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.980176][T12042] team0: Port device team_slave_1 added [ 297.129716][T12042] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.159999][T12042] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.220369][T12042] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.249138][T12042] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.256846][T12042] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.283880][T12042] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.296673][T12114] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 297.366415][T12042] hsr_slave_0: entered promiscuous mode [ 297.368615][T12129] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 297.382598][T12042] hsr_slave_1: entered promiscuous mode [ 297.394048][T12129] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 297.402902][T12042] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.403328][T12129] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 297.411991][T12042] Cannot create hsr debugfs directory [ 297.431798][T12129] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 297.610701][T12132] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.719695][T12132] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.871798][T12042] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.896420][T12042] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 47608 - 0 [ 297.911213][T12042] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 2] type 2 family 0 port 55223 - 0 [ 297.978908][T12132] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.025921][T12136] sctp: [Deprecated]: syz-executor.1 (pid 12136) Use of int in max_burst socket option deprecated. [ 298.025921][T12136] Use struct sctp_assoc_value instead [ 298.064201][T12042] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.083879][T12042] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 47608 - 0 [ 298.105201][T12042] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 2] type 2 family 0 port 55223 - 0 [ 298.237613][T12132] netdevsim netdevsim3 netdevsim0 (unregistering): left promiscuous mode [ 298.278084][T12132] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.315260][T12143] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.422508][T12042] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.451594][T12042] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 47608 - 0 [ 298.463617][T12042] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 2] type 2 family 0 port 55223 - 0 [ 298.489082][T12148] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 298.619771][T12042] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 298.630684][T12042] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 47608 - 0 [ 298.641335][T12042] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 2] type 2 family 0 port 55223 - 0 [ 298.692434][T12160] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.761195][T12132] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.808896][T12132] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.840673][T12132] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.875131][T12132] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.920093][T12160] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 298.936134][ T53] Bluetooth: hci4: command tx timeout [ 298.952672][T12171] sctp: [Deprecated]: syz-executor.0 (pid 12171) Use of int in max_burst socket option deprecated. [ 298.952672][T12171] Use struct sctp_assoc_value instead [ 299.054172][T12042] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 299.113688][T12042] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 299.142562][T12042] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 299.164103][T12042] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 299.175885][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 299.699956][T12042] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.790239][T12042] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.823337][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.830648][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 299.844868][T12206] sctp: [Deprecated]: syz-executor.0 (pid 12206) Use of int in max_burst socket option deprecated. [ 299.844868][T12206] Use struct sctp_assoc_value instead [ 299.898186][T11611] bridge0: port 2(bridge_slave_1) entered blocking state [ 299.905760][T11611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.107914][T12211] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 300.485899][T12042] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.027434][ T5131] Bluetooth: hci4: command tx timeout [ 301.160299][T12042] veth0_vlan: entered promiscuous mode [ 301.188817][T12042] veth1_vlan: entered promiscuous mode [ 301.198861][T12247] sctp: [Deprecated]: syz-executor.0 (pid 12247) Use of int in max_burst socket option deprecated. [ 301.198861][T12247] Use struct sctp_assoc_value instead [ 301.279345][T12042] veth0_macvtap: entered promiscuous mode [ 301.293912][T12042] veth1_macvtap: entered promiscuous mode [ 301.343594][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.368736][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.379203][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.390246][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.403227][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.430165][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.446446][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.460564][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.472015][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.484415][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.494759][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 301.514146][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.527959][T12042] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.553167][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.564498][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.576561][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.592860][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.603100][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.613775][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.627125][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.638217][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.649788][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.661284][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.683422][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.694321][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.707271][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.718435][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.733649][T12257] xt_physdev: --physdev-out and --physdev-is-out only supported in the FORWARD and POSTROUTING chains with bridged traffic [ 301.735851][T12042] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 301.758732][T12042] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 301.771275][T12042] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.799648][T12042] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.821531][T12042] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.836135][T12042] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.845012][T12042] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 302.143856][ T2846] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.170191][ T2846] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.288867][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.300705][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.424691][ T29] audit: type=1804 audit(1719020642.477:51): pid=12272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir223918271/syzkaller.n3BhKc/0/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 302.602912][T12277] pim6reg: entered allmulticast mode [ 302.899067][T12287] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 302.928125][T12285] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.982490][T12286] sctp: [Deprecated]: syz-executor.4 (pid 12286) Use of int in max_burst socket option deprecated. [ 302.982490][T12286] Use struct sctp_assoc_value instead [ 303.106052][ T5131] Bluetooth: hci4: command tx timeout [ 