last executing test programs: 8.444098552s ago: executing program 4 (id=5591): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x11, &(0x7f0000000100)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x2c}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@newqdisc={0xcac, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0xc80, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x0, 0x0, 0x0, 0x1000, 0x0, 0x8}, {0x25, 0x1, 0x7, 0x6, 0x8, 0xffffffff}, 0xe, 0x3, 0x19d}}, @TCA_TBF_RTAB={0x404, 0x2, [0xbe, 0x4000, 0x1, 0x0, 0x0, 0x6, 0x7, 0x1, 0x400, 0xec, 0x8, 0x23d2, 0x7, 0x1, 0x7fffffff, 0x8, 0x1be, 0x4, 0x1, 0x6, 0xfffffffd, 0x401, 0x6, 0x0, 0x1e31, 0x7fff, 0x7ff, 0x1f, 0x2, 0x2, 0x80000000, 0x74, 0x0, 0x80000000, 0x1f, 0x9, 0x1, 0x5, 0x2, 0x2, 0x5, 0x2, 0x7c79, 0x9, 0x66a, 0x1, 0x81, 0xe3, 0x0, 0x7, 0x7ff, 0x9, 0x6, 0x8, 0x4, 0x3, 0x200, 0x3, 0x7fff, 0x5, 0xe4b, 0xffffffe1, 0x5, 0xc61, 0x5, 0x7fff, 0x6, 0x40, 0x0, 0x7, 0x4, 0x7fffffff, 0x7, 0x8, 0x3, 0x8, 0x7fff, 0x4, 0x6, 0xffff, 0x80000000, 0x401, 0xfff, 0x0, 0x2, 0xc1d, 0x4, 0xffffffc0, 0x800, 0x8, 0x2, 0x101, 0x7, 0x6180, 0x5, 0x3, 0x100, 0x3, 0x7, 0x6, 0x80000, 0x400, 0x4, 0x7f, 0xfff, 0x6, 0x2, 0x9, 0x9, 0x80000001, 0x4, 0x101, 0xfffffbff, 0x5, 0xe2, 0x4, 0x0, 0x10001, 0x7ff, 0x864, 0x7fffffff, 0x1, 0x0, 0x3, 0x4, 0x5, 0x2, 0x9, 0x5, 0x0, 0x3ff, 0x8, 0x2, 0x1, 0x4, 0x20080, 0x6, 0xffffffff, 0x4, 0x101, 0x6, 0x2, 0x6a, 0x40, 0x6, 0x1, 0x8ab, 0x5, 0xcb, 0xffff, 0x1601, 0x20, 0x1, 0x1ff, 0x200, 0x8, 0x24, 0x40, 0x4, 0x3, 0x20, 0x2, 0x2, 0x8, 0x4, 0xffffff81, 0xffffffff, 0x100, 0x101, 0x1ff, 0x6, 0x5, 0x9, 0x2d2c, 0x80000001, 0x0, 0x7fff, 0xfff, 0x7f, 0x7, 0x3ff, 0x8000, 0x6, 0x6, 0x7fff, 0x400, 0xffff8000, 0x7, 0x20000, 0xffffffff, 0x80, 0x1, 0x20, 0x101, 0x2, 0x6, 0x2, 0xaf81, 0x8000, 0x233, 0x0, 0x9, 0x3, 0x7, 0x9, 0x0, 0xfffffff9, 0x5, 0x6, 0x659, 0x401, 0xad1, 0xffffffff, 0x7f, 0x3, 0x100, 0xffffffff, 0xff, 0x400, 0x2, 0x0, 0x5, 0x401, 0x0, 0x1, 0x8000, 0x1, 0xffffff02, 0xfffffffc, 0xffffff3e, 0x9, 0x400, 0x9, 0x2, 0x1ff, 0x1, 0x8, 0xfffffff8, 0x8001, 0x6de, 0xd3, 0x0, 0x7, 0x6, 0x7fff, 0xd526, 0x400, 0x2, 0x2, 0x9, 0x2, 0xa3c, 0x8000, 0x1, 0xe000]}, @TCA_TBF_PRATE64={0xc, 0x5, 0x20c58547adff554e}, @TCA_TBF_RATE64={0xc, 0x4, 0x4be3cd8bd235f202}, @TCA_TBF_PARMS={0x28, 0x1, {{0x3, 0x0, 0x2, 0x15, 0x9, 0x4}, {0x8, 0x1, 0x0, 0x2, 0x1, 0x8d3}, 0x1f, 0x9, 0x2240}}, @TCA_TBF_PBURST={0x8, 0x7, 0x2284}, @TCA_TBF_RTAB={0x404, 0x2, [0x4, 0x100, 0x7, 0xfffffffb, 0xda, 0x9, 0x79, 0x9, 0xffff7fff, 0x4, 0x4, 0x81, 0x3a2, 0x1ae00000, 0x549, 0x5, 0x45b, 0x9, 0x7, 0x40000, 0x7, 0xb772, 0x5, 0x10000, 0x9, 0x6, 0x374, 0x8, 0x8, 0xfffffffa, 0xdbb, 0x1000, 0x7eeb, 0x5, 0x8, 0x2, 0x400, 0x80000001, 0x6, 0xfd5, 0x10001, 0x8, 0x668, 0x10000, 0x8000, 0xd81, 0x400, 0x4d, 0x7, 0x3f, 0x7, 0x1, 0x5, 0xfffffffd, 0x7ff, 0x5, 0x80, 0xd9, 0x7, 0x100, 0x401, 0x80000000, 0xfd, 0xfff, 0x6, 0x80000000, 0x2, 0x0, 0xb22, 0x1de, 0x8001, 0x800, 0x0, 0x80, 0x1ff, 0x1, 0x7fffffff, 0x8001, 0x8, 0x1, 0x6, 0x1, 0x1f, 0x1, 0x7339, 0x3c03, 0x6, 0x26a, 0x80, 0x8, 0x1, 0x0, 0x7, 0x4, 0x8, 0x6, 0x1000, 0x8, 0x3, 0x9, 0x5, 0x483a8cf3, 0x6, 0x7f, 0x8, 0x0, 0x8, 0x2c, 0x6, 0x7fffffff, 0x400, 0x6, 0x0, 0x6, 0x81, 0x9, 0x3, 0x200, 0x3, 0x3, 0x8001, 0xffff0001, 0x1, 0x0, 0x20, 0xfff, 0x0, 0x7fff, 0x6, 0xfff, 0x5, 0x7, 0x87000, 0x3, 0x80000001, 0x3ff, 0x1, 0x5, 0xde1, 0x7ff, 0x9, 0x1, 0xa53, 0x100, 0x3ff, 0x200, 0x8, 0x9, 0x0, 0x5b, 0xffff, 0xfffffe00, 0x7, 0x3ff, 0x10000, 0x5, 0x7ff, 0x5, 0x7f, 0x8d71, 0x2, 0x1ff, 0x7ff, 0x81, 0x638, 0x3, 0x5, 0x2, 0x2, 0x101, 0x21, 0x70, 0x0, 0xfffff713, 0x7, 0x94, 0xd9, 0x8000, 0x0, 0x2, 0x1f, 0x1, 0xffff, 0x0, 0xfa2f, 0x9, 0x2b9, 0x1447, 0xffffff78, 0xe000, 0xffff9263, 0x1, 0x3c2df256, 0x5, 0x1000, 0x200, 0xce, 0x2d, 0xd56, 0x4, 0xffff, 0x80000001, 0x800, 0xfa24, 0x0, 0x2, 0x6, 0x3ff, 0x1f, 0x6, 0x2, 0x3f, 0x7, 0x20, 0x1, 0xffff, 0x6, 0x2, 0x80000000, 0x7, 0x0, 0x788, 0x4, 0x1, 0x400, 0x6, 0x80000001, 0x101, 0x7ff, 0x5, 0x2, 0xffff, 0x80, 0x4, 0x10000, 0x3, 0x401, 0x40, 0x1, 0x101, 0xe8, 0x0, 0x3, 0x1ff, 0x6, 0x1ff, 0x0, 0x9, 0x9, 0x3, 0x6, 0x15a0, 0xffffffff, 0x1ff, 0x0, 0x7]}, @TCA_TBF_RTAB={0x404, 0x2, [0x400, 0x4, 0x3, 0x8000, 0x5, 0xfffffffd, 0x8, 0x7, 0x1, 0xb5, 0x1, 0x10000, 0x80000000, 0x0, 0x7ff, 0x5, 0x8, 0x8001, 0x6, 0x8001, 0x100, 0x6, 0x7, 0x9, 0x7, 0x7, 0xfffffffa, 0x4, 0x101, 0x400, 0xfffffffd, 0x81, 0x3, 0x7, 0x4, 0x9, 0x1, 0x8, 0x4, 0x460, 0x7fffffff, 0x5, 0x6, 0x37, 0x6, 0x41c98e03, 0x1ff, 0x7fffffff, 0xffff8000, 0xfffffc01, 0x485, 0x6, 0x2, 0x7, 0x2, 0x0, 0x7fff, 0x8, 0x6, 0x8000, 0x3, 0x80000001, 0xffff8000, 0x40, 0x9, 0xfffffff9, 0xff, 0x4, 0x9, 0x0, 0xffff, 0x2, 0x80, 0x2, 0xfffffff9, 0x101, 0x8, 0x4, 0x6, 0x0, 0xe101, 0x8, 0x3, 0x1, 0x0, 0x50000, 0x6, 0x0, 0x7, 0x5, 0x1000, 0x4, 0x4, 0x6, 0x4, 0x9, 0x1, 0x401, 0x7fffffff, 0xfffffffe, 0x4, 0xb4f, 0x2, 0x2, 0x1, 0x1, 0x36e6, 0x8000, 0x3, 0xfffffff7, 0x1, 0x1, 0x1, 0x6, 0x3, 0x348, 0x0, 0x7f, 0x9, 0x2, 0xb5c0, 0x1ff, 0x2, 0x800, 0xff, 0x1, 0x99f2, 0x94f, 0x401, 0x8, 0x4, 0x2, 0x7fffffff, 0x1f65, 0x400, 0x3, 0x1f, 0x5, 0x100, 0x800, 0x5, 0xaf, 0xf2, 0x7, 0x4, 0xffffffff, 0x0, 0x80000001, 0x5ea, 0x9, 0x9, 0xfffffffe, 0x0, 0x3, 0x1, 0x23, 0x7fffffff, 0x4b6, 0x7fffffff, 0x3c, 0x6, 0x48ce, 0x5, 0x23f, 0x8001, 0x7, 0x3000000, 0x4, 0x80000000, 0x5, 0x6, 0x1f, 0xd1f, 0x3, 0x3, 0x401, 0x6, 0x5, 0xe, 0x6, 0x80000000, 0xfffffffd, 0x7, 0x8, 0x3, 0xc989, 0x8, 0x3, 0xff, 0xfffffff8, 0x8, 0x9, 0x9, 0x0, 0x0, 0x1, 0x8, 0x200, 0x4905, 0x100, 0xa, 0x2, 0x8, 0x7fffffff, 0x6, 0x0, 0x4, 0x0, 0x5, 0x3, 0x7ff, 0x0, 0x31f, 0xdc49, 0x40, 0x2, 0x6, 0xffffffff, 0x1ff, 0x0, 0x0, 0x200, 0x0, 0x81, 0x488, 0x7000, 0x2, 0x7e, 0x0, 0x8536, 0x1ff, 0xffff, 0x4c76, 0xfffffffa, 0xfff, 0x3, 0x2, 0x80000000, 0x0, 0x64f, 0x40, 0x4, 0x0, 0x12, 0x9, 0x8001, 0x4, 0x4, 0x3, 0x100, 0xa, 0x8, 0x9, 0x200, 0x4, 0x8]}]}}]}, 0xcac}}, 0x0) 8.178359398s ago: executing program 4 (id=5595): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x7526f000) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 6.828011695s ago: executing program 4 (id=5613): r0 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2801020023000b03d25a806f8c6394f91124fc60020f030047000000053582c137153e370248018000f01700d1", 0x2d}], 0x1}, 0x0) 6.787011934s ago: executing program 4 (id=5615): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="11a7b70500000000010061108f00000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_queued\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r1}, &(0x7f0000000280), &(0x7f00000002c0)=r0}, 0x20) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffef7, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) r3 = socket(0x2, 0x3, 0x1) getsockopt(r3, 0xff, 0x100000000000001, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='pids.current\x00', 0x0, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000100)={0x2a}, 0x8) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup, 0x14, 0x0, 0x2, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0, 0x0, 0x0]}, 0x40) openat$cgroup_ro(r4, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x2d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWRULE={0x38, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, "f1"}]}], {0x14}}, 0x60}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000040), 0x3, r6}, 0x38) 6.692513276s ago: executing program 0 (id=5616): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="4000330080000000ffffffffffff08021100000050505050505000000000f800000000000000000000023bdd010004060000000000000503010000250300000084f5f6c3172e024398141471a59f39ce7533dd580e72a0ba02bb1053c0d9329cd69f3af87b706b97f4363959c9837a8c58540e0bcf5b0488c3625d03d6d6aa7cf0b5a833e01b8f199868116574af723eb498f9f7bdeab7077c77adf85cd41a6fc2bf28e69fdfda38e8c2859a9ebce429250eb17945"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket(0x1e, 0x3, 0x1) r9 = socket(0x1e, 0x4, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x38) socket(0x5, 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000280), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r10, 0xc020662a, &(0x7f00000000c0)) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r9, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0xffffffffffffff89}}], 0x2, 0x7ffeedc0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000001640)="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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x80086603, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 6.600842912s ago: executing program 1 (id=5617): r0 = socket$inet6(0xa, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000000), 0x4ee00) socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$SEG6(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000340)=ANY=[@ANYRES16, @ANYRES64], 0x14}}, 0x0) sendmsg$SEG6_CMD_DUMPHMAC(r1, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYRES16=r2, @ANYBLOB="000429bd7000"], 0x1c}}, 0x0) bind$inet6(r0, &(0x7f0000000140), 0x1c) syz_emit_ethernet(0x1c6, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], 0x0) 6.599772658s ago: executing program 4 (id=5619): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r4}, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000280), &(0x7f00000003c0)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x2000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev}]}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef40a000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000b00)={0x0, "aa54f6432c732784a6b762f6c307fa3a"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001b00)={r9, 0x9, 0x0, [0x7, 0x6, 0x3, 0x6, 0xfffffffffffffffe], [0x7, 0x3, 0x2, 0x3, 0xcbf0, 0x3, 0x6, 0x24cb, 0x76, 0x40, 0x1a0c, 0x3, 0x7, 0x5, 0x800, 0x9, 0x5, 0x7, 0x8, 0x835, 0x0, 0xfe, 0x4, 0x8, 0xfffffffffffeffff, 0x3, 0x8, 0x9, 0x0, 0x7fffffff, 0x100000001, 0x1, 0x6, 0xc6d, 0x3, 0x5, 0x5, 0x9, 0xfffffffffffffffa, 0x30d5, 0x20, 0x5, 0x744d, 0x9, 0x4, 0x2, 0x9, 0xffffffff, 0x6, 0x6, 0x2, 0x9, 0x80, 0xc74, 0xffffffffffffff05, 0x80000000, 0x2700, 0xb7c8, 0x869b, 0x0, 0x3, 0x20, 0x4, 0x1, 0x1, 0x3f, 0x9b9, 0x7fff, 0xc51d, 0x4, 0x8561, 0x100000000, 0x4, 0xfffffffffffffff9, 0x80000001, 0x9, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x7, 0x8, 0x9, 0x2, 0x9, 0x194, 0x3f, 0x3, 0x3, 0x6, 0x4, 0x8000000000000000, 0x1000, 0x0, 0x0, 0x8de6, 0x9e, 0x7fffffff, 0x8, 0xfffffffffffffffc, 0x8, 0x400000000000, 0x2, 0x1, 0x80, 0xd, 0x1000, 0x2d, 0x7, 0x31, 0x8, 0xffffffffffffff7f, 0x80, 0x6, 0x1, 0xfffffffffffffff7, 0x800, 0x3ff, 0x0, 0x6]}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000080)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @algo_auth={0x48, 0x1, {{'crc32c-generic\x00'}}}]}, 0x180}}, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) pipe(&(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r11, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 6.236855097s ago: executing program 1 (id=5621): socket(0x1e, 0x4, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x8, 0x0, &(0x7f0000003c00)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb00000000182babd18c051bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f000000000000000008dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50bac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e75af63c0422e3e9c22efa0de7fe80a3ea3665a2ca3437551a4daffc6d4e6605bdee1b8711ca"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/pid_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r5], 0x40}}, 0x0) 6.131930342s ago: executing program 0 (id=5623): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x7526f000) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 5.909705545s ago: executing program 1 (id=5624): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x4800, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000004000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r2], 0x48}}, 0x0) (async, rerun: 32) syz_emit_ethernet(0x3a, &(0x7f0000000000)=ANY=[], 0x0) (rerun: 32) 5.609877001s ago: executing program 4 (id=5627): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000005c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x4, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000001280)=""/157, 0x488}], 0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) epoll_create1(0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r9, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r10}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000080)="a3", &(0x7f0000000180)=@udp6=r10, 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x42}, 0x20) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$netlink(0x10, 0x3, 0xb) 5.059502979s ago: executing program 0 (id=5630): socket$alg(0x26, 0x5, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x8, 0x4, 0x4, 0x9}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x13, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="1809000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7030000070400008500000021000000b70000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) setsockopt$inet6_mtu(r4, 0x29, 0x46, 0x0, 0x0) sendmsg$inet6(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000080)='x', 0x1}], 0x1}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x0, 0xe, 0x0, &(0x7f0000000280)="e02742e8680d95ff9782762f22da", 0x0, 0xe8a6, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) writev(r0, &(0x7f0000000800)=[{&(0x7f0000000c00)="89e7ee2c7cdad9b4b47381c988a8", 0xe}], 0x1) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r5, 0x84, 0x10, &(0x7f00000002c0), 0x8) ioctl$SIOCGSTAMPNS(0xffffffffffffffff, 0x8907, &(0x7f0000000000)) 4.815534197s ago: executing program 3 (id=5632): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xb}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071123f000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="34000000010101010000000000000000000000000800154000000000080008400000000008001a400000000008000340000000000646ad92041f891bead8071fdaab05477f55b02e4bace8ceae754b958ec11238332f2ad9e3c4c9c5af"], 0x34}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r5, 0x84, 0x10, &(0x7f0000000000)=@sack_info={0x0, 0x0, 0x15b060}, 0xc) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000847fff)='X', 0xfee4, 0x2fc, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) recvmmsg(r5, &(0x7f0000003900)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) getsockopt$inet_sctp6_SCTP_RTOINFO(r6, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x200, 0xff80, 0x8}, &(0x7f0000000580)=0x10) close(r6) ioctl$SIOCSIFHWADDR(r6, 0x8b26, &(0x7f0000000000)={'wlan1\x00', @random="0202000400"}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7, 0x8, 0x8, 0x5}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000006020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000000ecff850000000400000018110000", @ANYRES32=r7], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000002000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x3, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x2c}, [@ldst={0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0xfd76, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x21) ioctl$EXT4_IOC_GETFSUUID(r9, 0x8008662c, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x1, 0xfff9, 0x5, 0x1}, 0x48) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000680)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x6, [@var={0x2}]}, {0x0, [0x0, 0x61, 0x5f, 0x6a4a25749aa12bb9]}}, 0x0, 0x2e}, 0x20) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000340), &(0x7f0000001200), 0x10001, r10}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000000c0)={r10, &(0x7f0000000080), &(0x7f0000001300)=""/4096}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x20, 0x0, &(0x7f0000000000), &(0x7f0000000200)='GPL\x00', 0x1b3, 0xb8, &(0x7f0000000340)=""/184, 0x40f00, 0x3a, '\x00', 0x0, 0x24, r6, 0x8, &(0x7f0000000400)={0x9, 0x2}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0x2, 0x2, 0x2c5e}, 0x10, 0x0, r1, 0x5, &(0x7f0000000480)=[r7, r8, r0, r9, r0, r0, r10, r0, r0, r0], &(0x7f00000004c0)=[{0x3, 0x3, 0x6, 0x3}, {0x0, 0x4, 0x8, 0x1}, {0x1, 0x3}, {0x2, 0x2, 0x4, 0x6}, {0x0, 0x3, 0x9, 0xa}], 0x10, 0x7ff}, 0x90) 4.814919679s ago: executing program 1 (id=5633): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="4000330080000000ffffffffffff08021100000050505050505000000000f800000000000000000000023bdd010004060000000000000503010000250300000084f5f6c3172e024398141471a59f39ce7533dd580e72a0ba02bb1053c0d9329cd69f3af87b706b97f4363959c9837a8c58540e0bcf5b0488c3625d03d6d6aa7cf0b5a833e01b8f199868116574af723eb498f9f7bdeab7077c77adf85cd41a6fc2bf28e69fdfda38e8c2859a9ebce429250eb17945"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket(0x1e, 0x3, 0x1) r9 = socket(0x1e, 0x4, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x38) socket(0x5, 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000280), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r10, 0xc020662a, &(0x7f00000000c0)) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r9, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0xffffffffffffff89}}], 0x2, 