303.193290][T12291] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.269363][T12291] bridge_slave_1: left allmulticast mode [ 303.275089][T12291] bridge_slave_1: left promiscuous mode [ 303.291973][T12291] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.357260][T12296] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 303.584272][T12294] bond4: (slave veth21): making interface the new active one [ 303.595910][T12294] bond4: (slave veth21): Enslaving as an active interface with an up link [ 303.690940][T12296] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 303.764789][T12296] bond4 (unregistering): (slave veth21): Releasing backup interface [ 303.817203][T12296] bond4 (unregistering): Released all slaves [ 303.862786][ T29] audit: type=1804 audit(1719020643.917:52): pid=12305 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3549826805/syzkaller.lGp44C/189/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 304.257447][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 304.278719][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 304.289015][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 304.310959][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 304.323497][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 304.335803][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 304.472680][T12324] sctp: [Deprecated]: syz-executor.0 (pid 12324) Use of int in max_burst socket option deprecated. [ 304.472680][T12324] Use struct sctp_assoc_value instead [ 304.537337][T12325] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 304.790616][T12329] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.0'. [ 304.843317][T12332] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 304.925775][T12329] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 305.084189][T12314] chnl_net:caif_netlink_parms(): no params data found [ 305.204551][ T29] audit: type=1804 audit(1719020645.257:53): pid=12343 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3549826805/syzkaller.lGp44C/192/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 305.652396][T12314] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.684516][T12314] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.695976][T12314] bridge_slave_0: entered allmulticast mode [ 305.703916][T12314] bridge_slave_0: entered promiscuous mode [ 305.745537][T12314] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.752737][T12314] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.768593][T12314] bridge_slave_1: entered allmulticast mode [ 305.786757][T12314] bridge_slave_1: entered promiscuous mode [ 305.888699][T12314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.927609][T12314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.932403][T12361] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 305.948733][T12361] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 305.958200][T12361] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 305.976585][T12361] netlink: 198200 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.005239][T12361] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.063093][T12314] team0: Port device team_slave_0 added [ 306.074724][T12314] team0: Port device team_slave_1 added [ 306.109598][T12365] sctp: [Deprecated]: syz-executor.0 (pid 12365) Use of int in max_burst socket option deprecated. [ 306.109598][T12365] Use struct sctp_assoc_value instead [ 306.172973][T12314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 306.206324][T12314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.249643][T12314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 306.264662][T12314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.272691][T12314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.286979][T12369] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 306.325097][T12314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.371245][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.385810][ T53] Bluetooth: hci4: command tx timeout [ 306.539447][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.588132][T12380] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 306.610991][T12377] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'. [ 306.642487][T12379] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 306.652843][T12379] tipc: Enabling of bearer rejected, failed to enable media [ 306.718483][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.765346][T12314] hsr_slave_0: entered promiscuous mode [ 306.783688][T12314] hsr_slave_1: entered promiscuous mode [ 306.800206][T12314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.816701][T12314] Cannot create hsr debugfs directory [ 306.969022][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.134990][T12391] bridge_slave_1: left allmulticast mode [ 307.151543][T12391] bridge_slave_1: left promiscuous mode [ 307.159429][T12391] bridge6: port 1(bridge_slave_1) entered disabled state [ 307.194985][T12391] veth1_to_bond: left allmulticast mode [ 307.207242][T12391] veth1_to_bond: left promiscuous mode [ 307.213434][T12391] bridge6: port 2(veth1_to_bond) entered disabled state [ 307.434139][T12402] sctp: [Deprecated]: syz-executor.2 (pid 12402) Use of int in max_burst socket option deprecated. [ 307.434139][T12402] Use struct sctp_assoc_value instead [ 308.041421][ T12] bridge_slave_0: left allmulticast mode [ 308.055634][ T12] bridge_slave_0: left promiscuous mode [ 308.067082][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.100103][T12422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 308.249876][T12429] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.259176][T12426] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 308.273758][T12429] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 308.305618][T12426] netlink: 9352 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.343598][T12426] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 308.374372][T12426] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.459323][ T53] Bluetooth: hci4: command tx timeout [ 308.616729][T12434] sctp: [Deprecated]: syz-executor.3 (pid 12434) Use of int in max_burst socket option deprecated. [ 308.616729][T12434] Use struct sctp_assoc_value instead [ 308.901935][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.914369][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.927315][ T12] bond0 (unregistering): Released all slaves [ 308.949334][T12419] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.1'. [ 309.195594][T12441] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 309.228896][T12441] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 309.568327][T12451] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 309.594491][T12454] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 309.607671][T12455] openvswitch: netlink: Message has 4 unknown bytes. [ 309.868687][T12314] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 310.014458][ T12] hsr_slave_0: left promiscuous mode [ 310.037428][ T12] hsr_slave_1: left promiscuous mode [ 310.046108][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.053648][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.075806][T12470] sctp: [Deprecated]: syz-executor.1 (pid 12470) Use of int in max_burst socket option deprecated. [ 310.075806][T12470] Use struct sctp_assoc_value instead [ 310.108552][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.117345][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.198201][ T12] veth1_macvtap: left promiscuous mode [ 310.203915][ T12] veth0_macvtap: left promiscuous mode [ 310.218864][T12474] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.231203][ T12] veth1_vlan: left promiscuous mode [ 310.237039][ T12] veth0_vlan: left promiscuous mode [ 310.470043][ T12] pim6reg (unregistering): left allmulticast mode [ 310.536175][ T53] Bluetooth: hci4: command tx timeout [ 310.990545][ T12] team0 (unregistering): Port device team_slave_1 removed [ 311.051121][ T12] team0 (unregistering): Port device team_slave_0 removed [ 311.622868][T12314] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 311.654564][T12314] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 311.696138][T12314] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 311.750063][T12476] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 