0x7ffeedc0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000001640)="62babf7d9f83c89a071bd17a5a8427d635d6a5a9851cdc7c1e3852fab350a9d2fecfbb96d2f55e9cfeb7af884b7c8ebe0ef35dffd3574bde01fb74e8bbd359be527b202e965568e78397599179f20a1c9e34e6850e720061db22447ba03d995222715178ac5971a1f4a60c927a05a59ab6022d460050c808ff5518551b845fa99039df5d35607d75b92df592ecb972374db1c2986c1f07fe2a508d80d2864c6cee3e45254fdb6a86d4abab57c4616e32cbbf4e603397d57bc7446ad542ef7282c64f47c5712d843976534d470e3844739c6e74beb1da1490ba826dc7e7b4bd1d64bfad08373ac7b60b786b9a2d7b86f8b1ec52e8cb5858ba0680ba98874a9bd2d1d2148422d716b46b80482faddf1c293a6f5417b857b7cba0a0842799815127676eb8b5a4c2798725b2295008b8bbb19edb34a7a5ae987e46a1b7be86a86c3ff57a8bdbd5b31dd8e6de07a1d415f25496b581d7d5b9f114c48f24e8363414d5e82d240774cfd02599db90bb52b2c0ab6c95d7af7c83f6b431a5fa6cb2fd1cec7aad168292d234f300b5ee1af0a1b76dd84580689e8f4887bc0a8e3605891cce0a9f78e55a32d9b5a67056640b6d9d65137a1a837a409937683e6d6a289189221b4da9d0a19c15f848670932df854e63b150e9d6ad3361b849f46ec4207310fcd3202acada1b8d863d0f7215956177e9b85c35f2baa430a0e30af2743e1f590b7107c31218ab64749a17dd357ac75f8991e7c1448c0a952f2f809bb4e26220e411fb1b8bc6300926661a0c3f99db667f850520fcf1a0423f974965d3f18fc897e7d96549e251d0b025d98bb2c1be03619337f59d9dca5bafa031e59059fedc540e5532215b9d53f930960a7e6d5e0b4aac8dd6aa24504cef5debd6440cfc84bf7a272ba9a4da20f46ce12d46e940bb2adfd7ade9d9ddb035ef759ea9ed495f0ae9f97416bd0776cc1e169b08290fa5bb02f02587575b93b4d8eaecf6a1a5bfbfd764f2c6ddece18edd74d1e770ce2b40244994a92169a4144d61bc24b63e2edf9d90ad1e362aa81be53e865a7d92aa5eae95b997e9e219b8d7ca8f459be2ce6528fd8285cd252a054c8f62b7d5ad5224cac067f7aaee262bb804ed2024ec4925d8d9ad337110430c827cc8aaed26d6bc5286b9cc66dac1c4a9d4e2f3f457f9ca3e330d5737b9564db703e4934f778779843ac230a13a0cd630df7212fc5d91d534a8bc1874b37ec62fe961936f752816c4626deb781269f49ab4bea400bf8572b864437a6d9ed872a1873cdffcc8ae229bafcfd1583d59679524a0b4ee5680b1a56bb2839df7b69714f71673bfe09ef6c06ad14ad0af1b3b5b43ffd23c3ee58de827f8995628802c9068a63fa962502b54ae136f4ad4a01333d7e184e48cbba5ed3acb267c555da5ca3b7bacc56eac07251df84cad7fb2652574758be49a60b5fe267b14c9c298c0292d2f9ab23947e1e04281fcc5675c9344b9f98b485ecf6e7274910993bfe66f92c236cda57350fa76c1af5a66d3c98d00f041e81dfd23a9dd7d5094e8f461fed31bea77556b40b1277426c8fb67593958aa7722b2a883f981484cdbdc06aea6ee0e14ecda5be622bcf5ec48230ae2ae47cb9d43f5905a3a11e0ee341b8239cf0ea6f4577f663e0a78d861351aafde70bb075b2e6ec45f95fc00f8b12228ed7e4020d66172f2b714e89b08504df8a657c8f98770719b34ac4cf38b2ce723a94bd166c16c304788911bbed21deaa317de1866acb33b2d21cb537f58b84a6ac80df4601dcbc5a0b79a7d9a24a5042d8b4d1b69e569f6257895019a34b653234bd17bc07c9f9b895563a523aed26f5c7771ab1524d04071f81f45d3095ee8a7f6390815a06959739ef3b7061eb27238d434d04fe6ed0bd353ed8b23e0e6840feeafcb864bbf7bc85cd23f97143a7701ac38c96260865923d169aea9f9f3ed266ca5c9ba614cd005cc4eb9e93ff6c9023167aadc2e39d92481bffc69295e596616642b0f758a6acb4cadc0cbac540edc47e2a4f09ae8af78317d3e853098ee71fd9573a09aaaa5f63ee4cfbe319aec2fff1d5db333d2be04c7ecbda5b37c03ccbfd640298df7e59ab2f90fb9de043e501743008f0ac22cb5ba40f55f393fbcc315b9665545a97be950bc7b2350b0f5a4d25e3194140c2146515c06301dc19dbac49f4432dca449951b3800d2e404656f5ea7147a92b9dd80173e8b9ebc04fbf08907d95154cd32919d4ccd5943533289ba2911ea9984f614198b2e832d9a08d0dd9e6f4cfcac5bb8db790b83708d663674142341122f5adb7d5af9baabddfc0fc1d665f8fd12bfa104b2ab30a6bf5b49bab05ec245aaab9f733fc24bf2d3b5b072c429e1a9d3ac291ff781acc3903222f416556cf892888e752a2a1160944970db1afd8e68ef54f02a58f1644e2cff47ab5540eac24d5229efc02c1c990da09ad5ed2b729f0e2ea52784e1aaedd687e67b06a1dd6d828740d5c3d9feedfa87772026eaf5e78a296bc03219579454ef9a33d0c1c183b36ddb7f4cbd73d573d9e322137e07f687fed95a3af80e806bba43118d99cca24e407e42672b8bfecc280ebb300dd6e7c300651133fd5dbba7a712cea26d860590fa545cf1cc26118dbefb97af8a2fb55e24adaf9726532931c8931ef80854b5f2d1d44edc133f3ac4b1b107f0d5a0e0adb8b03f237da78c1a3a74806cec89c83d84b7c04a85b48e8f665183c2c6fe2c9f1e49932b45e1fd650b8ae4421410ceb5a70017aa1b6292489f21d1c09da02c735ae460b4c13f4bd796f6a8a47d5e14c2132559d902eb583b526ced7410a13792531f78a9a96c126310d20280ca59ab7832af6523ed0b09473d9d4ba6161668d74ed4ed958f8653fcd7ce59c41784de97035ae8ffb84aef83c5ec30a6705b6c29aaacbf4f0bef0dc1a2d80180c6b2dab58bc6c517dfab8b8437791952b726c488e9f27851210a903c1c4052bcc018981378baa60792369c786abdcc35f7b32f80794a11d7141cd607319059c8449f3bd7a4760ab6c74414c6ec8d32632ae4f9fe88ec0d4eaef7449f3310591c6a6859bd2dd0eecac13aac880bc47b5abe4156fbce21038ea3c908c119217b94ac608323b438d5c1af737b0536e829548e10bc2a6d8279222e8beff97e1435f501b0cf864fd83e596e6c1c48e658cc0e9d7a71d36418d70509a8abb3850d1d4c37564ce232c75e3bf49c3fc81382962b61732d58a251a6e7cfb19b3b6931b4a0130fa9f065c4ff18a7ef1a9c6cb2e85753807432872db3da630676efca7042709133a9bf529a6ceb6ba4fdae5c78c62cf365c0085bb24aa7c2cd82126ab280bb3024a94bc8beb651500e0417b43d663db1a8a2c27f39edc05f278a8b129e8d8df67a679d5bf997ce4bea90afea54a3d8d03a263ab1ffb002c448afcf0afe1acb2fcd32397dca5439daadc36caeef4067f2522b5a223f03eb277de2549ada66e9e0c3d151502b12cfb4b457c6bdb0d006c362bea8d064cffc15d8a4449954e131a944038dffbb5f8c62684fa1aa86040a95e15d88368efbbc00fb8757bc67c5b89766b8f58a25625dba9837120508cfe44a64f66b2cc5f2a41cf2014a52f8c5ab3b3028d458b9fbc24962f93a5c3bf252403f8203d5c678c057f2c6b092145766b667428757e006b5c6bb42c95cb8e45312c8c6fddeca4316577d080d805ef890869edef3b7c0d638b2cb14bfb0b65997d198fcf720b65445d7a30adbe50d027ec1903fa51d6738a60a4eaa50784245fee963a3114a1b48a2be59ab3287ebd5698baaefb200761790ad50cce7492350d2f2f3551b2bf51b75446ae9e0ac01ab017f8b65a314c8479621c4f54c11660f5d9c10444b9c610327ec8bbc8856167814a5ff3a631eda1a97402a9e91d1cbb80c15a2428b790d090d84a60883b104a26f72ef9e8b592558bcf6ad83931b38c283faee6287178eb30626c2595133819c7c44ce87aaa30287a21798f838337b4c53bbf75a9556d1dc294d395b784f9131f30210c6d1db141fe72d743aad095e23f5e1273aa69f2ee60f5e716fc7d67a041ca95eabf9c43d0638b297451c90178a5903b3f680445ea8a5e94d067ef165566ca67a8962bb1fcefb35f23f778ece6555fe35c2c6d2d0429cac813d75c0bab2d6329222f6abb606b347bb0708ab4d18c8cf4cb24a654b1dd95d30633799c9de80f79b3f1ddae1466c8348829d1e133e5da9224de5dd0288a6bdac4f08eb9ff406d703ae9f4433304f117c3aa6ddfaef484fcc3aeb63cfdddfdff0f9a890ec97e8d948dbc055ce46e3ba4713b672f16b94c19d49c1cb5d10803ad8011e6d8121a247cb40b2b32a5d68bb7d891701048760de0376570e72fe9c7abcdc918c15acf598be855a51b55e3e919dda06fe539cc7d55f99fd60d7d020e3b5cbf715ce17ba5b9a1dc5cb018ca0a7958375d0a65e4f809fc9d7beb7e2222bb4e1981455c2c5892b884f393f20f208e38863bae3b797ac297e5e2834df25eefba3d28ce5341bbd40bd19a7d9860858ef4a9a2da50ec49ff99001c1efcd5e304fc98766a3de9f67ad3f6a0b3b83d0a472f013edf261b019f3925fd32e271e0f8e2468ab219100ede9c76a4c16a893f568fcc84a309edd697b15f8bb8dd6eea8bdafc292b3637af33e7f3b617a5f8b2facd742cce0be89db2e6407b571438a4ea428bfb81ef2eb1f27415e8913f332442f2512857cdfbeb38b17dc13b6514af37706df2d7a192d6018669432290a3ec6194eae5d4421c297db4aff675bc3e2e59a208b0aa0c30eb673ebf322b993c7ce6748e72fd75211a9bd2135537f07b36301e6b6f66c22a21d074a6cd94659faba23ec151360a97dbde4c1de2015696e2b635bd7f4ebd7b9a873fb5a72481c0d9a28a9ac31afda1642f7e75c488de8e479c7b7211431c2b7234bf2543fc72880f6766b599ff0fde1525e2d83c9b4e16d1dabf0e178445f082ba2564e7fa22a5c114f06b23610768f36afaf9a3b8fb2551433ddbd83fd07d0708b71c0afc2401da9b0c55a10aa7b32c6a589e4877f54bdbb92e3710cab61b5251b4c3ee8fcddc7d3d04246d3f77b9c0d6d0c1f6112b9b1de943811b27982b7c2612b5c10430663c62e1de4da1dc368f99b03c9630f08e92fc0c2de9af52cfb0b739b9fcdae3e7e29f850937d763584ac0035b6503339cea0cf86b569517a99dde96fd55fb1e7c330ec18e8bb7ecd01a5945f59dfd7e3d3b697b5792ac056413c423e12947f54fb0c056a592b91b2ac1942705b314369ffc26620be7a486a36b060bcb35ed52e8f7afc3d87c772814257ec22b10b21e95334d70e80ae61b6870cdbad67c2e9a6ea50a60eaac530db0b31aa007f835ec81858b42192986b2b34d0f3c95773c1970a445fcd0a6391c2a7ca008c32af7c20716d72382cfdee49e2e0051095200a4ff82faba6d1636e5c7ba9b87b206d101bed56f739ed6764f76985d5d7593509a5af19db5c82425057ec32d759e6e9e632ae2175f1af973d97b6a778d76544c39a379606028ebf587f08296f7a501010398d2352b809b2706154abee5fbec943657efdc6e20b3248102d25f4c6838cb1fbdb3a37cc4662d4ab2e1a0c289282e916a9ec044512be4b83ee1c8641a56d586139952d9175f9eea0692004359314c50a37670b4d4f95cc5a13f3d19510336688919160b333f3ea159e4aa259fcf7651ba47721ec22e158df746bcebace7d2c58d14eab7d03969ce9847e2c0473c79f6c62410160534172816e2cb75011e55ba511d2fb80e13c2549e5f2bc54cbfad8fc17") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x80086603, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 4.750483153s ago: executing program 2 (id=5634): socket(0x1e, 0x4, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x8, 0x0, &(0x7f0000003c00)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/pid_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r5], 0x40}}, 0x0) 4.457231786s ago: executing program 1 (id=5635): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0xb, &(0x7f0000000280)={0x0, 0x4}, 0xe) (async) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @loopback}]}, &(0x7f0000000240)=0x10) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x77, &(0x7f0000000080)={r1}, 0x8) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c00e0bae7a6df2ba055b9fd2700f10f04370400", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c0002800500070000000000"], 0x3c}}, 0x0) (async) socket$inet_sctp(0x2, 0x0, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async, rerun: 64) ioctl$TUNSETLINK(r3, 0x400454cd, 0x7) (rerun: 64) getsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000040), &(0x7f0000000080)=0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 4.2291685s ago: executing program 3 (id=5636): socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000080), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100", @ANYRES32], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a010400000000000000000200000034000480300001800e000100696d6d6564696174650000001c000280100002800c000280040001800000000008000140000000000900010073797a30000000000900020073797a32"], 0x88}}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000040), 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.kill\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="3400000011000568d9638367bc93ec0005000000881c191bf7352a689bc4094b4444d98fceaa55d29a4da40b08258d0ee528dc1891b3ef6b9d9f8888d407", @ANYRES32=r6, @ANYRESDEC=r6], 0x34}}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, 0x0, 0x0}, 0x90) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000d40)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000680)=ANY=[@ANYRES8=r7, @ANYRES32=0x0, @ANYBLOB="ac1414aa00000000000000001400000000000000000000000200000000000000000000001c000000000000000000000008000000", @ANYRESOCT=r1, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB="7f000001ac000800000000001c000000000000000000000007006fc946f1f569c01801"], 0xffb7}, 0x0) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03003e000b05d25a806c8c6f94f90224fc60100005000a000200053582c137153e37000c0980fc0b1000", 0x2c}], 0x1}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x200000f, 0x12, r4, 0x0) r9 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r9, 0x10d, 0x0, 0x0, &(0x7f0000000000)) sendto$inet6(r1, &(0x7f0000000180)='H', 0x55, 0x0, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) 4.228213346s ago: executing program 2 (id=5637): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r4}, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000280), &(0x7f00000003c0)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x2000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev}]}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef40a000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000b00)={0x0, "aa54f6432c732784a6b762f6c307fa3a"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001b00)={r9, 0x9, 0x0, [0x7, 0x6, 0x3, 0x6, 0xfffffffffffffffe], [0x7, 0x3, 0x2, 0x3, 0xcbf0, 0x3, 0x6, 0x24cb, 0x76, 0x40, 0x1a0c, 0x3, 0x7, 0x5, 0x800, 0x9, 0x5, 0x7, 0x8, 0x835, 0x0, 0xfe, 0x4, 0x8, 0xfffffffffffeffff, 0x3, 0x8, 0x9, 0x0, 0x7fffffff, 0x100000001, 0x1, 0x6, 0xc6d, 0x3, 0x5, 0x5, 0x9, 0xfffffffffffffffa, 0x30d5, 0x20, 0x5, 0x744d, 0x9, 0x4, 0x2, 0x9, 0xffffffff, 0x6, 0x6, 0x2, 0x9, 0x80, 0xc74, 0xffffffffffffff05, 0x80000000, 0x2700, 0xb7c8, 0x869b, 0x0, 0x3, 0x20, 0x4, 0x1, 0x1, 0x3f, 0x9b9, 0x7fff, 0xc51d, 0x4, 0x8561, 0x100000000, 0x4, 0xfffffffffffffff9, 0x80000001, 0x9, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x7, 0x8, 0x9, 0x2, 0x9, 0x194, 0x3f, 0x3, 0x3, 0x6, 0x4, 0x8000000000000000, 0x1000, 0x0, 0x0, 0x8de6, 0x9e, 0x7fffffff, 0x8, 0xfffffffffffffffc, 0x8, 0x400000000000, 0x2, 0x1, 0x80, 0xd, 0x1000, 0x2d, 0x7, 0x31, 0x8, 0xffffffffffffff7f, 0x80, 0x6, 0x1, 0xfffffffffffffff7, 0x800, 0x3ff, 0x0, 0x6]}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000080)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @algo_auth={0x48, 0x1, {{'crc32c-generic\x00'}}}]}, 0x180}}, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) pipe(&(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r11, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 1.239368824s ago: executing program 3 (id=5638): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0xe22, 0x0, @empty}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) syz_emit_ethernet(0x4c, &(0x7f0000000140)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3e}, @random="ff010000ef80", @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "010100", 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x3, 0x0, @val=0x80}, "30b00afe4e70"}}}}}}}, 0x0) 1.236548246s ago: executing program 2 (id=5639): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r0, &(0x7f0000000180)='cpuset.mem_hardwall\x00', 0x2, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@getchain={0x6c, 0x66, 0x100, 0x70bd26, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x2}, {0x6, 0xfff2}, {0xd, 0xc}}, [{0x8, 0xb, 0xe0}, {0x8, 0xb, 0xa7}, {0x8, 0xb, 0x6}, {0x8, 0xb, 0x3}, {0x8, 0xb, 0xfffffffe}, {0x8, 0xb, 0x10001}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0xc8}]}, 0x6c}, 0x1, 0x0, 0x0, 0x10}, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(0x0, r2) setsockopt$ax25_SO_BINDTODEVICE(r1, 0x101, 0x2, &(0x7f0000000100)=@rose={'rose', 0x0}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, &(0x7f0000000200)={'bond0\x00', 0x1000}) bpf$ITER_CREATE(0x21, &(0x7f0000000080), 0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_pktinfo(r7, 0x0, 0x18, 0x0, &(0x7f0000000540)) syz_genetlink_get_family_id$batadv(&(0x7f0000000500), r6) r8 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001780)={0x6, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="823391cfa1980ad6fd311c1e14cfccd1f051b520adf7d9263036a4339bf069c48ce207fb0f8d5e79544748cbab583ef8c6a0c3d65dbde9949814b35ecc886780ff890b99f83287f874c2d085c814e319037c97e4be5a46d8d70708e8bb8bf0a7dbc5b4f13466", @ANYRES32=r8, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x4, 0x1000, &(0x7f0000001840)=""/4096}, 0x23) sendmsg$BATADV_CMD_GET_DAT_CACHE(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="34000000ff52ad33820f6bf9336b71516e7da38fe5b68e849e42fc9d4d00786810800b55fe7a5afaf07955612afa44f9d3dc56901b49617e727ad53e2e42a33e63849c8beb457db214dcdeadebed366221d11590051d4496daafd734d444c93fbda41c8075f8613844161e85519caad9fdebece4ff13388aaeb3b5cfc5259acd9731d308137586d25214210a69a6f03c6e46de656564488ac399a20182481445f0438e00", @ANYBLOB="42494f675e71483d332cafa6c1294bd9d2b578e9dee6c0e1d8d44a377fe9b8cc9024a88041c741f1dec194b279ab101a3652c7885849251769500d39d2aabc56deb9600192e2b1a562c86b2530f6686319a184c3a9e00c8c8e5091ae4c07047825a4c0de3c706aa900e646ce"], 0x34}}, 0x840) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(r6, &(0x7f00000004c0)={&(0x7f00000003c0), 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x1c, r9, 0x0, 0x70bd2b, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8, 0x31, 0x95}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10813}, 0x4000) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008000840000028590800064000000000050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb70300000000000bb70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r12, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$nl_netfilter(0x10, 0x3, 0xc) 1.159692547s ago: executing program 0 (id=5640): openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @random="2ee308099cc8"}, @NDA_VLAN={0x6, 0x5, 0x3}]}, 0x30}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) connect$inet(0xffffffffffffffff, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@delneigh={0x30, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}, [@NDA_LLADDR={0xa, 0x2, @random="2ee308099cc8"}, @NDA_VLAN={0x6, 0x5, 0x3}]}, 0x30}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) connect$inet(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket(0x1, 0x803, 0x0) (async) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) (async) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x3c}}, 0x0) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) 1.124746202s ago: executing program 3 (id=5641): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFDSTADDR(0xffffffffffffffff, 0x8918, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) socket(0x0, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x2e, &(0x7f00000005c0)={@link_local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @rand_addr, @multicast1}, {0x4, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000300)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r3, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) preadv(r6, &(0x7f0000000080)=[{&(0x7f0000001280)=""/157, 0x488}], 0x1, 0x2, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000880)={0x1c, r7, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x7, 0x4, 0x2}, 0x48) epoll_create1(0x0) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r9, &(0x7f0000000480), &(0x7f0000000580)=@tcp=r10}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000080)="a3", &(0x7f0000000180)=@udp6=r10, 0x2}, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x28, 0x28, 0x2, [@int={0x0, 0x0, 0x0, 0x1, 0x5, 0x8}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x1}]}]}}, 0x0, 0x42}, 0x20) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$netlink(0x10, 0x3, 0xb) 1.002509844s ago: executing program 1 (id=5642): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x7526f000) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000000)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x5, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @default, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x40) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r1, 0x0) 771.792214ms ago: executing program 2 (id=5643): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='GPL\x00', 0x4, 0x1076, &(0x7f0000000300)=""/4096}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003000)={r0, 0xa00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 660.580387ms ago: executing program 2 (id=5644): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000500)={0x48, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast}, @ext_ch_sw={0x4, 0x4, {{}, @val={0x76, 0x6}}}}}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_MESH(r2, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r4, 0x4, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x20008000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000001480)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="4000330080000000ffffffffffff08021100000050505050505000000000f800000000000000000000023bdd010004060000000000000503010000250300000084f5f6c3172e024398141471a59f39ce7533dd580e72a0ba02bb1053c0d9329cd69f3af87b706b97f4363959c9837a8c58540e0bcf5b0488c3625d03d6d6aa7cf0b5a833e01b8f199868116574af723eb498f9f7bdeab7077c77adf85cd41a6fc2bf28e69fdfda38e8c2859a9ebce429250eb17945"], 0x5c}}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket(0x1e, 0x3, 0x1) r9 = socket(0x1e, 0x4, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000340)={0x0, 0x0, 0x0, &(0x7f0000000280)}, 0x38) socket(0x5, 0x1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000000280), 0xfea7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r10, 0x0) setsockopt$packet_tx_ring(r9, 0x10f, 0x87, &(0x7f0000000080)=@req3={0x525, 0x3f5, 0x1f, 0x101, 0x9, 0x1000, 0x8}, 0x1c) bind$alg(0xffffffffffffffff, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) sendmmsg(r8, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) recvmmsg(r9, &(0x7f0000000300)=[{{0x0, 0x0, &(0x7f0000001600)=[{&(0x7f0000000480)=""/4085, 0xff5}], 0x1}}, {{0x0, 0x0, &(0x7f0000000000), 0x1, 0x0, 0xffffffffffffff89}}], 0x2, 0x7ffeedc0, 0x0) ioctl$sock_netdev_private(0xffffffffffffffff, 0x89f1, &(0x7f0000001640)="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") ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x80086603, 0x0) r11 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r11, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) 549.118491ms ago: executing program 0 (id=5645): socket$inet6_sctp(0xa, 0x1, 0x84) r0 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r0, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0xfec0, 0x0, @mcast1, 0x9}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000340)="f400000000002c00fe8000000000000000000000000000000100"/40, 0x2a}], 0x1}, 0x0) 528.135342ms ago: executing program 3 (id=5646): socket(0x1e, 0x4, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r0 = socket(0xa, 0x1, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x4, 0x5, &(0x7f00000015c0)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) close(r0) socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x8, 0x0, &(0x7f0000003c00)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x3a0ffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001680)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f17e3946e06bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb00000000182babd18c051bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112b0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01ac69398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f000000000000000008dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e48455b5a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ef6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b27663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c0c7d35cf4b22549a4bd92052188bd1f285f653b6214912a517810200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3800000000000000009c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d488a0200000000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e4a59414329a7c7f2fad6bc871f5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b4082d43e121861b5cc03f1a1561fe589e0d12969bc982ff3f0000006c0c6c747d9a1cc500bb89283a16ff10feea20bdac0000000000000000ca06f256a55591019465f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ec14bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ee40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734837ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b5589829b6b0679b5d65a6d072034cecc457776c5fa1f33b0203c07052c6bc314b0ac5c63bc2083c9cda0b7480e0b17854ffcc76176ce266bc698f7921b8afe798a7a5ed33ab0374455ee368fda99a0e681bf9426831b193395cb01a7332a50bac841cb7d48a1768a7640a9820631ba775a3dc4e97f7fda840bcdd3afaa0d7c3c229de4f0f4ac4d04f1a4e52e38325ca2e5f1f9caaa7234053eca09ec3c8c16940bc3edfb2e016f355391c0e75af63c0422e3e9c22efa0de7fe80a3ea3665a2ca3437551a4daffc6d4e6605bdee1b8711ca"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) r2 