312.300488][T12314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 312.387221][T12314] 8021q: adding VLAN 0 to HW filter on device team0 [ 312.419494][T11633] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.426788][T11633] bridge0: port 1(bridge_slave_0) entered forwarding state [ 312.596784][T11611] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.604098][T11611] bridge0: port 2(bridge_slave_1) entered forwarding state [ 312.618512][ T53] Bluetooth: hci4: command tx timeout [ 312.658567][T12511] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 312.841532][T12314] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.162669][T12521] sctp: [Deprecated]: syz-executor.3 (pid 12521) Use of int in max_burst socket option deprecated. [ 313.162669][T12521] Use struct sctp_assoc_value instead [ 313.317389][T12314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 313.478354][T12531] __nla_validate_parse: 3 callbacks suppressed [ 313.478377][T12531] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.514176][T12531] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.984106][T12560] sctp: [Deprecated]: syz-executor.2 (pid 12560) Use of int in max_burst socket option deprecated. [ 313.984106][T12560] Use struct sctp_assoc_value instead [ 314.049652][T12563] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 314.080903][T12563] sctp: [Deprecated]: syz-executor.0 (pid 12563) Use of int in max_burst socket option deprecated. [ 314.080903][T12563] Use struct sctp_assoc_value instead [ 314.140164][T12314] veth0_vlan: entered promiscuous mode [ 314.177760][T12563] netlink: 209572 bytes leftover after parsing attributes in process `syz-executor.0'. [ 314.179942][T12314] veth1_vlan: entered promiscuous mode [ 314.237549][T12566] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 314.293514][T12570] netlink: 596 bytes leftover after parsing attributes in process `syz-executor.3'. [ 314.356027][T12314] veth0_macvtap: entered promiscuous mode [ 314.416658][T12314] veth1_macvtap: entered promiscuous mode [ 314.452395][T12568] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 314.582285][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.605566][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.620650][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.645549][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.669739][T12579] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 314.674631][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.695204][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.708221][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.719558][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.730668][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.742090][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.754260][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 314.764930][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.779185][T12314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.805876][T12584] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 314.951719][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.965270][T12590] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 314.976028][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 314.986683][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 314.997867][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.008592][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.024209][T12592] sctp: [Deprecated]: syz-executor.0 (pid 12592) Use of int in max_burst socket option deprecated. [ 315.024209][T12592] Use struct sctp_assoc_value instead [ 315.025612][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.057285][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.069309][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.079827][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.090554][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.101370][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.112691][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.122842][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.134598][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.145541][T12314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 315.158245][T12593] netlink: 209572 bytes leftover after parsing attributes in process `syz-executor.0'. [ 315.168151][T12314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 315.185279][T12314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.229575][T12314] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.295506][T12314] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.304377][T12314] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.328355][T12314] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.495072][T12602] sctp: [Deprecated]: syz-executor.2 (pid 12602) Use of int in max_burst socket option deprecated. [ 315.495072][T12602] Use struct sctp_assoc_value instead [ 315.632738][T12605] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 315.715545][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.723552][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.772083][T12611] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 315.814663][T12611] sctp: [Deprecated]: syz-executor.3 (pid 12611) Use of int in max_burst socket option deprecated. [ 315.814663][T12611] Use struct sctp_assoc_value instead [ 315.836083][ T2846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.843966][ T2846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.940549][T12611] netlink: 209572 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.399841][T12645] dvmrp5: entered allmulticast mode [ 316.426767][T12645] dvmrp5: left allmulticast mode [ 316.681261][T12657] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.691014][T12657] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.700025][T12657] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.709365][T12657] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 316.744469][T12657] vxlan0: entered promiscuous mode [ 317.359463][T12684] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 317.380489][T12684] sctp: [Deprecated]: syz-executor.0 (pid 12684) Use of int in max_burst socket option deprecated. [ 317.380489][T12684] Use struct sctp_assoc_value instead [ 317.589080][ T1252] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.788419][T12699] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 317.801392][T12699] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 317.909921][T12703] dvmrp5: entered allmulticast mode [ 317.956203][T12699] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 317.965141][T12703] dvmrp5: left allmulticast mode [ 318.624521][T12729] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 318.646562][T12729] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 318.747863][T12735] __nla_validate_parse: 20 callbacks suppressed [ 318.747887][T12735] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.747898][T12736] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.757062][T12736] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.838375][T12739] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.864796][T12732] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 318.882950][T12732] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 318.914309][T12744] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 318.937550][T12745] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.0'. [ 319.239066][T12763] sctp: [Deprecated]: syz-executor.0 (pid 12763) Use of int in max_burst socket option deprecated. [ 319.239066][T12763] Use struct sctp_assoc_value instead [ 319.498545][T12776] lo: entered promiscuous mode [ 319.581276][T12776] tunl0: entered promiscuous mode [ 319.626350][T12776] gre0: entered promiscuous mode [ 319.700422][T12776] gretap0: entered promiscuous mode [ 319.740993][T12786] RDS: rds_bind could not find a transport for 2001::2, load rds_tcp or rds_rdma? [ 319.757561][T12776] erspan0: entered promiscuous mode [ 319.789421][T12786] Bluetooth: MGMT ver 1.22 [ 319.808072][T12776] ip_vti0: entered promiscuous mode [ 319.820066][T12789] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 319.866542][T12776] ip6_vti0: entered promiscuous mode [ 