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f00000001c0)=0x0) syz_open_procfs$namespace(r3, &(0x7f0000000140)='ns/pid_for_children\x00') syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/pid\x00') socket$nl_xfrm(0x10, 0x3, 0x6) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.io_service_time_recursive\x00', 0x275a, 0x0) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) socket$l2tp(0x2, 0x2, 0x73) r4 = socket$nl_rdma(0x10, 0x3, 0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="1f02ffff0000000000003b00000008000300", @ANYRES32=r7, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYRES8=r5], 0x40}}, 0x0) 403.818558ms ago: executing program 0 (id=5647): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = socket$kcm(0x11, 0x3, 0x0) (async, rerun: 64) r2 = socket$inet_tcp(0x2, 0x1, 0x0) (rerun: 64) bind$inet(r2, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) (async) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) (async) sendto$inet(r2, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb0800450000340000000000069078ac1414bbac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="8c1000008c78ee189fac0000ce59e556"], 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x107, 0xf, &(0x7f0000000000), 0x4) (async) sendmsg$kcm(r1, &(0x7f00000000c0)={&(0x7f0000000100)=@hci={0x1f, 0x0, 0x1}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000500)="27050200590200000600002fb96dbcf706e10500000088641100114408000283", 0x20}], 0x1}, 0x0) (async) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) (async, rerun: 64) r4 = socket$inet6(0xa, 0x6, 0x0) (rerun: 64) bind$inet6(r4, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r5, &(0x7f0000e5c000)={0x2, 0x4e20, @local}, 0x10) (async) r6 = socket$inet(0x2, 0x800, 0xd9) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 64) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_DYNSET_OP={0x8}, @NFTA_DYNSET_SREG_KEY={0x8}, @NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_DYNSET_SET_ID={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x90}}, 0x0) (rerun: 64) connect$pppl2tp(r3, &(0x7f0000005980)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x0, 0x0, 0x2, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}}, 0x3a) (async) ioctl$SIOCGETLINKNAME(r3, 0x89e0, &(0x7f0000000200)={0x0, 0x3}) (async, rerun: 32) recvfrom(r6, &(0x7f00000002c0)=""/118, 0x76, 0x200, &(0x7f0000000480)=@ax25={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null]}, 0x80) (rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)="290000002000190f00003fffffffda060200000000e80001dd0000040d001800ea11c21d0005000000", 0x29}], 0x1) (async) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FITRIM(r0, 0xc0185879, &(0x7f0000000000)={0x0, 0xffbffffffffffff8}) accept$unix(r0, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) 137.676279ms ago: executing program 2 (id=5648): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, 0x0, 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe}, 0xc) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbfe}, 0xc) ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000240)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r1, 0x0, 0x0, 0x20048004, &(0x7f0000000140)={0xa, 0x0, 0x0, @loopback}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r4}, 0x10) getsockopt$sock_int(0xffffffffffffffff, 0x1, 0x7, &(0x7f0000000280), &(0x7f00000003c0)=0x4) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r5, &(0x7f0000000180), 0x2000) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @dev}]}]}, 0x28}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000000580)="6700000011008188040f56ecdb4cb9cca7480ef40a000000e3bd6efb440009000e000a0010000000ba80010000005a8c3774fa0af3dc59a933c1e7a6d3361d83b20000319cdf5656826edaaa11032701c61ec666d482078ccebcb9a4f187f7a4e98f09cdc2649f", 0x67}], 0x1}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000000b00)={0x0, "aa54f6432c732784a6b762f6c307fa3a"}) ioctl$BTRFS_IOC_GET_DEV_STATS(r2, 0xc4089434, &(0x7f0000001b00)={r9, 0x9, 0x0, [0x7, 0x6, 0x3, 0x6, 0xfffffffffffffffe], [0x7, 0x3, 0x2, 0x3, 0xcbf0, 0x3, 0x6, 0x24cb, 0x76, 0x40, 0x1a0c, 0x3, 0x7, 0x5, 0x800, 0x9, 0x5, 0x7, 0x8, 0x835, 0x0, 0xfe, 0x4, 0x8, 0xfffffffffffeffff, 0x3, 0x8, 0x9, 0x0, 0x7fffffff, 0x100000001, 0x1, 0x6, 0xc6d, 0x3, 0x5, 0x5, 0x9, 0xfffffffffffffffa, 0x30d5, 0x20, 0x5, 0x744d, 0x9, 0x4, 0x2, 0x9, 0xffffffff, 0x6, 0x6, 0x2, 0x9, 0x80, 0xc74, 0xffffffffffffff05, 0x80000000, 0x2700, 0xb7c8, 0x869b, 0x0, 0x3, 0x20, 0x4, 0x1, 0x1, 0x3f, 0x9b9, 0x7fff, 0xc51d, 0x4, 0x8561, 0x100000000, 0x4, 0xfffffffffffffff9, 0x80000001, 0x9, 0x9, 0x81, 0xffffffffffffffff, 0x2, 0x7, 0x8, 0x9, 0x2, 0x9, 0x194, 0x3f, 0x3, 0x3, 0x6, 0x4, 0x8000000000000000, 0x1000, 0x0, 0x0, 0x8de6, 0x9e, 0x7fffffff, 0x8, 0xfffffffffffffffc, 0x8, 0x400000000000, 0x2, 0x1, 0x80, 0xd, 0x1000, 0x2d, 0x7, 0x31, 0x8, 0xffffffffffffff7f, 0x80, 0x6, 0x1, 0xfffffffffffffff7, 0x800, 0x3ff, 0x0, 0x6]}) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000080)=@newsa={0x180, 0x10, 0x1, 0x0, 0x0, {{@in=@local, @in6=@local, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@mcast2, 0x0, 0x6c}, @in6=@remote, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_comp={0x48, 0x3, {{'lzs\x00'}}}, @algo_auth={0x48, 0x1, {{'crc32c-generic\x00'}}}]}, 0x180}}, 0x0) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) pipe(&(0x7f0000000000)) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r11, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1a}]}]}, 0x28}}, 0x0) 0s ago: executing program 3 (id=5649): socket(0x200000000000011, 0x4000000000080002, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010473ca7501003fc400925e4a44", @ANYRES32, @ANYBLOB="0d01140016000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r1 = socket(0x10, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700f205000000e72adf000002", @ANYRES32=r2], 0x48}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_GET(r3, &(0x7f0000002380)={0x0, 0x0, &(0x7f0000002340)={&(0x7f0000000080)=ANY=[@ANYBLOB="60b3d8455a730f14000000", @ANYRES16=r4, @ANYBLOB="0100000000000000000002000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0x3, 0x300) socket$inet(0x2, 0x80001, 0x84) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @mcast1, 0x4}, 0x1c) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xa, 0x8}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000a9000000000000000200000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0xf7, 0x0, 0x1, 0x0, 0x6, @dev}, 0x14) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f0000000000)=0x8, 0x4) syz_emit_ethernet(0x4a, &(0x7f0000000640)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x14, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x4, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000000c0), 0x10}, 0x90) kernel console output (not intermixed with test programs): l+0x241/0x360 [ 454.852377][T18980] ? __pfx_dump_stack_lvl+0x10/0x10 [ 454.857636][T18980] ? __pfx__printk+0x10/0x10 [ 454.862292][T18980] ? netlink_insert+0x10b7/0x14b0 [ 454.867373][T18980] should_fail_ex+0x3b0/0x4e0 [ 454.872119][T18980] ? __alloc_skb+0x1c3/0x440 [ 454.876780][T18980] should_failslab+0x9/0x20 [ 454.881338][T18980] kmem_cache_alloc_node_noprof+0x71/0x320 [ 454.887219][T18980] __alloc_skb+0x1c3/0x440 [ 454.891694][T18980] ? __pfx___alloc_skb+0x10/0x10 [ 454.896688][T18980] ? netlink_autobind+0xd6/0x2f0 [ 454.901678][T18980] ? netlink_autobind+0x2b0/0x2f0 [ 454.906769][T18980] netlink_sendmsg+0x631/0xcb0 [ 454.911611][T18980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.917046][T18980] ? __import_iovec+0x536/0x820 [ 454.921952][T18980] ? aa_sock_msg_perm+0x91/0x160 [ 454.926954][T18980] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 454.932290][T18980] ? security_socket_sendmsg+0x87/0xb0 [ 454.937810][T18980] ? __pfx_netlink_sendmsg+0x10/0x10 [ 454.943158][T18980] __sock_sendmsg+0x221/0x270 [ 454.946729][T18989] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4182'. [ 454.947872][T18980] ____sys_sendmsg+0x525/0x7d0 [ 454.947922][T18980] ? __pfx_____sys_sendmsg+0x10/0x10 [ 454.967005][T18980] __sys_sendmsg+0x2b0/0x3a0 [ 454.971692][T18980] ? __pfx___sys_sendmsg+0x10/0x10 [ 454.976878][T18980] ? irqtime_account_irq+0x18e/0x1e0 [ 454.982237][T18980] ? __irq_exit_rcu+0xf4/0x1c0 [ 454.987084][T18980] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 454.993505][T18980] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 454.999979][T18980] ? __irq_exit_rcu+0x100/0x1c0 [ 455.004875][T18980] ? do_syscall_64+0xb6/0x230 [ 455.009582][T18980] do_syscall_64+0xf3/0x230 [ 455.014132][T18980] ? clear_bhb_loop+0x35/0x90 [ 455.018818][T18980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 455.024745][T18980] RIP: 0033:0x7fe33a175b99 [ 455.029198][T18980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 455.049017][T18980] RSP: 002b:00007fe33ae97048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 455.057449][T18980] RAX: ffffffffffffffda RBX: 00007fe33a303fa0 RCX: 00007fe33a175b99 [ 455.065455][T18980] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000003 [ 455.073455][T18980] RBP: 00007fe33ae970a0 R08: 0000000000000000 R09: 0000000000000000 [ 455.081460][T18980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 455.089447][T18980] R13: 000000000000000b R14: 00007fe33a303fa0 R15: 00007ffe21d4a628 [ 455.097444][T18980] [ 455.314633][T18997] pim6reg: entered allmulticast mode [ 455.359563][T19004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4188'. [ 455.457061][T19006] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4189'. [ 455.504636][T19008] netlink: 24 bytes leftover after parsing attributes in process `syz.3.4190'. [ 455.572475][T19008] nbd: must specify at least one socket [ 455.783162][T19021] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4195'. [ 455.843036][T19020] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4194'. [ 455.939879][T19026] FAULT_INJECTION: forcing a failure. [ 455.939879][T19026] name failslab, interval 1, probability 0, space 0, times 0 [ 455.954706][T19026] CPU: 1 PID: 19026 Comm: syz.1.4197 Not tainted 6.10.0-rc5-syzkaller-00170-g134061163ee5 #0 [ 455.964927][T19026] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 455.975037][T19026] Call Trace: [ 455.978348][T19026] [ 455.981311][T19026] dump_stack_lvl+0x241/0x360 [ 455.986059][T19026] ? __pfx_dump_stack_lvl+0x10/0x10 [ 455.991310][T19026] ? __pfx__printk+0x10/0x10 [ 455.995968][T19026] should_fail_ex+0x3b0/0x4e0 [ 456.000705][T19026] ? sctp_add_bind_addr+0x89/0x3a0 [ 456.005884][T19026] should_failslab+0x9/0x20 [ 456.010429][T19026] kmalloc_trace_noprof+0x6c/0x2c0 [ 456.015595][T19026] sctp_add_bind_addr+0x89/0x3a0 [ 456.020595][T19026] sctp_copy_local_addr_list+0x311/0x500 [ 456.026284][T19026] ? sctp_copy_local_addr_list+0xab/0x500 [ 456.032089][T19026] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 456.038306][T19026] ? sctp_v4_is_any+0x35/0x60 [ 456.043058][T19026] sctp_bind_addr_copy+0xad/0x3b0 [ 456.048218][T19026] ? sctp_assoc_set_bind_addr_from_ep+0x75/0x190 [ 456.054688][T19026] sctp_connect_new_asoc+0x2f3/0x6c0 [ 456.060031][T19026] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 456.065899][T19026] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 456.071747][T19026] ? sctp_endpoint_lookup_assoc+0x217/0x250 [ 456.077680][T19026] ? sctp_endpoint_lookup_assoc+0x7c/0x250 [ 456.083541][T19026] __sctp_connect+0x66d/0xe30 [ 456.088280][T19026] ? __pfx___sctp_connect+0x10/0x10 [ 456.093523][T19026] ? __might_fault+0xc6/0x120 [ 456.098261][T19026] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 456.103949][T19026] ? security_sctp_bind_connect+0x90/0xb0 [ 456.109730][T19026] sctp_getsockopt_connectx3+0x46f/0x730 [ 456.115412][T19026] ? __local_bh_enable_ip+0x168/0x200 [ 456.120855][T19026] ? __pfx_sctp_getsockopt_connectx3+0x10/0x10 [ 456.127058][T19026] ? __local_bh_enable_ip+0x168/0x200 [ 456.132472][T19026] ? sctp_getsockopt+0x13a/0xbb0 [ 456.137448][T19026] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 456.143230][T19026] sctp_getsockopt+0x8de/0xbb0 [ 456.148039][T19026] ? __pfx_sock_common_getsockopt+0x10/0x10 [ 456.154071][T19026] do_sock_getsockopt+0x373/0x850 [ 456.159161][T19026] ? __pfx_do_sock_getsockopt+0x10/0x10 [ 456.164763][T19026] ? __fget_files+0x3f6/0x470 [ 456.169499][T19026] __sys_getsockopt+0x271/0x330 [ 456.174411][T19026] ? __pfx___sys_getsockopt+0x10/0x10 [ 456.179850][T19026] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 456.186239][T19026] ? do_syscall_64+0x100/0x230 [ 456.191057][T19026] __x64_sys_getsockopt+0xb5/0xd0 [ 456.196132][T19026] do_syscall_64+0xf3/0x230 [ 456.200694][T19026] ? clear_bhb_loop+0x35/0x90 [ 456.205414][T19026] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.211355][T19026] RIP: 0033:0x7f44ee775b99 [ 456.215808][T19026] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.235547][T19026] RSP: 002b:00007f44ef54e048 EFLAGS: 00000246 ORIG_RAX: 0000000000000037 [ 456.244020][T19026] RAX: ffffffffffffffda RBX: 00007f44ee903fa0 RCX: 00007f44ee775b99 [ 456.252043][T19026] RDX: 000000000000006f RSI: 0000000000000084 RDI: 0000000000000003 [ 456.260052][T19026] RBP: 00007f44ef54e0a0 R08: 0000000020000100 R09: 0000000000000000 [ 456.268068][T19026] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000002 [ 456.276120][T19026] R13: 000000000000000b R14: 00007f44ee903fa0 R15: 00007fff506a8d38 [ 456.284164][T19026] [ 456.630271][T19045] nbd: must specify at least one socket [ 456.727480][T19047] netlink: 'syz.4.4206': attribute type 11 has an invalid length. [ 456.861234][T19057] FAULT_INJECTION: forcing a failure. [ 456.861234][T19057] name failslab, interval 1, probability 0, space 0, times 0 [ 456.897656][T19057] CPU: 1 PID: 19057 Comm: syz.2.4208 Not tainted 6.10.0-rc5-syzkaller-00170-g134061163ee5 #0 [ 456.907901][T19057] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 456.918135][T19057] Call Trace: [ 456.921459][T19057] [ 456.924468][T19057] dump_stack_lvl+0x241/0x360 [ 456.929214][T19057] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.934474][T19057] ? __pfx__printk+0x10/0x10 [ 456.939145][T19057] should_fail_ex+0x3b0/0x4e0 [ 456.943877][T19057] ? __alloc_skb+0x1c3/0x440 [ 456.948609][T19057] should_failslab+0x9/0x20 [ 456.953168][T19057] kmem_cache_alloc_node_noprof+0x71/0x320 [ 456.959045][T19057] __alloc_skb+0x1c3/0x440 [ 456.963520][T19057] ? __pfx___alloc_skb+0x10/0x10 [ 456.968509][T19057] ? lock_acquire+0x264/0x550 [ 456.973238][T19057] ? netlink_ack_tlv_len+0x6e/0x200 [ 456.978495][T19057] netlink_ack+0x13f/0xa30 [ 456.982967][T19057] ? __pfx_lock_acquire+0x10/0x10 [ 456.988042][T19057] ? __pfx_nl80211_new_key+0x10/0x10 [ 456.993398][T19057] ? __pfx_nl80211_post_doit+0x10/0x10 [ 456.998941][T19057] netlink_rcv_skb+0x262/0x430 [ 457.003769][T19057] ? __pfx_genl_rcv_msg+0x10/0x10 [ 457.008845][T19057] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 457.014290][T19057] ? __netlink_deliver_tap+0x77e/0x7c0 [ 457.019822][T19057] genl_rcv+0x28/0x40 [ 457.023845][T19057] netlink_unicast+0x7ea/0x980 [ 457.028678][T19057] ? __pfx_netlink_unicast+0x10/0x10 [ 457.034016][T19057] ? __check_object_size+0x489/0x900 [ 457.039368][T19057] ? __check_object_size+0x49c/0x900 [ 457.044719][T19057] ? bpf_lsm_netlink_send+0x9/0x10 [ 457.049957][T19057] netlink_sendmsg+0x8db/0xcb0 [ 457.054796][T19057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.060150][T19057] ? __import_iovec+0x536/0x820 [ 457.065062][T19057] ? aa_sock_msg_perm+0x91/0x160 [ 457.070067][T19057] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 457.075429][T19057] ? security_socket_sendmsg+0x87/0xb0 [ 457.080944][T19057] ? __pfx_netlink_sendmsg+0x10/0x10 [ 457.086289][T19057] __sock_sendmsg+0x221/0x270 [ 457.091041][T19057] ____sys_sendmsg+0x525/0x7d0 [ 457.095873][T19057] ? __pfx_____sys_sendmsg+0x10/0x10 [ 457.101235][T19057] __sys_sendmsg+0x2b0/0x3a0 [ 457.105890][T19057] ? __pfx___sys_sendmsg+0x10/0x10 [ 457.111053][T19057] ? vfs_write+0x7c4/0xc90 [ 457.115578][T19057] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 457.121956][T19057] ? do_syscall_64+0x100/0x230 [ 457.126783][T19057] ? do_syscall_64+0xb6/0x230 [ 457.131520][T19057] do_syscall_64+0xf3/0x230 [ 457.136080][T19057] ? clear_bhb_loop+0x35/0x90 [ 457.140801][T19057] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 457.146750][T19057] RIP: 0033:0x7fbd73d75b99 [ 457.151215][T19057] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 457.170868][T19057] RSP: 002b:00007fbd74ab5048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 457.179339][T19057] RAX: ffffffffffffffda RBX: 00007fbd73f03fa0 RCX: 00007fbd73d75b99 [ 457.187354][T19057] RDX: 0000000000000000 RSI: 00000000200006c0 RDI: 0000000000000003 [ 457.195403][T19057] RBP: 00007fbd74ab50a0 R08: 0000000000000000 R09: 0000000000000000 [ 457.203419][T19057] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 457.211434][T19057] R13: 000000000000000b R14: 00007fbd73f03fa0 R15: 00007ffce5224788 [ 457.219479][T19057] [ 457.606858][T19073] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 457.910929][T19089] nbd: must specify at least one socket [ 458.183405][T19102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.278901][T19102] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 458.772192][T19128] __nla_validate_parse: 10 callbacks suppressed [ 458.772245][T19128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4229'. [ 458.926182][T19134] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4230'. [ 459.529892][T19160] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4241'. [ 459.649780][T19166] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4244'. [ 459.650882][T19165] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 459.842442][T19171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4246'. [ 459.885855][T19174] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4247'. [ 459.922826][T19176] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 460.143276][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4251'. [ 460.178733][T19190] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 460.206461][T19188] netlink: 'syz.4.4253': attribute type 11 has an invalid length. [ 460.247637][T19180] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4251'. [ 460.425121][T19195] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4257'. [ 460.774932][T19207] bond3 (unregistering): Released all slaves [ 460.886725][T19221] TCP: TCP segment has incorrect auth options set for 0.0.0.0.0->255.255.255.255.20002 [FR.] [ 460.943967][T19222] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4265'. [ 461.211048][T19228] netlink: 'syz.3.4269': attribute type 11 has an invalid length. [ 461.587595][T19246] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 462.266155][T19272] netlink: 'syz.4.4285': attribute type 11 has an invalid length. [ 463.206584][T19292] bond0: (slave syz_tun): Releasing backup interface [ 463.226664][T19292] syz_tun (unregistering): left allmulticast mode [ 463.328812][T19282] TCP: request_sock_TCP: Possible SYN flooding on port 0.0.0.0:20002. Sending cookies. [ 463.383561][T10821] syz_tun (unregistering): left promiscuous mode [ 463.389980][T10821] syz_tun (unregistering): left allmulticast mode [ 463.428050][T10821] team0: Port device syz_tun removed [ 464.283641][T19302] __nla_validate_parse: 8 callbacks suppressed [ 464.283663][T19302] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4303'. [ 464.410518][T19303] netlink: 155388 bytes leftover after parsing attributes in process `syz.3.4303'. [ 464.447185][T19303] debugfs: Directory 'ü!ô' with parent 'ieee80211' already present! [ 464.612485][ T29] audit: type=1804 audit(1719767354.071:48): pid=19304 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.4303" name="/root/syzkaller.ASre9h/843/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 [ 464.735646][T18389] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 464.752295][T18389] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 464.772652][T18389] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 464.783554][T18389] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 464.802614][T18389] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 464.811508][T18389] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 464.873838][T18389] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 464.886677][T18389] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 464.903617][T18389] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 464.915390][T18389] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 464.925435][T18389] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 464.935302][T18389] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 465.208281][T18389] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 465.219896][T18389] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 465.229952][T18389] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 465.262165][T18389] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 465.273008][T18389] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 465.281414][T18389] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 465.320726][ T5102] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 465.338450][ T5102] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 465.351731][ T5102] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 465.373764][ T5102] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 465.394991][ T5102] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 465.412288][ T5102] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 465.574407][T19305] chnl_net:caif_netlink_parms(): no params data found [ 465.870498][T19307] chnl_net:caif_netlink_parms(): no params data found [ 466.030642][T19305] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.039384][T19305] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.047389][T19305] bridge_slave_0: entered allmulticast mode [ 466.057767][T19305] bridge_slave_0: entered promiscuous mode [ 466.125282][T19305] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.133914][T19305] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.142202][T19305] bridge_slave_1: entered allmulticast mode [ 466.151179][T19305] bridge_slave_1: entered promiscuous mode [ 466.326982][T19307] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.335391][T19307] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.345253][T19307] bridge_slave_0: entered allmulticast mode [ 466.353506][T19307] bridge_slave_0: entered promiscuous mode [ 466.368480][T19305] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.412220][T19307] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.419457][T19307] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.442463][T19307] bridge_slave_1: entered allmulticast mode [ 466.450166][T19307] bridge_slave_1: entered promiscuous mode [ 466.471317][T19305] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.626951][T19310] chnl_net:caif_netlink_parms(): no params data found [ 466.671237][T19307] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 466.694480][T19305] team0: Port device team_slave_0 added [ 466.717700][T19307] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 466.783068][T19305] team0: Port device team_slave_1 added [ 466.857637][T19307] team0: Port device team_slave_0 added [ 466.902672][T18389] Bluetooth: hci0: command tx timeout [ 466.930017][T19307] team0: Port device team_slave_1 added [ 466.954595][T19305] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.961712][T19305] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.988780][T18389] Bluetooth: hci1: command tx timeout [ 466.995850][T19305] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.008642][T19315] chnl_net:caif_netlink_parms(): no params data found [ 467.064264][T19342] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4308'. [ 467.076031][T19305] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.084450][T19305] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.118984][T19305] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.182370][T19307] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 467.189380][T19307] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.215875][T19307] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 467.261082][T19307] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 467.268773][T19307] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 467.304784][T19307] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 467.382288][T18389] Bluetooth: hci2: command tx timeout [ 467.462482][T18389] Bluetooth: hci4: command tx timeout [ 467.672300][T19310] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.679510][T19310] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.694721][T19310] bridge_slave_0: entered allmulticast mode [ 467.706397][T19310] bridge_slave_0: entered promiscuous mode [ 467.727227][T19305] hsr_slave_0: entered promiscuous mode [ 467.734876][T19305] hsr_slave_1: entered promiscuous mode [ 467.779030][T19315] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.813836][T19315] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.821193][T19315] bridge_slave_0: entered allmulticast mode [ 467.847045][T19315] bridge_slave_0: entered promiscuous mode [ 467.865840][T19315] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.876786][T19315] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.884399][T19315] bridge_slave_1: entered allmulticast mode [ 467.892825][T19315] bridge_slave_1: entered promiscuous mode [ 467.900375][T19310] bridge0: port 2(bridge_slave_1) entered blocking state [ 467.910393][T19310] bridge0: port 2(bridge_slave_1) entered disabled state [ 467.918520][T19310] bridge_slave_1: entered allmulticast mode [ 467.927564][T19310] bridge_slave_1: entered promiscuous mode [ 467.946713][T19307] hsr_slave_0: entered promiscuous mode [ 467.954220][T19361] netlink: 176 bytes leftover after parsing attributes in process `syz.3.4312'. [ 467.965557][T19307] hsr_slave_1: entered promiscuous mode [ 467.972795][T19307] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 467.980396][T19307] Cannot create hsr debugfs directory [ 467.986397][T19361] netlink: 'syz.3.4312': attribute type 3 has an invalid length. [ 468.120348][T19315] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.215281][T19315] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.248903][T19310] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 468.269858][T19310] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 468.477438][T19315] team0: Port device team_slave_0 added [ 468.524179][T19315] team0: Port device team_slave_1 added [ 468.538407][T19310] team0: Port device team_slave_0 added [ 468.567868][T19370] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4315'. [ 468.600264][T19310] team0: Port device team_slave_1 added [ 468.762886][T19315] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.769906][T19315] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.797636][T19315] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.813661][T19310] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 468.821713][T19310] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.863188][T19310] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 468.894118][T19310] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.901200][T19310] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 468.945984][T19310] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 468.979144][T19315] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 468.986623][T18389] Bluetooth: hci0: command tx timeout [ 468.996068][T19315] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 469.022441][T19315] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 469.062485][T18389] Bluetooth: hci1: command tx timeout [ 469.215384][T19305] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.226944][T19305] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.321493][T19315] hsr_slave_0: entered promiscuous mode [ 469.329604][T19315] hsr_slave_1: entered promiscuous mode [ 469.337909][T19315] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.345905][T19315] Cannot create hsr debugfs directory [ 469.403626][T19305] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.414956][T19305] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.444248][T19310] hsr_slave_0: entered promiscuous mode [ 469.452571][T19310] hsr_slave_1: entered promiscuous mode [ 469.459411][T19310] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 469.467583][T18389] Bluetooth: hci2: command tx timeout [ 469.480360][T19310] Cannot create hsr debugfs directory [ 469.542029][T18389] Bluetooth: hci4: command tx timeout [ 469.553138][T19305] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.564007][T19305] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 469.707496][T19305] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 469.728594][T19305] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.040430][T19307] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.051565][T19307] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.185171][T19307] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.199487][T19307] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.258862][T19380] netlink: 'syz.3.4318': attribute type 12 has an invalid length. [ 470.267337][T19380] bond0: option primary_reselect: invalid value (255) [ 470.326759][T19307] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.337331][T19307] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.398050][T19307] batman_adv: batadv1: Interface deactivated: netdevsim0 [ 470.473880][T19307] batman_adv: batadv1: Removing interface: netdevsim0 [ 470.483149][T19307] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.493748][T19307] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.643982][T19387] xt_nat: multiple ranges no longer supported [ 470.733626][T19315] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.745825][T19315] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 1] type 1 family 0 port 65023 - 0 [ 470.758145][T19315] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.769908][T19388] Cannot find set identified by id 65535 to match [ 470.791541][T19305] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 470.819694][T19305] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 470.931710][T19315] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 470.943133][T19315] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 1] type 1 family 0 port 65023 - 0 [ 470.953652][T19315] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.972876][T19305] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 471.002775][T19305] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 471.073115][T18389] Bluetooth: hci0: command tx timeout [ 471.081354][T19315] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.093148][T19315] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 1] type 1 family 0 port 65023 - 0 [ 471.104050][T19315] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.123165][T19395] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4322'. [ 471.143610][T18389] Bluetooth: hci1: command tx timeout [ 471.225316][T19315] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 471.263935][T19315] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 1] type 1 family 0 port 65023 - 0 [ 471.291980][T19315] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.444689][T19401] netlink: 'syz.3.4325': attribute type 1 has an invalid length. [ 471.465509][T19401] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.4325'. [ 471.487523][T19401] netlink: 'syz.3.4325': attribute type 8 has an invalid length. [ 471.542038][T18389] Bluetooth: hci2: command tx timeout [ 471.576718][T19310] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.622546][T18389] Bluetooth: hci4: command tx timeout [ 471.626659][T19305] 8021q: adding VLAN 0 to HW filter on device bond0 [ 471.706757][T19310] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.750614][T19305] 8021q: adding VLAN 0 to HW filter on device team0 [ 471.849350][T19310] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.873318][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.880610][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 471.891262][ T5143] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.898495][ T5143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 471.992756][T19310] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 472.003519][T19310] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 472.021362][T19310] team0: Port device netdevsim0 removed [ 472.031064][T19310] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.180193][T19409] mac80211_hwsim hwsim48 •CTY<: renamed from wlan1 [ 472.405947][T19310] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 472.436694][T19415] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4329'. [ 472.450070][T19310] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 472.471153][T19310] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 472.496909][T19310] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 472.683281][T19305] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 472.696084][T19307] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 472.736808][T19307] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 472.826458][T19307] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 472.877180][T19307] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 472.909262][T19315] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 472.938133][T19315] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 472.980455][T19315] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 473.018379][T19315] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 473.143958][T18389] Bluetooth: hci0: command tx timeout [ 473.223653][T18389] Bluetooth: hci1: command tx timeout [ 473.261039][T19434] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4334'. [ 473.485869][T19310] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.506940][T19438] netlink: 40 bytes leftover after parsing attributes in process `syz.3.4336'. [ 473.622974][T18389] Bluetooth: hci2: command tx timeout [ 473.673812][T19315] 8021q: adding VLAN 0 to HW filter on device bond0 [ 473.688759][T19310] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.702122][T18389] Bluetooth: hci4: command tx timeout [ 473.718568][T19305] veth0_vlan: entered promiscuous mode [ 473.825096][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.833309][ T5095] bridge0: port 1(bridge_slave_0) entered forwarding state [ 473.849603][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 473.857593][ T5095] bridge0: port 2(bridge_slave_1) entered forwarding state [ 473.941456][T19315] 8021q: adding VLAN 0 to HW filter on device team0 [ 473.985226][ T5453] bridge0: port 1(bridge_slave_0) entered blocking state [ 473.993023][ T5453] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.017417][ T5453] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.025205][ T5453] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.046377][T19307] 8021q: adding VLAN 0 to HW filter on device bond0 [ 474.073598][T19305] veth1_vlan: entered promiscuous mode [ 474.085561][T19449] netlink: 'syz.3.4339': attribute type 1 has an invalid length. [ 474.096276][T19449] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 474.193995][T19307] 8021q: adding VLAN 0 to HW filter on device team0 [ 474.235606][T19454] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4340'. [ 474.298981][ T5143] bridge0: port 1(bridge_slave_0) entered blocking state [ 474.306246][ T5143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 474.351400][T19310] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 474.386324][T19305] veth0_macvtap: entered promiscuous mode [ 474.404944][ T5418] bridge0: port 2(bridge_slave_1) entered blocking state [ 474.412191][ T5418] bridge0: port 2(bridge_slave_1) entered forwarding state [ 474.463665][T19305] veth1_macvtap: entered promiscuous mode [ 474.668055][T19305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.692661][T19305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.717286][T19305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.731958][T19305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.753641][T19305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.777159][T19305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.792354][T19305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.816855][T19305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.836602][T19305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.858136][T19305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.877734][T19305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 474.899049][T19305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 474.927690][T19305] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 475.053947][T19305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.102121][T19305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.122095][T19305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.152300][T19305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.168038][T19305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.198957][T19305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.210129][T19305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.223989][T19305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.226425][T18389] Bluetooth: hci0: command tx timeout [ 475.240284][T19305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.251173][T19305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.261492][T19305] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 475.273408][T19305] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 475.285786][T19305] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 475.304555][T19305] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.313897][T19305] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.323366][T19305] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.333459][T19305] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 475.787199][T19310] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 475.881345][T19315] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.061686][T10204] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.077441][T10204] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.164206][T19307] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 476.238389][T19310] veth0_vlan: entered promiscuous mode [ 476.251355][T10226] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 476.263094][T10226] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 476.289909][T19310] veth1_vlan: entered promiscuous mode [ 476.516522][T19315] veth0_vlan: entered promiscuous mode [ 476.541372][T19310] veth0_macvtap: entered promiscuous mode [ 476.576921][T19307] veth0_vlan: entered promiscuous mode [ 476.590382][T19310] veth1_macvtap: entered promiscuous mode [ 476.614536][T19480] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4343'. [ 476.647634][T19307] veth1_vlan: entered promiscuous mode [ 476.667139][T19315] veth1_vlan: entered promiscuous mode [ 