319.889960][T12791] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.916997][T12776] sit0: entered promiscuous mode [ 319.931881][T12794] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.976485][T12776] ip6tnl0: entered promiscuous mode [ 319.996959][T12776] ip6gre0: entered promiscuous mode [ 320.023841][T12776] syz_tun: entered promiscuous mode [ 320.048145][T12776] ip6gretap0: entered promiscuous mode [ 320.076504][T12776] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.105723][T12776] bridge0: entered promiscuous mode [ 320.136540][T12776] vcan0: entered promiscuous mode [ 320.174212][T12776] bond0: entered promiscuous mode [ 320.193806][T12776] bond_slave_0: entered promiscuous mode [ 320.207667][T12776] bond_slave_1: entered promiscuous mode [ 320.251093][T12776] team0: entered promiscuous mode [ 320.265691][T12776] team_slave_0: entered promiscuous mode [ 320.278714][T12776] team_slave_1: entered promiscuous mode [ 320.300777][T12776] dummy0: entered promiscuous mode [ 320.331615][T12776] nlmon0: entered promiscuous mode [ 320.350972][T12776] A link change request failed with some changes committed already. Interface nlmon0 may have been left with an inconsistent configuration, please check. [ 320.368521][T12779] bridge_slave_1: left allmulticast mode [ 320.391599][T12779] bridge_slave_1: left promiscuous mode [ 320.410637][T12779] bridge6: port 1(bridge_slave_1) entered disabled state [ 320.456884][T12780] veth1_to_bond: left allmulticast mode [ 320.463579][T12780] veth1_to_bond: left promiscuous mode [ 320.470734][T12780] bridge6: port 2(veth1_to_bond) entered disabled state [ 320.496327][T12789] pim6reg: entered allmulticast mode [ 320.508271][T12792] vxcan1: entered allmulticast mode [ 320.570661][T12809] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 320.596459][T12809] sctp: [Deprecated]: syz-executor.0 (pid 12809) Use of int in max_burst socket option deprecated. [ 320.596459][T12809] Use struct sctp_assoc_value instead [ 320.733451][T12816] sctp: [Deprecated]: syz-executor.1 (pid 12816) Use of int in max_burst socket option deprecated. [ 320.733451][T12816] Use struct sctp_assoc_value instead [ 321.138267][T12834] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 321.157205][T12834] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 321.368942][T12846] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 321.458628][T12851] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 321.510609][T12853] sctp: [Deprecated]: syz-executor.2 (pid 12853) Use of int in max_burst socket option deprecated. [ 321.510609][T12853] Use struct sctp_assoc_value instead [ 321.614416][T12857] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 321.641101][T12857] veth1_macvtap: left promiscuous mode [ 321.675896][T12857] team0: Device veth1_macvtap failed to register rx_handler [ 322.146875][T12868] syzkaller0: entered promiscuous mode [ 322.163935][T12868] syzkaller0: entered allmulticast mode [ 324.784013][ T5123] Bluetooth: hci2: command 0x0406 tx timeout [ 324.849588][T12911] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 324.961054][T12911] sctp: [Deprecated]: syz-executor.3 (pid 12911) Use of int in max_burst socket option deprecated. [ 324.961054][T12911] Use struct sctp_assoc_value instead [ 325.450226][T12937] __nla_validate_parse: 8 callbacks suppressed [ 325.450250][T12937] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.475703][T12937] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.899330][T12960] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 325.953833][T12964] sctp: [Deprecated]: syz-executor.4 (pid 12964) Use of int in max_burst socket option deprecated. [ 325.953833][T12964] Use struct sctp_assoc_value instead [ 326.066234][T12968] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 326.107917][T12968] vlan0: entered promiscuous mode [ 326.115940][T12968] macvlan0: entered promiscuous mode [ 326.125893][T12968] macvlan0: left promiscuous mode [ 326.172005][T12972] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 326.214972][T12973] bridge7: port 1(bridge_slave_1) entered blocking state [ 326.234293][T12973] bridge7: port 1(bridge_slave_1) entered disabled state [ 326.243058][T12973] bridge_slave_1: entered allmulticast mode [ 326.256066][T12973] bridge_slave_1: entered promiscuous mode [ 326.279388][T12975] bridge7: port 2(veth1_to_bond) entered blocking state [ 326.307887][T12975] bridge7: port 2(veth1_to_bond) entered disabled state [ 326.319628][T12975] veth1_to_bond: entered allmulticast mode [ 326.328949][T12975] veth1_to_bond: entered promiscuous mode [ 326.630585][T12989] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 326.671915][T12988] delete_channel: no stack [ 326.869429][T13008] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 326.906222][T13008] sctp: [Deprecated]: syz-executor.2 (pid 13008) Use of int in max_burst socket option deprecated. [ 326.906222][T13008] Use struct sctp_assoc_value instead [ 327.198159][T13022] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 327.243564][T13022] bridge_slave_1: left allmulticast mode [ 327.268791][T13022] bridge_slave_1: left promiscuous mode [ 327.276294][T13022] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.307613][T13022] bridge1: port 1(bridge_slave_1) entered blocking state [ 327.314868][T13022] bridge1: port 1(bridge_slave_1) entered disabled state [ 327.346391][T13022] bridge_slave_1: entered allmulticast mode [ 327.363006][T13022] bridge_slave_1: entered promiscuous mode [ 327.377792][T13022] bridge1: port 1(bridge_slave_1) entered blocking state [ 327.385012][T13022] bridge1: port 1(bridge_slave_1) entered forwarding state [ 327.435787][T13028] bridge1: port 2(veth1_to_bond) entered blocking state [ 327.443313][T13035] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 327.446224][T13028] bridge1: port 2(veth1_to_bond) entered disabled state [ 327.476442][T13028] veth1_to_bond: entered allmulticast mode [ 327.507600][T13028] veth1_to_bond: entered promiscuous mode [ 327.528883][T13028] bridge1: port 2(veth1_to_bond) entered blocking state [ 327.536125][T13028] bridge1: port 2(veth1_to_bond) entered forwarding state [ 327.613312][T13039] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 328.074843][T13065] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 328.098012][T13064] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 328.112710][T13069] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 328.126159][T13070] sctp: [Deprecated]: syz-executor.3 (pid 13070) Use of int in max_burst socket option deprecated. [ 328.126159][T13070] Use struct sctp_assoc_value instead [ 328.197503][T13064] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 328.219471][T13069] bridge_slave_1: left allmulticast mode [ 328.225289][T13069] bridge_slave_1: left promiscuous mode [ 328.253673][T13069] bridge1: port 1(bridge_slave_1) entered disabled state [ 328.302239][T13069] bridge2: port 1(bridge_slave_1) entered blocking state [ 328.326001][T13069] bridge2: port 1(bridge_slave_1) entered disabled state [ 328.387469][T13069] bridge_slave_1: entered allmulticast mode [ 328.426638][T13069] bridge_slave_1: entered promiscuous mode [ 328.464051][T13069] bridge2: port 1(bridge_slave_1) entered blocking state [ 328.471398][T13069] bridge2: port 1(bridge_slave_1) entered forwarding state [ 328.553027][T13075] veth1_to_bond: left allmulticast mode [ 328.599593][T13075] veth1_to_bond: left promiscuous mode [ 328.636700][T13075] bridge1: port 2(veth1_to_bond) entered disabled state [ 328.676681][T13075] bridge2: port 2(veth1_to_bond) entered blocking state [ 328.692886][T13075] bridge2: port 2(veth1_to_bond) entered disabled state [ 328.709722][T13096] sctp: [Deprecated]: syz-executor.1 (pid 13096) Use of int in max_burst socket option deprecated. [ 328.709722][T13096] Use struct sctp_assoc_value instead [ 328.713349][T13075] veth1_to_bond: entered allmulticast mode [ 328.743742][T13075] veth1_to_bond: entered promiscuous mode [ 328.767061][T13075] bridge2: port 2(veth1_to_bond) entered blocking state [ 328.774229][T13075] bridge2: port 2(veth1_to_bond) entered forwarding state [ 329.411432][T13125] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 329.465599][T13125] sctp: [Deprecated]: syz-executor.4 (pid 13125) Use of int in max_burst socket option deprecated. [ 