476.790608][T19310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.831953][T19310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.852125][T19310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.873464][T19310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.894604][T19310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.922090][T19310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.933410][T19310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.944362][T19310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.954924][T19310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.974474][T19310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.993902][T19310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.006234][T19310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.016961][T19310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.027842][T19310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.040414][T19310] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 477.054091][T19489] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4344'. [ 477.139527][T19315] veth0_macvtap: entered promiscuous mode [ 477.166921][T19310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.179607][T19310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.191238][T19310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.202999][T19310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.213014][T19310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.242213][T19310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.261333][T19310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.283313][T19310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.294114][T19310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.313708][T19310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.324431][T19310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.337398][T19310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.351371][T19310] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 477.363088][T19310] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.378095][T19310] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 477.401173][T19493] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4347'. [ 477.418281][T19307] veth0_macvtap: entered promiscuous mode [ 477.441211][T19307] veth1_macvtap: entered promiscuous mode [ 477.487523][T19315] veth1_macvtap: entered promiscuous mode [ 477.516145][T19310] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.546989][T19310] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.560252][T19310] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.571243][T19310] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 477.686537][T19500] vlan2: entered promiscuous mode [ 477.709317][T19500] dummy0: entered promiscuous mode [ 477.735459][T19500] dummy0: left promiscuous mode [ 477.879155][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.893560][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.906135][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.918007][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.929073][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.941246][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.953958][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.964659][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.975362][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.985964][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.996464][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.008570][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.020026][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.033614][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.044617][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.056195][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.073943][T19315] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.140441][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.172143][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.190578][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.203348][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.218101][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.229720][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.252092][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.264622][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.275044][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.286782][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.297178][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.309710][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.321156][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.331916][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.344034][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.354820][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.365118][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 478.375801][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.393834][T19307] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 478.423951][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.451312][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.472035][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.482885][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.492814][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.513783][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.527648][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.552046][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.566341][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.580872][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.603705][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.621062][T19518] netlink: 'syz.3.4353': attribute type 3 has an invalid length. [ 478.630691][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.630737][T19518] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.4353'. [ 478.652014][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.663122][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.674494][T19315] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.686578][T19315] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.699016][T19315] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 478.707849][T19511] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4351'. [ 478.720674][T19512] netlink: 96 bytes leftover after parsing attributes in process `syz.4.4351'. [ 478.779404][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.808480][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.825368][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.851941][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.862188][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.874658][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.891987][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.906550][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.917499][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.928809][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.940264][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.951097][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.962534][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.973416][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 478.984816][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 478.996160][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.006263][T19307] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 479.018496][T19307] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 479.033016][T19307] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 479.062995][T19315] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.074157][T19315] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.083153][T19315] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.093359][T19315] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.118832][T19521] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4354'. [ 479.146833][T19307] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.172669][T19307] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.192682][T19307] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.212444][T19307] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 479.394522][ T8656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.441628][ T8656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.599697][T19530] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4358'. [ 479.660785][T19530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4358'. [ 479.679071][ T8657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.694956][ T8657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.707336][ T8656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.752234][ T8656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 479.807549][ T8656] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 479.812792][T19532] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4357'. [ 479.824639][ T8656] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.118620][T10231] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.147998][ T8656] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 480.152900][T10231] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.176352][ T8656] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 480.441743][T19546] netlink: 'syz.3.4361': attribute type 10 has an invalid length. [ 480.493708][T19553] openvswitch: netlink: IP tunnel attribute has 2 unknown bytes. [ 481.113721][T19581] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 481.475491][T19594] netlink: 'syz.0.4376': attribute type 5 has an invalid length. [ 481.752751][T19600] __nla_validate_parse: 2 callbacks suppressed [ 481.752776][T19600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4379'. [ 481.893853][T19611] Bluetooth: MGMT ver 1.22 [ 482.902460][ T5102] Bluetooth: hci4: command 0x0405 tx timeout [ 484.986301][ T5102] Bluetooth: hci4: command 0x0405 tx timeout [ 486.045999][T19658] netlink: 36 bytes leftover after parsing attributes in process `syz.4.4396'. [ 486.287680][T19667] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 486.350824][T19676] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 487.003033][T19691] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4408'. [ 487.102225][T19695] team0: entered promiscuous mode [ 487.107341][T19695] team_slave_0: entered promiscuous mode [ 487.155825][T19695] team_slave_1: entered promiscuous mode [ 487.199101][T19699] team_slave_0: entered allmulticast mode [ 487.302160][T19699] team0: Port device team_slave_0 removed [ 487.374350][T19690] team0: left promiscuous mode [ 487.399363][T19706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4412'. [ 487.399634][T19690] team_slave_1: left promiscuous mode [ 487.586644][T19715] netlink: 4 bytes leftover after parsing attributes in process `syz.3.4411'. [ 487.610318][T19708] can: request_module (can-proto-3) failed. [ 487.642145][T19706] can: request_module (can-proto-3) failed. [ 488.009712][T19725] xt_NFQUEUE: number of total queues is 0 [ 488.561206][T19744] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4422'. [ 489.038658][ T29] audit: type=1804 audit(1719767378.501:49): pid=19759 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4429" name="/root/syzkaller.uy6UTF/15/cgroup.controllers" dev="sda1" ino=1995 res=1 errno=0 [ 489.148765][ T29] audit: type=1804 audit(1719767378.611:50): pid=19757 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.4429" name="/root/syzkaller.uy6UTF/15/cgroup.controllers" dev="sda1" ino=1995 res=1 errno=0 [ 489.190181][T19765] dccp_invalid_packet: P.Data Offset(0) too small [ 489.775344][T19782] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4437'. [ 490.334337][T19813] FAULT_INJECTION: forcing a failure. [ 490.334337][T19813] name failslab, interval 1, probability 0, space 0, times 0 [ 490.380621][T19813] CPU: 1 PID: 19813 Comm: syz.1.4448 Not tainted 6.10.0-rc5-syzkaller-00170-g134061163ee5 #0 [ 490.390858][T19813] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 490.400958][T19813] Call Trace: [ 490.404279][T19813] [ 490.407247][T19813] dump_stack_lvl+0x241/0x360 [ 490.411989][T19813] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.417252][T19813] ? __pfx__printk+0x10/0x10 [ 490.422019][T19813] ? netlink_insert+0x10b7/0x14b0 [ 490.427113][T19813] should_fail_ex+0x3b0/0x4e0 [ 490.431854][T19813] ? __alloc_skb+0x1c3/0x440 [ 490.436490][T19813] should_failslab+0x9/0x20 [ 490.441089][T19813] kmem_cache_alloc_node_noprof+0x71/0x320 [ 490.446962][T19813] __alloc_skb+0x1c3/0x440 [ 490.451435][T19813] ? __pfx___alloc_skb+0x10/0x10 [ 490.456424][T19813] ? netlink_autobind+0xd6/0x2f0 [ 490.461413][T19813] ? netlink_autobind+0x2b0/0x2f0 [ 490.466488][T19813] netlink_sendmsg+0x631/0xcb0 [ 490.471348][T19813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.476664][T19813] ? __import_iovec+0x536/0x820 [ 490.481554][T19813] ? aa_sock_msg_perm+0x91/0x160 [ 490.486561][T19813] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 490.491878][T19813] ? security_socket_sendmsg+0x87/0xb0 [ 490.497368][T19813] ? __pfx_netlink_sendmsg+0x10/0x10 [ 490.502688][T19813] __sock_sendmsg+0x221/0x270 [ 490.507406][T19813] ____sys_sendmsg+0x525/0x7d0 [ 490.512203][T19813] ? __pfx_____sys_sendmsg+0x10/0x10 [ 490.517555][T19813] __sys_sendmsg+0x2b0/0x3a0 [ 490.522345][T19813] ? __pfx___sys_sendmsg+0x10/0x10 [ 490.527497][T19813] ? vfs_write+0x7c4/0xc90 [ 490.532066][T19813] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 490.538424][T19813] ? do_syscall_64+0x100/0x230 [ 490.543222][T19813] ? do_syscall_64+0xb6/0x230 [ 490.547931][T19813] do_syscall_64+0xf3/0x230 [ 490.552465][T19813] ? clear_bhb_loop+0x35/0x90 [ 490.557161][T19813] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 490.563172][T19813] RIP: 0033:0x7fe17bf75b99 [ 490.567694][T19813] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 490.587335][T19813] RSP: 002b:00007fe17cdfe048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 490.595877][T19813] RAX: ffffffffffffffda RBX: 00007fe17c103fa0 RCX: 00007fe17bf75b99 [ 490.603875][T19813] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000005 [ 490.611973][T19813] RBP: 00007fe17cdfe0a0 R08: 0000000000000000 R09: 0000000000000000 [ 490.619977][T19813] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 490.628318][T19813] R13: 000000000000000b R14: 00007fe17c103fa0 R15: 00007ffcb5904498 [ 490.636333][T19813] [ 490.713412][T19815] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4449'. [ 490.935907][T19821] FAULT_INJECTION: forcing a failure. [ 490.935907][T19821] name failslab, interval 1, probability 0, space 0, times 0 [ 490.948851][T19821] CPU: 1 PID: 19821 Comm: syz.2.4451 Not tainted 6.10.0-rc5-syzkaller-00170-g134061163ee5 #0 [ 490.959062][T19821] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 490.969203][T19821] Call Trace: [ 490.972539][T19821] [ 490.975506][T19821] dump_stack_lvl+0x241/0x360 [ 490.980244][T19821] ? __pfx_dump_stack_lvl+0x10/0x10 [ 490.985497][T19821] ? __pfx__printk+0x10/0x10 [ 490.990173][T19821] should_fail_ex+0x3b0/0x4e0 [ 490.994929][T19821] ? skb_clone+0x20c/0x390 [ 490.999410][T19821] should_failslab+0x9/0x20 [ 491.003970][T19821] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 491.009408][T19821] skb_clone+0x20c/0x390 [ 491.013700][T19821] ? dev_queue_xmit_nit+0x220/0xc10 [ 491.018961][T19821] dev_queue_xmit_nit+0x419/0xc10 [ 491.024037][T19821] ? dev_queue_xmit_nit+0x2b/0xc10 [ 491.029205][T19821] ? validate_xmit_skb+0xa04/0x1120 [ 491.034458][T19821] dev_hard_start_xmit+0x15f/0x7e0 [ 491.039619][T19821] ? __pfx_validate_xmit_skb+0x10/0x10 [ 491.045151][T19821] __dev_queue_xmit+0x1b0e/0x3d30 [ 491.050246][T19821] ? __dev_queue_xmit+0x2d2/0x3d30 [ 491.055419][T19821] ? __pfx___dev_queue_xmit+0x10/0x10 [ 491.060841][T19821] ? __copy_skb_header+0x437/0x5b0 [ 491.066070][T19821] ? __asan_memcpy+0x40/0x70 [ 491.070712][T19821] ? __copy_skb_header+0x437/0x5b0 [ 491.075904][T19821] ? __skb_clone+0x454/0x6c0 [ 491.080556][T19821] ? skb_clone+0x240/0x390 [ 491.085032][T19821] __netlink_deliver_tap+0x54d/0x7c0 [ 491.090390][T19821] ? netlink_deliver_tap+0x2e/0x1b0 [ 491.095646][T19821] netlink_deliver_tap+0x19d/0x1b0 [ 491.100814][T19821] netlink_dump+0x8d0/0xe50 [ 491.105380][T19821] ? __pfx_netlink_dump+0x10/0x10 [ 491.110447][T19821] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 491.116490][T19821] ? lockdep_hardirqs_on+0x99/0x150 [ 491.121785][T19821] ? netlink_recvmsg+0x60a/0x11d0 [ 491.126863][T19821] ? kmem_cache_free+0x145/0x350 [ 491.131844][T19821] netlink_recvmsg+0x6bb/0x11d0 [ 491.136768][T19821] ? __pfx_netlink_recvmsg+0x10/0x10 [ 491.142125][T19821] ? __pfx___might_resched+0x10/0x10 [ 491.147461][T19821] ? iovec_from_user+0x1b0/0x240 [ 491.152891][T19821] ? __import_iovec+0x361/0x820 [ 491.157888][T19821] ? __pfx_netlink_recvmsg+0x10/0x10 [ 491.163325][T19821] sock_recvmsg_nosec+0x18e/0x1d0 [ 491.168396][T19821] ____sys_recvmsg+0x3c0/0x470 [ 491.173230][T19821] ? __pfx_____sys_recvmsg+0x10/0x10 [ 491.178557][T19821] ? __might_fault+0xaa/0x120 [ 491.183307][T19821] do_recvmmsg+0x474/0xae0 [ 491.187844][T19821] ? __pfx_lock_release+0x10/0x10 [ 491.192894][T19821] ? __pfx_do_recvmmsg+0x10/0x10 [ 491.197876][T19821] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 491.203795][T19821] ? ksys_write+0x23e/0x2c0 [ 491.208322][T19821] ? __pfx_lock_release+0x10/0x10 [ 491.213382][T19821] ? vfs_write+0x7c4/0xc90 [ 491.218221][T19821] ? __mutex_unlock_slowpath+0x21d/0x750 [ 491.223890][T19821] ? __fget_files+0x3f6/0x470 [ 491.228627][T19821] __x64_sys_recvmmsg+0x199/0x250 [ 491.233680][T19821] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 491.239252][T19821] ? do_syscall_64+0x100/0x230 [ 491.244143][T19821] ? do_syscall_64+0xb6/0x230 [ 491.248878][T19821] do_syscall_64+0xf3/0x230 [ 491.253413][T19821] ? clear_bhb_loop+0x35/0x90 [ 491.258107][T19821] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 491.264049][T19821] RIP: 0033:0x7ff461b75b99 [ 491.268479][T19821] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 491.288108][T19821] RSP: 002b:00007ff462935048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 491.296549][T19821] RAX: ffffffffffffffda RBX: 00007ff461d03fa0 RCX: 00007ff461b75b99 [ 491.304545][T19821] RDX: 0000000000000003 RSI: 0000000020000a40 RDI: 0000000000000003 [ 491.312532][T19821] RBP: 00007ff4629350a0 R08: 0000000000000000 R09: 0000000000000000 [ 491.320521][T19821] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 491.328512][T19821] R13: 000000000000000b R14: 00007ff461d03fa0 R15: 00007ffde5cc0188 [ 491.336518][T19821] [ 491.508122][T19829] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4454'. [ 491.576470][T19834] x_tables: duplicate entry at hook 3 [ 491.645410][T19836] netlink: 'syz.0.4458': attribute type 1 has an invalid length. [ 491.653694][T19836] NCSI netlink: No device for ifindex 0 [ 491.758116][T19840] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4457'. [ 491.861480][T19845] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4462'. [ 491.956387][T19848] netlink: 'syz.1.4463': attribute type 9 has an invalid length. [ 491.982558][T19848] netlink: 209836 bytes leftover after parsing attributes in process `syz.1.4463'. [ 492.276909][T19865] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4467'. [ 492.746374][T19890] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4476'. [ 492.893787][T19893] netlink: 209848 bytes leftover after parsing attributes in process `syz.0.4477'. [ 492.920308][T19893] openvswitch: netlink: Message has 2 unknown bytes. [ 493.346962][T19912] (unnamed net_device) (uninitialized): option ad_select: invalid value (253) [ 493.673510][T19923] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4491'. [ 493.833243][T19929] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4492'. [ 493.994674][T19938] tipc: Started in network mode [ 494.005003][T19938] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 494.024257][T19938] tipc: Enabled bearer , priority 10 [ 494.042272][T19948] netlink: 32 bytes leftover after parsing attributes in process `syz.0.4494'. [ 494.240706][T19957] Cannot find set identified by id 0 to match [ 494.288240][T19962] netlink: 'syz.2.4499': attribute type 4 has an invalid length. [ 494.393925][T19966] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 494.646477][T19981] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4505'. [ 494.797506][T19988] netlink: 40 bytes leftover after parsing attributes in process `syz.4.4508'. [ 494.957067][T19999] netlink: 209844 bytes leftover after parsing attributes in process `syz.2.4512'. [ 495.008038][T20003] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4512'. [ 495.133295][ T5143] tipc: Node number set to 15444650 [ 495.262217][T20020] netlink: 'syz.4.4518': attribute type 1 has an invalid length. [ 496.639378][T20081] wg2: entered promiscuous mode [ 496.673466][T20081] wg2: entered allmulticast mode [ 497.549354][T20121] bridge0: port 3(geneve1) entered blocking state [ 497.575575][T20121] bridge0: port 3(geneve1) entered disabled state [ 497.598040][T20121] geneve1: entered allmulticast mode [ 497.607291][T20128] FAULT_INJECTION: forcing a failure. [ 497.607291][T20128] name fail_page_alloc, interval 1, probability 0, space 0, times 0 [ 497.640383][T20121] geneve1: entered promiscuous mode [ 497.646150][T20122] Timeout policy `syz0' can only be used by L3 protocol number 34984 [ 497.655050][T20128] CPU: 1 PID: 20128 Comm: syz.1.4557 Not tainted 6.10.0-rc5-syzkaller-00170-g134061163ee5 #0 [ 497.665265][T20128] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 497.675366][T20128] Call Trace: [ 497.678699][T20128] [ 497.681680][T20128] dump_stack_lvl+0x241/0x360 [ 497.686416][T20128] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.691656][T20128] ? __pfx__printk+0x10/0x10 [ 497.696286][T20128] ? stack_depot_save_flags+0x29/0x830 [ 497.701809][T20128] should_fail_ex+0x3b0/0x4e0 [ 497.706527][T20128] prepare_alloc_pages+0x1da/0x5d0 [ 497.711688][T20128] __alloc_pages_noprof+0x166/0x6c0 [ 497.716925][T20128] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 497.722692][T20128] ? lockdep_init_map_type+0xa1/0x910 [ 497.728085][T20128] alloc_pages_mpol_noprof+0x3e8/0x680 [ 497.733580][T20128] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 497.739595][T20128] ? __init_waitqueue_head+0xae/0x150 [ 497.744986][T20128] ? alloc_pages_noprof+0xef/0x170 [ 497.750127][T20128] get_zeroed_page_noprof+0x17/0x40 [ 497.755354][T20128] rds_cong_from_addr+0x10f/0x380 [ 497.760402][T20128] rds_cong_get_maps+0x53/0xb0 [ 497.765194][T20128] __rds_conn_create+0x9d6/0x1ed0 [ 497.770260][T20128] ? __rds_conn_create+0x2d1/0x1ed0 [ 497.775513][T20128] ? __pfx___rds_conn_create+0x10/0x10 [ 497.781021][T20128] rds_conn_create_outgoing+0x43/0x60 [ 497.786420][T20128] rds_sendmsg+0x1251/0x2270 [ 497.791044][T20128] ? __pfx___might_resched+0x10/0x10 [ 497.796367][T20128] ? __pfx_rds_sendmsg+0x10/0x10 [ 497.801335][T20128] ? aa_sk_perm+0x967/0xab0 [ 497.805900][T20128] ? __pfx_aa_sk_perm+0x10/0x10 [ 497.810777][T20128] ? iovec_from_user+0x61/0x240 [ 497.815682][T20128] ? __import_iovec+0x361/0x820 [ 497.820552][T20128] ? aa_sock_msg_perm+0x91/0x160 [ 497.825562][T20128] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 497.830864][T20128] ? security_socket_sendmsg+0x87/0xb0 [ 497.836350][T20128] ? __pfx_rds_sendmsg+0x10/0x10 [ 497.841317][T20128] __sock_sendmsg+0x221/0x270 [ 497.846034][T20128] ____sys_sendmsg+0x525/0x7d0 [ 497.850829][T20128] ? __pfx_____sys_sendmsg+0x10/0x10 [ 497.856156][T20128] __sys_sendmsg+0x2b0/0x3a0 [ 497.860778][T20128] ? __pfx___sys_sendmsg+0x10/0x10 [ 497.865921][T20128] ? vfs_write+0x7c4/0xc90 [ 497.870403][T20128] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 497.876805][T20128] ? do_syscall_64+0x100/0x230 [ 497.881630][T20128] ? do_syscall_64+0xb6/0x230 [ 497.886341][T20128] do_syscall_64+0xf3/0x230 [ 497.890872][T20128] ? clear_bhb_loop+0x35/0x90 [ 497.895593][T20128] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 497.901522][T20128] RIP: 0033:0x7fe17bf75b99 [ 497.905953][T20128] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 497.925587][T20128] RSP: 002b:00007fe17cdfe048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 497.934035][T20128] RAX: ffffffffffffffda RBX: 00007fe17c103fa0 RCX: 00007fe17bf75b99 [ 497.942029][T20128] RDX: 0000000000000000 RSI: 0000000020000740 RDI: 0000000000000003 [ 497.950032][T20128] RBP: 00007fe17cdfe0a0 R08: 0000000000000000 R09: 0000000000000000 [ 497.958025][T20128] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 497.966014][T20128] R13: 000000000000000b R14: 00007fe17c103fa0 R15: 00007ffcb5904498 [ 497.974028][T20128] [ 497.983917][T20121] bridge0: port 3(geneve1) entered blocking state [ 497.990539][T20121] bridge0: port 3(geneve1) entered forwarding state [ 498.274710][T20142] __nla_validate_parse: 12 callbacks suppressed [ 498.274762][T20142] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4561'. [ 498.385437][T20141] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4559'. [ 498.416528][T20141] netlink: 36 bytes leftover after parsing attributes in process `syz.1.4559'. [ 498.458909][T20149] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4563'. [ 498.501557][T20148] team0: entered promiscuous mode [ 498.529333][T20148] team_slave_0: entered promiscuous mode [ 498.539198][T20148] team_slave_1: entered promiscuous mode [ 498.560784][T20148] syz_tun: entered promiscuous mode [ 498.714183][T20161] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4568'. [ 498.753068][T20148] team0: left promiscuous mode [ 498.758010][T20148] team_slave_0: left promiscuous mode [ 498.805357][T20148] team_slave_1: left promiscuous mode [ 498.811069][T20148] syz_tun: left promiscuous mode [ 499.021228][T20171] netlink: 'syz.4.4571': attribute type 1 has an invalid length. [ 499.092478][T20171] netlink: 224 bytes leftover after parsing attributes in process `syz.4.4571'. [ 499.133612][T20174] netlink: 104 bytes leftover after parsing attributes in process `syz.4.4571'. [ 499.673411][T20197] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4579'. [ 500.273940][T20222] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4585'. [ 500.545506][T20227] warning: checkpointing journal with EXT4_IOC_CHECKPOINT_FLAG_ZEROOUT can be slow [ 500.781557][T20236] erspan0 speed is unknown, defaulting to 1000 [ 500.870930][T20236] erspan0 speed is unknown, defaulting to 1000 [ 500.892488][T20238] netlink: 'syz.1.4589': attribute type 29 has an invalid length. [ 500.925116][T20236] erspan0 speed is unknown, defaulting to 1000 [ 500.972217][T20238] netlink: 'syz.1.4589': attribute type 29 has an invalid length. [ 501.025853][T20239] netlink: 'syz.1.4589': attribute type 29 has an invalid length. [ 501.113928][T20236] infiniband s}z1: RDMA CMA: cma_listen_on_dev, error -98 [ 501.121296][T20252] syz.3.4594 uses old SIOCAX25GETINFO [ 501.199014][T20236] erspan0 speed is unknown, defaulting to 1000 [ 501.235024][T20236] erspan0 speed is unknown, defaulting to 1000 [ 501.282676][T20236] erspan0 speed is unknown, defaulting to 1000 [ 501.292778][T20254] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4595'. [ 501.333348][T20236] erspan0 speed is unknown, defaulting to 1000 [ 501.365975][T20236] erspan0 speed is unknown, defaulting to 1000 [ 501.389716][T20236] erspan0 speed is unknown, defaulting to 1000 [ 501.414484][T20236] erspan0 speed is unknown, defaulting to 1000 [ 501.459566][T20236] erspan0 speed is unknown, defaulting to 1000 [ 501.485635][T20236] erspan0 speed is unknown, defaulting to 1000 [ 501.511664][T20236] erspan0 speed is unknown, defaulting to 1000 [ 501.790522][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.807595][T20316] netlink: 'syz.2.4619': attribute type 25 has an invalid length. [ 502.832267][T20316] netlink: 'syz.2.4619': attribute type 8 has an invalid length. [ 502.970707][T20322] netlink: 'syz.0.4623': attribute type 13 has an invalid length. [ 503.287155][T20337] __nla_validate_parse: 7 callbacks suppressed [ 503.287180][T20337] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4629'. [ 503.355690][T20342] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4630'. [ 503.431596][T20342] vlan2: entered promiscuous mode [ 503.442440][T20342] bond0: entered promiscuous mode [ 503.448176][T20342] bond_slave_0: entered promiscuous mode [ 503.499623][T20342] bond_slave_1: entered promiscuous mode [ 503.523766][T20344] (unnamed net_device) (uninitialized): (slave bond_slave_1): Device is not our slave [ 503.542333][T20344] (unnamed net_device) (uninitialized): option active_slave: invalid value (bond_slave_1) [ 503.564612][T20349] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 503.628886][T20344] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1 (only 8 groups) [ 504.017585][T20365] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4637'. [ 504.204194][T20375] bond0: entered promiscuous mode [ 504.212982][T20375] bond_slave_0: entered promiscuous mode [ 504.242039][T20375] bond_slave_1: entered promiscuous mode [ 504.262227][T20375] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 504.284422][T20375] bond0: left promiscuous mode [ 504.290479][T20381] FAULT_INJECTION: forcing a failure. [ 504.290479][T20381] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 504.310394][T20375] bond_slave_0: left promiscuous mode [ 504.324474][T20375] bond_slave_1: left promiscuous mode [ 504.350460][T20381] CPU: 1 PID: 20381 Comm: syz.1.4645 Not tainted 6.10.0-rc5-syzkaller-00170-g134061163ee5 #0 [ 504.360697][T20381] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 504.370797][T20381] Call Trace: [ 504.374111][T20381] [ 504.377075][T20381] dump_stack_lvl+0x241/0x360 [ 504.381806][T20381] ? __pfx_dump_stack_lvl+0x10/0x10 [ 504.387049][T20381] ? __pfx__printk+0x10/0x10 [ 504.391665][T20381] ? __pfx_lock_release+0x10/0x10 [ 504.396718][T20381] should_fail_ex+0x3b0/0x4e0 [ 504.401602][T20381] _copy_from_iter+0x1f6/0x1960 [ 504.406468][T20381] ? __virt_addr_valid+0x183/0x520 [ 504.411613][T20381] ? __pfx_lock_release+0x10/0x10 [ 504.416670][T20381] ? __alloc_skb+0x28f/0x440 [ 504.421285][T20381] ? __pfx__copy_from_iter+0x10/0x10 [ 504.426608][T20381] ? __virt_addr_valid+0x183/0x520 [ 504.431765][T20381] ? __virt_addr_valid+0x183/0x520 [ 504.436916][T20381] ? __virt_addr_valid+0x44e/0x520 [ 504.442068][T20381] ? __check_object_size+0x49c/0x900 [ 504.447473][T20381] netlink_sendmsg+0x743/0xcb0 [ 504.452284][T20381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.457594][T20381] ? __import_iovec+0x536/0x820 [ 504.462468][T20381] ? aa_sock_msg_perm+0x91/0x160 [ 504.467521][T20381] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 504.472823][T20381] ? security_socket_sendmsg+0x87/0xb0 [ 504.478332][T20381] ? __pfx_netlink_sendmsg+0x10/0x10 [ 504.483643][T20381] __sock_sendmsg+0x221/0x270 [ 504.488355][T20381] ____sys_sendmsg+0x525/0x7d0 [ 504.493151][T20381] ? __pfx_____sys_sendmsg+0x10/0x10 [ 504.498474][T20381] __sys_sendmsg+0x2b0/0x3a0 [ 504.503178][T20381] ? __pfx___sys_sendmsg+0x10/0x10 [ 504.508305][T20381] ? vfs_write+0x7c4/0xc90 [ 504.512783][T20381] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 504.519219][T20381] ? do_syscall_64+0x100/0x230 [ 504.524017][T20381] ? do_syscall_64+0xb6/0x230 [ 504.528767][T20381] do_syscall_64+0xf3/0x230 [ 504.533315][T20381] ? clear_bhb_loop+0x35/0x90 [ 504.538010][T20381] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 504.543959][T20381] RIP: 0033:0x7fe17bf75b99 [ 504.548402][T20381] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 504.568201][T20381] RSP: 002b:00007fe17cdfe048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 504.576766][T20381] RAX: ffffffffffffffda RBX: 00007fe17c103fa0 RCX: 00007fe17bf75b99 [ 504.584767][T20381] RDX: 0000000000000000 RSI: 00000000200001c0 RDI: 0000000000000003 [ 504.592756][T20381] RBP: 00007fe17cdfe0a0 R08: 0000000000000000 R09: 0000000000000000 [ 504.600758][T20381] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 504.608744][T20381] R13: 000000000000000b R14: 00007fe17c103fa0 R15: 00007ffcb5904498 [ 504.616747][T20381] [ 504.684706][T20384] netlink: 312 bytes leftover after parsing attributes in process `syz.2.4647'. [ 504.953370][T20393] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4648'. [ 505.001312][T20387] nbd: must specify a device to reconfigure [ 505.019423][T20394] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 505.053528][T20387] netlink: 'syz.3.4648': attribute type 7 has an invalid length. [ 505.256402][T20403] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4654'. [ 505.397249][T20405] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 505.523152][T20419] Bluetooth: hci0: load_link_keys: too big key_count value 65280 [ 505.738601][T20427] netlink: 80 bytes leftover after parsing attributes in process `syz.4.4661'. [ 505.766277][T20427] netlink: 6 bytes leftover after parsing attributes in process `syz.4.4661'. [ 505.936275][T20427] IPVS: Error connecting to the multicast addr [ 506.117624][T20444] tipc: New replicast peer: 100.1.1.1 [ 506.138715][T20444] tipc: Enabled bearer , priority 0 [ 506.229716][T20447] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4668'. [ 506.693241][T20463] Bluetooth: hci0: load_link_keys: too big key_count value 65280 [ 507.047277][T20481] netlink: 'syz.4.4679': attribute type 1 has an invalid length. [ 507.082264][T20481] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 507.089647][T20481] IPv6: NLM_F_CREATE should be set when creating new route [ 507.097147][T20481] IPv6: NLM_F_CREATE should be set when creating new route [ 507.202094][T20483] ieee802154 phy1 wpan1: encryption failed: -22 [ 507.313648][T20489] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4682'. [ 507.487846][T20499] FAULT_INJECTION: forcing a failure. [ 507.487846][T20499] name failslab, interval 1, probability 0, space 0, times 0 [ 507.531071][T20499] CPU: 0 PID: 20499 Comm: syz.1.4686 Not tainted 6.10.0-rc5-syzkaller-00170-g134061163ee5 #0 [ 507.541306][T20499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 507.551448][T20499] Call Trace: [ 507.554769][T20499] [ 507.557738][T20499] dump_stack_lvl+0x241/0x360 [ 507.562482][T20499] ? __pfx_dump_stack_lvl+0x10/0x10 [ 507.567767][T20499] ? __pfx__printk+0x10/0x10 [ 507.572433][T20499] ? netlink_insert+0x10b7/0x14b0 [ 507.577530][T20499] should_fail_ex+0x3b0/0x4e0 [ 507.582266][T20499] ? __alloc_skb+0x1c3/0x440 [ 507.586900][T20499] should_failslab+0x9/0x20 [ 507.591466][T20499] kmem_cache_alloc_node_noprof+0x71/0x320 [ 507.597347][T20499] __alloc_skb+0x1c3/0x440 [ 507.601831][T20499] ? __pfx___alloc_skb+0x10/0x10 [ 507.606838][T20499] ? netlink_autobind+0xd6/0x2f0 [ 507.611829][T20499] ? netlink_autobind+0x2b0/0x2f0 [ 507.616915][T20499] netlink_sendmsg+0x631/0xcb0 [ 507.621858][T20499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.627200][T20499] ? __import_iovec+0x536/0x820 [ 507.632105][T20499] ? aa_sock_msg_perm+0x91/0x160 [ 507.637113][T20499] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 507.642468][T20499] ? security_socket_sendmsg+0x87/0xb0 [ 507.647981][T20499] ? __pfx_netlink_sendmsg+0x10/0x10 [ 507.653449][T20499] __sock_sendmsg+0x221/0x270 [ 507.658193][T20499] ____sys_sendmsg+0x525/0x7d0 [ 507.663030][T20499] ? __pfx_____sys_sendmsg+0x10/0x10 [ 507.668393][T20499] __sys_sendmsg+0x2b0/0x3a0 [ 507.673219][T20499] ? __pfx___sys_sendmsg+0x10/0x10 [ 507.678387][T20499] ? vfs_write+0x7c4/0xc90 [ 507.682906][T20499] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 507.689293][T20499] ? do_syscall_64+0x100/0x230 [ 507.694117][T20499] ? do_syscall_64+0xb6/0x230 [ 507.698853][T20499] do_syscall_64+0xf3/0x230 [ 507.703411][T20499] ? clear_bhb_loop+0x35/0x90 [ 507.708217][T20499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 507.714251][T20499] RIP: 0033:0x7fe17bf75b99 [ 507.718710][T20499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 507.738373][T20499] RSP: 002b:00007fe17cdfe048 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 507.746842][T20499] RAX: ffffffffffffffda RBX: 00007fe17c103fa0 RCX: 00007fe17bf75b99 [ 507.754863][T20499] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 507.762884][T20499] RBP: 00007fe17cdfe0a0 R08: 0000000000000000 R09: 0000000000000000 [ 507.770907][T20499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 507.778934][T20499] R13: 000000000000000b R14: 00007fe17c103fa0 R15: 00007ffcb5904498 [ 507.786971][T20499] [ 507.849612][T20502] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.857530][T20502] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.065316][T20515] Bluetooth: hci0: load_link_keys: too big key_count value 65280 [ 508.392892][T20526] team0: entered promiscuous mode [ 508.398597][T20526] team_slave_0: entered promiscuous mode [ 508.453966][T20526] team_slave_1: entered promiscuous mode [ 508.473172][T20529] __nla_validate_parse: 2 callbacks suppressed [ 508.473195][T20529] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4696'. [ 508.519253][T20525] team0: left promiscuous mode [ 508.535913][T20525] team_slave_0: left promiscuous mode [ 508.565599][T20525] team_slave_1: left promiscuous mode [ 508.815900][T20547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4701'. [ 509.137722][T20550] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4703'. [ 509.367535][T20563] hsr0: entered promiscuous mode [ 509.602157][T20572] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4710'. [ 509.630772][T20573] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.639773][T20573] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.787935][T20577] (unnamed net_device) (uninitialized): down delay (6) is not a multiple of miimon (7), value rounded to 0 ms [ 509.883418][T20586] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4708'. [ 510.139932][T20595] netlink: 'syz.2.4716': attribute type 1 has an invalid length. [ 510.176711][T20595] netlink: 'syz.2.4716': attribute type 3 has an invalid length. [ 510.215060][T20595] netlink: 224 bytes leftover after parsing attributes in process `syz.2.4716'. [ 510.430201][T20606] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4723'. [ 510.484960][T20605] netlink: 20 bytes leftover after parsing attributes in process `syz.4.4720'. [ 511.060719][T20635] nbd: couldn't find a device at index -1 [ 511.067784][T20636] netlink: 'syz.2.4727': attribute type 63 has an invalid length. [ 511.121627][T20638] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4732'. [ 511.404332][T20624] netlink: 'syz.2.4727': attribute type 29 has an invalid length. [ 511.422262][T20624] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4727'. [ 511.452506][T20624] netlink: 'syz.2.4727': attribute type 29 has an invalid length. [ 511.836052][T20660] netlink: 'syz.1.4739': attribute type 1 has an invalid length. [ 511.866856][T20660] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 []L3 index 0 [ 513.207885][T20719] tipc: Started in network mode [ 513.228892][T20719] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 513.270655][T20719] tipc: Enabled bearer , priority 10 [ 513.687092][T20736] xt_ecn: cannot match TCP bits for non-tcp packets [ 513.716000][T20736] __nla_validate_parse: 11 callbacks suppressed [ 513.716028][T20736] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4763'. [ 514.175227][T20749] x_tables: duplicate underflow at hook 1 [ 514.188829][T20747] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4767'. [ 514.257287][T20750] netlink: 'syz.0.4768': attribute type 2 has an invalid length. [ 514.290401][T20750] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.4768'. [ 514.341650][T20750] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4768'. [ 514.384133][ T5438] tipc: Node number set to 10005162 [ 514.434066][T20750] pim6reg: entered allmulticast mode [ 514.463009][T20748] pim6reg: left allmulticast mode [ 514.479973][T20756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 