329.465599][T13125] Use struct sctp_assoc_value instead [ 329.518742][T13129] bridge_slave_1: left allmulticast mode [ 329.524599][T13129] bridge_slave_1: left promiscuous mode [ 329.545935][T13129] bridge7: port 1(bridge_slave_1) entered disabled state [ 329.562727][T13131] sctp: [Deprecated]: syz-executor.0 (pid 13131) Use of int in max_burst socket option deprecated. [ 329.562727][T13131] Use struct sctp_assoc_value instead [ 329.606880][T13129] bridge8: port 1(bridge_slave_1) entered blocking state [ 329.626543][T13129] bridge8: port 1(bridge_slave_1) entered disabled state [ 329.633883][T13129] bridge_slave_1: entered allmulticast mode [ 329.664418][T13129] bridge_slave_1: entered promiscuous mode [ 329.690047][T13133] veth1_to_bond: left allmulticast mode [ 329.698217][T13133] veth1_to_bond: left promiscuous mode [ 329.704116][T13133] bridge7: port 2(veth1_to_bond) entered disabled state [ 329.719946][T13133] bridge8: port 2(veth1_to_bond) entered blocking state [ 329.728511][T13133] bridge8: port 2(veth1_to_bond) entered disabled state [ 329.757765][T13133] veth1_to_bond: entered allmulticast mode [ 329.790584][T13133] veth1_to_bond: entered promiscuous mode [ 329.898880][ T5123] Bluetooth: hci1: command 0x0406 tx timeout [ 329.961880][ T29] audit: type=1804 audit(1719020670.007:54): pid=13152 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3549826805/syzkaller.lGp44C/258/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 330.278956][T13173] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 330.306351][T13173] sctp: [Deprecated]: syz-executor.0 (pid 13173) Use of int in max_burst socket option deprecated. [ 330.306351][T13173] Use struct sctp_assoc_value instead [ 330.334809][T13174] sctp: [Deprecated]: syz-executor.4 (pid 13174) Use of int in max_burst socket option deprecated. [ 330.334809][T13174] Use struct sctp_assoc_value instead [ 330.512051][T13180] __nla_validate_parse: 5 callbacks suppressed [ 330.512074][T13180] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.569964][T13180] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 330.756977][T13195] bridge_slave_1: left allmulticast mode [ 330.778525][T13195] bridge_slave_1: left promiscuous mode [ 330.807925][T13195] bridge6: port 1(bridge_slave_1) entered disabled state [ 330.900445][T13188] veth1_to_bond: left allmulticast mode [ 330.922497][T13188] veth1_to_bond: left promiscuous mode [ 330.940459][T13188] bridge6: port 2(veth1_to_bond) entered disabled state [ 331.104738][T13207] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 331.137336][T13207] sctp: [Deprecated]: syz-executor.2 (pid 13207) Use of int in max_burst socket option deprecated. [ 331.137336][T13207] Use struct sctp_assoc_value instead [ 331.216245][T13216] sctp: [Deprecated]: syz-executor.1 (pid 13216) Use of int in max_burst socket option deprecated. [ 331.216245][T13216] Use struct sctp_assoc_value instead [ 331.427270][T13220] bridge0: entered promiscuous mode [ 331.443683][T13220] bridge0: entered allmulticast mode [ 331.503491][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 331.583670][T13227] IPVS: sync thread started: state = BACKUP, mcast_ifn = dummy0, syncid = 0, id = 0 [ 331.601028][T13224] IPVS: stopping backup sync thread 13227 ... [ 331.926637][T13235] bridge_slave_1: left allmulticast mode [ 331.949241][T13235] bridge_slave_1: left promiscuous mode [ 331.955126][T13235] bridge2: port 1(bridge_slave_1) entered disabled state [ 332.019756][T13240] veth1_to_bond: left allmulticast mode [ 332.043347][T13240] veth1_to_bond: left promiscuous mode [ 332.058365][T13240] bridge2: port 2(veth1_to_bond) entered disabled state [ 332.098804][T13248] x_tables: ip_tables: socket match: used from hooks FORWARD, but only valid from PREROUTING/INPUT [ 332.117866][T13244] IPVS: Scheduler module ip_vs_sip not found [ 332.347403][T13251] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 332.383245][T13251] sctp: [Deprecated]: syz-executor.0 (pid 13251) Use of int in max_burst socket option deprecated. [ 332.383245][T13251] Use struct sctp_assoc_value instead [ 332.455257][T13257] sctp: [Deprecated]: syz-executor.4 (pid 13257) Use of int in max_burst socket option deprecated. [ 332.455257][T13257] Use struct sctp_assoc_value instead [ 332.702266][T13264] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.2'. [ 332.762509][ T29] audit: type=1804 audit(1719020672.807:55): pid=13266 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3631516384/syzkaller.pBpAvf/269/cgroup.controllers" dev="sda1" ino=1935 res=1 errno=0 [ 334.003398][T13303] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 334.050727][T13305] sctp: [Deprecated]: syz-executor.1 (pid 13305) Use of int in max_burst socket option deprecated. [ 334.050727][T13305] Use struct sctp_assoc_value instead [ 334.107322][T13306] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 334.838587][T13331] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 335.344908][T13348] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 335.391498][T13348] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 335.726356][T13355] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 335.777732][T13356] sctp: [Deprecated]: syz-executor.1 (pid 13356) Use of int in max_burst socket option deprecated. [ 335.777732][T13356] Use struct sctp_assoc_value instead [ 336.454734][T13378] sctp: [Deprecated]: syz-executor.4 (pid 13378) Use of int in max_burst socket option deprecated. [ 336.454734][T13378] Use struct sctp_assoc_value instead [ 337.177058][T13390] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 337.312467][T13393] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 337.361309][T13393] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.498666][T13433] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 338.543616][T13433] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 339.577105][T13453] sctp: [Deprecated]: syz-executor.4 (pid 13453) Use of int in max_burst socket option deprecated. [ 339.577105][T13453] Use struct sctp_assoc_value instead [ 339.687476][T13456] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 340.375199][T13467] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.484379][T13473] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 340.532882][T13467] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.710709][T13477] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 340.724439][T13477] netlink: 176 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.908532][T13489] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 341.408462][T13510] netlink: 'syz-executor.3': attribute type 23 has an invalid length. [ 341.497951][T13520] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 341.574136][T13520] bond3: entered promiscuous mode [ 341.705069][T13520] 8021q: adding VLAN 0 to HW filter on device bond4 [ 341.717987][T13520] bond3: (slave bond4): Enslaving as an active interface with a down link [ 341.808318][T13525] bond3 (unregistering): (slave bond4): Releasing active interface [ 341.849410][T13525] bond3 (unregistering): Released all slaves [ 342.134860][T13535] siw: device registration error -23 [ 342.758060][T13575] __nla_validate_parse: 3 callbacks suppressed [ 342.758083][T13575] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 343.228188][T13589] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 343.258737][T13589] netlink: 'syz-executor.2': attribute type 39 has an invalid length. [ 343.577592][T13603] Unsupported ieee802154 address type: 0 [ 344.671848][T13641] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 344.766156][T13641] bond7: entered promiscuous mode [ 344.889283][T13645] 8021q: adding VLAN 0 to HW filter on device bond8 [ 344.936900][T13645] bond7: (slave bond8): Enslaving as an active interface with a down link [ 344.976685][T13641] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 345.028469][T13641] bond7 (unregistering): (slave bond8): Releasing active interface [ 345.062373][T13641] bond7 (unregistering): Released all slaves [ 345.715550][T13678] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 345.768614][ T29] audit: type=1800 audit(1719020685.827:56): pid=13678 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 346.212313][T13699] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 346.259289][T13699] bond1: entered promiscuous mode [ 346.322316][T13699] 8021q: adding VLAN 0 to HW filter on device bond2 [ 346.332753][T13699] bond1: (slave bond2): Enslaving as an active interface with a down link [ 346.361266][T13705] vlan4: entered promiscuous mode [ 346.387651][T13705] vlan4: entered allmulticast mode [ 346.410498][T13699] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 346.425091][T13699] bond1 (unregistering): (slave bond2): Releasing active interface [ 346.453123][T13699] bond1 (unregistering): Released all slaves [ 347.287191][T13743] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 347.331843][T13743] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 347.986276][T13763] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 348.317055][T13776] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 348.376373][T13776] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 348.381672][T13781] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 348.514950][T13776] : entered promiscuous mode [ 349.008250][T13805] syz-executor.4[13805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.008540][T13805] syz-executor.4[13805] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 349.348415][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 350.776428][T13871] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.166320][T13881] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 351.880280][T13917] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 351.901753][T13917] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 352.242974][T13923] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 352.650268][T13950] openvswitch: : Dropping previously announced user features [ 352.929252][T13963] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 353.093060][T13970] trusted_key: syz-executor.3 sent an empty control message without MSG_MORE. [ 353.449256][T13985] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.917875][T13999] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 353.938297][T13999] openvswitch: netlink: IP tunnel attribute has 3036 unknown bytes. [ 354.067116][T14008] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 354.139030][T13999] xt_CT: No such helper "snmp_trap" [ 354.147766][T14014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.204111][T14015] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.300542][T14015] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.399765][T14015] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.529968][T14015] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.702203][T14020] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 354.782342][T14015] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.848182][T14015] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.884220][T14049] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.898153][T14049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 354.987464][T14015] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.059209][T14015] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.153972][T14063] x_tables: duplicate underflow at hook 2 [ 356.216999][T14118] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 356.240153][T14118] openvswitch: netlink: Message has 4 unknown bytes. [ 356.451891][T14128] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 356.524996][T14128] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 356.596673][T14128] syz-executor.4 (14128) used greatest stack depth: 18480 bytes left [ 356.818862][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 356.849171][T14145] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 356.880994][T14149] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 356.999407][T14154] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 357.528613][T14184] IPVS: set_ctl: invalid protocol: 135 172.20.20.170:20001 [ 358.022432][T14208] geneve1: left allmulticast mode [ 358.035673][T14208] geneve1: left promiscuous mode [ 358.050342][T14208] bridge0: port 2(geneve1) entered disabled state [ 358.095124][T14208] bridge_slave_0: left allmulticast mode [ 358.110079][T14208] bridge_slave_0: left promiscuous mode [ 358.148145][T14208] bridge0: port 1(bridge_slave_0) entered disabled state [ 358.599040][T14240] __nla_validate_parse: 7 callbacks suppressed [ 358.599062][T14240] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 358.944755][T14253] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 359.049252][T14261] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 359.090995][T14261] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 359.308110][T14265] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 359.402338][T14265] team0: Device veth1_macvtap failed to register rx_handler [ 360.026241][T14303] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 360.055908][T14303] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 360.067692][T14304] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 360.158985][T14303] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 360.349469][T14312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 360.445934][T14321] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 360.486184][T14321] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 361.096079][ T5123] Bluetooth: hci0: command 0x0406 tx timeout [ 361.102732][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 361.505633][T14351] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 361.622243][T14353] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 361.666870][T14356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 361.844534][T14366] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 361.855974][T14366] sctp: [Deprecated]: syz-executor.2 (pid 14366) Use of int in max_burst socket option deprecated. [ 361.855974][T14366] Use struct sctp_assoc_value instead [ 362.891252][ T29] audit: type=1804 audit(1719020702.947:57): pid=14392 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2732791048/syzkaller.tFLcwZ/346/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 362.905799][ T5219] IPVS: starting estimator thread 0... [ 363.016101][T14393] IPVS: using max 15 ests per chain, 36000 per kthread [ 363.201542][T14397] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 363.238679][T14397] sctp: [Deprecated]: syz-executor.0 (pid 14397) Use of int in max_burst socket option deprecated. [ 363.238679][T14397] Use struct sctp_assoc_value instead [ 363.947795][T14421] __nla_validate_parse: 7 callbacks suppressed [ 363.947821][T14421] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 365.040009][T14439] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.138614][T14439] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.174625][T14441] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.353521][ T29] audit: type=1804 audit(1719020705.407:58): pid=14445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2744794637/syzkaller.M7MCyZ/389/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 365.449457][T14449] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 365.975843][ T53] Bluetooth: hci0: command 0x0406 tx timeout [ 366.097231][T14471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 366.295735][ T51] wlan0: Trigger new scan to find an IBSS to join [ 366.539882][T14481] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 366.615266][T14485] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 366.669372][T14485] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 367.076091][T14493] netlink: 6204 bytes leftover after parsing attributes in process `syz-executor.3'. [ 367.877416][T14522] x_tables: duplicate underflow at hook 1 [ 368.001948][T14525] x_tables: duplicate underflow at hook 3 [ 368.534830][T14541] sock: sock_timestamping_bind_phc: sock not bind to device [ 369.341362][ T12] wlan0: Trigger new scan to find an IBSS to join [ 369.369151][T14579] x_tables: duplicate underflow at hook 3 [ 369.493033][T14595] syz-executor.1[14595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.493345][T14595] syz-executor.1[14595] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 369.521620][T14597] syz_tun: entered promiscuous mode [ 369.572421][T14597] team0: entered promiscuous mode [ 369.582760][T14597] team_slave_0: entered promiscuous mode [ 369.590486][T14597] team_slave_1: entered promiscuous mode [ 369.600263][T14597] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 369.622332][T14597] Cannot create hsr debugfs directory [ 370.093539][T14624] __nla_validate_parse: 3 callbacks suppressed [ 370.093560][T14624] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 370.269276][T14630] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 370.371940][T14635] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 370.454182][T14639] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 370.956952][T14660] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 370.970366][T14660] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 371.133865][T14666] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 371.164086][T14666] sctp: [Deprecated]: syz-executor.4 (pid 14666) Use of int in max_burst socket option deprecated. [ 371.164086][T14666] Use struct sctp_assoc_value instead [ 371.194103][T14670] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 371.648733][T14684] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 371.705128][T14684] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 372.298770][ T2846] wlan0: Creating new IBSS network, BSSID 02:c4:e9:d2:ff:95 [ 372.328374][T14696] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 372.377633][ C0] ------------[ cut here ]------------ [ 372.383392][ C0] no supported rates for sta (null) (0xffffffff, band 0) in rate_mask 0xfff with flags 0x40 [ 372.394587][ C0] WARNING: CPU: 0 PID: 14697 at net/mac80211/rate.c:385 __rate_control_send_low+0x659/0x890 [ 372.404887][ C0] Modules linked in: [ 372.408996][ C0] CPU: 0 PID: 14697 Comm: syz-executor.1 Not tainted 6.10.0-rc4-syzkaller-00157-g8406b56a91ec #0 [ 372.419692][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 372.429899][ C0] RIP: 0010:__rate_control_send_low+0x659/0x890 [ 372.436256][ C0] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 a0 97 e1 8c 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 b8 f4 60 f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db [ 372.456227][ C0] RSP: 0018:ffffc90000007760 EFLAGS: 00010246 [ 372.462441][ C0] RAX: 8ad9f46a99f6f800 RBX: 000000000000000c RCX: ffff888075d10000 [ 372.470519][ C0] RDX: 0000000000000101 RSI: 0000000000000000 RDI: 0000000000000000 [ 372.478590][ C0] RBP: ffff88805916cca8 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 372.486650][ C0] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 0000000000000800 [ 372.494685][ C0] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 372.502767][ C0] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 372.511807][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 372.518662][T14705] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. 2024/06/22 01:45:12 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 372.522604][T14705] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 372.528092][ C0] CR2: 0000001b3272f000 CR3: 0000000067b12000 CR4: 00000000003506f0 [ 372.528147][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 372.528163][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 372.528179][ C0] Call Trace: [ 372.528191][ C0] [ 372.528204][ C0] ? __warn+0x163/0x4e0 [ 372.572207][ C0] ? __rate_control_send_low+0x659/0x890 [ 372.577961][ C0] ? report_bug+0x2b3/0x500 [ 372.582617][ C0] ? __rate_control_send_low+0x659/0x890 [ 372.588357][ C0] ? handle_bug+0x3e/0x70 [ 372.592780][ C0] ? exc_invalid_op+0x1a/0x50 [ 372.597566][ C0] ? asm_exc_invalid_op+0x1a/0x20 [ 372.602710][ C0] ? __warn_printk+0x292/0x360 [ 372.607757][ C0] ? __rate_control_send_low+0x659/0x890 [ 372.613465][ C0] rate_control_send_low+0x1a8/0x770 [ 372.618943][ C0] rate_control_get_rate+0x20e/0x5e0 [ 372.624299][ C0] ieee80211_beacon_get_finish+0x49e/0x870 [ 372.630216][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 372.636655][ C0] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 372.642308][ C0] ? __ieee80211_beacon_get+0xa71/0x15c0 [ 372.648046][ C0] __ieee80211_beacon_get+0xf7e/0x15c0 [ 372.653568][ C0] ? __ieee80211_beacon_get+0x36/0x15c0 [ 372.659244][ C0] ieee80211_beacon_get_tim+0xb4/0x320 [ 372.664774][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 372.670974][ C0] mac80211_hwsim_beacon_tx+0x39d/0x850 [ 372.676778][ C0] __iterate_interfaces+0x223/0x4c0 [ 372.682040][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 372.688298][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 372.694796][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170 [ 372.702094][ C0] ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 [ 372.709415][ C0] mac80211_hwsim_beacon+0xd4/0x1f0 [ 372.714688][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 372.720607][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 372.726018][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 372.732525][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 372.738393][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 372.744531][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 372.749941][ C0] handle_softirqs+0x2c4/0x970 [ 372.754898][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 372.759942][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 372.765297][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 372.770626][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 372.775397][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 372.780651][ C0] irq_exit_rcu+0x9/0x30 [ 372.784937][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 372.790671][ C0] [ 372.793632][ C0] [ 372.796646][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 372.802802][ C0] RIP: 0010:lock_release+0x630/0x9f0 [ 372.808305][ C0] Code: 3c 3b 00 74 08 4c 89 f7 e8 1d 41 89 00 f6 84 24 91 00 00 00 02 75 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25 [ 372.828191][ C0] RSP: 0018:ffffc9000c3e71c0 EFLAGS: 00000206 [ 372.834314][ C0] RAX: 0000000000000001 RBX: 1ffff9200187ce4a RCX: ffffc9000c3e7203 [ 372.842383][ C0] RDX: 0000000000000003 RSI: ffffffff8bcacd00 RDI: ffffffff8c1fe640 [ 372.850466][ C0] RBP: ffffc9000c3e7300 R08: ffffffff8fad472f R09: 1ffffffff1f5a8e5 [ 372.858536][ C0] R10: dffffc0000000000 R11: fffffbfff1f5a8e6 R12: 1ffff9200187ce44 [ 372.866601][ C0] R13: 0000000000000246 R14: ffffc9000c3e7250 R15: dffffc0000000000 [ 372.874766][ C0] ? page_ext_put+0x97/0xc0 [ 372.879499][ C0] ? __pte_offset_map_lock+0x273/0x300 [ 372.885015][ C0] ? __pfx_lock_release+0x10/0x10 [ 372.890151][ C0] ? page_ext_get+0x20/0x2a0 [ 372.894799][ C0] ? page_ext_get+0x1d6/0x2a0 [ 372.899667][ C0] page_ext_put+0xa3/0xc0 [ 372.904053][ C0] unmap_page_range+0x2cd0/0x40f0 [ 372.909514][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 372.914956][ C0] ? mas_next_slot+0xeab/0xf90 [ 372.919866][ C0] ? uprobe_munmap+0x183/0x410 [ 372.924738][ C0] ? unmap_single_vma+0x1bd/0x2b0 [ 372.929893][ C0] unmap_vmas+0x3cc/0x5f0 [ 372.934341][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 372.939405][ C0] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 372.944970][ C0] exit_mmap+0x264/0xc80 [ 372.949326][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 372.954143][ C0] ? __asan_memset+0x23/0x50 [ 372.959054][ C0] ? uprobe_clear_state+0x277/0x290 [ 372.964304][ C0] ? mm_update_next_owner+0x53c/0x660 [ 372.969802][ C0] __mmput+0x115/0x3c0 [ 372.974030][ C0] exit_mm+0x220/0x310 [ 372.978222][ C0] ? __pfx_exit_mm+0x10/0x10 [ 372.982987][ C0] ? taskstats_exit+0x348/0xa70 [ 372.987996][ C0] ? tty_audit_exit+0x155/0x200 [ 372.993044][ C0] do_exit+0x9aa/0x27e0 [ 372.997310][ C0] ? __pfx_do_exit+0x10/0x10 [ 373.001969][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 373.007539][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 373.013588][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 373.020032][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 373.025270][ C0] do_group_exit+0x207/0x2c0 [ 373.029961][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.035219][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 373.040611][ C0] get_signal+0x16a1/0x1740 [ 373.045183][ C0] ? __pfx_get_signal+0x10/0x10 [ 373.050169][ C0] arch_do_signal_or_restart+0x96/0x860 [ 373.055854][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 373.062052][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 373.068347][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 