514.493819][T20758] syz.3.4771[20758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.512503][T20758] syz.3.4771[20758] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 514.687692][T20764] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4772'. [ 514.741239][T20767] netlink: 'syz.0.4774': attribute type 1 has an invalid length. [ 514.785533][T20767] netlink: 'syz.0.4774': attribute type 1 has an invalid length. [ 514.821006][T20767] netlink: 'syz.0.4774': attribute type 2 has an invalid length. [ 515.186618][T20793] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 515.295663][T20800] Cannot find add_set index 0 as target [ 515.456534][T20801] ebtables: ebtables: counters copy to user failed while replacing table [ 515.648286][T20812] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4786'. [ 516.188590][T20829] netlink: 224 bytes leftover after parsing attributes in process `syz.0.4792'. [ 516.531688][T20844] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 516.603687][T20843] validate_nla: 3 callbacks suppressed [ 516.603712][T20843] netlink: 'syz.2.4798': attribute type 3 has an invalid length. [ 516.661115][T20847] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4799'. [ 516.767863][T20843] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 517.200250][T20861] bridge0: entered allmulticast mode [ 517.220512][T20861] bridge0: left allmulticast mode [ 517.465768][T20869] netlink: 'syz.4.4806': attribute type 2 has an invalid length. [ 517.512216][T20869] netlink: 'syz.4.4806': attribute type 8 has an invalid length. [ 517.542849][T20869] netlink: 'syz.4.4806': attribute type 1 has an invalid length. [ 517.571935][T20869] netlink: 'syz.4.4806': attribute type 1 has an invalid length. [ 517.650241][T20869] vlan2: entered allmulticast mode [ 518.028792][T20891] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4813'. [ 518.212971][T20894] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4814'. [ 518.597872][T20908] xt_l2tp: v2 tid > 0xffff: 100794368 [ 518.833627][T20921] netlink: 'syz.2.4823': attribute type 29 has an invalid length. [ 518.860478][T20921] netlink: 'syz.2.4823': attribute type 29 has an invalid length. [ 518.894315][T20924] netlink: 'syz.2.4823': attribute type 29 has an invalid length. [ 518.962240][T20921] netlink: 'syz.2.4823': attribute type 29 has an invalid length. [ 518.984885][T20921] netlink: 'syz.2.4823': attribute type 29 has an invalid length. [ 519.025154][T20929] __nla_validate_parse: 1 callbacks suppressed [ 519.025178][T20929] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4826'. [ 520.618959][T20982] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4840'. [ 521.034731][T20997] netlink: 24 bytes leftover after parsing attributes in process `syz.1.4845'. [ 521.062643][T18389] Bluetooth: hci4: command 0x0405 tx timeout [ 521.128955][T21001] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4847'. [ 521.295783][T21011] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4848'. [ 521.335329][T21007] team0: Device veth1_macvtap failed to register rx_handler [ 521.652127][T21026] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4853'. [ 521.725888][T21007] syz.3.4850 (21007) used greatest stack depth: 18296 bytes left [ 522.659036][T21059] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4865'. [ 522.759797][T21071] netlink: 8 bytes leftover after parsing attributes in process `syz.3.4868'. [ 523.181606][T21085] x_tables: duplicate underflow at hook 1 [ 523.523074][T21096] netlink: 164 bytes leftover after parsing attributes in process `syz.4.4879'. [ 523.573912][T21096] validate_nla: 4 callbacks suppressed [ 523.574535][T21096] netlink: 'syz.4.4879': attribute type 2 has an invalid length. [ 523.618491][T21099] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4880'. [ 523.650065][T21096] netlink: 'syz.4.4879': attribute type 2 has an invalid length. [ 523.685778][T21096] netlink: 'syz.4.4879': attribute type 1 has an invalid length. [ 523.853380][T21110] pim6reg: entered allmulticast mode [ 523.892885][T21114] pim6reg: left allmulticast mode [ 524.024049][T21112] tipc: Enabling of bearer rejected, failed to enable media [ 524.606620][T21140] __nla_validate_parse: 3 callbacks suppressed [ 524.606647][T21140] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4892'. [ 524.622276][T21141] xt_CT: You must specify a L4 protocol and not use inversions on it [ 524.677982][T21141] vlan2: entered allmulticast mode [ 524.726312][T21146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4894'. [ 524.917184][T21154] netlink: 20 bytes leftover after parsing attributes in process `syz.1.4897'. [ 525.080050][T21156] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.4898'. [ 525.731271][T21175] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.807231][T21180] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4906'. [ 525.947778][T21175] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 525.995812][T21193] erspan0 speed is unknown, defaulting to 1000 [ 526.134000][T21175] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.311532][T21175] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 526.505361][T21203] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4915'. [ 526.626087][T21175] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.718584][T21175] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 526.959324][T21175] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.062719][T18389] Bluetooth: hci0: command tx timeout [ 527.088758][T21175] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 527.287041][T21219] netlink: 28 bytes leftover after parsing attributes in process `syz.1.4922'. [ 527.513481][T21231] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4926'. [ 527.829544][T21240] erspan0 speed is unknown, defaulting to 1000 [ 528.368827][T21259] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4933'. [ 528.588114][T21265] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.4932'. [ 528.659038][T21259] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 528.962621][T21282] netlink: 'syz.4.4941': attribute type 1 has an invalid length. [ 529.518077][T21299] erspan0 speed is unknown, defaulting to 1000 [ 529.785804][T21313] __nla_validate_parse: 2 callbacks suppressed [ 529.785829][T21313] netlink: 28 bytes leftover after parsing attributes in process `syz.4.4952'. [ 529.877156][T21318] tipc: Trying to set illegal importance in message [ 529.999512][T21314] netlink: 20 bytes leftover after parsing attributes in process `syz.3.4951'. [ 530.345840][T21331] netlink: 56 bytes leftover after parsing attributes in process `syz.0.4958'. [ 531.052641][T21350] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4964'. [ 531.125643][T21350] vlan4: entered promiscuous mode [ 531.131358][T21350] gretap0: entered promiscuous mode [ 531.143738][T21350] gretap0: left promiscuous mode [ 531.217394][T21353] netlink: 28 bytes leftover after parsing attributes in process `syz.0.4965'. [ 531.598570][T21367] erspan0 speed is unknown, defaulting to 1000 [ 532.082376][T21387] netlink: 16 bytes leftover after parsing attributes in process `syz.1.4975'. [ 532.449960][T21400] netlink: 20 bytes leftover after parsing attributes in process `syz.2.4980'. [ 532.462795][T21392] netlink: 28 bytes leftover after parsing attributes in process `syz.3.4978'. [ 533.077507][T21419] netlink: 209844 bytes leftover after parsing attributes in process `syz.1.4986'. [ 533.316448][T21432] FAULT_INJECTION: forcing a failure. [ 533.316448][T21432] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 533.376093][T21432] CPU: 1 PID: 21432 Comm: syz.2.4992 Not tainted 6.10.0-rc5-syzkaller-00170-g134061163ee5 #0 [ 533.386380][T21432] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 533.396482][T21432] Call Trace: [ 533.399806][T21432] [ 533.402772][T21432] dump_stack_lvl+0x241/0x360 [ 533.407518][T21432] ? __pfx_dump_stack_lvl+0x10/0x10 [ 533.412825][T21432] ? __pfx__printk+0x10/0x10 [ 533.417472][T21432] ? seqcount_lockdep_reader_access+0x1d7/0x220 [ 533.423758][T21432] ? __pfx_lock_release+0x10/0x10 [ 533.428822][T21432] ? ktime_get_ts64+0xa8/0x2b0 [ 533.433629][T21432] should_fail_ex+0x3b0/0x4e0 [ 533.438367][T21432] _copy_from_user+0x2f/0xe0 [ 533.443011][T21432] copy_msghdr_from_user+0xae/0x680 [ 533.448283][T21432] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 533.454146][T21432] ? set_normalized_timespec64+0x160/0x1e0 [ 533.460008][T21432] ? __might_fault+0xaa/0x120 [ 533.464749][T21432] do_recvmmsg+0x40f/0xae0 [ 533.469212][T21432] ? mark_lock+0x9a/0x350 [ 533.473609][T21432] ? __pfx_do_recvmmsg+0x10/0x10 [ 533.478642][T21432] ? __pfx___might_resched+0x10/0x10 [ 533.484099][T21432] ? __might_fault+0xaa/0x120 [ 533.488835][T21432] ? __pfx_lock_release+0x10/0x10 [ 533.493915][T21432] ? vfs_write+0x7c4/0xc90 [ 533.498401][T21432] ? get_timespec64+0x19c/0x280 [ 533.503323][T21432] __x64_sys_recvmmsg+0x1b8/0x250 [ 533.508410][T21432] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 533.514016][T21432] ? do_syscall_64+0x100/0x230 [ 533.518842][T21432] ? do_syscall_64+0xb6/0x230 [ 533.523593][T21432] do_syscall_64+0xf3/0x230 [ 533.528158][T21432] ? clear_bhb_loop+0x35/0x90 [ 533.532890][T21432] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 533.538852][T21432] RIP: 0033:0x7ff461b75b99 [ 533.543320][T21432] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 533.562977][T21432] RSP: 002b:00007ff462935048 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 533.571446][T21432] RAX: ffffffffffffffda RBX: 00007ff461d03fa0 RCX: 00007ff461b75b99 [ 533.579466][T21432] RDX: 04000000000003b4 RSI: 00000000200037c0 RDI: 0000000000000003 [ 533.587485][T21432] RBP: 00007ff4629350a0 R08: 0000000020003700 R09: 0000000000000000 [ 533.595507][T21432] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 533.603520][T21432] R13: 000000000000000b R14: 00007ff461d03fa0 R15: 00007ffde5cc0188 [ 533.611564][T21432] [ 534.272510][ T29] audit: type=1804 audit(1719767423.731:51): pid=21464 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5005" name="/root/syzkaller.ASre9h/1013/cgroup.controllers" dev="sda1" ino=1984 res=1 errno=0 [ 537.123266][T21595] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5043'. [ 537.624802][T21617] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5050'. [ 537.919783][T21630] netlink: 14601 bytes leftover after parsing attributes in process `syz.3.5054'. [ 538.023324][T21633] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5054'. [ 538.315540][T21643] netlink: 'syz.3.5058': attribute type 1 has an invalid length. [ 538.442508][T21643] bond7: entered promiscuous mode [ 538.448308][T21643] 8021q: adding VLAN 0 to HW filter on device bond7 [ 538.465098][T21656] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5058'. [ 539.225159][T21672] team0: Port device syz_tun removed [ 539.281709][T21672] bond0: (slave bond_slave_0): Releasing backup interface [ 539.324116][T21672] bond_slave_0: left promiscuous mode [ 539.332291][T21672] bond_slave_0: left allmulticast mode [ 539.358790][T21672] bond0: (slave bond_slave_1): Releasing backup interface [ 539.387108][T21672] bond_slave_1: left promiscuous mode [ 539.395483][T21672] bond_slave_1: left allmulticast mode [ 539.447467][T21672] team0: Port device team_slave_0 removed [ 539.482584][T21672] team0: Port device team_slave_1 removed [ 539.497336][T21672] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.511138][T21672] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.526193][T21672] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.535547][T21672] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.747368][T21701] No such timeout policy "syz0" [ 540.170834][T21719] netlink: 224 bytes leftover after parsing attributes in process `syz.3.5078'. [ 540.441617][T21718] syzkaller0: entered promiscuous mode [ 540.448310][T21718] syzkaller0: entered allmulticast mode [ 540.586900][T21732] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5086'. [ 541.313786][T21746] netlink: 104 bytes leftover after parsing attributes in process `syz.3.5091'. [ 544.685059][T21781] netlink: 56 bytes leftover after parsing attributes in process `syz.4.5107'. [ 545.844864][T21826] bridge0: entered allmulticast mode [ 545.872198][T21826] bridge0: left allmulticast mode [ 546.141063][T21838] team0: entered promiscuous mode [ 546.156006][T21838] team_slave_0: entered promiscuous mode [ 546.163489][T21838] team_slave_1: entered promiscuous mode [ 546.200977][T21838] team_slave_0: entered allmulticast mode [ 546.275172][T21838] team0: Port device team_slave_0 removed [ 546.308208][T21836] team0: left promiscuous mode [ 546.324148][T21836] team_slave_1: left promiscuous mode [ 547.665623][T21874] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5149'. [ 548.033022][T10226] team0: left allmulticast mode [ 548.037968][T10226] team_slave_0: left allmulticast mode [ 548.090895][T10226] team_slave_1: left allmulticast mode [ 548.119340][T10226] macvlan1: left allmulticast mode [ 548.142177][T10226] veth1_vlan: left allmulticast mode [ 548.162212][T10226] team0: left promiscuous mode [ 548.167059][T10226] team_slave_0: left promiscuous mode [ 548.220498][T10226] team_slave_1: left promiscuous mode [ 548.242252][T10226] macvlan1: left promiscuous mode [ 548.247946][T10226] bridge0: port 2(team0) entered disabled state [ 548.293352][T10226] bridge_slave_0: left promiscuous mode [ 548.302032][T10226] bridge0: port 1(bridge_slave_0) entered disabled state [ 548.330685][T10226] bridge_slave_1: left allmulticast mode [ 548.350080][T10226] bridge_slave_1: left promiscuous mode [ 548.382077][T10226] bridge2: port 1(bridge_slave_1) entered disabled state [ 549.238843][T10226] bond1 (unregistering): (slave gretap1): Releasing backup interface [ 550.184046][T10226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.201008][T10226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.215344][T10226] bond0 (unregistering): Released all slaves [ 550.406322][T10226] bond1 (unregistering): Released all slaves [ 550.455831][T21916] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5162'. [ 550.502914][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5162'. [ 550.528819][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5162'. [ 550.553826][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5162'. [ 550.564311][T21916] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5162'. [ 550.581335][T21926] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5164'. [ 550.633637][T10226] IPVS: stopping master sync thread 13518 ... [ 550.845122][T21939] netlink: 'syz.2.5169': attribute type 3 has an invalid length. [ 550.997110][T21939] netlink: 'syz.2.5169': attribute type 3 has an invalid length. [ 551.021340][T21942] netlink: 8 bytes leftover after parsing attributes in process `syz.0.5168'. [ 551.477551][T10226] hsr_slave_0: left promiscuous mode [ 551.499485][T10226] hsr_slave_1: left promiscuous mode [ 551.527145][T10226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.573548][T10226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.613610][T10226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.635252][T10226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.768144][T10226] veth1_macvtap: left promiscuous mode [ 551.778686][T10226] veth0_macvtap: left promiscuous mode [ 551.785645][T10226] veth1_vlan: left promiscuous mode [ 552.139431][T10226] team0 (unregistering): Port device macvlan1 removed [ 552.541334][T10226] team0 (unregistering): Port device team_slave_1 removed [ 552.604835][T10226] team0 (unregistering): Port device team_slave_0 removed [ 553.114108][T21980] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 553.121568][T21980] IPv6: NLM_F_CREATE should be set when creating new route [ 553.228123][T21986] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 553.330052][T21989] erspan0 speed is unknown, defaulting to 1000 [ 553.869309][T22019] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5190'. [ 553.872419][T22016] netlink: 'syz.2.5189': attribute type 1 has an invalid length. [ 554.947896][T22058] netlink: 48 bytes leftover after parsing attributes in process `syz.4.5200'. [ 555.115089][T22064] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5202'. [ 555.265534][T22072] Bluetooth: hci3: unsupported parameter 64512 [ 555.287538][T22072] Bluetooth: hci3: invalid length 0, exp 2 for type 0 [ 555.408126][ T29] audit: type=1804 audit(1719767444.871:52): pid=22080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5206" name="/root/syzkaller.ASre9h/1057/cgroup.controllers" dev="sda1" ino=1993 res=1 errno=0 [ 555.480032][ T29] audit: type=1800 audit(1719767444.871:53): pid=22080 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.5206" name="cgroup.controllers" dev="sda1" ino=1993 res=0 errno=0 [ 555.550659][ T29] audit: type=1804 audit(1719767444.891:54): pid=22075 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.5206" name="/root/syzkaller.ASre9h/1057/cgroup.controllers" dev="sda1" ino=1993 res=1 errno=0 [ 555.590765][T10226] IPVS: stop unused estimator thread 0... [ 555.693158][T22090] __nla_validate_parse: 2 callbacks suppressed [ 555.693182][T22090] netlink: 28 bytes leftover after parsing attributes in process `syz.4.5211'. [ 555.730728][T22090] netlink: 12 bytes leftover after parsing attributes in process `syz.4.5211'. [ 555.795620][T10226] bridge_slave_1: left allmulticast mode [ 555.822103][T10226] bridge_slave_1: left promiscuous mode [ 555.838425][T10226] bridge0: port 2(bridge_slave_1) entered disabled state [ 555.867458][T10226] bridge_slave_0: left allmulticast mode [ 555.881104][T10226] bridge_slave_0: left promiscuous mode [ 555.896124][T10226] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.984959][ T29] audit: type=1804 audit(1719767445.451:55): pid=22094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.5213" name="/root/syzkaller.uy6UTF/182/memory.events" dev="sda1" ino=1979 res=1 errno=0 [ 556.078882][T22107] syz.0.5216[22107] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.079145][T22107] syz.0.5216[22107] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 556.940222][T10226] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 556.969679][T10226] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 556.981368][T10226] bond0 (unregistering): Released all slaves [ 556.999028][T10226] bond1 (unregistering): Released all slaves [ 557.204377][T22118] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5219'. [ 557.367376][T22129] netlink: 32 bytes leftover after parsing attributes in process `syz.4.5223'. [ 557.471076][ T29] audit: type=1804 audit(1719767446.931:56): pid=22131 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.5224" name="/root/syzkaller.ASre9h/1060/cgroup.controllers" dev="sda1" ino=2003 res=1 errno=0 [ 557.526978][T22128] Page cache invalidation failure on direct I/O. Possible data corruption due to collision with buffered I/O! [ 557.565551][T22131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.5224'. [ 557.597939][T22128] File: /root/syzkaller.0cKv4k/164/memory.events PID: 22128 Comm: syz.1.5222 [ 558.095016][T22162] netlink: 4 bytes leftover after parsing attributes in process `syz.0.5234'. [ 558.199191][T22162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 558.206632][T22162] IPv6: NLM_F_CREATE should be set when creating new route [ 558.292588][T10226] hsr_slave_0: left promiscuous mode [ 558.311560][T10226] hsr_slave_1: left promiscuous mode [ 558.337012][T10226] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 558.356191][T10226] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 558.390240][T10226] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 558.417236][T10226] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 558.525474][T10226] veth1_macvtap: left promiscuous mode [ 558.537238][T10226] veth0_macvtap: left promiscuous mode [ 558.548827][T10226] veth1_vlan: left promiscuous mode [ 558.562282][T10226] veth0_vlan: left