373.074135][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 373.079774][ C0] do_syscall_64+0x100/0x230 [ 373.084414][ C0] ? clear_bhb_loop+0x35/0x90 [ 373.089278][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.095266][ C0] RIP: 0033:0x7f4778c7d0a9 [ 373.099772][ C0] Code: Unable to access opcode bytes at 0x7f4778c7d07f. [ 373.106898][ C0] RSP: 002b:00007f4779a0a178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 373.115400][ C0] RAX: fffffffffffffe00 RBX: 00007f4778db4058 RCX: 00007f4778c7d0a9 [ 373.123842][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4778db4058 [ 373.132020][ C0] RBP: 00007f4778db4050 R08: 00007f4779a0a6c0 R09: 00007f4779a0a6c0 [ 373.140195][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4778db405c [ 373.148276][ C0] R13: 000000000000000b R14: 00007ffd2a05dcb0 R15: 00007ffd2a05dd98 [ 373.156519][ C0] [ 373.159582][ C0] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 373.166904][ C0] CPU: 0 PID: 14697 Comm: syz-executor.1 Not tainted 6.10.0-rc4-syzkaller-00157-g8406b56a91ec #0 [ 373.177491][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 373.187625][ C0] Call Trace: [ 373.190941][ C0] [ 373.193818][ C0] dump_stack_lvl+0x241/0x360 [ 373.198591][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 373.203839][ C0] ? __pfx__printk+0x10/0x10 [ 373.208504][ C0] ? vscnprintf+0x5d/0x90 [ 373.212901][ C0] panic+0x349/0x860 [ 373.216950][ C0] ? __warn+0x172/0x4e0 [ 373.221295][ C0] ? __pfx_panic+0x10/0x10 [ 373.225814][ C0] __warn+0x346/0x4e0 [ 373.229893][ C0] ? __rate_control_send_low+0x659/0x890 [ 373.235679][ C0] report_bug+0x2b3/0x500 [ 373.240174][ C0] ? __rate_control_send_low+0x659/0x890 [ 373.245879][ C0] handle_bug+0x3e/0x70 [ 373.250168][ C0] exc_invalid_op+0x1a/0x50 [ 373.254751][ C0] asm_exc_invalid_op+0x1a/0x20 [ 373.259696][ C0] RIP: 0010:__rate_control_send_low+0x659/0x890 [ 373.266089][ C0] Code: 8b 14 24 0f 85 de 01 00 00 8b 0a 48 c7 c7 a0 97 e1 8c 48 8b 74 24 10 44 89 f2 44 8b 44 24 1c 44 8b 4c 24 0c e8 b8 f4 60 f6 90 <0f> 0b 90 90 e9 71 fe ff ff 89 d9 80 e1 07 80 c1 03 38 c1 0f 8c db [ 373.285918][ C0] RSP: 0018:ffffc90000007760 EFLAGS: 00010246 [ 373.292035][ C0] RAX: 8ad9f46a99f6f800 RBX: 000000000000000c RCX: ffff888075d10000 [ 373.300131][ C0] RDX: 0000000000000101 RSI: 0000000000000000 RDI: 0000000000000000 [ 373.308127][ C0] RBP: ffff88805916cca8 R08: ffffffff81585822 R09: fffffbfff1c39994 [ 373.316140][ C0] R10: dffffc0000000000 R11: fffffbfff1c39994 R12: 0000000000000800 [ 373.324139][ C0] R13: 000000000000000c R14: 00000000ffffffff R15: dffffc0000000000 [ 373.332147][ C0] ? __warn_printk+0x292/0x360 [ 373.337004][ C0] rate_control_send_low+0x1a8/0x770 [ 373.342351][ C0] rate_control_get_rate+0x20e/0x5e0 [ 373.347701][ C0] ieee80211_beacon_get_finish+0x49e/0x870 [ 373.353571][ C0] ? __pfx_ieee80211_beacon_get_finish+0x10/0x10 [ 373.359983][ C0] ? __pfx___netdev_alloc_skb+0x10/0x10 [ 373.365561][ C0] ? __ieee80211_beacon_get+0xa71/0x15c0 [ 373.371440][ C0] __ieee80211_beacon_get+0xf7e/0x15c0 [ 373.376951][ C0] ? __ieee80211_beacon_get+0x36/0x15c0 [ 373.382629][ C0] ieee80211_beacon_get_tim+0xb4/0x320 [ 373.388144][ C0] ? __pfx_ieee80211_beacon_get_tim+0x10/0x10 [ 373.394261][ C0] mac80211_hwsim_beacon_tx+0x39d/0x850 [ 373.399849][ C0] __iterate_interfaces+0x223/0x4c0 [ 373.405073][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 373.411272][ C0] ? __pfx_mac80211_hwsim_beacon_tx+0x10/0x10 [ 373.417382][ C0] ? ieee80211_iterate_active_interfaces_atomic+0x2a/0x170 [ 373.424798][ C0] ieee80211_iterate_active_interfaces_atomic+0xd8/0x170 [ 373.431857][ C0] mac80211_hwsim_beacon+0xd4/0x1f0 [ 373.437106][ C0] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 373.442952][ C0] __hrtimer_run_queues+0x59b/0xd50 [ 373.448190][ C0] ? ktime_get_update_offsets_now+0x3c/0x250 [ 373.454206][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 373.459959][ C0] ? ktime_get_update_offsets_now+0x22d/0x250 [ 373.466045][ C0] hrtimer_run_softirq+0x19a/0x2c0 [ 373.471183][ C0] handle_softirqs+0x2c4/0x970 [ 373.475980][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 373.480755][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 373.486068][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 373.491289][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 373.495886][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 373.501187][ C0] irq_exit_rcu+0x9/0x30 [ 373.505444][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 373.511203][ C0] [ 373.514138][ C0] [ 373.517075][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 373.523075][ C0] RIP: 0010:lock_release+0x630/0x9f0 [ 373.528474][ C0] Code: 3c 3b 00 74 08 4c 89 f7 e8 1d 41 89 00 f6 84 24 91 00 00 00 02 75 77 41 f7 c5 00 02 00 00 74 01 fb 48 c7 44 24 60 0e 36 e0 45 <4b> c7 04 27 00 00 00 00 4b c7 44 27 08 00 00 00 00 65 48 8b 04 25 [ 373.548192][ C0] RSP: 0018:ffffc9000c3e71c0 EFLAGS: 00000206 [ 373.554276][ C0] RAX: 0000000000000001 RBX: 1ffff9200187ce4a RCX: ffffc9000c3e7203 [ 373.562262][ C0] RDX: 0000000000000003 RSI: ffffffff8bcacd00 RDI: ffffffff8c1fe640 [ 373.570336][ C0] RBP: ffffc9000c3e7300 R08: ffffffff8fad472f R09: 1ffffffff1f5a8e5 [ 373.578334][ C0] R10: dffffc0000000000 R11: fffffbfff1f5a8e6 R12: 1ffff9200187ce44 [ 373.586319][ C0] R13: 0000000000000246 R14: ffffc9000c3e7250 R15: dffffc0000000000 [ 373.594521][ C0] ? page_ext_put+0x97/0xc0 [ 373.599155][ C0] ? __pte_offset_map_lock+0x273/0x300 [ 373.604647][ C0] ? __pfx_lock_release+0x10/0x10 [ 373.609730][ C0] ? page_ext_get+0x20/0x2a0 [ 373.614444][ C0] ? page_ext_get+0x1d6/0x2a0 [ 373.619248][ C0] page_ext_put+0xa3/0xc0 [ 373.623598][ C0] unmap_page_range+0x2cd0/0x40f0 [ 373.628704][ C0] ? __pfx_unmap_page_range+0x10/0x10 [ 373.634137][ C0] ? mas_next_slot+0xeab/0xf90 [ 373.638951][ C0] ? uprobe_munmap+0x183/0x410 [ 373.643758][ C0] ? unmap_single_vma+0x1bd/0x2b0 [ 373.648808][ C0] unmap_vmas+0x3cc/0x5f0 [ 373.653158][ C0] ? __pfx_unmap_vmas+0x10/0x10 [ 373.658057][ C0] ? tlb_gather_mmu_fullmm+0x160/0x210 [ 373.663562][ C0] exit_mmap+0x264/0xc80 [ 373.667845][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 373.672629][ C0] ? __asan_memset+0x23/0x50 [ 373.677253][ C0] ? uprobe_clear_state+0x277/0x290 [ 373.682483][ C0] ? mm_update_next_owner+0x53c/0x660 [ 373.687884][ C0] __mmput+0x115/0x3c0 [ 373.691966][ C0] exit_mm+0x220/0x310 [ 373.696054][ C0] ? __pfx_exit_mm+0x10/0x10 [ 373.700662][ C0] ? taskstats_exit+0x348/0xa70 [ 373.705528][ C0] ? tty_audit_exit+0x155/0x200 [ 373.710394][ C0] do_exit+0x9aa/0x27e0 [ 373.714584][ C0] ? __pfx_do_exit+0x10/0x10 [ 373.719192][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 373.724606][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 373.730603][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 373.736945][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 373.742103][ C0] do_group_exit+0x207/0x2c0 [ 373.746706][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 373.751949][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 373.757274][ C0] get_signal+0x16a1/0x1740 [ 373.761816][ C0] ? __pfx_get_signal+0x10/0x10 [ 373.766702][ C0] arch_do_signal_or_restart+0x96/0x860 [ 373.772265][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 373.778435][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 373.784438][ C0] ? syscall_exit_to_user_mode+0xa3/0x370 [ 373.790275][ C0] syscall_exit_to_user_mode+0xc9/0x370 [ 373.795915][ C0] do_syscall_64+0x100/0x230 [ 373.800568][ C0] ? clear_bhb_loop+0x35/0x90 [ 373.805290][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.811214][ C0] RIP: 0033:0x7f4778c7d0a9 [ 373.815738][ C0] Code: Unable to access opcode bytes at 0x7f4778c7d07f. [ 373.822782][ C0] RSP: 002b:00007f4779a0a178 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 373.831213][ C0] RAX: fffffffffffffe00 RBX: 00007f4778db4058 RCX: 00007f4778c7d0a9 [ 373.839198][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f4778db4058 [ 373.847190][ C0] RBP: 00007f4778db4050 R08: 00007f4779a0a6c0 R09: 00007f4779a0a6c0 [ 373.855265][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007f4778db405c [ 373.863246][ C0] R13: 000000000000000b R14: 00007ffd2a05dcb0 R15: 00007ffd2a05dd98 [ 373.871245][ C0] [ 373.874518][ C0] Kernel Offset: disabled [ 373.878856][ C0] Rebooting in 86400 seconds..