promiscuous mode [ 558.972657][T10226] pim6reg (unregistering): left allmulticast mode [ 559.666288][T10226] team0 (unregistering): Port device team_slave_1 removed [ 559.728555][T10226] team0 (unregistering): Port device team_slave_0 removed [ 560.330724][T22162] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 560.338084][T22162] IPv6: NLM_F_CREATE should be set when creating new route [ 560.348251][T22166] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5236'. [ 560.611212][T22211] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5247'. [ 560.614823][ T29] audit: type=1804 audit(1719767450.071:57): pid=22210 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5248" name="/root/syzkaller.ggXdDx/201/cgroup.controllers" dev="sda1" ino=2003 res=1 errno=0 [ 560.721516][T22217] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 561.483665][T22238] netlink: 28 bytes leftover after parsing attributes in process `syz.0.5257'. [ 561.609853][T22247] netlink: 'syz.2.5258': attribute type 4 has an invalid length. [ 562.000444][T22268] netlink: 36 bytes leftover after parsing attributes in process `syz.0.5267'. [ 562.305943][T22282] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 562.328028][T22286] netlink: 28 bytes leftover after parsing attributes in process `syz.1.5273'. [ 562.460201][T22278] fscrypt (sda1, inode 1983): Unsupported encryption modes (contents 0, filenames 0) [ 562.567095][T22295] netlink: 64 bytes leftover after parsing attributes in process `syz.2.5275'. [ 562.831399][T22281] infiniband syz2: set active [ 562.844693][T22281] infiniband syz2: added veth1_to_bridge [ 563.037881][T22281] RDS/IB: syz2: added [ 563.064038][T22281] smc: adding ib device syz2 with port count 1 [ 563.077062][T22281] smc: ib device syz2 port 1 has pnetid [ 563.231515][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.432831][T22318] netlink: 24 bytes leftover after parsing attributes in process `syz.1.5284'. [ 563.514861][T22318] set match dimension is over the limit! [ 563.564395][ T5095] IPVS: starting estimator thread 0... [ 563.612655][T22323] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5286'. [ 563.652243][T22322] IPVS: using max 16 ests per chain, 38400 per kthread [ 564.015094][T22341] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1029 (only 8 groups) [ 564.322661][T22351] netlink: 'syz.1.5294': attribute type 2 has an invalid length. [ 564.584770][T22371] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5300'. [ 564.706352][T22378] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5302'. [ 565.448318][T22415] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5319'. [ 566.035685][T22448] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5329'. [ 566.088731][T22448] bond8: entered promiscuous mode [ 566.792545][T22480] Bluetooth: hci3: invalid length 0, exp 2 for type 10 [ 566.910643][T22484] sctp: [Deprecated]: syz.1.5336 (pid 22484) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.910643][T22484] Use struct sctp_sack_info instead [ 567.020655][T22491] netlink: 'syz.4.5340': attribute type 3 has an invalid length. [ 567.038853][T22491] __nla_validate_parse: 1 callbacks suppressed [ 567.038880][T22491] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.5340'. [ 567.238319][T22498] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 567.352674][T22504] netlink: 28 bytes leftover after parsing attributes in process `syz.2.5346'. [ 567.584399][T22513] netlink: 67 bytes leftover after parsing attributes in process `syz.3.5348'. [ 567.610444][T22513] IPv6: NLM_F_CREATE should be specified when creating new route [ 567.639274][T22513] IPv6: Can't replace route, no match found [ 567.712060][T22517] netlink: 5 bytes leftover after parsing attributes in process `syz.3.5348'. [ 567.722894][T22517] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 567.750392][T22517] 0ªX¹¦Dö»: entered allmulticast mode [ 567.811314][T22513] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5348'. [ 568.032376][T22537] syz2: rxe_newlink: already configured on veth1_to_bridge [ 568.087480][T22527] fscrypt (sda1, inode 2005): Unsupported encryption modes (contents 0, filenames 0) [ 568.200321][T22535] pim6reg1: entered promiscuous mode [ 568.208785][T22535] pim6reg1: entered allmulticast mode [ 568.232632][T22534] netlink: 'syz.4.5356': attribute type 5 has an invalid length. [ 568.294104][T22539] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5354'. [ 568.575211][T22552] netlink: 28 bytes leftover after parsing attributes in process `syz.3.5359'. [ 569.122874][T22559] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.309097][T22559] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.348135][T22578] netlink: 8 bytes leftover after parsing attributes in process `syz.3.5368'. [ 569.359607][T22578] IPv6: NLM_F_REPLACE set, but no existing node found! [ 569.510568][T22559] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.527732][T22582] netlink: 40 bytes leftover after parsing attributes in process `syz.1.5370'. [ 569.544585][T22579] netlink: 4 bytes leftover after parsing attributes in process `syz.2.5369'. [ 569.785037][T22589] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 569.787866][T22559] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.816336][T22589] fscrypt (sda1, inode 2003): Unsupported encryption modes (contents 0, filenames 0) [ 570.001466][T22559] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.055485][T22559] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.100895][T22559] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.130253][T22559] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 570.728795][T22632] IPVS: set_ctl: invalid protocol: 51 172.20.20.30:20003 [ 571.294891][T22647] x_tables: duplicate underflow at hook 1 [ 571.740572][T22662] IPv6: NLM_F_REPLACE set, but no existing node found! [ 572.141475][T22683] __nla_validate_parse: 6 callbacks suppressed [ 572.141497][T22683] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5406'. [ 572.215088][T22687] netlink: 68 bytes leftover after parsing attributes in process `syz.1.5406'. [ 572.478875][T22703] netlink: 8 bytes leftover after parsing attributes in process `syz.2.5412'. [ 572.497544][T22703] IPv6: NLM_F_REPLACE set, but no existing node found! [ 572.629975][T22707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.5414'. [ 572.864994][T22716] bond0: entered promiscuous mode [ 572.870304][T22716] bond_slave_0: entered promiscuous mode [ 572.876483][T22716] bond_slave_1: entered promiscuous mode [ 572.897439][T22717] netlink: 4004 bytes leftover after parsing attributes in process `syz.0.5417'. [ 573.219646][T22727] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5422'. [ 573.918578][T22751] netlink: 'syz.1.5427': attribute type 9 has an invalid length. [ 573.942120][T22751] netlink: 'syz.1.5427': attribute type 7 has an invalid length. [ 573.966090][T22751] netlink: 'syz.1.5427': attribute type 8 has an invalid length. [ 574.213644][T22753] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5428'. [ 574.362143][T22762] syz.4.5429[22762] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 574.677796][T22768] erspan0 speed is unknown, defaulting to 1000 [ 574.720452][ T29] audit: type=1804 audit(1719767464.181:58): pid=22770 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.5435" name="/root/syzkaller.ggXdDx/228/cgroup.controllers" dev="sda1" ino=1993 res=1 errno=0 [ 574.823289][T22774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5435'. [ 574.842187][T22774] netlink: 'syz.4.5435': attribute type 12 has an invalid length. [ 574.873669][T22784] dccp_v6_rcv: dropped packet with invalid checksum [ 574.914802][T22774] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.923854][T22774] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.932901][T22774] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.941653][T22774] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 574.983596][T22774] vxlan0: entered promiscuous mode [ 575.144040][T22790] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 575.308106][T22798] tipc: Started in network mode [ 575.318915][T22798] tipc: Node identity 5f1414, cluster identity 4711 [ 575.332871][T22798] tipc: Enabling of bearer rejected, failed to enable media [ 575.389557][T22800] erspan0 speed is unknown, defaulting to 1000 [ 575.783161][T22815] syz.4.5445[22815] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 575.852168][T22813] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5447'. [ 575.919693][T22813] bond_slave_0: entered promiscuous mode [ 575.925511][T22813] bond_slave_1: entered promiscuous mode [ 575.941690][T22813] macvtap1: entered promiscuous mode [ 575.952166][T22813] bond0: entered promiscuous mode [ 575.967731][T22813] macvtap1: entered allmulticast mode [ 575.990376][T22813] bond0: entered allmulticast mode [ 576.000503][T22813] bond_slave_0: entered allmulticast mode [ 576.020826][T22813] bond_slave_1: entered allmulticast mode [ 576.051514][T22813] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 576.506637][T22826] syzkaller0: entered promiscuous mode [ 576.514206][T22826] syzkaller0: entered allmulticast mode [ 576.614820][T22826] netlink: 'syz.4.5450': attribute type 1 has an invalid length. [ 576.627729][T22826] netlink: 92 bytes leftover after parsing attributes in process `syz.4.5450'. [ 579.295993][T22835] tipc: Enabled bearer , priority 10 [ 579.420931][T22842] ieee802154 phy1 wpan1: encryption failed: -22 [ 579.572750][T22844] netlink: 'syz.1.5456': attribute type 15 has an invalid length. [ 579.588994][T22844] netlink: 44 bytes leftover after parsing attributes in process `syz.1.5456'. [ 579.622168][T22844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.5456'. [ 580.292179][ T5453] tipc: Node number set to 1595151360 [ 580.630493][T22896] netlink: 'syz.2.5472': attribute type 10 has an invalid length. [ 580.648569][T22896] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5472'. [ 581.027917][T22918] tipc: Resetting bearer [ 581.088359][T22918] macvlan1: MTU too low for tipc bearer [ 581.118600][T22918] tipc: Disabling bearer [ 581.168258][T22918] team0: Port device macvlan1 added [ 581.227125][T22920] bond0: (slave vlan0): Error -34 calling dev_set_mtu [ 581.468294][T22937] SET target dimension over the limit! [ 582.129190][T22963] netlink: 'syz.4.5494': attribute type 10 has an invalid length. [ 582.152475][T22963] netlink: 55 bytes leftover after parsing attributes in process `syz.4.5494'. [ 582.975088][T22996] netlink: 20 bytes leftover after parsing attributes in process `syz.0.5502'. [ 583.169381][T23003] team0: Port device macvlan1 added [ 583.203830][T23006] team_slave_1: entered promiscuous mode [ 583.222397][T18389] Bluetooth: hci0: command tx timeout [ 583.233720][T23006] vlan4: entered promiscuous mode [ 583.245391][T23006] team0: entered promiscuous mode [ 583.260225][T23006] team_slave_0: entered promiscuous mode [ 583.267947][T23006] macvlan1: entered promiscuous mode [ 583.278076][T23006] bond0: (slave vlan4): Enslaving as an active interface with an up link [ 583.977271][T23039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5517'. [ 584.005653][T23039] netlink: 20 bytes leftover after parsing attributes in process `syz.4.5517'. [ 584.118545][T23046] netlink: 'syz.1.5515': attribute type 10 has an invalid length. [ 584.142113][T23046] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5515'. [ 584.175807][T23050] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5517'. [ 584.186205][T23045] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5517'. [ 584.408009][T23065] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 584.415388][T23065] IPv6: NLM_F_CREATE should be set when creating new route [ 584.919005][T23088] netlink: 'syz.0.5533': attribute type 1 has an invalid length. [ 585.538819][T23121] netlink: 'syz.1.5544': attribute type 10 has an invalid length. [ 585.561214][T23121] __nla_validate_parse: 1 callbacks suppressed [ 585.561239][T23121] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5544'. [ 586.403668][T23163] netlink: 'syz.2.5557': attribute type 1 has an invalid length. [ 586.412364][T23163] netlink: 168864 bytes leftover after parsing attributes in process `syz.2.5557'. [ 586.429697][T23163] netlink: 1 bytes leftover after parsing attributes in process `syz.2.5557'. [ 586.510182][T10226] tipc: Subscription rejected, illegal request [ 586.600727][T23174] netlink: 172 bytes leftover after parsing attributes in process `syz.4.5556'. [ 586.710051][T23176] bond0: (slave vlan0): Error -34 calling dev_set_mtu [ 586.968971][T23188] tipc: Enabling of bearer rejected, failed to enable media [ 587.045922][T23189] netlink: 'syz.1.5565': attribute type 10 has an invalid length. [ 587.073496][T23189] netlink: 55 bytes leftover after parsing attributes in process `syz.1.5565'. [ 587.277700][T23200] batman_adv: batadv0: Adding interface: gretap1 [ 587.289024][T23200] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 587.318163][T23200] batman_adv: batadv0: Not using interface gretap1 (retrying later): interface not active [ 587.402366][T23206] xt_TCPMSS: Only works on TCP SYN packets [ 587.442684][T23206] netlink: 24 bytes leftover after parsing attributes in process `syz.2.5574'. [ 587.760065][T23226] tipc: Enabling of bearer rejected, failed to enable media [ 588.057590][T23242] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5587'. [ 588.267149][ T29] audit: type=1804 audit(1719767477.731:59): pid=23254 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.5590" name="/root/syzkaller.naHF8j/225/cgroup.controllers" dev="sda1" ino=1990 res=1 errno=0 [ 588.316638][T23256] sch_tbf: peakrate 2361440122534057294 is lower than or equals to rate 5468440372968813058 ! [ 588.647396][T23274] netlink: 'syz.0.5594': attribute type 10 has an invalid length. [ 588.671808][T23274] netlink: 55 bytes leftover after parsing attributes in process `syz.0.5594'. [ 589.173421][T23304] netlink: 'syz.1.5603': attribute type 1 has an invalid length. [ 589.234312][T23304] bond3: entered promiscuous mode [ 589.239912][T23304] 8021q: adding VLAN 0 to HW filter on device bond3 [ 589.265259][T23304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.5603'. [ 589.298638][T23304] bond3: left promiscuous mode [ 590.144840][T23347] dccp_v6_rcv: dropped packet with invalid checksum [ 590.225074][T23335] netlink: 12 bytes leftover after parsing attributes in process `syz.3.5611'. [ 590.270579][T23353] netlink: 'syz.4.5619': attribute type 10 has an invalid length. [ 590.784435][T23368] __nla_validate_parse: 1 callbacks suppressed [ 590.784457][T23368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5624'. [ 590.841381][T23368] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 590.860703][T23368] team0: Port device batadv1 added [ 590.879165][T23368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5624'. [ 590.909889][T23287] Bluetooth: hci0: command 0x0406 tx timeout [ 590.916479][T23287] Bluetooth: hci1: command 0x0406 tx timeout [ 590.923439][T23287] Bluetooth: hci2: command 0x0406 tx timeout [ 590.974882][T23368] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 591.037052][T23368] team0: Port device batadv2 added [ 591.052829][T23368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5624'. [ 591.117705][T23368] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 591.139480][T23368] team0: Port device batadv3 added [ 591.150959][T23368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5624'. [ 591.215606][T23368] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 591.234358][T23368] team0: Port device batadv4 added [ 591.272983][T23368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5624'. [ 591.303094][T23368] 8021q: adding VLAN 0 to HW filter on device batadv5 [ 591.324096][T23368] team0: Port device batadv5 added [ 591.487176][T23368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5624'. [ 591.538577][T23368] 8021q: adding VLAN 0 to HW filter on device batadv6 [ 591.565884][T23368] team0: Port device batadv6 added [ 591.589315][T23368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.5624'. [ 591.662374][T23368] 8021q: adding VLAN 0 to HW filter on device batadv7 [ 591.698518][T23368] team0: Port device batadv7 added [ 592.227115][T23408] sctp: [Deprecated]: syz.0.5630 (pid 23408) Use of struct sctp_assoc_value in delayed_ack socket option. [ 592.227115][T23408] Use struct sctp_sack_info instead [ 592.524391][T23417] netlink: 'syz.3.5636': attribute type 1 has an invalid length. [ 592.541418][T10234] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 592.555408][T10234] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.557261][T19316] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 592.576764][T23422] sctp: [Deprecated]: syz.3.5636 (pid 23422) Use of int in max_burst socket option deprecated. [ 592.576764][T23422] Use struct sctp_assoc_value instead [ 592.596730][T19316] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 592.622369][T19316] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 592.638773][T19316] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 592.647484][T19316] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 592.655295][T19316] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 594.742346][ T5102] Bluetooth: hci0: command tx timeout [ 595.318889][T23417] netlink: 20 bytes leftover after parsing attributes in process `syz.3.5636'. [ 595.332304][T23423] netlink: 'syz.2.5637': attribute type 10 has an invalid length. [ 595.350570][T23423] netlink: 55 bytes leftover after parsing attributes in process `syz.2.5637'. [ 595.471429][T10234] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.501916][T10234] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 595.553259][T23430] bridge: RTM_DELNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 595.908535][T10234] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 595.943709][T10234] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.002530][T23437] bridge: RTM_DELNEIGH with unconfigured vlan 3 on bridge_slave_0 [ 596.055002][T23420] erspan0 speed is unknown, defaulting to 1000 [ 596.203545][T10234] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 596.232239][T10234] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 596.716414][T23481] netlink: 4 bytes leftover after parsing attributes in process `syz.3.5649'. [ 596.789909][T23447] ================================================================== [ 596.798041][T23447] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x1b6/0x6f0 [ 596.805734][T23447] Read of size 1 at addr ffff88805b41d430 by task syz.1.5642/23447 [ 596.813657][T23447] [ 596.816009][T23447] CPU: 0 PID: 23447 Comm: syz.1.5642 Not tainted 6.10.0-rc5-syzkaller-00170-g134061163ee5 #0 [ 596.822474][ T5102] Bluetooth: hci0: command tx timeout [ 596.826252][T23447] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 596.826273][T23447] Call Trace: [ 596.826285][T23447] [ 596.826296][T23447] dump_stack_lvl+0x241/0x360 [ 596.852665][T23447] ? __pfx_dump_stack_lvl+0x10/0x10 [ 596.857918][T23447] ? __pfx__printk+0x10/0x10 [ 596.862562][T23447] ? _printk+0xd5/0x120 [ 596.866758][T23447] ? __virt_addr_valid+0x183/0x520 [ 596.871994][T23447] ? __virt_addr_valid+0x183/0x520 [ 596.877152][T23447] print_report+0x169/0x550 [ 596.881694][T23447] ? __virt_addr_valid+0x183/0x520 [ 596.886842][T23447] ? __virt_addr_valid+0x183/0x520 [ 596.891994][T23447] ? __virt_addr_valid+0x44e/0x520 [ 596.897149][T23447] ? __phys_addr+0xba/0x170 [ 596.901696][T23447] ? rose_get_neigh+0x1b6/0x6f0 [ 596.906579][T23447] kasan_report+0x143/0x180 [ 596.911134][T23447] ? rose_get_neigh+0x1b6/0x6f0 [ 596.916056][T23447] rose_get_neigh+0x1b6/0x6f0 [ 596.920790][T23447] rose_connect+0x45a/0x1170 [ 596.925435][T23447] ? aa_sk_perm+0x967/0xab0 [ 596.929988][T23447] ? __pfx_rose_connect+0x10/0x10 [ 596.935051][T23447] ? aa_af_perm+0x350/0x3b0 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 596.939